Last updated: 13 March 2026
Applies to: RegulaTrust platform, website, related services, and customer accounts
1. Introduction
These Terms of Service (the Terms) govern access to and use of the RegulaTrust platform and related services.
2. Definitions
In these Terms:
Account means an account used to access the Services.
Affiliate means an entity that directly or indirectly controls, is controlled by, or is under common control with a party.
Customer Data means data, content, documents, materials, and information submitted to or processed through the Services by or on behalf of Customer.
Documentation means user guides, instructions, and technical or functional materials made available by RegulaTrust regarding the Services.
Order means an order form, subscription agreement, statement of work, proposal, or other commercial document agreed between the parties describing the Services purchased.
Services means the RegulaTrust software platform, website functionality, APIs, support, and related services made available from time to time.
Subscription Term means the period during which Customer is authorized to use the Services under an applicable Order.
3. The Services
RegulaTrust provides software and related functionality designed to support trust center management, privacy, compliance, security, governance, and related operational workflows.
The Services may evolve over time. RegulaTrust may modify, improve, replace, or discontinue features provided that this does not materially reduce the core functionality purchased by Customer during the applicable Subscription Term, except where required for security, legal, or operational reasons.
RegulaTrust may offer beta, pilot, preview, or early access features. Unless otherwise agreed in writing, those features are provided as is, may change at any time, and may not be subject to the same support, security, or availability commitments as general release features.
4. Account Registration and Access
Customer must ensure that all registration information is accurate and kept up to date.
Customer is responsible for:
- maintaining the confidentiality of account credentials
- controlling access to user accounts
- ensuring that users access the Services only as authorized
- promptly notifying RegulaTrust of any suspected unauthorized access or credential compromise
Each user login is intended for the designated user and may not be shared in a way that circumvents purchased access rights.
RegulaTrust may suspend or restrict access where reasonably necessary to:
- prevent unauthorized access or security harm
- investigate suspected misuse
- comply with legal obligations
- preserve the integrity or availability of the Services
5. Customer Responsibilities
Customer is responsible for:
- ensuring that its use of the Services complies with applicable laws and regulations
- ensuring it has all necessary rights, notices, and permissions relating to Customer Data
- configuring and using the Services appropriately for its intended purposes
- reviewing outputs generated by the Services before relying on them for legal, regulatory, security, or business decisions
- maintaining its own internal policies, approvals, and governance processes where required
Customer acknowledges that RegulaTrust provides software tools and workflow support, not legal advice, regulatory advice, audit certification, or guaranteed compliance outcomes.
6. Acceptable Use
Customer and its users must comply with the Acceptable Use Policy made available by RegulaTrust.
Without limiting that policy, Customer must not use the Services to:
- violate applicable law or regulation
- infringe intellectual property, privacy, confidentiality, or other rights
- upload malware or malicious code
- probe, scan, or test the vulnerability of the Services without authorization
- interfere with or disrupt the integrity, performance, or availability of the Services
- attempt unauthorized access to any system, account, data, or environment
- use the Services to develop or benchmark a competing product in a way that is unfair, deceptive, or abusive
7. Fees and Payment
Customer will pay the fees set out in the applicable Order.
Unless otherwise stated in an Order:
- fees are quoted and payable in the specified currency
- fees are non-refundable except where these Terms expressly state otherwise
- subscriptions renew for successive terms equal to the initial Subscription Term unless either party gives notice of non-renewal at least 30 days before the end of the then-current term
- overdue amounts may incur interest at the lesser of 4% per annum above the Bank of England base rate or the maximum rate permitted by law
Customer is responsible for applicable taxes, duties, and levies, excluding taxes based on RegulaTrust’s net income.
If payment is overdue, RegulaTrust may suspend access after giving reasonable notice, unless doing so would be unlawful or disproportionate in the circumstances.
8. Customer Data
As between the parties, Customer retains all right, title, and interest in and to Customer Data.
Customer grants RegulaTrust a non-exclusive, worldwide, limited-duration right to host, copy, transmit, process, display, and otherwise use Customer Data only as necessary to:
- provide, maintain, secure, and support the Services
- prevent or address service, fraud, or security issues
- comply with law
- perform obligations under the agreement between the parties
RegulaTrust will not sell Customer Data.
RegulaTrust may generate and use aggregated, anonymized, or de-identified data derived from use of the Services for internal analytics, service improvement, benchmarking, and operational purposes, provided that such data does not identify Customer or any individual.
9. Data Protection
To the extent RegulaTrust processes personal data on behalf of Customer, the Data Processing Addendum forms part of the agreement between the parties and applies to that processing.
Customer is responsible for determining whether the Services are suitable for its regulatory, privacy, and compliance requirements.
10. Security
RegulaTrust will implement and maintain reasonable technical and organizational measures designed to protect Customer Data against unauthorized access, disclosure, alteration, or destruction.
RegulaTrust may update security measures from time to time, provided that such updates do not materially reduce the overall security posture of the Services.
11. Intellectual Property
RegulaTrust and its licensors retain all right, title, and interest in and to:
- the Services
- software, APIs, interfaces, models, workflows, templates, and Documentation
- all improvements, modifications, and derivative works relating to the Services
- associated intellectual property rights
Except for the limited rights expressly granted under these Terms, no rights are granted to Customer by implication, estoppel, or otherwise.
Customer may provide feedback regarding the Services. RegulaTrust may use that feedback without restriction or obligation.
12. Confidentiality
Each party may receive Confidential Information from the other party.
Confidential Information means non-public information that should reasonably be understood as confidential given its nature or the circumstances of disclosure, including business, product, security, technical, and commercial information.
