Terms of service

1. The service

Arnes is a governance, risk, and compliance (GRC) platform with a supervised artificial intelligence layer. Each customer’s features, users, term, and price are set out in its order form or agreement. If your organization signed an agreement with Arnes, that agreement prevails over these terms where they conflict.

2. Accounts and access

Each account is personal. You must keep your credentials confidential and tell us immediately if you suspect unauthorized use. If you sign in with Microsoft, Microsoft’s terms also apply. Each customer organization’s administrators manage its users and their permissions.

3. Acceptable use

You may not:

• Use the service for unlawful purposes or to infringe third-party rights.
• Attempt to access data, accounts, or systems without authorization, or bypass security or permission controls.
• Interfere with the service’s operation, overload it, or introduce malicious code.
• Copy, resell, or exploit the service beyond what your agreement allows, or reverse engineer it except as permitted by law.

4. Your content

Your organization retains ownership of the information and documents it uploads or connects (“customer content”). You grant us the limited permission needed to host, process, and display it for the sole purpose of providing the service to you. You are responsible for having the necessary rights and authorizations over that content, including any personal data it contains. Personal data processing is described in the Privacy statement.

5. Artificial intelligence

The assistant proposes changes that a person must review and approve; nothing is saved without that approval. AI-generated proposals, summaries, and regulatory citations may be incomplete, outdated, or incorrect. They are not legal or compliance advice, and the decision to approve and use them rests with your organization.

6. Third-party services and sources

The service integrates with third-party services, such as Microsoft 365, and shows signals from public sources. Their use is subject to those third parties’ terms, and Arnes does not guarantee the accuracy, completeness, or availability of information that comes from them.

7. Intellectual property

Arnes and its licensors retain all rights in the platform, its software, its brand, and its documentation. These terms do not transfer to you any right other than the use of the service on the agreed terms. If you send us suggestions, we may use them without any obligation to you.

8. Payments

Prices, invoicing, and taxes are governed by each customer’s order form or agreement.

9. Suspension and termination

We may suspend access if these terms are breached or if necessary to protect the service, other customers, or third parties, and we will restore it once the cause is resolved. Termination of the service is governed by each customer’s agreement; on termination, customer content is returned or deleted as agreed.

10. Warranties

We provide the service with professional diligence. Except as stated in your agreement and to the fullest extent permitted by law, the service is provided “as is” and “as available”, without other express or implied warranties. Trial, pilot, or demo versions are provided without warranty of any kind.

11. Limitation of liability

To the fullest extent permitted by law, Arnes is not liable for lost profits, loss of data or business, or indirect or consequential damages, and its total liability to a customer is limited to the amount that customer paid for the service in the twelve months before the event giving rise to it. These limitations do not apply to willful misconduct or gross negligence.

12. Changes to these terms

We may update these terms. We will publish the new version on this page with its date and, if the change is material, notify customers before it takes effect. Continuing to use the service after that date means you accept them.

13. Governing law

These terms are governed by the laws of the Republic of Colombia. Disputes will first be addressed directly and, if that is not possible, submitted to the competent courts of Colombia, unless the customer’s agreement provides otherwise.

Contact

The controller’s contact details will be published here.