1. Acceptance of Terms
By accessing or using Datagrasp’s website, platform, or related services (“Services”), you agree to comply with and be bound by these Terms & Conditions (“Terms”). If you do not agree, you may not use our Services. We may update these Terms periodically, and the updated version will take effect upon posting on our Website. We encourage users to review them regularly.
Use of a customer workspace, including a trial or provider-managed workspace, is also governed by the Master Subscription Agreement and applicable Order Form and data-protection terms. Those terms govern the subscribed Services where they conflict with these general website terms. Our Privacy Statement explains personal-information processing.
2. License & Authorized Use
We grant you a limited, non-exclusive, non-transferable, revocable license to use the Datagrasp Website and Services for lawful business purposes in accordance with these Terms. You may not:
- Copy, modify, distribute, decompile, or reverse engineer any part of the Services;
- Remove or alter proprietary notices, trademarks, or legal legends;
- Use the Services to develop or assist in developing a competing product or service;
- Share login credentials or provide access to unauthorized individuals;
- Use automated systems, bots, or scraping tools without our written consent.
3. User Responsibilities
You agree to use the Services in compliance with applicable laws and ethical standards. Specifically, you must not:
- Violate any local, state, national, or international law or regulation;
- Transmit unlawful, harmful, defamatory, obscene, or otherwise objectionable content;
- Impersonate another person, organization, or misrepresent your affiliation;
- Upload viruses, malware, or malicious code that may harm the Services or users;
- Attempt to gain unauthorized access to our systems or interfere with security features.
Connect cloud accounts, authorize monitoring, and upload discovery reports only for organizations, systems, domains, and data you are authorized to manage. Provider operators must have authority to act for each managed client. Maintain accurate role assignments and protect authentication credentials.
Inventory records, monitoring findings, and tabletop exercises support your team’s review and decisions. Information age is not a security rating; an investigation status does not prove a threat is eliminated. Tabletop events are simulations: do not take actions against live systems or real third parties merely because an exercise describes them.
4. Intellectual Property
All materials, software, documentation, designs, and trademarks available through the Services are owned or licensed by Datagrasp and protected under applicable intellectual property laws. Except for the limited license granted herein, no rights, title, or interest are transferred to you. You may use Datagrasp content solely for internal business purposes and in compliance with these Terms.
Customer Data remains the customer’s property. The limited rights needed to host, process, and display it, and the treatment of AI output, are governed by the Master Subscription Agreement. Framework content and assessment badges help communicate program progress; they do not themselves confer certification, legal compliance, or an independent audit opinion.
5. Confidentiality
Confidential information submitted through an authorized customer workspace is handled under the confidentiality and data-handling provisions of the Master Subscription Agreement and applicable data-protection terms. Do not submit confidential or regulated information through public contact forms or free-form AI prompts unless the submission is authorized by the applicable agreement and appropriate for that channel. Users remain responsible for protecting their credentials and managing account access.
6. Third-Party Services & Links
Our Services may contain links or integrations to third-party websites, APIs, or applications. Datagrasp provides these for convenience only and is not responsible for their accuracy, availability, or privacy practices. Third-party services are governed by their own terms and policies, and users access them at their own risk.
7. Compliance & Security Standards
Datagrasp operates in alignment with recognized security and compliance frameworks, including NIST Cybersecurity Framework (CSF) 2.0 and HIPAA where applicable. We maintain administrative, technical, and physical safeguards designed to protect customer data and ensure availability of our Services.
8. Disclaimers
The Services are provided “AS IS” and “AS AVAILABLE” without warranties of any kind, express or implied. Datagrasp disclaims all warranties, including merchantability, fitness for a particular purpose, non-infringement, and uninterrupted service. We do not guarantee that the Services will meet your requirements or be free from errors or security vulnerabilities.
AI-generated summaries, recommendations, exercise content, and other outputs can be incomplete or inaccurate and require human review. They are not legal, regulatory, audit, or compliance advice. You remain responsible for validating outputs, assessing evidence, and deciding what actions to take. Subscription fees, renewal, cancellation, usage allowances, and purchased capacity are governed by the applicable Order Form and Master Subscription Agreement.
9. Limitation of Liability
To the fullest extent permitted by law, Datagrasp, its affiliates, officers, employees, and agents shall not be liable for any indirect, incidental, consequential, special, or punitive damages (including loss of profits, revenue, data, or business opportunities) arising out of or in connection with the use or inability to use the Services, even if advised of such damages. In all cases, Datagrasp’s total cumulative liability shall not exceed the amount paid by you for the Services during the twelve (12) months preceding the claim.
Some jurisdictions do not allow certain limitations of liability; in such cases, these limitations apply only to the extent permitted by applicable law.
10. Indemnification
You agree to defend, indemnify, and hold harmless Datagrasp and its affiliates from any claims, damages, liabilities, and expenses (including reasonable legal fees) arising from your use of the Services, violation of these Terms, or infringement of any rights of another person or entity.
11. Termination
Datagrasp reserves the right to suspend or terminate your access to the Services at any time, with or without notice, for any conduct that violates these Terms, poses a security risk, or may harm other users or Datagrasp. Upon termination, all licenses and rights granted to you shall immediately cease. Sections regarding Intellectual Property, Limitation of Liability, Indemnification, and Governing Law will survive termination.
12. Governing Law & Dispute Resolution
These Terms are governed by and construed under the laws of the State of Florida, USA, without regard to conflict of law principles. Any dispute arising under or related to these Terms shall be resolved exclusively in the state or federal courts of Miami-Dade County, Florida.
Before initiating legal action, both parties agree to attempt in good faith to resolve disputes through informal negotiation or mediation.
13. Severability
If any provision of these Terms is found invalid or unenforceable, the remaining provisions shall remain in full force and effect.
14. Updates & Notices
We may modify these Terms from time to time to reflect changes in law, Services, or business practices. Material changes will be communicated via our Website or email. Continued use of the Services after such updates constitutes acceptance of the revised Terms.
15. Contact
For any questions, feedback, or concerns regarding these Terms, contact us at [email protected] or by mail at Datagrasp Legal, 8950 SW 74 CT, Suite 2201, Miami, FL 33156, USA.