1) Acceptance of Terms

These Terms of Service ("Terms") govern your access to and use of Armcap ControlOps (the "Services"). By accessing or using the Services, you agree to these Terms.

If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

2) Definitions

"Customer": the organization subscribing to the Services
"User": an individual authorized under a Customer account
"Customer Data": content submitted by Customer/Users into the Services (contracts, policies, incident records, evidence, etc.)
"Outputs": analyses, drafts, summaries, templates, reports, and other outputs generated by the Services
"Order": an order form, online checkout, or subscription plan confirmation

3) Services Description

Armcap ControlOps provides workflow automation and governance support across:

ContractOps: contract/DPA/TOMs/security exhibit analysis and export packs
ControlOps: control mapping, policy lifecycle, evidence indexing, and audit-pack generation
IncidentOps: major incident coordination workflows and export packs

We may update the Services over time, including adding, changing, or removing features.

4) Account Responsibilities

You are responsible for:

Maintaining the confidentiality of credentials
All activity under your account
Ensuring Users comply with these Terms
Providing accurate and current account information

If you suspect unauthorized access, contact contact@armcapops.com promptly.

5) Subscriptions, Fees, and Payment

Fees, billing cycles, and usage limits are defined in the applicable Order or subscription plan.
Unless otherwise stated, fees are non-refundable and billed in advance.
We may suspend access for non-payment following notice, where reasonable.
Taxes are your responsibility unless we are legally required to collect them.

6) Acceptable Use

You agree not to:

Use the Services unlawfully or in violation of regulations
Upload malware or attempt to disrupt, degrade, or compromise the Services
Probe, scan, or test vulnerabilities without authorization
Access data you are not authorized to access
Reverse engineer the Services except where prohibited by law
Use the Services to extract or replicate Armcap proprietary workflows, rubrics, templates, or logic at scale to build a competing offering without written authorization
Submit content that infringes intellectual property rights or violates confidentiality obligations

We may suspend or terminate access for violations.

7) Customer Data

7.1 Ownership and License

Customer retains ownership of Customer Data. Customer grants Armcap a limited license to host, process, transmit, and display Customer Data solely to provide and operate the Services consistent with these Terms and any DPA.

7.2 Customer Responsibilities

Customer represents it has the rights and permissions necessary to submit Customer Data and that Customer Data is submitted lawfully (including providing required notices and obtaining any required consents).

7.3 Data Processing Addendum (DPA)

Where required, Armcap will make a DPA available upon request via contact@armcapops.com.

8) AI Outputs; No Legal Advice

Outputs may be generated using automated systems (including AI) and may contain errors or omissions.
Customer is responsible for reviewing Outputs for accuracy, compliance, and suitability before reliance or use.
Armcap does not provide legal advice. Outputs are provided for governance support and operational efficiency, not as a substitute for professional judgment.

9) Intellectual Property

Armcap retains all rights, title, and interest in and to the Services, including software, workflows, rubrics, templates, and underlying logic, excluding Customer Data.

Customer may use Outputs internally for business purposes. Unless explicitly permitted in writing, Customer may not resell Outputs as a standalone product or publish Outputs in a manner that discloses Armcap proprietary methods.

10) Confidentiality

Each party may receive Confidential Information from the other. The receiving party will:

Use Confidential Information only to perform under these Terms
Protect it using reasonable care
Disclose it only to authorized personnel/service providers bound by similar obligations

Confidentiality obligations do not apply to information that is publicly available through no fault of the receiving party, independently developed, or lawfully obtained.

11) Security

Armcap will maintain reasonable administrative, technical, and physical safeguards designed to protect Customer Data.

12) Third-Party Services

The Services may integrate with third-party services. Armcap is not responsible for third-party services, their availability, or their data practices. Your use of third-party services is governed by their terms.

13) Beta Features

Beta or preview features may be offered "as is," may change, and may be discontinued. Use is at your discretion.

14) Termination; Data Return/Deletion

14.1 Term

These Terms remain in effect until terminated.

14.2 Termination

Customer may terminate at the end of the subscription term as described in the applicable Order.
Armcap may suspend or terminate access for material breach, security risk, or non-payment, with notice where reasonable.

14.3 Data Export and Deletion

Upon termination, Armcap will make Customer Data available for export for thirty (30) days, then delete Customer Data in accordance with retention practices and any applicable DPA, subject to legal requirements.

15) Disclaimers

To the maximum extent permitted by law, the Services are provided "as is" and "as available." Armcap disclaims all warranties, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Services will be uninterrupted or error-free.

16) Limitation of Liability

To the maximum extent permitted by law: Armcap will not be liable for indirect, incidental, special, consequential, or punitive damages, or lost profits/revenue, loss of data, or loss of goodwill. Armcap's total liability for any claims relating to the Services will not exceed the amounts paid by Customer to Armcap for the Services in the twelve (12) months preceding the event giving rise to liability.

Some jurisdictions limit these exclusions; these limitations apply to the extent permitted by law.

17) Indemnification

Customer will indemnify and hold Armcap harmless from claims arising out of:

Customer Data (including alleged infringement)
Customer's use of the Services in violation of these Terms or applicable law
Unauthorized use by Users under Customer's account

Armcap will provide notice of claims and cooperate reasonably.

18) Governing Law; Venue

These Terms are governed by the laws of the State of Georgia, United States of America, excluding conflict-of-law rules.

Any dispute arising out of or relating to these Terms or the Services will be brought exclusively in the state or federal courts located in Forsyth County, Georgia, and the parties consent to personal jurisdiction and venue in those courts.

19) Changes to Terms

We may update these Terms. If changes are material, we will provide notice as required. Continued use after the effective date constitutes acceptance.

20) Contact

Questions about these Terms or the Services: contact@armcapops.com

Armcap ControlOps — Terms of Service