Terms and Conditions of Service

Last updated: March 29, 2026

1. Acceptance of Terms

By using ComplyDev ("Service"), you agree to be bound by these Terms and Conditions. If you do not accept these terms, do not use the Service.

2. Service Description

ComplyDev provides an automated assessment service to evaluate the cybersecurity compliance of SMEs with respect to applicable regulations (NIS2, GDPR, DORA, ISO27001, PCI-DSS).

The Service includes:

  • Adaptive questionnaire
  • Automated analysis powered by artificial intelligence
  • Personalized PDF report with gap analysis and cost estimation
  • Report delivery via email

3. Eligibility

The Service is intended exclusively for:

  • Businesses and organizations based in the EU/EEA
  • Users over 18 years of age with authority to represent the company
  • Use for legitimate and lawful purposes

4. Account and User Responsibility

The user is responsible for:

  • Providing accurate and truthful information
  • Maintaining the confidentiality of access credentials
  • Complying with applicable national and European laws
  • Not abusing the Service (e.g., spam, attacks, reverse engineering)

5. Usage Restrictions

It is prohibited to:

  • Use the Service for illegal activities
  • Attempt to compromise the security of the Service
  • Upload malware, viruses, or malicious code
  • Overload the infrastructure (rate limiting: max 10 requests/hour)
  • Resell or redistribute reports without authorization
  • Use bots or automated scripts without written consent

6. Intellectual Property

All content of the Service (software, design, text, logos, knowledge base) is owned by ComplyDev and protected by copyright, trademarks, and other intellectual property laws.

Limited license: We grant you a non-exclusive, non-transferable, revocable license to use the Service for internal business purposes. Generated reports may be shared internally within your organization.

7. Disclaimer and Limitation of Liability

7.1 Disclaimer

IMPORTANT — AI-GENERATED CONTENT DISCLAIMER:

  • All reports, assessments, gap analyses, and recommendations are generated entirely by artificial intelligence and are provided for informational and educational purposes only
  • The output does NOT constitute legal, regulatory, or professional cybersecurity advice and must NEVER be treated as a final or definitive compliance assessment
  • All AI-generated results must be reviewed and validated by qualified cybersecurity and legal professionals before any business decision is made
  • Cost estimates are purely indicative and may vary significantly from actual implementation costs
  • The compliance assessment does not guarantee regulatory compliance, the absence of penalties, or protection from enforcement actions
  • ComplyDev accepts no liability whatsoever for decisions made based on AI-generated content without independent professional verification

7.2 Limitation of Liability

To the maximum extent permitted by law, ComplyDev shall not be liable for:

  • Direct, indirect, incidental, or consequential damages arising from use of the Service
  • Loss of profits, data, or business opportunities
  • Errors, inaccuracies, or omissions in reports
  • Service interruptions or unavailability
  • Decisions made based on generated reports

ComplyDev's maximum liability is limited to €500 or the total amount paid by the user in the last 12 months, whichever is greater. This limitation does not apply in cases of gross negligence, intentional misconduct, or violations of applicable data protection laws.

8. Service Availability

The Service is provided "as is" and "as available". We do not guarantee:

  • 100% uptime (target: 99% availability)
  • Absence of errors or bugs
  • Compatibility with all devices/browsers

We reserve the right to suspend, modify, or discontinue the Service with or without notice.

9. Privacy and Data Protection

The processing of personal data is governed by our Privacy Policy, which is an integral part of these Terms.

Key points:

  • Questionnaire responses automatically deleted after 7 days
  • PDF reports available for 7 days, then deleted
  • We only retain email and company name for communications

10. Changes to the Service and Terms

We may modify these Terms at any time. Substantial changes will be communicated via email with 30 days' notice. Continued use of the Service after changes constitutes acceptance.

11. Termination

We may suspend or terminate your access to the Service in case of:

  • Violation of these Terms
  • Fraudulent or illegal activities
  • Abuse of the Service
  • User request for account deletion

You may discontinue use of the Service at any time by contacting us for deletion of your data.

12. Indemnification

You agree to indemnify and hold harmless ComplyDev from any claims, losses, damages, or liabilities arising from your improper use of the Service or violation of these Terms.

13. Governing Law and Jurisdiction

These Terms are governed by Italian law. Any dispute shall be under the exclusive jurisdiction of the Court of Milan, Italy.

14. General Provisions

  • Severability: If any provision is deemed invalid, the remaining provisions remain in effect
  • No Waiver: Failure to enforce a right does not constitute waiver
  • Assignment: You may not assign these Terms without written consent
  • Force Majeure: We are not responsible for events beyond our control

15. Contact

For questions about these Terms, contact us via the contact form available on the site.

16. Right of Withdrawal (EU Consumer Rights)

In accordance with EU Directive 2011/83/EU, you have the right to withdraw from your subscription within 14 days of purchase, without providing any reason, and receive a full refund.

To exercise this right, contact us at privacy@complydev.com within 14 days of your initial purchase. Refunds will be processed within 14 days of receiving your withdrawal request.

Please note: if you have explicitly requested that the service begin during the withdrawal period (e.g., by starting your compliance assessment), you may be charged a proportional amount for the service already provided.

Free Cybersecurity Assessment | NIS2, GDPR, DORA + More | European SMEs | ComplyDev