Terms of service

The terms on which TODO_LEGAL_ENTITY supplies CARDO.

Effective TODO_EFFECTIVE_DATE

Draft, not for publication. The legal entity, registered address, contact addresses and effective date are still placeholders in content/site.ts. This document also needs review by a solicitor before it goes live.

1. This agreement

These terms govern use of CARDO. Where your organisation has signed a separate written agreement with us, that agreement takes precedence over these terms to the extent they conflict. CARDO is supplied to organisations; an individual using it does so under their employer’s account.

2. Accounts and access

Access is by invitation. Your organisation’s administrator issues, varies and revokes accounts, and assigns each account a role that determines what it can see and do. You are responsible for the confidentiality of your credentials and for activity under your account. Tell us promptly at TODO_SECURITY_EMAIL if you believe an account has been compromised.

3. Acceptable use

You must not:

  • Share credentials, or let anyone use an account that is not theirs.
  • Attempt to access another organisation’s data, or probe, scan or test the security of the service except under an authorised test we have agreed in writing.
  • Reverse engineer the service, or use it to build a competing product.
  • Upload malware, or content you have no right to upload.
  • Place unreasonable load on the service, including automated scraping or bulk export beyond your normal use.

We may suspend access without notice where we reasonably believe continued access presents a security risk. We will tell you why, and restore access as soon as the risk is resolved.

4. Your data

Your risk data remains yours. We claim no ownership of it, and we process it only to provide the service, as set out in the data processing agreement and the privacy policy. We do not use your data to train machine learning models, and we do not disclose it to anyone except the sub-processors listed at sub-processors or where the law compels us.

On termination you may export your data. We will make it available for 30 days and delete it thereafter, subject to the retention exceptions in the privacy policy.

5. AI features

Some features use a large language model to draft an assessment or a commentary. These produce suggestions for a qualified person to review. They are not advice, they can be wrong, and nothing they produce is applied to your register until a user with the appropriate role accepts it.

You remain responsible for every figure you publish or rely on. Do not treat model output as a substitute for professional judgement, and do not submit data to an AI feature that you are not permitted to disclose to the relevant sub-processor.

6. Availability and support

We aim to keep the service available at all times but do not guarantee uninterrupted access. Planned maintenance is notified in advance where practicable. Any committed availability target and support response time is set out in your written agreement; these terms alone do not create one.

7. Fees

Fees, billing frequency and notice periods are those in your written agreement or order form. Unless it says otherwise, fees exclude VAT and are payable within 30 days of invoice.

8. Intellectual property

We own CARDO, its software, models, documentation and branding, and nothing here transfers that to you. You get a non-exclusive, non-transferable right to use the service for your own internal business purposes for as long as your agreement runs. If you send us feedback, we may use it without obligation to you.

9. Warranties and disclaimers

We warrant that we will provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the service is provided as is: we do not warrant that it will be error free, or that any analysis it produces will predict an actual outcome.

CARDO is a modelling tool. Monte Carlo simulation produces a distribution of possible outcomes from the inputs you supply. The quality of the output depends entirely on the quality of those inputs, and no result constitutes financial, engineering or professional advice.

10. Liability

Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be limited.

Subject to that, neither party is liable for indirect or consequential loss, loss of profit, revenue, business, anticipated savings, or loss of or damage to data beyond our obligation to maintain backups. Each party’s total liability in any twelve month period is limited to the fees paid or payable by you in that period.

11. Term and termination

The agreement runs for the term in your order form and renews as that document provides. Either party may terminate for material breach that is not remedied within 30 days of written notice, or immediately if the other becomes insolvent. On termination your right to use the service ends and clause 4 governs your data.

12. General

We may update these terms; material changes will be notified to account holders in advance and the effective date above will change. Neither party may assign without the other’s consent, except to a group company or on a sale of the business. If a clause is unenforceable the rest survives. There are no third-party beneficiaries.

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.

Questions: TODO_CONTACT_EMAIL.