mvdm.io · legal

Terms of Service

Effective . A later edit replaces this page in place.

These Terms of Service (the “Terms”) are the contract between mvdm.io, a sole proprietorship registered in the Netherlands (KvK 86594737) (“mvdm.io”, “we”, “us”), and the organisation that uses the Compliance product (“Customer”, “you”). The product brand is mvdmio. These Terms apply to Compliance. Other mvdmio products are outside this contract unless we say otherwise in writing.

1. The service

We provide Compliance as a hosted software service that helps your organisation manage an information security management system (ISMS) and related compliance work. Features may change over time. We do not promise a service level agreement in these Terms.

2. Accounts and users

You register through our authentication service, create or join an account, and invite people who act for your organisation. You are responsible for activity under your account and for keeping sign-in credentials confidential. You must ensure that the people you invite are authorised to use Compliance for your organisation.

3. Trials, fees, and no refunds

A new Compliance account may start with a thirty-day trial so you can evaluate the product. Paid use is billed as described on the Compliance landing page and at checkout. There are no refunds after payment. The thirty-day trial is the evaluation period. Ending a subscription or letting a license expire does not create a right to a refund for time already paid.

4. Acceptable use

You may use Compliance only for lawful business purposes. You must not:

  • use the service for any unlawful purpose or to store or transmit unlawful content;
  • attempt to attack, probe, overload, or disrupt the service, its security, or other customers;
  • use the Compliance assistant to abuse the product, to generate harmful content, or to circumvent these Terms.

We may suspend or terminate access if you breach this section.

5. Your data and return

You retain rights in the content you put into Compliance. Personal data in your ISMS is processed under the Data Processing Agreement. Until a full product export exists, return of your Compliance data is available on request by email to michiel@mvdm.io during an active license or the closed-license retention window described below.

6. Closed-license retention

When a Compliance license ends, access to the ISMS closes. We keep that account’s Compliance data for 365 days from the license end date (ValidTo). If you obtain a new current Compliance license within those 365 days, the countdown stops and the ISMS remains. If you do not, we delete that account’s Compliance data and related blobs after 365 days. Your authentication account and users are not deleted by that wipe.

7. Privacy and processors

How we process personal data as controller is described in the Privacy Notice. Processing of personal data in your ISMS as processor is described in the Data Processing Agreement. Third parties we use are listed on the Subprocessor list.

8. Artificial intelligence features

Compliance includes an assistant and import and snapshot features that send relevant content to third-party AI providers so those features can run. Assistant content is sent to xAI. Import extraction and snapshot prose are sent to Anthropic. Those providers process that content as our subprocessors. These Terms do not promise that those providers never use content to train models.

9. Changes to these Terms

We may replace these Terms by publishing an updated page with a new effective date. Continued use of Compliance after a replacement is acceptance of the replacement. We do not send a separate notice for every edit.

10. Liability

To the fullest extent permitted by law, our total liability arising out of or relating to these Terms or Compliance is limited to the fees you paid us for Compliance in the twelve months before the claim. We are not liable for any indirect, incidental, special, consequential, or punitive loss, or for lost profits, revenue, goodwill, or data, whether or not we were advised of the possibility of such loss.

11. Governing law

These Terms are governed by the laws of the Netherlands. Courts in the Netherlands have jurisdiction, without prejudice to mandatory consumer or data-protection rights that cannot be waived.

12. Contact

Questions about these Terms: michiel@mvdm.io. Trader identification is on Company details.