Terms of Service

Last Updated: November 24, 2025

Important Notice

Please read these Terms of Service carefully before using the ThinkGRC platform. By accessing or using our services, you agree to be bound by these terms.

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Client," "you," or "your") and ThinkGRC Ltd ("ThinkGRC," "we," "us," or "our"), a company registered in England and Wales (Company Number: 12345678), governing your access to and use of the ThinkGRC platform and all related services.

By creating an account, accessing our platform, or using any of our services, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy Policy, and all applicable laws and regulations. If you do not agree to these Terms, you must not access or use our services.

2. Service Description

ThinkGRC provides a cloud-based Governance, Risk & Compliance platform that includes:

  • Risk management and assessment tools
  • Compliance requirement tracking across multiple frameworks
  • Audit planning, execution, and management
  • Issue and incident tracking
  • Policy and document repository
  • Analytics and reporting capabilities
  • AI-powered assistant for GRC guidance

We reserve the right to modify, suspend, or discontinue any aspect of the service at any time with reasonable notice to clients.

3. Account Registration and Eligibility

3.1 Eligibility

You must be at least 18 years old and have the legal capacity and authority to enter into these Terms. If you are accessing or using the service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

3.2 Account Information

You agree to:

  • Provide accurate, current, and complete information
  • Maintain and promptly update your account information
  • Maintain the security of your password and account
  • Accept responsibility for all activities under your account
  • Notify us immediately of any unauthorized access

3.3 Account Types

We offer different subscription tiers (Starter, Professional, Enterprise) with varying features and user limits as described on our Pricing page.

4. User Responsibilities

You agree not to:

  • Use the service for any illegal, fraudulent, or unauthorized purpose
  • Violate any applicable laws, regulations, or third-party rights
  • Attempt to gain unauthorized access to our systems, networks, or other user accounts
  • Interfere with, disrupt, or burden the integrity or performance of the service
  • Transmit malware, viruses, trojans, or any other harmful code
  • Reverse engineer, decompile, disassemble, or attempt to discover the source code of the software
  • Use automated systems, bots, or scripts to scrape, extract, or harvest data without written permission
  • Resell, lease, license, sublicense, or redistribute the service without express written authorization
  • Remove, obscure, or modify any proprietary notices, labels, or marks
  • Use the service to develop a competing product or service
  • Impersonate any person or entity or misrepresent your affiliation
  • Upload or transmit content that is unlawful, defamatory, obscene, or offensive
  • Engage in any activity that could harm ThinkGRC's reputation or business interests
5. Data Ownership and License

5.1 Your Data

You retain all ownership rights to the data, content, and information you submit to the platform ("Client Data"). You grant us a worldwide, non-exclusive, royalty-free license to use, store, process, and display Client Data solely to: (a) provide, maintain, and improve our services; (b) ensure platform security and integrity; (c) comply with legal obligations; and (d) generate anonymized, aggregated analytics. We will not share, sell, or disclose your Client Data to third parties except as required by law or with your explicit consent.

You represent and warrant that you have all necessary rights, licenses, and permissions to submit Client Data and grant us the license described above.

5.2 Our Intellectual Property

The ThinkGRC platform, including all software, designs, text, graphics, and other content, is owned by us or our licensors and protected by intellectual property laws.

5.3 Feedback

Any feedback, suggestions, or ideas you provide to us become our property and may be used without compensation or attribution.

6. Payment Terms

6.1 Fees

You agree to pay all fees associated with your subscription plan. Fees are billed in advance on a monthly or annual basis as selected during registration.

6.2 Payment Method

You must provide valid payment information and authorize us to charge your payment method for all fees incurred.

6.3 Automatic Renewal

Your subscription automatically renews at the end of each billing period unless you cancel before the renewal date.

6.4 Price Changes

We may modify pricing with 30 days' notice. Continued use of the service after price changes constitutes acceptance of the new pricing.

6.5 Refunds and Cancellation

All fees are non-refundable except as required by applicable law or as explicitly stated in these Terms. We offer a 14-day free trial for new customers. If you are dissatisfied with the service during your trial period, you may cancel without charge. After the trial period, you may cancel your subscription at any time, but no refunds will be provided for the current billing period. Your subscription will remain active until the end of the paid billing cycle.