The receiving party will:
- use the same degree of care to protect Confidential Information as it uses to protect its own similar information, but not less than reasonable care
- use Confidential Information only as necessary to perform its obligations or exercise its rights under the agreement
- limit access to Confidential Information to those who need it for such purposes and are bound by confidentiality obligations
These obligations do not apply to information that the receiving party can demonstrate:
- was already lawfully known without restriction
- becomes public through no breach by the receiving party
- is lawfully received from a third party without restriction
- is independently developed without use of the disclosing party’s Confidential Information
A party may disclose Confidential Information where required by law, regulation, or court order, provided it gives notice where legally permitted.
13. Warranties and Disclaimers
RegulaTrust warrants that during the Subscription Term it will provide the Services in a manner materially consistent with the applicable Documentation.
Except as expressly stated in these Terms or an applicable Order, the Services are provided as is and as available.
To the maximum extent permitted by law, RegulaTrust disclaims all implied warranties, including implied warranties of merchantability, fitness for a particular purpose, non-infringement, and that the Services will be uninterrupted, error-free, or produce any guaranteed regulatory, legal, commercial, or security outcome.
Customer acknowledges that:
- compliance outcomes depend on Customer’s own operations, controls, decisions, and data quality
- AI-assisted or automated outputs may contain inaccuracies or omissions
- the Services are not a substitute for legal advice, independent audit, or professional judgment
14. Indemnities
14.1 RegulaTrust IP indemnity
RegulaTrust will defend Customer against a third-party claim alleging that the Services infringe that third party’s intellectual property rights, and will pay resulting damages and costs awarded by a court or agreed in settlement, provided that Customer:
- promptly notifies RegulaTrust of the claim in writing
- grants RegulaTrust sole control of the defence and settlement of the claim
- provides reasonable cooperation and assistance to RegulaTrust at RegulaTrust’s expense
RegulaTrust will have no obligation for claims arising from Customer Data, unauthorized modifications, combinations with third-party software, or use of the Services in breach of the agreement.
In the event of an infringement claim, RegulaTrust may at its option procure the right for Customer to continue using the Services, modify the Services to make them non-infringing, or terminate the affected part of the Services and refund unused prepaid fees.
This section states Customer’s exclusive remedy for third-party IP infringement claims relating to the Services.
14.2 Customer indemnity
Customer will defend RegulaTrust against third-party claims arising from:
- Customer Data
- Customer’s breach of the agreement, including the Acceptable Use Policy
Customer will pay damages and costs awarded by a court or agreed in settlement, provided that RegulaTrust complies with the notice, control, and cooperation requirements above.
15. Limitation of Liability
Nothing in these Terms limits or excludes liability for:
- death or personal injury caused by negligence
- fraud or fraudulent misrepresentation
- breach of confidentiality obligations to the extent liability cannot be excluded by law
- infringement of the other party’s intellectual property rights
- amounts payable under an indemnity obligation
- any other liability that cannot lawfully be limited or excluded
Subject to the above, and to the maximum extent permitted by law:
- neither party will be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, goodwill, anticipated savings, business opportunity, or data
- each party’s total aggregate liability arising out of or in connection with the agreement will not exceed the total fees paid or payable by Customer to RegulaTrust under the applicable Order during the 12 months preceding the event giving rise to the claim
The exclusions and limitations in this section apply whether the claim arises in contract, tort, negligence, statute, or otherwise.
16. Term and Termination
These Terms start when Customer first accepts them or first uses the Services and continue until all Subscription Terms have expired or been terminated.
Either party may terminate for material breach if the other party fails to cure that breach within 30 days after written notice.
Either party may terminate immediately if the other party:
- becomes insolvent
- enters administration, liquidation, or a similar process
- ceases business operations
RegulaTrust may suspend or terminate access immediately where necessary to address serious security risk, unlawful activity, or material misuse.
Upon termination or expiry:
- Customer’s rights to use the Services end
- each party will return or destroy the other party’s Confidential Information, subject to legal retention obligations
- RegulaTrust will handle Customer Data in accordance with the DPA and applicable retention provisions
- accrued rights and obligations survive
17. Export, Sanctions, and Compliance
Customer must not use the Services in violation of applicable export control, sanctions, anti-bribery, or anti-corruption laws.
Customer represents that it is not subject to sanctions that would prohibit RegulaTrust from providing the Services.
18. Publicity
RegulaTrust will not publicly identify Customer as a customer without Customer’s prior written consent, except where such identification is expressly permitted in an applicable Order.
19. Governing Law
These Terms and any dispute or claim arising out of or in connection with them (including non-contractual disputes or claims) shall be governed by and construed in accordance with the laws of England and Wales.
The parties irrevocably agree that the courts of England and Wales shall have exclusive jurisdiction to settle any dispute or claim arising out of or in connection with these Terms.
20. General
These Terms, together with the applicable Order, DPA, and any documents expressly incorporated by reference, form the entire agreement between the parties regarding the Services.
If there is a conflict between documents, the order of precedence is:
- applicable Order
- DPA
- these Terms
- Documentation
If any provision is found to be invalid or unenforceable, the remaining provisions remain in full force.
Failure to enforce a right is not a waiver of that right.
The agreement is personal to the parties and may only be assigned with written consent, not to be unreasonably withheld, except to an Affiliate or in connection with a merger or sale of assets.
Notices under these Terms must be sent to the contact details in the applicable Order or, if no Order exists, to the most recent contact details provided by the relevant party.
21. Contact
Questions regarding these Terms should be sent to: