Terms of Service

1. Scope of the Service

Policy Confirm is a business-to-business software-as-a-service platform that enables organizations to distribute internal documents and record acknowledgements in a structured and auditable manner.

The Service is provided solely as a technical and administrative tool. Stack Seven does not review, validate, interpret, approve, verify, or guarantee the content, accuracy, completeness, legality, enforceability, or regulatory sufficiency of any documents, policies, acknowledgements, records, logs, reports, proofs, or outputs processed through the Service.

The Customer retains full responsibility for determining how the Service is used and whether its use satisfies any legal, regulatory, contractual, employment, governance, audit, or compliance requirements.

2. Permitted use and Customer responsibilities

The Service may only be used for lawful business purposes in accordance with these Terms and applicable law.

The Customer is solely responsible for all activities conducted through the Service, including all actions taken by its administrators, employees, contractors, invitees, and other authorized users. This responsibility includes:

• Determining which individuals are invited to access the Service
• Managing access rights, permissions, and authentication
• Ensuring that all documents and policies distributed through the Service are lawful, accurate, up to date, and appropriate for their intended purpose
• Determining the legal basis for processing personal data
• Complying with all applicable laws, regulations, collective agreements, and contractual obligations

Stack Seven has no responsibility for the Customer's internal governance, compliance framework, employment practices, or regulatory obligations, and assumes no liability for any consequences arising from the Customer's use of the Service.

3. Acceptable use

The Customer shall not, and shall ensure that its users do not:

• Use the Service in violation of any applicable law, regulation, or third-party right
• Upload, transmit, or distribute any content that is unlawful, defamatory, infringing, harassing, or that contains malware, viruses, or other harmful code
• Use the Service to send unsolicited communications, spam, or phishing
• Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service, except to the extent permitted by mandatory law
• Resell, sublicense, lease, or otherwise commercially exploit the Service without Stack Seven's prior written consent
• Interfere with or disrupt the integrity, security, or performance of the Service
• Bypass or circumvent any access controls, rate limits, or usage restrictions
• Use the Service to develop a competing product
• Use automated means (bots, scrapers) to access the Service except for legitimate integrations using documented APIs

4. Customer Content

The Customer retains all rights in content, documents, policies, and other materials uploaded to the Service ("Customer Content"). The Customer grants Stack Seven a limited, non-exclusive, worldwide license to host, process, transmit, and display Customer Content solely for the purpose of providing the Service.

The Customer represents and warrants that:

• It has all necessary rights, licenses, and permissions to upload and distribute Customer Content through the Service
• Customer Content does not infringe any third-party intellectual property, privacy, or other rights
• Customer Content does not contain unlawful, defamatory, or otherwise inappropriate material
• It has obtained all consents and provided all notices required for the processing of personal data contained in Customer Content

Stack Seven does not review, validate, or monitor Customer Content and disclaims all responsibility for it.

5. Account security and access control

The Customer is responsible for maintaining the confidentiality and security of all access credentials and for preventing unauthorized access to the Service.

Stack Seven shall not be liable for any loss, damage, or unauthorized activity resulting from compromised credentials, improper access management, or failure by the Customer or its users to comply with reasonable security practices.

6. No professional or legal advice

The Service does not provide legal, regulatory, compliance, human resources, audit, or other professional advice.

Any confirmations, logs, reports, proofs, exports, or other outputs generated by the Service are provided for documentation and administrative purposes only and do not constitute legal advice, legal proof, regulatory approval, or a guarantee of compliance with any law, regulation, standard, certification, or audit requirement.

The Customer remains solely responsible for obtaining independent professional advice where required.

7. Subscriptions, fees, and payment

Access to the Service may require an active paid subscription. Fees, billing cycles, renewal terms, and payment conditions are as specified at the time of purchase or in an applicable order form.

All fees are non-refundable except where expressly required by applicable law. Failure to pay applicable fees may result in suspension or termination of access to the Service.

Stack Seven may adjust pricing for future subscription periods upon at least thirty (30) days' notice. Such changes do not apply retroactively to an active prepaid term.

8. Availability, maintenance, and changes

The Service is provided on an "as is" and "as available" basis. Stack Seven aims to provide a reliable service but does not warrant that the Service will be uninterrupted, error-free, secure, or free from defects, nor that it will meet the Customer's specific requirements or expectations.

