Terms of Service
Last updated: 2026-07-10
These terms set out the agreement between you and [Company legal name] for use of the SentinelPanda product and the marketing site at sentinelpanda.com. Read them carefully — by using the service you accept them.
1. Acceptance
By creating an account, using the service, or clicking a button signalling acceptance, you agree to these terms on behalf of yourself and the legal entity you represent ("you", "your"). The agreement is between you and [Company legal name] ("we", "us"). If you do not agree, do not use the service.
2. The service
SentinelPanda is a multi-framework governance, risk and compliance workspace. It lets you manage controls, evidence, assessments, risks, vendors, policies, and audit-ready reports across frameworks such as PCI DSS, ISO 27001, SOC 2, HIPAA, NIST CSF, ISO 42001, and COBIT.
The features available to you depend on the plan you subscribe to. We may add, change, or retire features over time; for changes that materially reduce the functionality you are paying for, we will give reasonable notice.
3. Your account
You are responsible for the accuracy of the information you provide at sign-up, for keeping your credentials confidential, and for everything done through your account. You must use strong authentication, including the multi-factor authentication we require by default, and notify us promptly if you suspect your account has been used without your authorisation.
4. Plans, fees, renewal
Your plan, billing cycle, and price are set out in the order form, in the subscription page of your workspace, or in the invoice we send. Subscriptions renew automatically at the end of each billing period at the then-current price unless you cancel or downgrade before the renewal date.
Fees are exclusive of applicable taxes, which we add where the law requires. We do not refund partial periods except where required by law, or where we have terminated for our own uncured breach.
5. Acceptable use
You will not use the service to: break the law; infringe someone else's rights; bypass technical or licence restrictions; reverse engineer, decompile, or attempt to derive the source code except where the law expressly permits; introduce malicious code; attack other systems; send unsolicited communications; or resell or sublicense access except as your plan allows. We may suspend access to investigate or stop a suspected breach of this section, with notice where the circumstances allow.
6. Your content
You keep ownership of everything you upload, generate, or store in the service ("your content"). You grant us the limited rights we need to host, copy, transmit, and display your content, and to create backups and derivative records, strictly to provide and improve the service for you.
We do not use your content to train artificial-intelligence models. We do not use it for our own marketing without your separate consent. When the service processes personal data on your behalf, the Data Processing Addendum applies and forms part of these terms.
7. Our intellectual property
The service, the underlying software, the documentation, the brand, the visual design, and everything else we provide other than your content remain our property and the property of our licensors. We grant you a non-exclusive, non-transferable, revocable licence to use the service during the term, only for your internal business purposes and in line with these terms.
Feedback you give us about the service is not confidential; we can use it to improve the product without obligation to you.
8. Confidentiality
Each side will treat the other side's non-public information disclosed in connection with the service as confidential and use it only for the purposes of the agreement. Your content is your confidential information. How the platform is built and operated is ours. The usual exceptions apply — public information, information already known, information independently developed, and disclosures legally required (with prior notice where practicable).
9. Warranties
We will provide the service with reasonable care and skill, and in line with the security commitments published on our website. Subject to that, the service is provided "as is", and to the maximum extent the law allows we exclude all other warranties — including any warranty of merchantability, fitness for a particular purpose, or non-infringement.
You acknowledge that compliance certification is granted by independent auditors and authorities, not by us, and that no software guarantees a particular audit outcome.
10. Limitation of liability
Neither side will be liable to the other for loss of profits, revenue, business, goodwill, or data, or for any indirect or consequential loss, even if warned of the possibility. Each side's total liability under the agreement, for any kind of claim, is capped at the fees you paid us in the twelve months immediately before the event that gave rise to the claim.
Nothing in this section limits liability for fraud, gross negligence, breach of confidentiality, indemnification obligations, or anything else that the law says cannot be limited.
11. Indemnification
We will defend you against, and pay any final judgment for, a third-party claim that the service as provided by us infringes that party's intellectual property rights. You will defend us against, and pay any final judgment for, a third-party claim arising out of your breach of the acceptable use section or your unlawful use of the service.
The indemnified party will give prompt notice, let the other side control the defence, and cooperate reasonably.
12. Term and termination
The agreement begins when you accept these terms and continues for the subscription term set out on the order form, renewing automatically as described in section 4. Either side may terminate for cause — uncured material breach after 30 days' written notice, or insolvency.
We may also suspend or terminate immediately if the law requires it, or if your use of the service threatens our infrastructure or other customers. On termination your right to use the service ends, you must stop using it, and we will make your content available for export for a reasonable window before deleting it under our retention policy.
13. Changes to these terms
We may update these terms from time to time. Non-material updates take effect when we post them. Material changes will be notified by email or by a prominent notice in the product at least 30 days before they apply, and continued use after that date counts as acceptance. If you do not accept a material change, your remedy is to stop using the service before the change takes effect.
14. Governing law and disputes
These terms are governed by the laws of [Governing law jurisdiction], without regard to conflict-of-law principles. The parties submit to the exclusive jurisdiction of the courts of [Court venue] for any dispute arising under or in connection with these terms. Nothing in this section prevents either side from seeking interim or injunctive relief in another competent court.
15. Notices
Notices to us go to [legal@yourdomain]. Notices to you go to the administrative email address on your account. Notices are effective on delivery.
16. Miscellaneous
These terms, together with the DPA and any order form, are the entire agreement between you and us about the service and supersede any earlier agreement on the same subject. If a court finds a provision unenforceable, the rest of the terms continue in force. No failure to enforce a right is a waiver of that right.
You may not assign the agreement without our consent except to a successor in connection with a merger, acquisition, or sale of substantially all your assets. We may assign the agreement freely. The agreement does not create a partnership, employment relationship, or agency between us.