6.6 Late Payment

If payment is not received by the due date, we reserve the right to suspend or terminate your account. We may charge interest on overdue amounts at a rate of 1.5% per month or the maximum rate permitted by law, whichever is lower.

6.7 Taxes

All fees are exclusive of applicable taxes (including VAT, sales tax, or similar taxes). You are responsible for paying all such taxes associated with your subscription. If we are required to collect taxes, they will be added to your invoice.

7. Service Level and Support

We strive to maintain 99.9% uptime for our platform. Service levels and support response times vary by subscription tier:

  • Starter: Standard support during business hours
  • Professional: Priority support with faster response times
  • Enterprise: 24/7 premium support with dedicated account manager

Scheduled maintenance will be announced at least 48 hours in advance when possible.

8. Data Security and Privacy

We implement industry-standard security measures to protect your data. Our security practices include:

  • Encryption of data in transit and at rest
  • Regular security audits and penetration testing
  • SOC 2 Type II and ISO 27001 compliance
  • 24/7 security monitoring
  • Regular data backups and disaster recovery procedures

For detailed information about data handling, see our Privacy Policy.

9. Termination

9.1 Termination by You

You may cancel your subscription at any time through your account settings. Cancellation takes effect at the end of your current billing period.

9.2 Termination by Us

We may suspend or terminate your account immediately if you:

  • Violate these Terms
  • Fail to pay fees when due
  • Engage in fraudulent or illegal activities
  • Pose a security risk to our systems or other users

9.3 Effect of Termination

Upon termination, your access to the service will cease. You may export your data within 30 days of termination. After 30 days, we may delete your data in accordance with our data retention policies.

10. Warranties and Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

ThinkGRC specifically disclaims all warranties, including but not limited to:

  • That the service will meet your specific requirements or expectations
  • That the service will be uninterrupted, timely, secure, or error-free
  • That the results obtained from using the service will be accurate or reliable
  • That any errors or defects in the service will be corrected
  • That the service or servers are free from viruses or other harmful components
  • The accuracy, reliability, completeness, or timeliness of content, data, or AI-generated outputs
  • The security of data transmission or storage despite our best efforts

YOU ACKNOWLEDGE THAT THE AI-POWERED FEATURES MAY PRODUCE INACCURATE, INCOMPLETE, OR INAPPROPRIATE OUTPUTS. YOU ARE SOLELY RESPONSIBLE FOR REVIEWING AND VALIDATING ALL AI-GENERATED CONTENT BEFORE RELYING ON IT FOR COMPLIANCE, RISK MANAGEMENT, OR BUSINESS DECISIONS.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL THINKGRC, ITS AFFILIATES, DIRECTORS, OFFICERS, EMPLOYEES, AGENTS, OR LICENSORS BE LIABLE FOR:

  • Any indirect, incidental, special, consequential, exemplary, or punitive damages
  • Loss of profits, revenue, business opportunities, data, use, goodwill, or anticipated savings
  • Business interruption, service interruptions, or data loss or corruption
  • Third-party actions, content, or conduct
  • Unauthorized access to, use of, or alteration of your data or transmissions
  • Errors, omissions, or inaccuracies in AI-generated outputs or recommendations
  • Regulatory penalties, fines, or compliance failures resulting from reliance on the service
  • Any damages arising from force majeure events, including but not limited to natural disasters, wars, pandemics, or government actions

REGARDLESS OF THE FORM OF ACTION, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR OTHERWISE, THINKGRC'S TOTAL AGGREGATE LIABILITY TO YOU SHALL NOT EXCEED THE GREATER OF: (A) THE AMOUNT YOU PAID TO THINKGRC IN THE 12 MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR (B) ONE HUNDRED BRITISH POUNDS (£100).

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN WARRANTIES OR DAMAGES. IN SUCH JURISDICTIONS, OUR LIABILITY WILL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.

