1. Who you are contracting with
ISOvault is a trading name of Mayne Consulting Ltd, a company registered in England and Wales (company number 14618424) with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ ("we", "us", "ISOvault").
"You" and "Customer" mean the business that signs up for an ISOvault account. ISOvault is a business-to-business service; by signing up you confirm you are acting in the course of business and have authority to bind the Customer.
By creating an account or using the service you agree to these terms, together with our Privacy Policy and, where we process personal data on your behalf, our Data Processing Agreement, which is incorporated into these terms.
2. The service
ISOvault is web-based ISO 27001 document and evidence management software. It provides a structured workspace for policies, controls, risks, assets, suppliers, audit evidence and related compliance records, together with AI-assisted gap analysis and Word document generation.
We may improve, add or modify features over time. We will not materially reduce the core functionality you pay for without notice.
3. Free trial
- The trial lasts 14 days from account creation, with full product access. No payment card is required.
- At the end of the trial, your account converts to a paid subscription only if you choose to subscribe. We do not auto-charge, because we have no card to charge.
- If you do not subscribe, your workspace is suspended. You may export your data during the trial and for 30 days afterwards, after which it is deleted in line with the DPA.
- One trial per organisation. We may withdraw trial access where we suspect abuse.
4. Subscription, fees and price for life
- The subscription fee is £125 per month plus VAT, billed monthly in advance via Stripe.
- Price for life: the monthly price at which you first subscribe is fixed for as long as your subscription remains continuously active. If our list price rises for new customers, yours does not. If your subscription lapses and you later resubscribe, the then-current list price applies.
- All fees are exclusive of VAT, which is charged where applicable.
- If a payment fails we will retry and notify you. If payment remains outstanding 14 days after the due date we may suspend access until it is settled.
5. Cancellation and refunds
- You may cancel at any time, self-serve, through the billing portal. No notice period, no cancellation fee, no phone call required.
- Cancellation takes effect at the end of the current billing month. You retain access until then.
- Fees already paid are non-refundable, including for partly used months, except where required by law or where we have materially failed to provide the service.
- After cancellation you have 30 days to export your data, after which it is deleted in line with the DPA.
6. Your data
- Everything you upload or create in ISOvault ("Customer Data") remains yours. We claim no ownership of it.
- You grant us a limited licence to host, process and display Customer Data solely to provide the service.
- Where Customer Data includes personal data, we process it as your processor under the Data Processing Agreement.
- You can export your documents and registers at any time, in standard formats including Word and CSV.
- You are responsible for the accuracy and lawfulness of Customer Data, including having the right to upload it.
7. AI features
ISOvault includes AI-assisted features such as gap analysis and cross-referencing. These are assistive tools, and you should treat their output accordingly:
- AI output is guidance, not professional advice. It does not replace the judgement of your management team, your consultant or your auditor.
- We do not guarantee that following AI recommendations will result in certification, and AI output may contain errors or omissions. You are responsible for reviewing it before relying on it.
- Customer Data submitted to AI features is processed within our UK (London) hosting environment, as described in the sub-processor register, and is not used to train AI models.
- AI features are subject to fair use. We may apply reasonable limits to protect service quality for all customers.
8. Acceptable use
You agree not to, and to ensure your users do not:
- use the service for any unlawful purpose or to store unlawful content;
- upload malicious code or content that infringes anyone's intellectual property or other rights;
- attempt to gain unauthorised access to the service, other customers' workspaces or our infrastructure, or to test the security of the service without our prior written consent;
- resell, sublicense or provide the service to third parties as a bureau service, except under an agreed partner arrangement;
- use the service to build a competing product;
- share user credentials, or use automated means to extract data from the service other than through features we provide.
We may suspend accounts that breach this section. Where practical we will warn you first and give you the opportunity to fix the problem.
9. Availability and support
- We aim to keep ISOvault available at all times, but no online service can promise uninterrupted availability. Planned maintenance will be scheduled outside UK business hours where practicable.
- Support is provided by email. We aim to respond within one UK business day.
- Customer data, documents and backups are hosted in the United Kingdom. Backups are taken automatically and restore procedures are tested. Details are on our security page.
10. Intellectual property
- We own the ISOvault software, brand and all related intellectual property. Your subscription grants a non-exclusive, non-transferable right to use the service for your internal business purposes while your subscription is active.
- Templates and document structures we provide may be used within documents you generate for your own business, including documents you show to auditors and customers.
- If you give us feedback or suggestions, we may use them without obligation to you.
11. Confidentiality
Each party will keep the other's confidential information confidential and use it only as needed to perform this agreement. This does not apply to information that is public, already known, independently developed or required to be disclosed by law. This clause survives termination.
12. Liability
- Nothing in these terms excludes liability for death or personal injury caused by negligence, fraud, or anything else that cannot be excluded under English law.
- Subject to that, our total aggregate liability arising out of or in connection with the service in any 12-month period is limited to the fees you paid us in that period.
- We are not liable for indirect or consequential loss, loss of profits, loss of business or loss of data, provided that this does not limit our obligations under the DPA.
- ISOvault is a record-keeping and analysis tool. Responsibility for your information security management system, and for achieving or maintaining certification, remains with you.
13. Termination by us
We may terminate or suspend your account if you materially breach these terms and do not remedy the breach within 14 days of notice, or immediately for serious breaches of the acceptable use section. We may also terminate for non-payment as set out in section 4. On any termination, data export and deletion follow section 5 and the DPA.
If we ever discontinue the service entirely, we will give at least 90 days' notice and ensure you can export your data.
14. Changes to these terms
We may update these terms from time to time. For material changes we will give account holders at least 30 days' notice by email. If you do not accept a material change you may cancel before it takes effect. Continued use after the effective date constitutes acceptance.
15. General
- These terms, the Privacy Policy and the DPA are the entire agreement between us regarding the service.
- If any provision is found unenforceable, the rest remain in force.
- Neither party is liable for failure caused by events beyond its reasonable control.
- You may not assign this agreement without our consent, not to be unreasonably withheld. We may assign it as part of a reorganisation or sale of the business, provided your rights are preserved.
- These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.
16. Contact
Mayne Consulting Ltd (trading as ISOvault)
71-75 Shelton Street, Covent Garden, London, WC2H 9JQ
hello.isovault@agentmail.to