Terms of service for Suregrid

Acceptance of Terms

By accessing or using the Suregrid platform, including SureComply, SureCloud, SureHunt, and SurePilot (collectively, the "Services"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Services on behalf of an organization, you represent that you have the authority to bind that organization to these Terms. If you do not agree, do not access or use the Services.

Description of Services

Suregrid is a unified security platform that provides: (a) SureComply, a compliance automation engine for evidence collection, policy management, and audit workflows across multiple regulatory frameworks; (b) SureCloud, a cloud security posture management tool that scans and monitors AWS, Azure, and GCP environments for misconfigurations and policy violations; (c) SureHunt, an AI-powered penetration testing service that deploys autonomous agents to identify vulnerabilities and produce proof-of-concept evidence; and (d) SurePilot, an AI co-pilot that assists with questionnaire completion, risk prioritization, and remediation guidance across all pillars.

Account Registration and Security

You must create an account to use the Services. You agree to provide accurate, current, and complete information during registration and to keep your account credentials confidential. You are responsible for all activity that occurs under your account. You must notify us immediately at security@surepass.io if you suspect unauthorized access to your account. We reserve the right to suspend accounts that violate these Terms or pose a security risk.

Subscription and Payment

Access to the Services is provided on a subscription basis as described in your Order Form or pricing plan. Fees are billed in advance on a monthly or annual basis as specified at the time of purchase. All fees are non-refundable except as expressly stated in your Order Form or required by applicable law. We may adjust pricing upon 30 days written notice before the start of a renewal term. Failure to pay fees may result in suspension or termination of your access.

Acceptable Use

You agree to use the Services only for lawful purposes and in compliance with all applicable laws and regulations. You shall not: (a) use the Services to conduct unauthorized security testing against systems you do not own or have explicit written permission to test; (b) attempt to reverse-engineer, decompile, or extract source code from the platform; (c) use the Services to store or transmit malicious code, except as part of authorized penetration testing via SureHunt against your own systems; (d) share account credentials or allow unauthorized third parties to access the Services; (e) use the Services in a manner that could damage, disable, or impair the platform or interfere with other users.

Penetration Testing Authorization

SureHunt conducts AI-powered penetration tests exclusively against targets you explicitly authorize. Before initiating any pentest, you must confirm that: (a) you own or have written authorization to test the target systems; (b) the testing scope and methods are permitted under your agreements with any hosting providers, cloud platforms, or third parties; (c) you have notified relevant stakeholders as required by your internal policies. SurePass Technologies is not responsible for any consequences arising from unauthorized or improperly scoped penetration tests.

Data Ownership and Processing

You retain ownership of all data you submit to or generate through the Services, including compliance evidence, cloud scan results, pentest findings, and organizational data ("Customer Data"). We process Customer Data solely to provide the Services and as described in our Privacy Policy. We do not use Customer Data to train machine learning models that serve other customers. Upon termination, you may export your Customer Data within 30 days, after which we will delete it in accordance with our data retention policies.

Intellectual Property

The Services, including all software, algorithms, interfaces, documentation, and branding, are the intellectual property of SurePass Technologies Private Limited and are protected by applicable copyright, trademark, and trade secret laws. These Terms do not grant you any ownership rights in the Services. You are granted a limited, non-exclusive, non-transferable license to use the Services during your subscription term for your internal business purposes.

Confidentiality

Each party agrees to protect the other party's Confidential Information with the same degree of care it uses for its own confidential information, but no less than reasonable care. Confidential Information includes non-public technical, business, and financial information disclosed in connection with the Services. Confidentiality obligations do not apply to information that: (a) is or becomes publicly available without breach; (b) was known to the receiving party prior to disclosure; (c) is independently developed without reference to the disclosing party's information; or (d) is required to be disclosed by law.

Service Level and Availability

We target 99.9% uptime for the Suregrid platform, excluding scheduled maintenance windows. Specific service level agreements (SLAs) and credits for downtime may be included in your Enterprise Agreement. We will provide reasonable advance notice of planned maintenance. The Services are provided on an "as-is" and "as-available" basis for customers without an Enterprise Agreement.

Warranties and Disclaimers

SurePass Technologies warrants that the Services will perform materially in accordance with the applicable documentation during your subscription term. Except for this limited warranty, the Services are provided "as is" without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Services will detect all security vulnerabilities, that compliance assessments will guarantee regulatory compliance, or that penetration tests will identify every exploitable weakness.

Limitation of Liability

To the maximum extent permitted by applicable law, SurePass Technologies' total aggregate liability under these Terms shall not exceed the fees paid by you during the 12 months preceding the claim. In no event shall either party be liable for indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, or business interruption, regardless of the theory of liability. These limitations apply even if a remedy fails of its essential purpose.

Indemnification

You agree to indemnify and hold harmless SurePass Technologies, its officers, directors, employees, and agents from any claims, damages, or expenses arising from: (a) your use of the Services in violation of these Terms; (b) unauthorized penetration testing conducted through SureHunt; (c) your violation of applicable laws; or (d) any third-party claims related to Customer Data you process through the Services.

Term and Termination

These Terms remain in effect for the duration of your subscription. Either party may terminate for cause if the other party materially breaches these Terms and fails to cure within 30 days of written notice. We may immediately suspend access if we reasonably believe your use poses a security risk or violates applicable law. Upon termination, your right to access the Services ceases immediately. Sections relating to data ownership, confidentiality, limitation of liability, and indemnification survive termination.

Modifications to Terms

We may update these Terms from time to time. We will notify you of material changes via email or through a notice on the platform at least 30 days before the changes take effect. Continued use of the Services after the effective date constitutes acceptance of the modified Terms. If you do not agree to the modified Terms, you must discontinue use of the Services before the effective date.

Governing Law and Disputes

These Terms are governed by the laws of India, without regard to conflict-of-law principles. Any disputes arising from these Terms or the Services shall be resolved through binding arbitration in accordance with the rules of the Indian Arbitration and Conciliation Act, 1996. The seat of arbitration shall be New Delhi, India. Nothing in this section prevents either party from seeking injunctive relief in a court of competent jurisdiction.

General Provisions

These Terms constitute the entire agreement between you and SurePass Technologies regarding the Services, superseding any prior agreements. If any provision of these Terms is found to be unenforceable, the remaining provisions will continue in full force and effect. Our failure to enforce any right under these Terms does not constitute a waiver. You may not assign these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of our assets.

Contact

For questions about these Terms, contact: SurePass Technologies Private Limited, Legal Team, email: legal@surepass.io. For security-related concerns, email: security@surepass.io.