Terms of Service

These Terms of Service (the “Terms”) are a contract between you and ISOSOC Advisory Ltd, a company registered in England and Wales (company number 17254731), the operator of riskregister.com (the “Service”, “we”, “us”). By creating an account, accessing or using the Service, you agree to these Terms. If you are using the Service on behalf of an organisation, you confirm that you are authorised to bind that organisation, and “you” refers to that organisation.

If you do not agree to these Terms, you must not use the Service.

riskregister.com is a software-as-a-service application for recording, assessing and managing organisational risk, including risk registers, controls, scopes, reporting and exports, a REST API and a Model Context Protocol (MCP) server. We may add, change or remove features over time.

You must be at least 18 years old and capable of forming a binding contract to use the Service. Sign-in is passwordless: you receive a one-time code by email. You are responsible for maintaining access to the email address associated with your account.

An organisation administrator is responsible for the members they invite, the roles they assign and the activity carried out under the organisation’s account.

You agree not to:

• use the Service in breach of any applicable law or regulation;
• attempt to gain unauthorised access to the Service, other customers’ data, or our systems;
• probe, scan, overload or disrupt the Service, or circumvent its rate limits or access controls;
• upload unlawful, infringing or malicious content; or
• resell or provide the Service to third parties except as expressly permitted.

The Service offers a free plan and paid plans. Paid subscriptions are billed in advance through our payment processor, Stripe, and renew automatically for successive periods until cancelled. You can cancel at any time from your billing settings; cancellation takes effect at the end of the current billing period.

Fees are stated on our pricing page and are exclusive of taxes unless otherwise indicated. Except where the law requires otherwise, fees are non-refundable, and no refunds or credits are given for partial billing periods or unused seats.

As between you and us, you retain all rights to the data you submit to the Service (“Customer Data”). You grant us a limited licence to host, process and transmit Customer Data solely to provide and support the Service. Our processing of personal data is described in our Privacy Policy and, where applicable, our Data Processing Agreement. You can export your data at any time in the formats the Service provides.

The Service, including its software, design, trademarks and content (but excluding Customer Data), is owned by ISOSOC Advisory Ltd or its licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable right to use the Service in accordance with these Terms. No other rights are granted.

The Service is provided “as is” and “as available” without warranties of any kind, whether express or implied, including implied warranties of merchantability, fitness for a particular purpose and non-infringement, to the fullest extent permitted by law.

The Service is a tool for recording and managing risk information. It does not constitute legal, regulatory, compliance, audit or professional advice, and is not a substitute for the judgement of qualified professionals. You are responsible for your own compliance decisions.

To the fullest extent permitted by law, neither party will be liable for indirect, incidental, special, consequential or exemplary damages, or for lost profits, revenue or data. Our total aggregate liability arising out of or relating to the Service will not exceed the fees you paid to us in the 12 months before the event giving rise to the claim (or £100 if you are on a free plan). Nothing in these Terms excludes liability that cannot be excluded under applicable law, including liability for death or personal injury caused by negligence, or for fraud.

We may suspend or terminate your access if you materially breach these Terms or if required to protect the Service or other customers. You may stop using the Service and close your account at any time. On termination, your right to use the Service ends; you may export Customer Data for a reasonable period, after which we may delete it in line with our Privacy Policy and retention practices.

We may update these Terms from time to time. If we make material changes, we will take reasonable steps to notify you, for example by email or an in-product notice. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Terms.

These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute, without prejudice to any mandatory consumer protections available to you.

Questions about these Terms can be sent to legal@riskregister.com. The contracting entity is ISOSOC Advisory Ltd, a company registered in England and Wales (company number 17254731), whose registered office is at 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.