SmarterGRC

Terms of Service

Last updated 14 September 2026

1. The agreement

These terms are between SmarterGRC (“we”) and the company that registers an organization (“you”). The person who registers confirms they may accept these terms for the company. By registering or using the service you agree to them.

2. The service

SmarterGRC is a governance, security, risk and compliance platform: it connects to systems you authorise, collects information from them, and helps you run reviews, policies, vendor and risk programmes. You decide which systems to connect and which people to invite. Features may change; we will not remove a paid plan’s core modules during a paid term.

3. Plans, seats and payment

  • Plans are priced by workforce size. Each plan has a cap on workforce members you may track. If you exceed it, you move to the next plan at its price from the next billing period.
  • Fees are charged in advance for each billing period (monthly or yearly) to the payment method on file. Yearly plans are priced at ten months.
  • Founding-programme discounts apply for twelve months from registration and are shown on your invoice.
  • Fees exclude taxes; where we must collect them, they are added to the invoice.
  • You may cancel at any time from Settings; the service stays available until the end of the paid period. Fees already paid are not refunded except where the law requires it.

4. Your data

You own the data you and your connected systems put into SmarterGRC. We process it only to provide the service, as described in the Privacy Policy. Each organization’s data is separated from every other organization’s at the database level. You can export your data at any time, and we delete it within 30 days after your organization is closed, except for records we must keep by law.

5. Your responsibilities

  • Keep sign-in credentials confidential and remove people who leave. You are responsible for actions taken under your organization’s accounts.
  • Only connect systems you are authorised to connect, with the least access needed.
  • Do not use the service to break the law, to probe or disrupt it, or to process data you are not permitted to process.
  • Content generated with AI assistance is a draft for your review; you remain responsible for the policies and decisions you publish.

6. Availability, security and support

We aim for continuous availability and maintain administrative, technical and physical safeguards appropriate to the service, including encryption in transit and at rest, access logging and independent review. Planned maintenance is announced in advance. Support is available at support@smartergrc.com.

7. Suspension and termination

We may suspend an organization for non-payment after notice, for a serious breach of these terms, or where needed to protect the service or other customers. Either party may end the agreement at the end of the current paid period. Sections 4, 8 and 9 survive termination.

8. Warranties and liability

The service is provided as described; we do not promise that it will meet every requirement of an audit or regulation, which depends on how you use it. To the extent the law allows, neither party is liable for indirect or consequential loss, and our total liability for any claim is limited to the fees you paid in the twelve months before the claim. Nothing limits liability for fraud, wilful misconduct, or a party’s breach of confidentiality or data-protection obligations.

9. General

These terms are governed by the laws of the State of Texas, United States, and disputes are resolved in its courts. We may update these terms; material changes are announced at least 30 days before they take effect, and continuing to use the service after that means you accept them. If part of these terms is unenforceable, the rest still applies.

Questions about these terms: legal@smartergrc.com.