Draft — pending counsel
Terms of service
Last updated — pending counsel
1. Agreement to these terms
These Terms of Service are a draft agreement between you and Praxis governing your use of the Praxis security-advisory service (the service). By creating an account or using the service you agree to these terms on behalf of yourself and the organisation you represent, and you confirm you have authority to do so. This is a pre-launch draft — it is not legal advice, no warranties are made beyond the posture set out here, and the final terms are prepared with counsel before launch. Where these terms refer to your data and privacy, the Privacy Policy and the Data Processing Addendum form part of this agreement.
2. Accounts, authentication, and organisations
Access to the service requires an account. Sign-in, sessions, and account identity are managed by our authentication provider, Clerk; organisations that use Microsoft identity may sign in through optional single sign-on. You are responsible for the accuracy of your account information, for keeping your credentials secure, and for the activity of users you invite to your organisation. Praxis is a multi-tenant service: each organisation's data is isolated from every other organisation, and you should only access the organisation workspace you are authorised to use.
3. The service and acceptable use
Praxis helps your organisation build and maintain a security program, guided by an AI advisor, and produce supporting documents. You agree to use the service lawfully and not to misuse it — for example, by attempting to breach tenant isolation or access another organisation's data, probing or disrupting the service's security, reselling access, uploading unlawful content, or using the service to build a competing product. We may suspend access where use threatens the security, integrity, or lawful operation of the service.
4. AI-assisted advice — guidance, not a guarantee
The service uses an AI advisor to generate security guidance, assessments, and draft documents. This output is decision-support, not a substitute for professional, legal, or regulatory advice, and it is not a guarantee of security, compliance, or any particular outcome. You remain responsible for reviewing the advisor's output and for the decisions your organisation makes. AI processing is performed by our sub-processor Anthropic under the governance terms described in Section 7 and the Data Processing Addendum.
5. Subscriptions, billing, and trials
Paid plans are billed through our payment processor, Stripe; Praxis does not store your full card details. Fees, billing cycles, and any beta or trial terms are those shown at sign-up or on the Pricing page, which remains illustrative until launch. Unless stated otherwise, subscriptions renew for successive periods until cancelled, and fees already incurred are non-refundable except where required by law. We will give reasonable notice of material changes to pricing.
6. Your data and privacy
As between you and Praxis, your organisation owns the security-program data and content you put into the service. You grant Praxis the limited rights needed to host, process, and display that data to provide the service to you. How we collect, use, and share personal data is described in the Privacy Policy; the controller/processor relationship and our data-protection commitments are set out in the Data Processing Addendum, which is incorporated into these terms.
7. Sub-processors and third-party services
Praxis relies on a defined set of sub-processors to operate — including Vercel (application hosting and file storage) and Neon (database) in the United States, Clerk for authentication, Stripe for billing, Anthropic for AI processing under zero data retention and no training on API data terms, and others for email, error tracking, and analytics. The current list, with each provider's role, is named in full in the Trust Center. Your use of the service is also subject to those providers' own terms where they apply directly to you.
8. Intellectual property
The service itself — including the Praxis software, interface, templates, and brand — is owned by Praxis and protected by applicable law. These terms do not transfer any ownership of the service to you beyond the right to use it under this agreement. Feedback you choose to share about the service may be used by Praxis to improve the product without obligation to you.
9. Warranties and disclaimers
The service is provided on an “as is” and “as available” basis. To the fullest extent permitted by law, Praxis disclaims implied warranties of merchantability, fitness for a particular purpose, and non-infringement, and does not warrant that the service or its AI-generated output will be uninterrupted, error-free, or sufficient to meet any specific legal or regulatory obligation. This disclaimer does not limit rights that cannot be excluded under applicable law.
10. Limitation of liability
To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or data, arising out of or relating to the service. The precise liability cap and any carve-outs (for example, for confidentiality or data-protection breaches) are finalised with counsel before launch; until then this section states the intended posture only and does not waive rights that cannot be limited by law.
11. Term, suspension, and termination
These terms apply for as long as you use the service. You may stop using the service and close your account at any time; we may suspend or terminate access for material breach of these terms or where required to protect the service. On termination, access is revoked and your organisation's data is soft-deleted and then permanently purged within roughly a 30-day window kept for accidental-cancellation recovery and a final export, as described in the Data Processing Addendum and the data retention & deletion policy.
12. Changes to these terms
We may update these terms as the service and our legal posture evolve. For material changes we will give reasonable notice — for example, in-app or by email — and, where the change affects the governance you have consented to, we may ask your organisation to accept the updated terms before continued use. Your continued use of the service after an update takes effect means you accept the revised terms.
13. Governing law and contact
The governing law and venue for these terms are finalised with counsel before launch and will be stated here in the final version. Questions about these terms, or requests relating to this agreement, can be sent to the contact address published in the Trust Center and the Data Processing Addendum.