TERMS OF SERVICE

We provide the Services for use by regulated-industry compliance teams and their authorized representatives. All users who are minors in the jurisdiction in which they reside are not permitted to use the Services. By using the Services, you represent that you have the legal capacity to enter into these Terms and are not a minor.

These Terms of Service, and any policies or operating rules posted by us on the Services (including our Privacy Policy), expressly incorporated herein by reference, together constitute the entire agreement between you and us.

AI Compliance Navigator helps organizations assess their AI systems against international compliance frameworks — including NIST AI RMF, ISO/IEC 42001, OWASP LLM Top-10, and the EU AI Act — through guided assessments, AI-generated gap analysis reports, a Code Analyzer for OWASP LLM Top-10 security review, and a regulations library covering AI-related laws across 88 countries.

The information provided when using the Services is not intended for distribution to or use by any person or entity in any jurisdiction or country where such distribution or use would be contrary to law or regulation. Those who access the Services from other locations do so on their own initiative and are solely responsible for compliance with local laws, where applicable.

We are the owner or licensee of all intellectual property rights in the Services, including the source code, databases, functionality, software, website designs, audio, video, text, photographs, and graphics (collectively, the "Content"), as well as the trademarks, service marks, and logos contained therein (the "Marks"). Our Content and Marks are protected by copyright and trademark laws (and various other intellectual property rights) and treaties around the world.

Subject to your compliance with these Terms of Service, we grant you a non-exclusive, non-transferable, revocable license to access the Services and to download or print a copy of any portion of the Content to which you have properly gained access, solely for your internal business use.

By using the Services, you represent and warrant that:

• all registration information you submit will be true, accurate, current, and complete;
• you will maintain the accuracy of such information and promptly update it as necessary;
• you have the legal capacity and you agree to comply with these Terms of Service;
• you are not a minor in the jurisdiction in which you reside;
• you will not access the Services through automated or non-human means, except through a bot or application program we have approved;
• you will not use the Services for any illegal or unauthorized purpose; and
• your use of the Services will not violate any applicable law or regulation.

You may not access or use the Services for any purpose other than that for which we make them available. As a user of the Services, you agree not to:

• Systematically retrieve data or other content from the Services to create or compile, directly or indirectly, a collection, compilation, database, or directory without written permission from us.
• Trick, defraud, or mislead us or other users, especially in any attempt to learn sensitive account information such as user passwords.
• Circumvent, disable, or otherwise interfere with security-related features of the Services.
• Use the Services in a manner inconsistent with any applicable laws or regulations.
• Scan, upload, or submit code, repositories, or ZIP archives you are not authorized to access or share — including code owned by a third party, a former employer, or under a license that prohibits this kind of analysis.
• Submit classified, export-controlled, or similarly restricted information — of any kind, in any assessment field, code submission, or repository scan — to the Services.
• Attempt to circumvent trial usage limits, quota restrictions, or plan-tier entitlements, including by creating multiple accounts, organizations, or trial credits for the same person or company.
• Rely on assessment results, gap analysis reports, security findings, or refactored code produced by the Services as a substitute for professional legal advice or as a certification of regulatory compliance — see Section 14 (Disclaimer).
• Use the Services in a manner that could disable, overburden, damage, or impair the site.
• Attempt to bypass any measures designed to prevent or restrict access to the Services.
• Use any information obtained from the Services to harass, abuse, or harm another person.
• Use the Services as part of any effort to compete with us or otherwise use the Services for any revenue-generating endeavor or commercial enterprise not expressly permitted.

The Services may allow you to submit code, ZIP archives, repository URLs, assessment answers, evidence, organization details, and other content or materials (collectively, "Contributions"). Contributions may be viewable by other users of the Services within your organization and through third parties. You are solely responsible for your Contributions and represent that you have all necessary rights, licenses, and permissions to submit them and to grant us the license described in Section 7.

By submitting Contributions to the Services, you grant us a non-exclusive, transferable, royalty-free, worldwide license to use, reproduce, and process your Contributions solely for the purpose of operating, providing, and improving the Services — including transmitting Contributions to third-party AI service providers (currently Anthropic) to generate assessments, findings, and refactored code on your behalf, as described in our Privacy Policy. This license does not grant us ownership of your Contributions.

We reserve the right, but not the obligation, to: (1) monitor the Services for violations of these Terms of Service; (2) take appropriate legal action against anyone who, in our sole discretion, violates the law or these Terms; (3) refuse, restrict access to, limit the availability of, or disable any Contribution; and (4) otherwise manage the Services in a manner designed to protect our rights and property and to facilitate the proper functioning of the Services.

