Terms of Service

1. Agreement to these Terms

These Terms of Service (“Terms”) form a binding agreement between you and [LEGAL ENTITY NAME] (“SCORA”, “we”, “us”), governing your access to and use of the SCORA platform at scora.ae and related services (the “Service”). By creating an account or using the Service, you agree to these Terms and to our Privacy Policy. If you are accepting on behalf of an organisation, you confirm you are authorised to bind that organisation.

2. Eligibility

You must be at least 18 years old and capable of forming a binding contract. The Service is intended for organisational and professional use, not for consumers acting for personal purposes.

3. The Service

SCORA is a cybersecurity self-assessment platform. It lets organisations answer structured questionnaires aligned to recognised frameworks (such as NIST CSF 2.0, ISO/IEC 27001:2022, and an SME Cyber Health Check), and it generates maturity and risk scores, optional AI-assisted analysis, and reports based on the answers provided. The Service supports multiple organisations (tenants), each with its own users and data.

4. Accounts

You are responsible for the accuracy of your registration details, for keeping your credentials confidential, and for all activity under your account. Notify us promptly of any unauthorised use. Within an organisation, administrators may manage members, roles, and access. You must ensure that anyone you invite is authorised to receive access.

5. Acceptable use

You agree not to: use the Service unlawfully or in breach of these Terms; attempt to access data or accounts that are not yours; probe, scan, or test the security of the Service without authorisation; disrupt or overload the Service; reverse engineer or copy the platform except as permitted by law; upload malicious code; or misuse share links to expose another organisation’s data. We may investigate and take action, including suspension, for violations.

6. Plans and fees

The Service may offer free and paid assessment tiers. [If paid plans are live at launch, set out pricing, billing cycle, taxes (including any applicable UAE VAT), renewal, and refund terms here, or link to a separate order form / pricing page.] Where no paid plan applies, the Service is provided on the basis described at sign-up.

7. Your data and confidentiality

As between you and us, your organisation retains ownership of the data it submits (including assessment responses and resulting reports). You grant us the limited rights needed to host, process, and display that data to provide the Service, as described in our Privacy Policy. We treat your assessment data as confidential and apply the security measures described in the Privacy Policy. You are responsible for ensuring you have the right to submit any data you enter.

8. Intellectual property

The SCORA platform, its software, design, question sets, scoring methodology, and other materials we provide are owned by us or our licensors and are protected by applicable laws. We grant you a limited, non-exclusive, non-transferable right to use the Service during your subscription for your organisation’s internal purposes. You may use the reports and results generated for your own organisation; you may not resell, redistribute, or commercially exploit the platform or its content without our written permission.

9. Assessment disclaimer (important)

The Service produces self-assessment results based on the answers you provide. Results, scores, and AI-generated analysis are informational and advisory only. They are not: a security audit, penetration test, or certification; a guarantee that your systems are secure; or confirmation that you comply with any law, regulation, framework, or standard. AI-assisted output may be incomplete or inaccurate and should be independently verified. You remain solely responsible for your security decisions and for obtaining professional advice where appropriate. We do not provide legal, regulatory, or professional security advice through the Service.

10. Third-party services

The Service relies on third-party providers (for example, hosting, email delivery, anti-abuse, and AI analysis). We are not responsible for third-party services outside our control, though we select providers with care as described in our Privacy Policy.

11. Service availability and changes

We aim to keep the Service available but do not guarantee uninterrupted or error-free operation. We may modify, suspend, or discontinue features, with reasonable notice for material changes where practicable.

12. Disclaimer of warranties

To the maximum extent permitted by law, the Service is provided “as is” and “as available”, without warranties of any kind, whether express or implied, including fitness for a particular purpose, accuracy, or non-infringement.

13. Limitation of liability

To the maximum extent permitted by law, SCORA and its affiliates will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, data, or goodwill, arising from your use of the Service. Our total aggregate liability arising out of or relating to the Service will not exceed [the amounts you paid to us in the [12] months before the claim / a stated cap]. Nothing in these Terms limits liability that cannot be limited under applicable law.

14. Indemnification

You agree to indemnify and hold us harmless from claims arising out of your misuse of the Service, your violation of these Terms, or your infringement of the rights of others, to the extent permitted by law.

15. Suspension and termination

You may stop using the Service and close your account at any time (see the Privacy Policy for data deletion at launch). We may suspend or terminate access for breach of these Terms, for security reasons, or as required by law. On termination, your right to use the Service ends; data handling on termination follows the Privacy Policy.

16. Governing law and disputes

These Terms are governed by the laws of [the applicable UAE jurisdiction — e.g. the Emirate of Abu Dhabi / the United Arab Emirates / ADGM / DIFC], and the courts of [JURISDICTION] will have jurisdiction over disputes, without prejudice to any mandatory rights you have under applicable law. [Confirm governing law and venue with counsel based on the operating entity.]

17. Changes to these Terms

We may update these Terms from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, notify you. Continued use after changes take effect constitutes acceptance.

18. Contact

[LEGAL ENTITY NAME] — [CONTACT EMAIL] — [ADDRESS]