Stack Seven may perform maintenance, updates, modifications, or changes to the Service at any time. Where reasonably practicable, scheduled maintenance will be communicated in advance. Stack Seven may also suspend or discontinue parts of the Service, provided that such actions do not materially breach an active paid subscription.

Stack Seven shall have no liability for downtime, delays, data loss, or service interruptions, except to the extent expressly required by applicable law.

9. Beta and preview features

Stack Seven may from time to time make beta, preview, experimental, or early-access features available to the Customer ("Beta Services"). Beta Services are provided "as is" without any warranty whatsoever and may be modified, suspended, or discontinued at any time without notice. Stack Seven's liability for Beta Services is excluded to the maximum extent permitted by applicable law.

The use of Beta Services is voluntary, and the Customer acknowledges that Beta Services may contain bugs, errors, or other issues and may not be suitable for production use.

10. Data processing and privacy

When the Customer uses the Service to process personal data, the Customer acts as data controller and Stack Seven acts as data processor. The parties' obligations in respect of such processing are governed by the Data Processing Agreement available at policyconfirm.com/legal/dpa, which forms part of these Terms.

Stack Seven's processing of personal data is further described in the Privacy Policy at policyconfirm.com/privacy-policy. A list of sub-processors engaged by Stack Seven is published at policyconfirm.com/legal/subprocessors.

The Customer acknowledges that Stack Seven does not control the content uploaded to the Service and is not responsible for the legality or appropriateness of such content.

11. Intellectual property

All intellectual property rights in and to the Service, including its software, architecture, design, interfaces, workflows, and underlying systems, are and shall remain the exclusive property of Stack Seven or its licensors.

Subject to compliance with these Terms, Stack Seven grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Service during the applicable subscription term.

The Customer retains ownership of Customer Content as set out in Section 4.

12. Feedback

If the Customer or its users provide Stack Seven with any suggestions, ideas, improvements, or other feedback regarding the Service ("Feedback"), the Customer grants Stack Seven a perpetual, irrevocable, worldwide, royalty-free, sublicensable license to use, modify, and incorporate such Feedback into the Service or any other Stack Seven product or service, without any obligation or attribution to the Customer.

13. Third-party services

The Service relies on third-party sub-processors for hosting, payment processing, email delivery, and related services. The current list of sub-processors is published at policyconfirm.com/legal/subprocessors.

Stack Seven does not control and is not responsible for any third-party service that the Customer chooses to integrate with the Service independently. Use of any such third-party services is subject to the applicable third-party terms.

14. Suspension and termination

Suspension by Stack Seven. Stack Seven may suspend access to the Service, in whole or in part:

• Immediately, without prior notice, if the Customer's use of the Service poses a security risk, exposes Stack Seven to legal or regulatory risk, or is reasonably likely to cause harm to Stack Seven or third parties
• For other material breaches of these Terms, after providing the Customer with notice and a reasonable opportunity (at least seven (7) days) to cure the breach

Termination by Stack Seven. Stack Seven may terminate these Terms and access to the Service if:

• The Customer materially breaches these Terms and fails to cure the breach within thirty (30) days of receiving written notice
• The Customer becomes insolvent, files for bankruptcy, or ceases operations
• Continued provision of the Service would violate applicable law

Termination by the Customer. The Customer may terminate its subscription at any time in accordance with the cancellation terms applicable to its subscription plan. Termination does not entitle the Customer to a refund of fees already paid for the current subscription term, except where expressly required by applicable law.

Effect of termination. Upon termination, access to the Service will be disabled. The Customer may export its data within thirty (30) days of termination using the export functionality provided in the Service. After this period, data is deleted in accordance with the Privacy Policy and the Data Processing Agreement.

15. Disclaimer of warranties

To the maximum extent permitted by applicable law, Stack Seven disclaims all warranties, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy, reliability, non-infringement, and availability.

The Service is provided without any warranty that it will achieve any specific legal, regulatory, or business outcome.

16. Limitation of liability

To the maximum extent permitted by applicable law, Stack Seven shall not be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages, including loss of profits, revenue, business opportunities, goodwill, data, or anticipated savings, regardless of the legal theory under which such damages are claimed and even if Stack Seven has been advised of the possibility of such damages.

