Terms of Use

Last updated: 17 August 2026
These Terms of Use ("Terms") govern your access to and use of the Cloventa website, platform, applications, and related services (collectively, the "Services") provided by Cloventa ("Cloventa", "we", "us", or "our").
By accessing or using the Services, you agree to be bound by these Terms. If you do not agree with these Terms, you should not use the Services.

1. About Cloventa
Cloventa provides software designed to help organisations manage and monitor cybersecurity compliance.
Our Services may include capabilities such as:

monitoring infrastructure and security configurations;
connecting to third-party cloud, development, identity, and business systems;
mapping technical controls to compliance frameworks and requirements;
collecting and organising compliance evidence;
identifying potential compliance gaps;
providing recommendations, reports, dashboards, and other compliance-related information;
supporting continuous compliance monitoring and audit preparation.

Cloventa is a software provider. Unless expressly agreed otherwise in writing, Cloventa does not provide legal, audit, certification, or professional compliance services.

2. Eligibility
The Services are intended primarily for businesses and professional users.
By using the Services, you represent that:

you are legally capable of entering into a binding agreement;
if you are using the Services on behalf of an organisation, you have authority to bind that organisation to these Terms;
you will use the Services in accordance with applicable laws and regulations.

If you are accessing the Services on behalf of a company or other organisation, references to "you" include both you and that organisation.

3. Accounts
Certain features of the Services may require you to create an account.
You are responsible for:

providing accurate and current account information;
maintaining the confidentiality of your login credentials;
maintaining appropriate security controls for your account;
all activities performed through your account, except where caused by Cloventa's breach of its obligations.

You must notify Cloventa promptly if you believe that your account or credentials have been compromised or used without authorisation.
You must not share account credentials except where expressly permitted by the Services or your applicable subscription.

4. Use of the Services
You may use the Services only for lawful business purposes and in accordance with these Terms.
You must not:

use the Services for unlawful, fraudulent, or malicious activities;
attempt to gain unauthorised access to the Services or another user's account;
interfere with or disrupt the operation or security of the Services;
circumvent technical limitations or security controls;
reverse engineer, decompile, or attempt to derive the source code of the Services, except to the extent such restriction is prohibited by applicable law;
use the Services to develop or provide a competing product where such use is prohibited by applicable law or a separate agreement;
introduce malicious code, malware, ransomware, or other harmful material into the Services;
use the Services to access or monitor systems that you do not own or have authorization to assess;
attempt to probe, scan, or test the vulnerability of Cloventa's systems without our prior written authorisation;
use automated means to access the Services in a manner that places an unreasonable load on our infrastructure;
remove or alter proprietary notices contained in the Services.

You are responsible for ensuring that your use of Cloventa and any connected systems is properly authorised.

5. Customer Systems and Integrations
Cloventa may allow you to connect third-party systems, including cloud infrastructure, source-code repositories, identity providers, ticketing systems, communication tools, and other business or technical systems.
You are responsible for:

ensuring that you have the necessary rights and permissions to connect those systems;
configuring integrations appropriately;
providing Cloventa with only the permissions reasonably necessary for the Services;
complying with the terms and policies of third-party services;
ensuring that your use of third-party integrations is lawful and authorised.

Cloventa is not responsible for the availability, functionality, security, or changes to third-party services.
A third-party service may restrict, modify, suspend, or discontinue access to its APIs or integrations. Such changes may affect the functionality of the Services.

6. Customer Data
You may provide information, files, configurations, security information, evidence, system data, and other materials to Cloventa through the Services ("Customer Data").
You retain ownership of your Customer Data.
You grant Cloventa a limited, worldwide, non-exclusive right to process Customer Data solely as necessary to:

provide and operate the Services;
maintain and secure the Services;
troubleshoot and improve the Services;
provide customer support;
comply with applicable legal obligations;
prevent fraud, abuse, and security incidents.

Cloventa will process personal data in accordance with its Privacy Policy and, where applicable, a Data Processing Agreement ("DPA").
You are responsible for ensuring that you have an appropriate legal basis and the necessary rights to provide Customer Data to Cloventa.

7. Security
Cloventa takes reasonable technical and organisational measures designed to protect the Services and Customer Data against unauthorised access, loss, misuse, alteration, or disclosure.
However, no software, infrastructure, or internet transmission can be guaranteed to be completely secure.
You are responsible for maintaining appropriate security controls for your own environment, including access management, credentials, connected systems, and devices used to access the Services.
Where applicable, additional security commitments may be set out in a separate agreement, security documentation, or DPA.