These Terms of Service shall remain in full force and effect while you use the Services. We reserve the right to, in our sole discretion and without notice or liability, deny access to and use of the Services to any person for any reason, including breach of any representation, warranty, or covenant contained in these Terms or of any applicable law or regulation. We may terminate your account or suspend your access at any time, without warning.

We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice. We cannot guarantee the Services will be available at all times and may experience hardware, software, or other problems, or need to perform maintenance, resulting in interruptions, delays, or errors. We will not be liable to you for any loss or damage of any kind caused by any unavailability or interruption of the Services.

These Terms of Service and your use of the Services are governed by and construed in accordance with the laws of Singapore applicable to agreements made and to be entirely performed within Singapore, without regard to its conflict of law principles.

Informal Negotiations. To expedite resolution and control the cost of any dispute, controversy, or claim related to these Terms of Service (each a "Dispute"), you and we agree to first attempt to negotiate any Dispute informally for at least thirty (30) days before initiating arbitration.

Binding Arbitration. If the Parties are unable to resolve a Dispute through informal negotiations, the Dispute will be finally and exclusively resolved by binding arbitration seated in Singapore, administered by the Singapore International Arbitration Centre (SIAC) in accordance with the Arbitration Rules of SIAC for the time being in force, which rules are deemed to be incorporated by reference into this section. The tribunal shall consist of one arbitrator. The language of the arbitration shall be English.

There may be information on the Services that contains typographical errors, inaccuracies, or omissions, including descriptions, pricing, availability, and other information. We reserve the right to correct any errors, inaccuracies, or omissions and to change or update the information on the Services at any time, without prior notice.

THE SERVICES ARE PROVIDED ON AN AS-IS AND AS-AVAILABLE BASIS. YOU AGREE THAT YOUR USE OF THE SERVICES WILL BE AT YOUR SOLE RISK. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE SERVICES AND YOUR USE THEREOF.

AI-Generated Content Disclaimer. Assessment results, gap analysis reports, security findings, key improvements, and refactored code produced by the Services are generated using artificial intelligence (currently Anthropic's Claude models) and are provided for informational purposes only. AI-generated output may contain errors, omissions, or inaccuracies. Nothing produced by the Services constitutes legal advice, a certification or guarantee of compliance with NIST AI RMF, ISO/IEC 42001, OWASP LLM Top-10, the EU AI Act, or any other framework or regulation, or a substitute for review by qualified legal counsel or a professional security auditor. You are solely responsible for independently verifying any output before relying on it for compliance, security, or legal purposes.

IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE SIX (6) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING.

You agree to defend, indemnify, and hold us harmless from and against any loss, damage, liability, claim, or demand, including reasonable attorneys' fees and expenses, made by any third party due to or arising out of: (1) your Contributions; (2) use of the Services; (3) breach of these Terms of Service; (4) any breach of your representations and warranties set forth in these Terms of Service; or (5) your violation of the rights of a third party, including intellectual property rights.

We will maintain certain data that you transmit to the Services for the purpose of managing performance of the Services, as well as data relating to your use of the Services, as described in our Privacy Policy. You are solely responsible for all data that you transmit or that relates to any activity you have undertaken using the Services, including maintaining your own backups of any Contributions.

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications we provide to you electronically, via email and via the Services, satisfy any legal requirement that such communication be in writing. You hereby agree to the use of electronic signatures, contracts, orders, and other records, and to electronic delivery of notices, policies, and records of transactions initiated or completed by us or via the Services.

These Terms of Service and any policies or operating rules posted by us constitute the entire agreement between you and us. Our failure to exercise or enforce any right or provision of these Terms shall not operate as a waiver of such right or provision. If any provision of these Terms is determined to be unlawful, void, or unenforceable, that provision is deemed severable and does not affect the validity and enforceability of any remaining provisions. You may not assign your rights or obligations under these Terms without our prior written consent. We shall not be liable for any failure to perform due to causes beyond our reasonable control.

Singapore (Personal Data Protection Act 2012): Users in Singapore have the right to access, correct, and withdraw consent for their personal data.

Korea (Personal Information Protection Act): Users in Korea have the right to access, correct, delete, and suspend processing of their personal information.

Malaysia (Personal Data Protection Act 2010): Users in Malaysia have the right to access and correct their personal data held by us.

Thailand (Personal Data Protection Act B.E. 2562): Users in Thailand have the right to access, correct, delete, and port their personal data.

Indonesia (UU PDP — Personal Data Protection Law): Users in Indonesia have the right to access, correct, and delete their personal data.

To exercise any of these rights, contact comply@one-empire.com. For all ASEAN users, data subject requests will be responded to within 30 days of receipt.

In order to resolve a complaint regarding the Services or to receive further information regarding use of the Services, please contact us at:

One Empire
519D Tampines Central 8
Singapore 524519
Singapore
comply@one-empire.com