Terms of Service

These Terms of Service ("Terms") govern your access to and use of the AssurAI platform operated by AssurAI Inc., a Delaware C-Corporation ("AssurAI", "we", "us", or "our"). By creating an account or using the platform, you agree to be bound by these Terms.

Enterprise customers who have executed a separate SaaS Subscription Agreement are also bound by the SaaS Subscription Agreement, which supersedes these Terms to the extent of any conflict. For all other users, these Terms constitute the entire agreement.

If you are using AssurAI on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms. If you do not agree to these Terms, you must not access or use the platform.

These Terms were last updated on January 15, 2025 (v3.2). Prior versions of these Terms remain archived and available upon request at legal@getassurai.com.

AssurAI provides a cloud-based Governance, Risk, and Compliance (GRC) platform that uses artificial intelligence to assist with audit documentation, internal controls assessment, evidence management, workpaper preparation, and compliance workflow management.

Core Modules

• SOX Compliance Module — Management Review Control (MRC) evaluation, ITGC testing, control documentation, and walkthrough support
• Evidence Management — Document upload, AI-assisted classification, SHA-256 integrity hashing, and Evidence Integrity Certificates
• BSA/AML Compliance Module — Workflow documentation and audit assistance for compliance teams
• Workpaper Suite — AI-generated draft workpapers, narratives, and reconciliation analyses for professional review
• Risk Assessment Tools — Control gap analysis, risk scoring, and remediation workflow tracking

AssurAI reserves the right to modify, suspend, or discontinue any feature or module with reasonable advance notice. Material changes to core features will be communicated via email or in-platform notification at least 30 days in advance.

Eligibility

You must be at least 18 years old and have the legal capacity to enter into binding contracts to create an account. Accounts for organisations must be created by an authorised representative.

Account Information

You agree to provide accurate, current, and complete information during registration and to update that information as necessary. AssurAI reserves the right to suspend or terminate accounts created with false or misleading information.

Account Security

You are responsible for maintaining the confidentiality of your login credentials and for all activities that occur under your account. You agree to:

• Use a strong, unique password and enable multi-factor authentication where available
• Immediately notify AssurAI at support@getassurai.com of any suspected unauthorised access
• Not share credentials with individuals outside your licensed user count
• Not allow access to individuals who have not accepted these Terms

Organisational Accounts

For organisational accounts, the Account Administrator is responsible for managing user access, permissions, and ensuring that all users within the organisation comply with these Terms. AssurAI is not liable for actions taken by unauthorised users where proper access controls were not maintained.

Subject to these Terms, AssurAI grants you a limited, non-exclusive, non-transferable licence to access and use the platform for your internal business purposes during the applicable subscription term.

Permitted Uses

• Internal audit documentation, planning, and workflow management
• SOX compliance testing and control documentation for your organisation
• Evidence collection, organisation, and integrity verification
• Training audit team members on GRC workflows within your licensed user count

Prohibited Uses

You shall not, and shall not permit others to:

• Sublicense, resell, or provide access to third parties outside your organisation without an explicit reseller agreement
• Reverse engineer, decompile, or attempt to extract source code or underlying AI models
• Use the platform to build a competing product or service
• Remove or obscure proprietary notices, trademarks, or copyright designations
• Upload malicious code, viruses, or content designed to disrupt platform operation
• Attempt to gain unauthorised access to other customers' data, accounts, or systems
• Use the platform in violation of any applicable law, regulation, or professional standard
• Submit real customer PII or sensitive transaction data to the BSA/AML module (use anonymised or sample data)

Violations of these restrictions may result in immediate account suspension and may expose you to legal liability.

AssurAI IP

AssurAI owns all right, title, and interest in and to the platform, including all software, algorithms, AI models, proprietary methodologies, user interfaces, documentation, and the AssurAI brand. AssurAI™ is a registered trademark of AssurAI Inc. (USPTO Assignment Recordation: WUID 901030615). Nothing in these Terms transfers any ownership of AssurAI IP to you.