Stack Seven shall not be liable for any audits, inspections, regulatory actions, fines, penalties, or third-party claims arising out of or in connection with the Customer's use of the Service.

Stack Seven's total aggregate liability arising out of or relating to the Service or these Terms shall be strictly limited to the fees actually paid by the Customer to Stack Seven during the twelve (12) months preceding the event giving rise to the claim. If no fees have been paid, Stack Seven's total liability shall be limited to EUR 100.

Nothing in these Terms limits liability to the extent such limitation is prohibited by applicable law.

17. Indemnification

By the Customer. The Customer shall indemnify, defend, and hold harmless Stack Seven, its directors, officers, employees, and affiliates from and against any claims, losses, liabilities, damages, costs, and expenses, including reasonable legal fees, arising out of or relating to:

• The Customer's use of the Service in violation of these Terms or applicable law
• Customer Content, including any claim that Customer Content infringes third-party rights or violates applicable law
• Any breach by the Customer of its obligations under these Terms
• Any dispute between the Customer and its employees, contractors, or other third parties

By Stack Seven. Stack Seven shall defend the Customer against third-party claims that the Service, when used by the Customer in accordance with these Terms, infringes the intellectual property rights of such third party, and Stack Seven shall pay damages finally awarded against the Customer in respect of such claims, subject to the limitations in Section 16.

This indemnity does not apply to claims arising from Customer Content, modifications to the Service made by the Customer, or use of the Service in combination with any third-party product or service not provided by Stack Seven.

18. Force majeure

Stack Seven shall not be liable for failure or delay in performance resulting from events beyond its reasonable control, including natural disasters, acts of government, labor disputes, failures of utilities or networks, cyber attacks, or other force majeure events.

19. Export control and sanctions

The Customer represents and warrants that it is not located in, and will not use the Service in, any country subject to comprehensive sanctions by the European Union, the United Nations, the United Kingdom, or the United States, and that it is not a person or entity subject to such sanctions.

The Customer shall comply with all applicable export control and sanctions laws in its use of the Service.

20. Changes to these Terms

Stack Seven may update these Terms from time to time. The most current version will always be available at policyconfirm.com/terms-of-service. Previous versions are accessible from the same page.

Non-material changes (such as clarifications, corrections, or formatting) are effective upon publication.

Material changes (such as changes to fees, liability, data processing, or termination rights) will be notified to active customers by email at least thirty (30) days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. If the Customer does not agree to a material change, the Customer may terminate the subscription before the change takes effect without penalty.

21. Governing law and jurisdiction

These Terms shall be governed by and construed in accordance with Norwegian law, without regard to conflict of law principles.

Any dispute arising out of or in connection with these Terms or the Service shall be subject to the exclusive jurisdiction of the courts of Norway, with Oslo District Court as agreed venue.

22. Notices

Notices to Stack Seven shall be sent to contact@policyconfirm.com.

Notices to the Customer shall be sent to the email address designated in the Customer's account or, if no such address is designated, to the email address used to register the account. Notices are deemed received on the date of sending if sent by email.

23. Order of precedence

In the event of a conflict between these Terms and any other document forming part of the agreement between the parties, the order of precedence shall be:

1. Any signed order form or agreement explicitly referencing these Terms
2. The Data Processing Agreement (for matters relating to processing of personal data)
3. These Terms of Service
4. The Privacy Policy and the sub-processor list

24. Assignment, severability, and survival

The Customer may not assign these Terms without Stack Seven's prior written consent. Stack Seven may assign these Terms in connection with a merger, acquisition, or sale of assets.

If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall remain in full force and effect.

The following sections survive termination of these Terms: Section 4 (Customer Content warranties), Section 11 (Intellectual property), Section 12 (Feedback), Section 15 (Disclaimer of warranties), Section 16 (Limitation of liability), Section 17 (Indemnification), Section 21 (Governing law and jurisdiction), Section 22 (Notices), and any other provision that by its nature is intended to survive.

25. No agency or partnership

Nothing in these Terms creates any agency, partnership, joint venture, or employment relationship between the parties. Neither party has authority to bind the other in any way.

26. Entire agreement

These Terms, together with the Privacy Policy, the Data Processing Agreement, and the sub-processor list, constitute the entire agreement between the parties regarding the Service and supersede all prior agreements or understandings.

27. Contact information