12. Indemnification

You agree to indemnify, defend, and hold harmless ThinkGRC Ltd and its affiliates, subsidiaries, officers, directors, employees, agents, contractors, licensors, and service providers from and against any and all claims, liabilities, damages, losses, costs, expenses (including reasonable attorneys' fees and legal costs), and obligations arising from or related to:

  • Your access to or use of the service
  • Your breach or violation of these Terms or any applicable law or regulation
  • Your violation of any rights of another person or entity, including intellectual property rights
  • Your Client Data, including any claims that your Client Data infringes or violates third-party rights
  • Any negligent or wrongful conduct by you or anyone using your account
  • Any dispute between you and any third party

ThinkGRC reserves the right, at its own expense, to assume the exclusive defense and control of any matter subject to indemnification by you. You agree to cooperate fully with ThinkGRC in the defense of any such claim.

13. Dispute Resolution

13.1 Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of England and Wales, without regard to its conflict of law principles. The courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms or their subject matter or formation (including non-contractual disputes or claims).

13.2 Dispute Resolution

Before initiating any legal proceedings, the parties agree to attempt to resolve any dispute through good faith negotiations for a period of 30 days. If the dispute cannot be resolved through negotiation, either party may pursue legal remedies as set forth in these Terms.

13.3 Waiver of Jury Trial and Class Action

To the extent permitted by applicable law, you waive any right to a jury trial and agree to resolve disputes on an individual basis. You may not bring claims as a plaintiff or class member in any class action, consolidated action, or representative action, and you waive any right to participate in a class action lawsuit or class-wide arbitration.

13.4 Injunctive Relief

Notwithstanding the above, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of intellectual property rights or confidential information.

14. General Provisions

14.1 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and ThinkGRC.

14.2 Modifications to Terms

We reserve the right to modify these Terms at any time. We will provide notice of material changes by posting the updated Terms on our website and updating the "Last Updated" date. For material changes, we will provide at least 30 days' notice via email to your registered email address. Your continued use of the service after the effective date of the revised Terms constitutes your acceptance of the changes. If you do not agree to the modified Terms, you must stop using the service and cancel your subscription.

14.3 Severability

If any provision is found invalid, the remaining provisions remain in full effect.

14.4 Waiver

Failure to enforce any right or provision does not constitute a waiver of future enforcement.

14.5 Assignment

You may not assign, transfer, or delegate these Terms or your rights and obligations hereunder without our prior written consent. Any attempted assignment in violation of this provision shall be void. We may freely assign, transfer, or delegate these Terms and our rights and obligations hereunder, in whole or in part, without notice or your consent, including in connection with a merger, acquisition, corporate reorganization, or sale of assets.

14.6 Force Majeure

ThinkGRC shall not be liable for any failure or delay in performance due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, wars, terrorism, pandemics, labor disputes, government actions, internet outages, or third-party service failures.

14.7 Export Compliance

You agree to comply with all applicable export and import control laws and regulations. You represent that you are not located in, under the control of, or a national or resident of any country subject to embargo or export restrictions.

14.8 Third-Party Services

The service may integrate with or contain links to third-party services, websites, or applications. ThinkGRC is not responsible for the content, policies, or practices of any third party. Your use of third-party services is at your own risk and subject to those third parties' terms and policies.

14.9 Survival

Sections 5 (Data Ownership), 6 (Payment Terms), 10 (Warranties), 11 (Limitation of Liability), 12 (Indemnification), 13 (Dispute Resolution), and 14 (General Provisions) shall survive any termination or expiration of these Terms.

15. Contact Information

For questions about these Terms of Service, please contact our legal team:

Email: legal@thinkgrc.com

Company Name: ThinkGRC Ltd

Registered Address: 123 Compliance House, London, EC2A 4DN, United Kingdom

Company Number: 16794113 (England and Wales)

Support: support@thinkgrc.com

Compliance Certifications

ThinkGRC maintains the following certifications and compliance standards:

SOC 2 Type II
ISO 27001:2013
GDPR Compliant
CCPA Compliant
HIPAA Compliant
PCI DSS Level 1

We Value Your Privacy

We use cookies to enhance your experience, analyze site traffic, and personalize content. By clicking "Accept All," you consent to our use of cookies. You can customize your preferences or learn more in our Cookie Policy.