Terms of Service

1. Acceptance of Terms

These Terms of Service (“Terms”) form a binding agreement between you and Chequr, Inc. (“Chequr,” “we,” “our,” or “us”). By signing up for, accessing, or using the Chequr platform, website, or APIs (collectively, the “Service”), you agree to be bound by these Terms.

If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity, in which case “you” or “Customer” refers to that entity. If you do not have that authority, or if you do not agree to these Terms, you must not use the Service.

2. Service Description

Chequr is an AI-native governance, risk, and compliance (GRC) platform. The Service helps security and compliance teams automate evidence collection, map controls across frameworks (such as SOC 2, ISO 27001, HIPAA, and GDPR), monitor the status of controls, manage vendor risk, and prepare for audits.

Specific features, limits, and deliverables available to you are described in your order form, online plan description, or a signed master subscription agreement. We may update, enhance, or modify the Service from time to time; we will not materially reduce the core functionality of a paid plan during your subscription term without notice.

3. Account Registration

To use the Service, you must register an account and provide accurate, current, and complete information. You must be at least 18 years old (or the age of majority in your jurisdiction) and legally capable of entering into a contract.

You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You agree to notify us immediately at security@chequr.com of any unauthorized access or suspected security incident. We strongly recommend enabling single sign-on and multi-factor authentication for all administrators.

4. Subscriptions and Billing

Chequr is offered on a subscription basis. Plan details, fees, and billing frequency are described on our pricing page or in your order form. Unless otherwise agreed, subscription fees are billed in advance, are non-refundable, and are exclusive of applicable taxes.

Auto-renewal. Subscriptions renew automatically at the end of each term for a term equal in length to the prior term, at the then-current list price, unless either party provides written notice of non-renewal at least 30 days before the renewal date.

Refunds. Except as required by law or explicitly stated in these Terms, fees paid are non-refundable. If we terminate your subscription for our convenience mid-term, we will refund any prepaid fees for the unused portion of the term.

5. Acceptable Use

You agree not to use the Service in any way that is unlawful, harmful, or disruptive. In particular, you agree not to:

• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service, except to the extent such restriction is prohibited by law.
• Access the Service to build a competing product, benchmark it for the purpose of building a competing product, or copy its features, functions, or user interface.
• Attempt to gain unauthorized access to the Service, to other customers' accounts or data, or to any underlying systems or networks.
• Upload or transmit malware, exploit code, or other content that is unlawful, infringing, abusive, or otherwise harmful.
• Use the Service in violation of applicable law, including export controls and sanctions regimes, or to process data you are not legally permitted to process.
• Interfere with or disrupt the integrity, security, or performance of the Service, including through denial-of- service attacks, automated scraping, or unreasonable API load.

Authorized security testing is welcome and encouraged. Report findings to security@chequr.com under our responsible disclosure policy.

6. Customer Data and Ownership

As between the parties, you retain all right, title, and interest in and to the data you submit to, or that Chequr collects on your behalf through, the Service (“Customer Data”). Chequr does not claim ownership of Customer Data.

You grant Chequr a limited, non-exclusive, worldwide, royalty-free license to host, copy, transmit, display, and process Customer Data solely as necessary to provide and improve the Service, to prevent or address technical or security issues, and to comply with law. We do not use Customer Data to train public or third-party AI models, and internal model training uses only aggregated or de-identified signals consistent with our Privacy Policy and Data Processing Addendum.

You are responsible for the accuracy, quality, and legality of Customer Data and for ensuring you have the necessary rights and consents to submit it to the Service.

7. Intellectual Property

The Service, including all software, models, content, and documentation, and all intellectual property rights therein, are owned by Chequr or its licensors. No rights are granted to you other than the limited right to access and use the Service in accordance with these Terms.

If you choose to provide us with suggestions, ideas, or feedback about the Service, you grant Chequr an irrevocable, perpetual, royalty-free license to use such feedback for any purpose, without obligation to you. We respect your ownership of Customer Data and trademarks, and will not use your name or logo publicly without your consent beyond the limited customer-list reference described in your order form.

8. Confidentiality

Each party may disclose Confidential Information to the other in connection with these Terms. “Confidential Information” means any non-public information disclosed by one party to the other that is marked confidential or should reasonably be understood to be confidential given its nature and the circumstances of disclosure, including Customer Data, pricing, product roadmaps, and security documentation.

Each party will protect the other's Confidential Information with the same care it uses to protect its own (but not less than reasonable care), will use it only as necessary to perform under these Terms, and will not disclose it to third parties except to employees, contractors, and advisors with a need to know and who are bound by comparable confidentiality obligations. These obligations survive for three years after termination, except for trade secrets, which remain protected for as long as they qualify as trade secrets under applicable law.

