Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you and AuditPath ("Company", "we", "us") governing your access to and use of the AuditPath compliance management platform at auditpath.io.

By creating an account or using the service, you confirm that you are at least 18 years old, have the authority to enter into this agreement on behalf of your organisation, and agree to be bound by these Terms and our Privacy Policy.

AuditPath is a B2B compliance management SaaS platform that helps organisations prepare for and manage security audits including SOC 2, ISO 27001, and India's DPDP Act. The service includes:

• Automated evidence collection from connected AWS environments
• Compliance gap analysis and scoring
• Evidence upload, organisation, and expiry tracking
• Team collaboration with role-based access controls
• Auditor portal for sharing evidence with external auditors
• Audit package generation and download

Registration

You must provide accurate, complete, and current information when creating an account. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account.

Organisation Accounts

AuditPath is a multi-tenant platform. Each organisation operates in an isolated environment. The account owner (OWNER role) is responsible for managing team members, permissions, and compliance with these Terms within their organisation.

Security

You agree to notify us immediately at support@auditpath.io if you suspect any unauthorised access to your account. We are not liable for any loss resulting from unauthorised use of your credentials.

You agree not to:

• Use the platform for any unlawful purpose or in violation of applicable regulations
• Upload malware, viruses, or any malicious content
• Attempt to gain unauthorised access to other organisations' data or systems
• Reverse engineer, decompile, or attempt to extract source code
• Use the service to store or process data that is illegal, defamatory, or infringes on third-party rights
• Resell, sublicense, or otherwise commercialise access to the platform without written consent
• Interfere with or disrupt the integrity or performance of the service
• Circumvent any security controls or authentication mechanisms

You retain full ownership of all data you upload to AuditPath, including documents, evidence files, and compliance data ("Customer Data"). You grant us a limited, non-exclusive licence to store, process, and transmit your Customer Data solely to provide the service.

We do not claim any intellectual property rights over your Customer Data. We will not access your Customer Data except as necessary to provide the service or as required by law.

A Data Processing Agreement (DPA) is available on request for enterprise customers. Contact legal@auditpath.io.

Free Tier

AuditPath offers a free Starter plan with no credit card required. Free plan features and limits are subject to change with 30 days notice.

Paid Plans

Paid subscriptions are billed monthly or annually in advance. All fees are non-refundable except as required by law or as stated in our refund policy. Prices are displayed in USD and are exclusive of applicable taxes.

Overdue Payments

If payment fails, your account may be downgraded to the free tier after a 14-day grace period. We will notify you before any downgrade occurs.

The AuditPath platform, including its software, design, branding, and documentation, is owned exclusively by AuditPath and protected by intellectual property laws. Nothing in these Terms grants you any right to our intellectual property.

You may provide feedback or suggestions about the service. We may use this feedback without any obligation to you.

We target 99.5% monthly uptime for paid plans. Scheduled maintenance will be communicated with at least 24 hours notice. Uptime excludes outages caused by third-party services (AWS, etc.) or factors outside our reasonable control.

The service is provided "as is" for the free tier with no uptime guarantee.

To the maximum extent permitted by applicable law, AuditPath shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or goodwill, arising from your use of or inability to use the service.

Our total cumulative liability for any claims under these Terms shall not exceed the greater of (a) the amount you paid us in the 12 months preceding the claim, or (b) USD 100.

AuditPath is a tool to assist with compliance preparation. We do not guarantee that use of our platform will result in a successful audit outcome. Compliance decisions remain your responsibility.

You may cancel your account at any time from the Settings page. Upon cancellation, your data will be retained for 30 days before permanent deletion, giving you time to export anything you need.

We may suspend or terminate your account immediately if you violate these Terms, engage in fraudulent activity, or pose a security risk to other users. We will provide notice where reasonably possible.

These Terms are governed by and construed in accordance with the laws of India. Any disputes arising under these Terms shall be subject to the exclusive jurisdiction of the courts located in Mumbai, India.

We may update these Terms from time to time. We will notify you of material changes via email or a prominent notice on the platform at least 14 days before the changes take effect. Continued use of the service after changes constitutes acceptance of the updated Terms.

For questions about these Terms, contact us at:

• Email: legal@auditpath.io
• Support: support@auditpath.io
• Website: auditpath.io