Terms & Conditions

1. The agreement

These terms are a contract between GoalPath B.V., The Hague, the Netherlands ("ZeroRisk", "we") and the organization that creates an account or subscribes ("you"). By using the platform, you accept them on behalf of your organization. If you have a signed agreement with us, that agreement wins where the two differ. Using only the website? Then just sections 10–14 and our Privacy Policy concern you.

2. The service

ZeroRisk is a compliance platform: it prepares assessments, drafts controls and policies, monitors vendors, and runs access reviews and attestations — with review and sign-off by people you designate. Drafts are inputs to your decisions, not decisions. ZeroRisk does not provide legal advice, and using the platform does not by itself guarantee certification, audit outcomes, or regulatory compliance — those depend on what your organization actually does.

3. Accounts and acceptable use

• Keep credentials confidential; you are responsible for activity under your accounts.
• Use the service only for your own compliance program — not to resell it, probe or disrupt it, or build a competing product from it.
• Upload only content you have the right to process. Staff directories, HR exports, access records and vendor data stay under your control; you are the controller of that data and warrant you may lawfully process it in the platform (see the Privacy Policy and our data processing agreement).

4. Subscriptions and billing

• Plans are those shown on the pricing page: Starter, Growth, Business, and Enterprise by agreement. Each plan sets the frameworks in scope and the vendors monitored; extra vendor packs are available per month.
• Billing runs through Chargebee, monthly or annually. Annual billing carries the discount shown at checkout. Fees are exclusive of VAT.
• Subscriptions renew automatically for the same term until cancelled. Cancel anytime, effective at the end of the current billing period; fees already paid are not refunded except where the law says otherwise.
• We can change prices with at least 30 days' notice; changes apply from your next renewal, never mid-term.
• Upgrades take effect immediately with a prorated charge. Downgrades take effect at renewal.

5. The free gap report

The gap report is free, requires no payment details, and creates no subscription. It is an assessment based on the information you provide, offered as-is.

6. Your content

You keep all rights to what you upload. You grant us the license needed to host and process it to provide the service — nothing more. We do not use your content to market to your employees or vendors, and we do not train models on your confidential content without your written agreement. On termination you get an export window (30 days), after which we delete your content per the Privacy Policy.

7. Our intellectual property

The platform, its design, its frameworks mappings and its documentation belong to ZeroRisk. Your subscription buys use, not ownership. Feedback you give us can be used to improve the product without obligation.

8. Confidentiality

Each side protects the other’s non-public information with at least the care it applies to its own, and uses it only to perform under these terms. This survives termination for three years; trade secrets, for as long as they stay secret.

9. Support and availability

Every plan includes onboarding and support; response targets scale by tier as described on the pricing page. We aim for high availability but the service is provided without an uptime guarantee unless your agreement includes one. Planned maintenance is announced in advance.

10. Disclaimers

The service is provided "as is" to the fullest extent the law allows. We do not warrant that it is error-free or uninterrupted, that drafts are complete or correct without your review, or that any auditor or regulator will accept a particular outcome.

11. Liability

Neither side is liable for indirect or consequential damages, lost profits or lost data. Our total liability under these terms is capped at the fees you paid us in the 12 months before the claim. Nothing limits liability for willful misconduct, gross negligence, or anything that cannot be limited under Dutch law.

12. Suspension and termination

We can suspend or terminate access for material breach that is not fixed within 14 days of notice, or immediately for abuse, non-payment after reminder, or a legal requirement. You can terminate at any time by cancelling your subscription. Sections 6–8, 10–11 and 14 survive.

13. Changes to these terms

We may update these terms. Material changes are announced at least 30 days ahead by email or in the platform; continuing to use the service after the effective date is acceptance. The date at the top always tells you the current version.

14. Governing law

These terms are governed by the laws of the Netherlands. Disputes go to the competent court in The Hague, unless mandatory law gives you another venue.

15. Contact

GoalPath B.V., Prinses Margrietplantsoen 33, 2595 AM The Hague, The Netherlands · KvK 65820061 · service@zerorisk.com