8. Compliance Information and Automated Results
Cloventa may analyse technical and organisational information and generate compliance-related findings, recommendations, mappings, reports, scores, alerts, or other outputs ("Compliance Results").
Compliance Results are intended to assist you in identifying potential compliance issues and preparing for audits or assessments.
They do not constitute:

legal advice;
regulatory advice;
an audit opinion;
a certification;
an assurance report;
a guarantee that your organisation complies with any particular law, regulation, standard, framework, or contractual requirement.

Cloventa does not guarantee that using the Services will result in certification, successful completion of an audit, regulatory compliance, or acceptance by an auditor, regulator, customer, or other third party.
You remain responsible for evaluating Compliance Results and determining what actions are appropriate for your organisation.

9. Artificial Intelligence
Certain features of the Services may use artificial intelligence or machine-learning technologies.
AI-generated outputs may contain errors, omissions, inaccuracies, or recommendations that are not appropriate for your particular environment.
You should review AI-generated information before relying on it or taking material business, security, legal, or compliance decisions based on it.
You are responsible for determining whether an AI-generated result is appropriate for your organisation.

10. Intellectual Property
The Services, including their software, design, interfaces, documentation, trademarks, logos, text, graphics, and underlying technology, are owned by or licensed to Cloventa and are protected by applicable intellectual-property laws.
Except for the limited rights expressly granted under these Terms, Cloventa does not grant you any rights to its intellectual property.
You may not copy, reproduce, modify, distribute, sell, lease, sublicense, or commercially exploit any part of the Services except as expressly permitted by Cloventa.

11. Feedback
If you provide Cloventa with suggestions, ideas, recommendations, or other feedback concerning the Services ("Feedback"), you grant Cloventa the right to use that Feedback without restriction or compensation.
Cloventa may use Feedback to develop, improve, and commercialise its products and services.

12. Free Trials and Free Services
Cloventa may offer free trials, free accounts, pilots, or other limited versions of the Services.
Unless otherwise stated:

free Services are provided on an "as is" and "as available" basis;
Cloventa may modify or discontinue free Services at any time;
free Services may have functional, usage, storage, or time limitations;
Cloventa may require you to upgrade to a paid subscription to continue using certain features.

Any additional terms communicated to you in connection with a free trial or pilot form part of your agreement with Cloventa.

13. Paid Services and Subscriptions
Certain Services may require payment.
Pricing, billing periods, usage limits, included functionality, and other commercial terms may be specified on the Cloventa website, order form, subscription page, or separate agreement.
Unless otherwise agreed:

subscriptions automatically renew for the applicable subscription period;
applicable fees must be paid in accordance with the agreed payment terms;
taxes, including VAT where applicable, may be added to the stated price;
fees already paid are generally non-refundable except where required by applicable law or expressly agreed otherwise.

Cloventa may use third-party payment providers to process payments.

14. Changes to the Services
Cloventa may modify, improve, replace, or discontinue parts of the Services from time to time.
We may make changes to:

features and functionality;
integrations;
user interfaces;
technical architecture;
security mechanisms;
compliance mappings and content.

We will use reasonable efforts to avoid materially reducing the core functionality of paid Services during an active subscription period.

15. Availability
We aim to keep the Services reliable and available, but we do not guarantee uninterrupted or error-free operation.
The Services may become temporarily unavailable because of:

scheduled maintenance;
emergency maintenance;
infrastructure failures;
third-party service failures;
internet or telecommunications failures;
security incidents;
force majeure events;
other circumstances beyond Cloventa's reasonable control.

Specific availability commitments may be provided under a separate Service Level Agreement ("SLA").

16. Suspension and Termination
Cloventa may suspend or restrict access to the Services where reasonably necessary to:

protect the security or integrity of the Services;
prevent unauthorised access;
investigate suspected abuse or unlawful activity;
comply with applicable law or a lawful request;
address a material breach of these Terms;
prevent harm to Cloventa, its customers, or third parties.

Where reasonably practicable, Cloventa will provide notice before suspension and an opportunity to remedy the relevant issue.
You may stop using the Services at any time.
Termination of a paid subscription may be subject to the applicable subscription or commercial agreement.

