Terms of Service

These Terms of Service (“Terms”) constitute a legally binding agreement between you (“User”, “you”, or “your”) and A9 Advisory FZ-LLC (“A9 Advisory”, “we”, “us”, or “our”) governing your access to and use of the ArborGRC platform (“Platform”) and related services.

By accessing or using the Platform, you agree to be bound by these Terms. If you do not agree, you must not access or use the Platform.

ArborGRC is an enterprise-grade Governance, Risk, and Compliance (GRC) platform that provides:

• Information Security Management System (ISMS) tools aligned with ISO 27001:2022 and UAE-IA.
• Enterprise Risk Management (ERM) capabilities based on ISO 31000.
• Third-Party Risk Management (TPRM) and vendor assessment workflows.
• Compliance tracking, audit management, and evidence collection.
• Excel import/export functionality for seamless data migration.

To use the Platform, you must:

• Provide accurate, current, and complete registration information.
• Maintain the security of your account credentials.
• Be at least 18 years of age and authorized to enter into these Terms on behalf of your organization.
• Promptly notify us of any unauthorized access to your account.

You are responsible for all activities that occur under your account. We are not liable for any loss arising from unauthorized use of your account.

4.1 Plans

The Platform is offered on a per-module subscription basis. Pricing details, features, and billing cycles are provided at the time of purchase and may vary by region (India/UAE pricing tiers).

4.2 Payment Terms

• Subscription fees are billed in advance on a monthly or annual basis.
• All fees are non-refundable unless otherwise stated in your subscription agreement.
• We reserve the right to modify pricing with 30 days’ notice before the next billing cycle.

4.3 Free Trial

If we offer a free trial, you may use the Platform during the trial period at no cost. At the end of the trial, your account will convert to a paid subscription unless cancelled.

You agree not to:

• Use the Platform for any unlawful purpose or in violation of any applicable laws or regulations.
• Attempt to gain unauthorized access to any part of the Platform or its infrastructure.
• Interfere with or disrupt the Platform’s integrity, performance, or availability.
• Upload malicious code, viruses, or harmful content.
• Reverse-engineer, decompile, or disassemble any part of the Platform.
• Use the Platform to store or process data that violates third-party intellectual property rights.
• Share your account credentials or allow unauthorized users to access your account.
• Scrape, crawl, or use automated means to access the Platform without our written consent.

6.1 Your Data

You retain all rights and ownership of the data you upload, create, or store on the Platform (“Customer Data”). This includes compliance frameworks, risk assessments, controls, evidence, and audit documentation.

6.2 Our Rights

We own all intellectual property rights in the Platform, including its software, design, algorithms, documentation, and branding. You are granted a limited, non-exclusive, non-transferable license to use the Platform for the duration of your subscription.

6.3 Data Portability

You may export your Customer Data at any time in standard formats (Excel, CSV, PDF) using the Platform’s export functionality. Upon subscription termination, you have 30 days to export your data before permanent deletion.

We strive to maintain Platform availability of 99.9% uptime, excluding planned maintenance windows. We will provide reasonable advance notice of scheduled maintenance. We are not liable for downtime caused by factors outside our reasonable control, including force majeure events.

We treat all Customer Data as confidential. We will not access, use, or disclose your Customer Data except as necessary to provide the Platform service, comply with legal obligations, or with your explicit written consent.

Our confidentiality obligations survive termination of these Terms for a period of three (3) years.

To the maximum extent permitted by applicable law:

• The Platform is provided “as is” and “as available” without warranties of any kind.
• We do not warrant that the Platform will be uninterrupted, error-free, or secure.
• Our total liability shall not exceed the fees paid by you in the 12 months preceding the claim.
• We are not liable for indirect, incidental, consequential, or punitive damages.

The Platform provides tools to assist with GRC processes. It does not constitute legal, compliance, or regulatory advice. You remain responsible for your organization’s compliance decisions.

You agree to indemnify and hold harmless A9 Advisory, its officers, directors, employees, and agents from any claims, liabilities, damages, or expenses arising from:

• Your use of the Platform in violation of these Terms.
• Your violation of any applicable law or regulation.
• Any data you upload that infringes third-party rights.

• You may cancel your subscription at any time through the Platform settings or by contacting support.
• We may suspend or terminate your access for violation of these Terms with reasonable notice.
• Upon termination, your right to use the Platform ceases immediately.
• Provisions that by their nature should survive termination (confidentiality, liability, indemnification) will survive.

These Terms are governed by and construed in accordance with the laws of the Dubai International Financial Centre (DIFC), UAE. Any disputes shall be resolved through the DIFC Courts, unless otherwise agreed in writing.

We may update these Terms from time to time. Material changes will be communicated via email or prominent notice on the Platform at least 30 days before taking effect. Continued use after changes constitutes acceptance of the revised Terms.