Legal

Terms & Conditions

Last updated: 6/12/2026

1. Who you are contracting with

The ISO-STANDARD.app platform (the "Service") is provided by ISO-Standard.app("ISO-Standard.app", "we", "us"), trading as ISO-STANDARD.app. By accessing or using the Service you ("you", the "Customer") agree to be bound by these Terms & Conditions ("Terms"). If you are entering into these Terms on behalf of an organisation, you warrant that you have authority to bind that organisation. If you are an individual, you confirm you are of legal age to form a binding contract.

2. The Service

ISO-STANDARD.app is a multi-tenant SaaS application for managing information security risks, controls, assets and audit evidence aligned with ISO/IEC 27001. The features included with your subscription are those described on the pricing page for your selected plan at the time of purchase.

3. Acceptance and account

You accept these Terms by creating an account or by continuing to use the Service. You must provide accurate registration information and keep it current. You are responsible for all activity that occurs under your account credentials and must keep them confidential. Enable multi-factor authentication where available and notify us promptly of any suspected compromise.

4. Acceptable use

You must not misuse the Service. In particular you must not: (a) use it for any unlawful, fraudulent or deceptive purpose; (b) send spam or unsolicited communications through it; (c) upload, store or transmit content that infringes intellectual property, is defamatory, or contains malware; (d) interfere with the security or integrity of the Service, including probing, scanning, penetration testing without consent, scraping at a rate that materially burdens the platform, or circumventing authentication, rate limits, or tenant isolation; or (e) reverse engineer, decompile or attempt to extract source code from the runtime. The full Acceptable Use Policy is available on our Trust page.

5. Intellectual property

We retain all right, title and interest in and to the Service, including the underlying software, documentation, design, branding and any improvements or derivative works, excluding Customer content. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service for your internal business purposes during your subscription term. You may not resell, sublicense or redistribute the Service.

6. Customer content

You retain ownership of the data you upload to the Service ("Customer Content"). You grant us a limited licence to host, process, transmit and display Customer Content solely as necessary to provide and improve the Service and to comply with law. You are responsible for ensuring you have the rights and lawful basis to submit Customer Content to the Service.

7. Payment, subscription and refunds

Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Payment terms, billing frequency, taxes, automatic renewal, cancellation and refund mechanics are governed by Paddle's Buyer Terms. Our own refund policy is available here. Subscriptions renew automatically at the end of each billing period until cancelled.

8. Service availability

We work hard to keep the Service running, but we do not warrant that it will be uninterrupted, error-free, or that defects will be corrected immediately. Scheduled maintenance, upstream provider outages and force majeure events may temporarily affect availability.

9. Warranty disclaimer

To the maximum extent permitted by law, the Service is provided "as is" and "as available". We disclaim all implied warranties including merchantability, fitness for a particular purpose, and non-infringement. You are responsible for verifying the suitability of the Service for your regulatory or certification objectives.

10. Limitation of liability

To the maximum extent permitted by law, our aggregate liability arising out of or relating to the Service in any 12-month period shall not exceed the fees you paid us for the Service during the 12 months preceding the event giving rise to the claim. We will not be liable for any indirect, special, incidental, consequential or punitive damages, or for loss of profits, revenue, data, goodwill or anticipated savings. Nothing in these Terms excludes liability for fraud, gross negligence, death or personal injury where such exclusion is prohibited by law.

11. Indemnity

You will indemnify and hold us harmless against claims, damages and reasonable costs arising from (a) Customer Content, (b) your unlawful use of the Service, or (c) your material breach of these Terms.

12. Suspension and termination

We may suspend or terminate your access where: (a) you materially breach these Terms; (b) payment is overdue; (c) continued use poses a security, legal or operational risk; or (d) you repeatedly or seriously violate the Acceptable Use Policy. Where suspension is preventative rather than punitive we will work with you to restore service. On termination, you may export Customer Content for 30 days, after which it will be deleted or anonymised in accordance with our retention practices.

13. Changes to the Terms

We may update these Terms from time to time. Material changes will be announced via in-product notice or by email to workspace owners with reasonable advance notice. Continued use of the Service after the effective date constitutes acceptance of the updated Terms.

14. Governing law

These Terms are governed by the laws of England and Wales. The courts of England and Wales have exclusive jurisdiction over any dispute arising from these Terms, except that we may seek injunctive relief in any competent court to protect our intellectual property.

15. Assignment and miscellaneous

You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition or sale of assets. If any provision is held unenforceable, the remaining provisions remain in effect. Neither party is liable for failure to perform due to events beyond its reasonable control (force majeure).

16. Contact

Questions about these Terms: support@iso-standard.app. Questions about an order, invoice or refund are handled by Paddle at paddle.net.