Terms of Service

These Terms of Service (the “Terms”) govern access to the Technolay website, applications, compliance workflows, TechnoDoc, connectors, AI-assisted features, and related services (the “Service”) provided by Technolay OÜ (“Technolay”, “we”, “us”).

By creating an account, accepting an invitation, signing an order form, or using the Service, you agree to these Terms. If you act for an organization, you confirm that you have authority to bind it. A separately signed order form, data processing agreement, or other written agreement prevails where it expressly conflicts with these Terms.

Technolay provides software for organizing compliance controls, evidence, controlled documents, remediation, connector data, and accountable review. Features and availability may depend on the subscribed plan, configured modules, and third-party systems.

• Technolay supports compliance work but does not provide legal advice, certification, an audit opinion, or a guarantee of compliance.
• AI-generated analysis and drafts are starting points that require qualified human review before reliance.
• Connector findings depend on the permissions, scope, currency, and accuracy of source systems.

The customer is responsible for approving users, assigning appropriate roles, maintaining accurate account information, and promptly removing access that is no longer authorized. Users must protect credentials and authentication factors and notify Technolay of suspected compromise.

You may not share personal accounts, circumvent access controls, or use another person's identity. Organization administrators control their workspace and may review activity performed within it.

The customer retains its rights in information, documents, evidence, configurations, and other content submitted to the Service (“Customer Data”). The customer grants Technolay the limited right to host, process, transmit, and display Customer Data as necessary to provide, secure, support, and improve the Service under the applicable agreement.

The customer is responsible for the legality, accuracy, and quality of Customer Data; required notices and permissions; connector authorization; and ensuring it does not submit data that it is prohibited from processing. Our Privacy Policy and applicable Data Processing Agreement describe personal-data handling.

You must use the Service lawfully and only for authorized business purposes.

• Do not attempt unauthorized access, probe vulnerabilities, bypass security or tenant isolation, or disrupt the Service.
• Do not upload malicious code, infringing material, or unlawful content.
• Do not reverse engineer or copy protected elements except where applicable law expressly permits it.
• Do not use automated access in a way that creates unreasonable load or conflicts with documented interfaces.
• Do not use AI-assisted features to make solely automated legal or similarly significant decisions about individuals without appropriate safeguards and human review.

Paid access is governed by the applicable order form or subscription terms. Fees, billing intervals, usage limits, renewal, and cancellation terms shown there form part of the agreement. Unless the order form says otherwise, fees are exclusive of applicable taxes and are non-refundable except where required by law or expressly agreed in writing.

If payment is overdue, Technolay may suspend paid features after reasonable notice, except where the amount is disputed in good faith.

Technolay and its licensors retain all rights in the Service, software, designs, documentation, and underlying technology. Subject to these Terms, Technolay grants the customer a limited, non-exclusive, non-transferable right to use the Service during the subscription for its internal business purposes.

If you provide feedback, Technolay may use it without restriction or obligation, provided it does not identify the customer or disclose Customer Data as feedback.

Each party must protect the other's non-public confidential information using reasonable care and use it only for the agreement. This does not cover information that is public without breach, already lawfully known, independently developed, or lawfully received from another source.

Technolay uses technical and organizational safeguards appropriate to the Service. The Service relies on sub-processors and integrations; their availability and the customer's separate relationship with third-party services may affect certain functions. Our Privacy Policy identifies current processing practices and sub-processors.

Either party may terminate as stated in an order form or if the other party materially breaches the agreement and does not cure the breach within a reasonable written cure period. Technolay may suspend access immediately where necessary to address a credible security risk, unlawful use, or material harm, and will limit the suspension where reasonably possible.

After termination, access ends. Subject to security, legal, and technical constraints, customers should export required data before closure. Retention and deletion follow the Privacy Policy, Data Processing Agreement, and applicable law. Clauses intended by their nature to survive termination remain effective.

Technolay will provide the Service with reasonable skill and care. Except for express commitments in a written agreement and to the maximum extent permitted by law, the Service is provided “as available”. Technolay does not warrant uninterrupted or error-free operation, that every connector will detect every issue, or that use of the Service will satisfy every legal, regulatory, audit, or certification requirement.

Nothing in these Terms excludes statutory rights that cannot lawfully be excluded.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, punitive, or consequential loss, or loss of profits, revenue, goodwill, or anticipated savings. Each party's aggregate liability arising from the Service is limited to fees paid or payable for the Service during the 12 months preceding the event giving rise to the claim.

These limitations do not apply where liability cannot legally be limited, or to fraud, wilful misconduct, breach of confidentiality, infringement of the other party's intellectual-property rights, or payment obligations.

These Terms are governed by Estonian law, excluding conflict-of-law rules. The courts of Harju County, Estonia have exclusive jurisdiction, unless mandatory law requires otherwise. Before filing a claim, the parties will try in good faith to resolve the dispute through written notice and discussion.

We may update these Terms to reflect Service, legal, or security changes. We will give reasonable notice of material changes where required. Continued use after the effective date constitutes acceptance where permitted by law; if you do not agree, you must stop using the Service and may exercise any termination right available under the agreement.

Questions about these Terms can be sent to the contact details below.