Terms & Conditions

01Acceptance of Terms

By creating an OdoTrust account or using our services, you agree to these terms. If you're using OdoTrust on behalf of a company, you confirm you have authority to bind that company to these terms.

If you don't agree, don't use the service. No hard feelings.

02What OdoTrust Does

OdoTrust is a compliance automation platform that helps companies achieve and maintain compliance with frameworks like SOC 2, ISO 27001, HIPAA, and GDPR.

We provide:

• Policy management: Generate, consolidate, and manage compliance policies.
• Control tracking: Map and monitor your compliance controls.
• Evidence collection: Organize audit evidence in one place.
• AI-powered onboarding: Set up your compliance program in minutes.
• Vendor risk management: Track and assess third-party risks.

03Your Account

• Accuracy: Provide accurate, current information when registering.
• Security: You're responsible for keeping your login credentials secure.
• One human per account: Don't share accounts. Each user needs their own.
• Notification: Tell us immediately if you suspect unauthorized access.

04Subscription & Billing

This is where we're different from every competitor:

• Published pricing: Our prices are on our website. No "contact sales" games.
• Month-to-month: No annual lock-in. No 2-year contracts. Pay monthly, cancel monthly.
• Founding pilot pricing: Early customers get 50% off, locked in for 12 months of active subscription.
• Payment: Billed monthly via Stripe. We accept all major credit cards.
• Price changes: If we raise prices, your current rate is locked in for 6 months. We'll give you 60 days notice.
• No hidden fees: The price on the website is the price you pay. No setup fees, no "platform fees," no surprise add-ons.

05Free Tier

Our free tier is genuinely free. Not "free for 14 days" free. Actually free, forever:

• What's included: 1 framework, basic controls, policy templates, compliance dashboard.
• No credit card required: Sign up with email. That's it.
• No bait-and-switch: We won't remove free tier features to force an upgrade.
• Fair use: The free tier is for real companies exploring compliance, not for testing our API limits.

06Your Data Belongs to You

This is non-negotiable:

• Ownership: All compliance data you create or upload - policies, controls, evidence, assessments - belongs to you. Always.
• Full export: You can export ALL your data at any time in standard formats (CSV, JSON, PDF).
• No lock-in: If you leave, you take everything with you. We don't hold data hostage.
• Post-cancellation: After you cancel, your data remains accessible for 30 days for export. Then it's permanently deleted.

07Intellectual Property

• Our stuff: The OdoTrust platform, code, design, and branding are ours.
• Your stuff: Your data, policies, and compliance content are yours.
• Templates: Policy templates we provide are licensed for your use within your compliance program. You can't resell them as a competing product.
• Feedback: If you suggest a feature and we build it, it becomes part of OdoTrust (not a custom build for you).

08Acceptable Use

Don't use OdoTrust to:

• Fabricate compliance evidence or mislead auditors.
• Reverse-engineer, scrape, or copy the platform.
• Upload malicious content or attempt to breach security.
• Resell access or create a competing product from our templates.
• Violate any applicable law or regulation.

Basically: use it as intended, don't be malicious, and we'll get along great.

09Limitation of Liability

The legal reality:

• OdoTrust is provided "as is." We work hard to keep it reliable, but we can't guarantee 100% uptime or zero bugs.
• We're not liable for indirect, incidental, or consequential damages.
• Our total liability is limited to the fees you've paid us in the 12 months before the claim.
• We are NOT responsible for audit outcomes. We help you prepare - the auditor makes the final call.

10Cancellation & Termination

Leaving should be as easy as joining:

• You can cancel anytime: Go to Settings → Cancel. Done. No phone call required. No retention team. No guilt trip.
• Effective immediately: Cancellation takes effect at the end of your current billing period.
• Data access: 30 days post-cancellation to export everything.
• We can terminate: We reserve the right to terminate accounts that violate these terms, with notice when possible.

11Governing Law

These terms are governed by the laws of the Republic of Estonia. Any disputes will be resolved in Estonian courts.

We chose Estonia because it's the most digitally advanced country on Earth - and because that's where OdoTrust will be registered.

12Changes to These Terms

We may update these terms occasionally. When we do:

• We'll email you about material changes at least 30 days before they take effect.
• We'll update the "Last updated" date at the top.
• Continued use after changes = acceptance.
• If you disagree with changes, you can cancel before they take effect.

13Contact

Questions? Concerns? Compliments?