Your Content and Outputs

You own all data you upload to the platform ("Customer Data") and all AI-generated outputs produced using your Customer Data ("Outputs"). AssurAI claims no ownership of your workpapers, reports, analyses, or other content generated through the platform. You grant AssurAI a limited licence to process your Customer Data solely as necessary to provide the services.

Evidence Integrity Certificates

SHA-256 hashes and Evidence Integrity Certificates generated by AssurAI are provided as convenience tools. They confirm digital file integrity at the time of upload but do not constitute legal certifications, notarisation, or authentication under any applicable law.

Feedback

If you voluntarily provide feedback, suggestions, or enhancement requests, you grant AssurAI a non-exclusive, perpetual, royalty-free licence to incorporate that feedback into the platform. AssurAI is under no obligation to act on any feedback.

Third-Party Components

The platform incorporates open-source and third-party components governed by their own licences. A current list is available at legal@getassurai.com.

Your use of the platform is also governed by our Privacy Policy, which is incorporated into these Terms by reference. The Privacy Policy explains how we collect, use, store, and protect personal information.

Data Processing

AssurAI processes Customer Data on your behalf as a data processor. You are the data controller and are responsible for ensuring you have the legal basis to upload and process the data. Our Data Processing Addendum (DPA) — Exhibit A of the SaaS Subscription Agreement — governs data processing activities.

Anthropic API

AI features are powered by Anthropic's Claude API. Customer Data processed through AI features is subject to:

• Anthropic's API usage policies and zero-data-retention (ZDR) configuration — Anthropic does not use API data to train models
• AssurAI's ZDR agreement with Anthropic means your data is not retained by Anthropic after processing
• Anthropic's Privacy Policy at anthropic.com/privacy

GDPR and Data Residency

Enterprise customers may request Data Processing Agreements and data residency configurations. Contact shakeel@getassurai.com to request a DPA or discuss data residency options.

Subscription Fees

Access to AssurAI requires a paid subscription. Subscription fees are set forth in the applicable order form or on the pricing page. All fees are in USD unless expressly stated otherwise.

Billing Cycle

Subscriptions are billed monthly or annually in advance, depending on your selected plan. Annual plans are billed at the start of each annual period. Monthly plans are billed on the same calendar day each month.

Payment Method

You authorise AssurAI to charge your designated payment method for all fees. You are responsible for maintaining accurate billing information. Failed payments may result in service suspension after a 7-day grace period with notice.

Price Changes

AssurAI may change subscription fees with at least 30 days written notice via email or in-platform notification. Continued use after the effective date of the price change constitutes acceptance of the new fees. Annual subscribers are protected from price changes until their current annual term expires.

Refund Policy

All fees are non-refundable except: (a) as expressly stated in the applicable order form; (b) where required by applicable consumer protection law; or (c) where AssurAI has materially failed to provide the subscribed services and has not remediated within 30 days of written notice.

Taxes

Fees are exclusive of all taxes, levies, or duties. You are responsible for paying all applicable taxes associated with your subscription. Where AssurAI is required by law to collect taxes, these will be added to your invoice.

AssurAI does not warrant that:

• The platform will be uninterrupted, error-free, or available at any particular time
• AI-generated outputs will be accurate, complete, current, or suitable for your specific purposes
• The platform will meet your regulatory, compliance, or professional requirements
• Any defects or errors will be corrected within a specific timeframe

No Affiliation or Endorsement

AssurAI Inc. is not affiliated with, endorsed by, or connected to the PCAOB, IIA, any Big 4 accounting firm, FinCEN, FFIEC, or any regulatory body. References to regulatory frameworks and professional standards are for informational purposes only.

Professional Responsibility

AI-generated content does not constitute professional audit opinions, legal advice, accounting advice, or regulatory compliance determinations. All outputs require review, validation, and professional sign-off by qualified professionals before use in engagement files, regulatory submissions, or any professional context.

AssurAI's total aggregate liability arising out of or related to these Terms shall not exceed the greater of: (a) the total fees paid by you in the twelve months preceding the claim; or (b) $100 USD.