9. Security and Compliance

Chequr maintains a written information security program aligned with SOC 2 Type II and ISO 27001, including encryption of Customer Data at rest (AES-256) and in transit (TLS 1.2+), strict access controls, continuous monitoring, and documented incident response. Current certifications and reports are available under NDA through the Chequr Trust Center.

Security is a shared responsibility. You are responsible for configuring the Service appropriately for your environment, provisioning and deprovisioning your users, protecting your credentials, managing the permissions of connected integrations, and monitoring the security of the endpoints your users use to access the Service.

10. Service Level and Uptime

Chequr targets 99.9% monthly uptime for the production Service, as defined and measured in our Service Level Agreement (the “SLA”). If we fail to meet the committed level in a given calendar month, eligible customers may request service credits in accordance with the SLA.

SLA commitments exclude downtime caused by scheduled maintenance (communicated in advance), emergency maintenance required to address security issues, force majeure events, failures of third-party services or networks outside our control, and misuse of the Service by Customer. Service credits are the sole and exclusive remedy for SLA failures.

11. Termination

By Customer. You may cancel your subscription at any time from within the Service or by contacting support. Cancellation is effective at the end of the then-current billing period; paid fees are non-refundable except as required by law.

By Chequr. We may suspend or terminate your access to the Service for material breach of these Terms (including non-payment or violation of the Acceptable Use policy) if the breach is not cured within 15 days after written notice, or immediately where the breach poses a risk to the Service, our customers, or third parties.

Effect of termination. Upon termination, your right to access and use the Service ends, and each party will promptly return or destroy the other's Confidential Information (except for routine archival copies retained as required by law or standard backup policies). Chequr will make Customer Data available for export in a commonly used format for 30 days after termination; after that window, Customer Data will be deleted or anonymized in accordance with our retention schedule. Sections intended to survive termination (including IP, confidentiality, liability, indemnification, and governing law) will survive.

12. Warranties and Disclaimers

Chequr warrants that it will provide the Service in a professional and workmanlike manner, consistent with generally accepted industry standards, and in material conformity with the documentation. Your exclusive remedy for a breach of this warranty is for Chequr to re- perform the affected services or, if we cannot do so in a commercially reasonable manner, to refund the portion of fees attributable to the non-conforming Service.

EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” AND CHEQUR DISCLAIMS ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. CHEQUR DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT USE OF THE SERVICE WILL RESULT IN A PASSING AUDIT OR SPECIFIC COMPLIANCE OUTCOME.

13. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS, EVEN IF THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

EACH PARTY'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY CUSTOMER TO CHEQUR FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. These limitations do not apply to (i) a party's indemnification obligations, (ii) breach of confidentiality obligations, (iii) Customer's payment obligations, or (iv) liability that cannot be limited under applicable law.

14. Indemnification

By Chequr. Chequr will defend Customer against any third-party claim alleging that the Service, used in accordance with these Terms, infringes the third party's intellectual property rights, and will pay the damages finally awarded or agreed in settlement.

By Customer. Customer will defend Chequr against any third-party claim arising out of Customer Data, Customer's use of the Service in violation of these Terms or applicable law, or any breach of Section 5 (Acceptable Use), and will pay the damages finally awarded or agreed in settlement.

Process. Indemnification obligations are conditioned on the indemnified party (i) promptly notifying the indemnifying party of the claim, (ii) giving the indemnifying party sole control of the defense and settlement (provided no settlement admits fault or imposes non-monetary obligations without consent), and (iii) providing reasonable cooperation at the indemnifying party's expense.

15. Governing Law

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws principles. Subject to Section 16, the state and federal courts located in San Francisco County, California will have exclusive jurisdiction over any action arising out of or relating to these Terms that is not subject to arbitration, and the parties consent to personal jurisdiction and venue in those courts.

16. Dispute Resolution

The parties will attempt to resolve any dispute arising out of these Terms through good-faith discussions between designated representatives. If a dispute is not resolved within 30 days, it will be finally settled by binding arbitration administered by JAMS under its Comprehensive Arbitration Rules, in San Francisco, California, before a single arbitrator.

To the fullest extent permitted by law, the parties waive any right to participate in a class, collective, or representative action. Nothing in this section prevents either party from seeking injunctive or equitable relief in a court of competent jurisdiction to protect its intellectual property or Confidential Information.

17. Changes to Terms

We may update these Terms from time to time. When we make material changes, we will post the updated Terms on this page, update the “Last updated” date, and notify account administrators by email or in-app message at least 30 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

If a change materially and adversely affects your use of the Service, you may terminate your subscription and receive a pro-rated refund of any prepaid, unused fees by notifying us before the effective date.

18. Contact

Questions about these Terms, including legal notices, should be sent to legal@chequr.com, or by mail to Chequr, Inc., Attn: Legal, 548 Market Street, PMB 72941, San Francisco, CA 94104, USA.