17. Effect of Termination
Upon termination, your right to access and use the Services will end unless otherwise agreed.
Subject to applicable law and any separate agreement, Cloventa may delete or anonymise Customer Data after a reasonable period following termination.
You are responsible for exporting any Customer Data or reports you require before termination, where such export functionality is available.
Certain provisions of these Terms will survive termination, including provisions concerning intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, and dispute resolution.

18. Confidentiality
Each party may receive confidential information belonging to the other party in connection with the Services.
Each party agrees to:

use confidential information only for purposes related to the relationship;
protect confidential information using reasonable measures;
disclose confidential information only to persons who need to know it and are subject to appropriate confidentiality obligations.

Confidentiality obligations do not apply to information that:

is publicly available without breach of an obligation;
was already lawfully known to the receiving party;
is independently developed without use of confidential information;
must be disclosed by law or lawful authority.

Where the parties have entered into a separate confidentiality agreement, that agreement will govern in the event of conflict.

19. Disclaimers
To the maximum extent permitted by applicable law, the Services are provided on an "as is" and "as available" basis.
Cloventa does not warrant that:

the Services will always be available;
the Services will be completely error-free;
Compliance Results will always be complete or accurate;
every compliance issue will be identified;
every applicable regulatory or standard requirement will be covered;
an organisation will pass an audit or obtain a certification by using the Services.

Cloventa is a software provider and does not replace your legal counsel, compliance team, security team, auditor, certification body, or other professional advisers.

20. Limitation of Liability
To the maximum extent permitted by applicable law, Cloventa will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, business opportunities, goodwill, or anticipated savings arising from or related to the Services.
To the maximum extent permitted by applicable law, Cloventa's total aggregate liability arising out of or relating to the Services or these Terms will not exceed the amount paid by you to Cloventa for the Services during the 12 months preceding the event giving rise to the claim.
Nothing in these Terms excludes or limits liability that cannot legally be excluded or limited under applicable law.
For business customers, the parties may agree to different liability limits in a separate written agreement.

21. Indemnification
To the extent permitted by applicable law, you agree to indemnify and hold Cloventa harmless from claims, damages, liabilities, costs, and expenses arising from:

your unlawful use of the Services;
your violation of these Terms;
unauthorized access to third-party systems through your account;
your violation of third-party rights;
Customer Data that you provide to Cloventa where such claim results from your breach of your obligations.

This section does not apply to the extent that the relevant claim was caused by Cloventa's own breach of these Terms or applicable law.

22. Third-Party Services
The Services may contain links to or integrations with third-party websites, applications, services, or technologies.
Cloventa does not control and is not responsible for third-party services.
Your use of third-party services may be subject to separate terms and privacy policies.

23. Privacy
Cloventa's processing of personal data is described in our Privacy Policy.
Where Cloventa processes personal data on behalf of a business customer, the parties may also enter into a Data Processing Agreement.
The Privacy Policy and any applicable DPA are incorporated into these Terms where relevant.

24. Changes to These Terms
We may update these Terms from time to time.
If we make material changes, we will provide reasonable notice where appropriate, including by publishing the updated Terms on the website or notifying registered users.
The updated Terms will become effective on the date specified at the beginning of the updated Terms.
Your continued use of the Services after the effective date constitutes acceptance of the updated Terms, to the extent permitted by applicable law.

25. Governing Law and Disputes
These Terms are governed by the laws of Bulgaria, without regard to conflict-of-law principles.
Any dispute arising out of or relating to these Terms or the Services will be subject to the jurisdiction of the competent courts of Sofia, Bulgaria, unless mandatory applicable law provides otherwise.
For business customers, the parties may agree to alternative dispute-resolution or jurisdiction provisions in a separate written agreement.

26. General Provisions
If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions will remain in full force and effect.
Failure by Cloventa to enforce a provision of these Terms does not constitute a waiver of that provision.
You may not assign or transfer your rights or obligations under these Terms without Cloventa's prior written consent, except where permitted by applicable law.
Cloventa may assign these Terms in connection with a merger, acquisition, corporate reorganisation, or sale of all or substantially all of its assets.
These Terms, together with any applicable order form, subscription agreement, DPA, SLA, and other documents expressly incorporated by reference, constitute the agreement governing your use of the Services.