Specific AI-Related Exclusions

AssurAI shall not be liable for any loss, damage, fine, penalty, or other consequence arising from:

• Reliance on AI-generated content without appropriate independent professional review
• Use of BSA/AML module outputs in connection with regulatory examinations, submissions, or enforcement proceedings
• Use of Evidence Integrity Certificates in legal or regulatory proceedings
• Outputs generated from documents uploaded without appropriate ownership, rights, or authorisation
• Any regulatory finding, material weakness, significant deficiency, restatement, or audit failure
• Decisions made based on AI-generated workpapers, narratives, or control evaluations without professional review

Some jurisdictions do not allow limitations on liability for certain types of damages. In such jurisdictions, our liability is limited to the maximum extent permitted by applicable law.

Your Indemnification Obligations

You agree to indemnify, defend, and hold harmless AssurAI Inc. and its officers, directors, employees, agents, and affiliates from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

• Your use of the platform in violation of these Terms or applicable law
• Your Customer Data, including any claim that it infringes a third party's intellectual property rights or violates any confidentiality obligation
• Your reliance on AI-generated content without appropriate professional review
• Unauthorised access to the platform through your account credentials
• Any regulatory action, fine, or penalty arising from your compliance decisions

AssurAI's Indemnification

AssurAI will indemnify and defend you from third-party claims alleging that the platform, as provided and used in accordance with these Terms, infringes a third party's U.S. patent, copyright, or trademark. AssurAI's obligation does not apply where the claim arises from your modification of the platform or combination with third-party products not provided by AssurAI.

Indemnification Procedure

The indemnifying party's obligations are conditioned on: (a) prompt written notice of the claim; (b) sole control of the defence and settlement; and (c) reasonable cooperation from the indemnified party. The indemnified party may participate with counsel of its own choosing at its own expense.

Informal Resolution

Before initiating formal dispute resolution, you agree to contact AssurAI at legal@getassurai.com and attempt to resolve the dispute informally for at least 30 days. Most concerns can be resolved quickly through good-faith discussion.

Binding Arbitration

If informal resolution is unsuccessful, disputes shall be resolved by binding arbitration administered by JAMS under the JAMS Streamlined Arbitration Rules then in effect. Arbitration shall be conducted in Santa Clara County, California, USA, or via video conference by mutual agreement. The arbitrator's decision shall be final and binding and may be entered as a judgment in any court of competent jurisdiction.

Class Action Waiver

Each party waives any right to bring or participate in a class action, collective action, private attorney general action, or class-wide arbitration with respect to any claim under these Terms, to the maximum extent permitted by applicable law.

Exceptions

Either party may seek injunctive or other equitable relief in a court of competent jurisdiction without first completing the informal resolution process. Claims for intellectual property infringement or misappropriation may also be brought in court.

Governing Law

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict of law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Entire Agreement

These Terms, together with the Privacy Policy and any applicable order form or SaaS Subscription Agreement, constitute the entire agreement between you and AssurAI concerning the platform and supersede all prior agreements and understandings.

Severability

If any provision of these Terms is held to be unenforceable by a court of competent jurisdiction, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions continue in full force and effect.

Waiver

AssurAI's failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorised representative of AssurAI.

Assignment

You may not assign your rights or obligations under these Terms without AssurAI's prior written consent. AssurAI may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets, with notice to you.

Changes to Terms

AssurAI may update these Terms from time to time. We will provide at least 14 days notice via email or prominent in-platform notification before material changes take effect. Your continued use of the platform after the effective date of updated Terms constitutes your acceptance. If you do not agree to updated Terms, you must stop using the platform before the effective date.

Force Majeure

Neither party shall be liable for delays or failures in performance resulting from circumstances beyond its reasonable control, including natural disasters, government actions, pandemics, cyberattacks on critical infrastructure, or internet outages.

Contact

Legal notices must be sent to: AssurAI Inc., Attn: Legal, San Jose, CA, USA · legal@getassurai.com
General support: support@getassurai.com