Terms of service

These terms are between Cloudgeeks [legal form, e.g. B.V.] (“Trusterio”, “we”) and the company that creates an account or is set up by us at its request (“the customer”). Whoever accepts them does so for the customer and confirms they may. Trusterio is for businesses; it is not offered to consumers.

Our data processing agreement is part of these terms. Where the two disagree about personal data, the DPA wins.

Trusterio is a compliance platform. It reads evidence from systems the customer connects, tests controls against frameworks, keeps a risk register and records of processing, helps answer questionnaires, and publishes a Trust Center. What it does on a given day is what the product does that day; we improve it continuously and do not take away a capability the customer relies on without telling the account owners first.

Trusterio supports a customer’s compliance work. It does not certify anybody, it is not legal advice, and a passing control in Trusterio is not an auditor’s opinion.

• The customer decides who gets an account, and is responsible for what they do with it.
• Keep passwords to yourself, and use two-step verification. Tell us at once if an account is misused.
• Platform staff can see a customer’s account only when supporting it, and every such visit is in the customer’s audit log.

• One package for one business, €500 a month, billed yearly in advance. Each business added is €250 a month, shown before it is added. Prices exclude VAT.
• Payment is by Stripe. The first year is paid before the first business opens.
• The subscription renews for another year unless it is cancelled before the renewal date. [renewal and notice terms to confirm]
• We may change prices for a coming year, and tell account owners at least [60] days before it starts.

What the customer puts into Trusterio or connects it to stays the customer’s. We use it only to provide the service, as the DPA describes. We do not train models on it, sell it, or show it to anybody the customer has not published it to.

The customer can export its records and close its account at any time. Thirty days after closing, its data is deleted.

• The customer gives Trusterio credentials to its own systems. Thirteen of the connections are read-only. Jira and Slack are not: Trusterio creates issues in Jira and posts notices to Slack when the customer asks it to.
• AI Assist drafts are suggestions. A person at the customer reviews and approves each one before it is used, and the customer is responsible for what it publishes or sends.
• A member can connect an outside AI app to Trusterio. It acts with that member’s rights, and the customer is responsible for the app it approves. What that app’s own provider does with data is between the customer and that provider.

Do not use Trusterio to break the law, to publish claims you know to be false, to probe or attack the service or other customers (report a weakness to security@trusterio.com instead), or to get around its limits. We may suspend an account that does, and tell its owners why.

We aim to keep Trusterio available around the clock and announce planned maintenance in advance. Support is by email at hello@trusterio.com on Dutch working days. [any service level to commit to]

Our total liability in any contract year is limited to what the customer paid us in that year [confirm cap]. We are not liable for indirect loss, such as lost profit or a lost certification. These limits do not apply to intent or gross negligence, or where the law does not allow them.

The customer can stop renewing at any time. Either side can end the agreement at once if the other seriously breaches it and does not put it right within 30 days of being told. A year already paid is not refunded, except where we end the agreement without the customer being at fault.

The version and date are at the top. We tell account owners about a change at least 30 days before it takes effect, and ask them to accept the new version. If they do not, they can end the agreement before it applies.

Dutch law applies. Disputes go to the competent court in [city], the Netherlands.