ZERONE GRC
Core GRC
GovernanceRisk ManagementCompliance ManagementControlsPolicy Management
Security & Operations
Incident ManagementAsset InventoryEvidence ManagementIntegrationsReports & Dashboards
Assurance & Continuity
Vendor RiskBusiness Continuity / BIAAudit & FindingsAction PlansData Inventory
Explore the platformPricing
Security & Compliance
ISO 27001CIS ControlsNIST CSFNIST 800-53PCI DSS
Privacy & Governance
GDPRSOC 2COBITITILISO 22301 / BCM
Internal & Local
Internal PoliciesLocal RegulatoryData ClassificationBCM RequirementsCustom Frameworks
See framework coverage
By team
For GRC TeamsFor Information SecurityFor Risk ManagementFor Compliance Teams
By use case
For Internal AuditFor IT OperationsFor Executive ManagementFor Vendors / Third Parties
Explore the platformHow it works
Legal

Terms of Service

The terms governing access to and use of the ZERONE GRC platform.

Last updated: 1 June 2026

This page is provided as a general template for the ZERONE platform and is not legal advice. Your final agreement is the signed order form or contract between your organization and ZERONE.

1. Acceptance of Terms

By accessing or using the ZERONE GRC platform ("the Platform"), you agree to be bound by these Terms of Service. If you are using the Platform on behalf of an organization, you represent that you have authority to bind that organization to these terms.

2. License & Access

Subject to a valid license, ZERONE grants you a non-exclusive, non-transferable right to access and use the Platform within the limits of your license plan — including assets, modules, administrators and agents — for your internal governance, risk, compliance and security operations.

  • Access is controlled by role-based access control (RBAC) and, where enabled, multi-factor authentication.
  • You are responsible for safeguarding account credentials and for activity under your accounts.
  • License limits and expiry are defined in your plan and order form.

3. Acceptable Use

You agree to use the Platform only for lawful purposes and only against systems, networks and data that you own or are explicitly authorized to assess. You must not:

  • Run discovery, scanning or collection against assets you are not authorized to assess.
  • Attempt to bypass authentication, RBAC, tenancy separation or audit logging.
  • Reverse engineer, resell or sublicense the Platform except as permitted by your agreement.
  • Use the Platform to store or transmit unlawful, infringing or malicious content.

4. Customer Data & Collection

You retain ownership of the data you and your endpoints generate within the Platform. ZERONE processes this data to provide the service. By design, the Data Inventory module collects metadata only — it does not collect file contents, passwords, hashes, private keys, tokens or secrets. Connection credentials you provide are protected through secure credential handling.

5. Availability & Support

ZERONE may be deployed on-premise or in your environment. Availability, maintenance windows, update procedures and support scope are defined in your order form or support agreement. Vendor-published updates are integrity-verified (SHA-256 / Ed25519) before they can be applied.

6. Intellectual Property

The Platform, including its software, design, trademarks and documentation, is and remains the property of ZERONE and its licensors. These terms do not transfer any ownership rights other than the limited license granted above.

7. Warranty & Limitation of Liability

The Platform is provided on the basis set out in your agreement. To the maximum extent permitted by law, ZERONE is not liable for indirect, incidental or consequential damages, or for loss of data or profits, arising from use of the Platform. Nothing in these terms limits liability that cannot be limited under applicable law.

8. Term & Termination

These terms apply for the duration of your license. ZERONE may suspend or terminate access for material breach, unlawful use or non-payment, subject to any notice provisions in your agreement. On termination, your right to access the Platform ends; data export and retention follow your agreement.

9. Contact

Questions about these terms? Contact us at [email protected]. See also our Privacy Policy.