Terms of Service

1. Acceptance of Terms

By accessing or using the Arduredu compliance monitoring platform at arduredu.com or app.arduredu.com ("Platform"), you agree to be bound by these Terms of Service ("Terms"). If you are using Arduredu on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

If you do not agree to these Terms, you must not use the Platform. These Terms constitute a legally binding agreement between you ("Customer", "you") and Arduredu ("we", "us", "our").

2. Description of Services

Arduredu provides a real-time compliance monitoring platform that:

• Connects to your cloud and on-premise systems via read-only APIs
• Scans your environment against compliance frameworks including GDPR, NIS2, NCA, SDAIA PDPL, ISO 27001, DORA, SAMA, UAE-IA and SOC 2
• Provides live compliance scores, control status, and remediation guidance
• Enables evidence upload, DPO/CISO approval workflows, and auditor portal access
• Generates PDF audit reports and scheduled executive compliance reports

3. Accounts and Registration

3.1 Account Creation

To use Arduredu you must register for an account and provide accurate, complete information. Each account is for a single organisation. You are responsible for all activity under your account.

3.2 Account Approval

New accounts require approval by Arduredu before access is granted. We reserve the right to reject registrations at our sole discretion.

3.3 Account Security

• You are responsible for maintaining the security of your login credentials
• You must notify us immediately of any unauthorised access to your account
• You must not share your account credentials with persons outside your organisation
• We recommend enabling multi-factor authentication on your account

3.4 Organisational Accounts

Each subscription covers one organisation. Compliance data is strictly isolated between organisations — no user can access another organisation's data.

4. Subscriptions and Billing

4.1 Subscription Plans

4.2 Payment Terms

• Subscriptions are billed monthly or annually in advance
• Annual subscriptions receive a 2-month discount (10 months price for 12 months service)
• All prices are exclusive of applicable VAT
• Payment is due within 14 days of invoice date

4.3 Free Trial

We may offer a 30-day free trial at our discretion. No credit card is required for the trial. At the end of the trial period, continued use requires a paid subscription.

4.4 Refunds

Monthly subscriptions are non-refundable. Annual subscriptions may receive a pro-rata refund for unused months upon written cancellation request within 30 days of payment. No refunds are provided after 30 days.

4.5 Late Payment

Accounts with outstanding invoices older than 30 days may be suspended. Accounts suspended for non-payment will have their data retained for 60 days before deletion.

5. Acceptable Use

You agree to use Arduredu only for lawful purposes and in accordance with these Terms. You must not:

• Use the Platform to monitor systems you do not own or have permission to scan
• Attempt to gain unauthorised access to other organisations' data
• Upload malicious files, malware, or harmful content as evidence
• Use the Platform to circumvent any legal or regulatory obligation
• Reverse engineer, decompile, or attempt to extract the source code of the Platform
• Resell or sublicense access to the Platform without written permission
• Use automated scripts to access the Platform in a way that impairs its operation
• Provide false information during registration or while using the Platform

6. Your Data and Privacy

6.1 Data Ownership

You retain full ownership of all data you input into Arduredu, including your compliance scan results, evidence submissions, and organisation information. We do not claim any ownership rights over your data.

6.2 Data Processing

We process your data as a Data Processor on your behalf for the purpose of providing the compliance monitoring services. Our processing activities are described in our Privacy Policy and Data Processing Agreement.

6.3 Evidence Documents

Arduredu is designed so that your policy documents and evidence files never leave your browser. Only cryptographic hashes and metadata are transmitted to our servers. This is by design to protect your confidential compliance documentation.

6.4 Data Export

You may export your compliance data at any time in PDF format. Upon account termination, we will provide a data export upon written request within 30 days.

6.5 Data Deletion

Upon termination of your subscription, your data will be retained for 12 months before permanent deletion, unless you request earlier deletion.

7. Intellectual Property

7.1 Arduredu IP

The Arduredu platform, including its software, design, algorithms, compliance frameworks, remediation content, and all related intellectual property, is owned exclusively by Arduredu. These Terms do not transfer any ownership rights to you.

7.2 Licence to Use

We grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform during your subscription for your internal business purposes only.

7.3 Feedback

If you provide feedback, suggestions, or ideas about the Platform, you grant us a perpetual, royalty-free licence to use that feedback to improve our services.

8. Limitation of Liability

8.1 No Warranty

The Platform is provided "as is" without warranty of any kind. We do not warrant that the Platform will be error-free, uninterrupted, or meet your specific requirements.

8.2 Limitation of Liability

To the maximum extent permitted by applicable law, Arduredu's total liability to you for any claims arising under these Terms shall not exceed the total fees paid by you in the 12 months preceding the claim.

8.3 Exclusions

We shall not be liable for:

• Indirect, incidental, special, or consequential damages
• Loss of profits, revenue, or business
• Regulatory fines or penalties you receive even if using Arduredu
• Data loss caused by your failure to maintain backups
• Third-party service failures beyond our reasonable control

9. Service Availability

We target 99.5% monthly uptime for the Platform, excluding scheduled maintenance. Scheduled maintenance will be announced at least 24 hours in advance where possible.

We are not liable for downtime caused by factors outside our reasonable control including internet outages, DDoS attacks, cloud provider failures, or force majeure events.

10. Termination

10.1 Termination by You

You may cancel your subscription at any time by providing 30 days written notice to admin@arduredu.com. Access continues until the end of the current billing period.

10.2 Termination by Us

We may terminate or suspend your account immediately for:

• Material breach of these Terms
• Non-payment of fees after 30 days
• Fraudulent or illegal use of the Platform
• Activity that poses a security risk to other customers

10.3 Effect of Termination

Upon termination, your access to the Platform ceases immediately. Your data is retained for 12 months and then permanently deleted unless you request earlier deletion or export.

11. Compliance Disclaimer

Arduredu does not guarantee that use of the Platform will prevent regulatory investigations, fines, or enforcement actions by any authority including but not limited to: European Data Protection Authorities, Saudi NCA, SDAIA, UAE Cybersecurity Council, SAMA, or any other national regulator. Regulatory requirements change frequently and our framework content may not reflect the most recent regulatory guidance at all times.

VAT and tax obligations vary by jurisdiction. Saudi Arabian customers may be subject to 15% VAT. EU customers may be subject to local VAT rates. Prices shown exclude applicable taxes unless stated otherwise.

12. Governing Law and Jurisdiction

Arduredu operates globally from Sweden with a primary market in Saudi Arabia and GCC. The following governing law provisions apply based on your location:

12.1 EU Customer Rights

If you are based in the European Union, mandatory consumer protection laws of your country of residence apply in addition to these Terms. You have the right to bring proceedings in the courts of your country of residence. Nothing in these Terms limits your statutory rights as an EU consumer.

12.2 Saudi Arabia

For Saudi Arabian customers, these Terms comply with applicable Saudi laws including the E-Commerce Law, Consumer Protection Law, and Communications and Information Technology Commission (CITC) regulations.

12.3 UAE

For UAE customers, these Terms comply with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection and applicable UAE commercial laws.

12.4 Dispute Resolution

Before initiating formal proceedings, both parties agree to attempt resolution through good faith negotiation for at least 30 days. For disputes under SAR 50,000, we offer mediation as an alternative to court proceedings.

13. Changes to Terms

We may update these Terms from time to time. We will notify registered users of material changes by email at least 30 days before changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated Terms.

The current version and effective date are shown at the top of this page. Previous versions are available on request.

14. Contact