1. INTRODUCTION AND ACCEPTANCE OF TERMS

(i) These Terms of Service (“Terms”) govern the relationship between you (“You” or “User”) and ISMS Copilot, a Better ISMS initiative (“ISMS Copilot,” “we,” “us,” or “our”) with respect to Your access to and use of our products and services, including but not limited to ISMS Policy Generator and ISMS Copilot AI assistants (collectively, the “Services”).

(ii) By accessing or using any part of the Services, You acknowledge that You have read, understood, and agree to be bound by these Terms and any additional guidelines, policies, or documents referenced herein.

(iii) If You do not agree with these Terms, in whole or in part, You must refrain from using the Services.

2. DEFINITIONS

(i) “User” or “You” refers to the individual or entity accessing the Services.

(ii) “Subprocessor” means a third party engaged by ISMS Copilot to process User data.

(iii) “Partner” refers to any individual or entity that participates in ISMS Copilot’s partner program or whose services are promoted or referenced by ISMS Copilot through any medium.

3. SERVICES DESCRIPTION AND SCOPE

(i) ISMS Copilot provides AI-driven tools that assist in understanding, implementing, and managing compliance frameworks (e.g., ISO 27001), generating policies (via ISMS Policy Generator), and offering guidance on information security and regulatory standards.

(ii) The Services are provided on an “as is” and “as available” basis. ISMS Copilot does not warrant that the Services will meet any specific legal, regulatory, or compliance standards, nor does it guarantee error-free or uninterrupted operation.

(iii) While certain functionalities may relate to compliance, security, or data protection, none of the Services constitute legal, compliance, or professional advice. You remain solely responsible for verifying the accuracy, completeness, and suitability of the outputs for Your purposes.

4. USE OF THE SERVICES; USER OBLIGATIONS AND RESTRICTIONS

(i) You represent and warrant that You have the legal capacity and authority to enter into these Terms.

(ii) When using the Services on behalf of a third party (e.g., as a consultant), You must have all necessary rights and consents. Corporate Users must secure any required internal approvals.

(iii) You shall not:

• Attempt to hack, exploit, interfere with, or compromise the security or functionality of the Services.
• Access or attempt to access system prompts, internal data, or underlying models without authorization.