Terms of Service

These Terms of Service (“Terms”) govern your access to and use of the Claw GRC platform, APIs, documentation, and related services (collectively, the “Service”) provided by One Frequency Inc. (“Claw GRC,” “we,” “us,” or “our”). By accessing or using the Service, you agree to be bound by these Terms.

1. Service Description

Claw GRC is an AI-native governance, risk, and compliance (GRC) platform. The Service provides compliance framework management, control mapping, evidence collection and management, security assessments, AI agent governance, audit trail generation, and reporting capabilities. The Service is delivered as a cloud-hosted software-as-a-service (SaaS) application on Google Cloud Platform infrastructure.

2. Account Responsibilities

• You must provide accurate and complete information when creating an account.
• You are responsible for maintaining the confidentiality of your account credentials, API keys, and access tokens.
• You are responsible for all activities that occur under your account, including actions taken by AI agents you register with the platform.
• You must notify us immediately of any unauthorized use of your account at security@clawgrc.com.
• Organization administrators are responsible for managing user access and permissions within their organization.

3. Acceptable Use Policy

You agree not to use the Service to:

• Violate any applicable law, regulation, or third-party rights.
• Upload malicious code, viruses, or any content designed to disrupt the Service.
• Attempt to gain unauthorized access to other organizations' data or the Service infrastructure.
• Reverse engineer, decompile, or disassemble any part of the Service.
• Use the Service to generate fraudulent compliance reports or misrepresent your compliance status.
• Exceed published API rate limits or use automated means to scrape or extract data beyond your authorized scope.
• Register AI agents that impersonate humans or other organizations' agents.

4. Data Ownership

You retain all rights, title, and interest in your data. Compliance data, evidence artifacts, assessment results, agent interaction logs, and all other content you upload to or generate through the Service (“Customer Data”) remains your property.

You grant us a limited license to process, store, and transmit Customer Data solely to provide and improve the Service. We will not access, use, or share Customer Data for any purpose other than providing the Service, unless required by law.

You may export your Customer Data at any time via the dashboard or API in standard formats (JSON, CSV, PDF). Upon account termination, we will make your data available for export for 90 days before deletion.

5. Service Availability

We target 99.9% uptime for the Service, measured monthly, excluding scheduled maintenance windows. Scheduled maintenance will be communicated at least 48 hours in advance via email and our status page.

For customers on the Scale plan and above, specific SLA terms including service credits for downtime are detailed in your enterprise agreement. The Service is provided on a commercially reasonable efforts basis, and we do not guarantee uninterrupted or error-free operation.

6. Payment and Billing

• Subscription fees are billed monthly or annually in advance based on your selected plan.
• All fees are non-refundable except as required by law or as specified in your enterprise agreement.
• We may change pricing with 30 days' advance notice. Price changes take effect at the start of your next billing cycle.
• Overdue payments may result in suspension of access to the Service after 15 days' written notice.
• Payments are processed securely via Stripe. We do not store your payment card details.

7. Intellectual Property

The Service, including its design, code, algorithms, compliance framework data (excluding Customer Data), documentation, and branding, is the intellectual property of One Frequency Inc. Nothing in these Terms transfers any intellectual property rights to you beyond the limited right to use the Service as described herein.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, CLAW GRC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS OPPORTUNITIES, OR GOODWILL.

OUR TOTAL LIABILITY FOR ANY CLAIMS ARISING FROM OR RELATED TO THE SERVICE SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

The Service provides compliance management tooling. It does not constitute legal, regulatory, or audit advice. You are responsible for ensuring your organization's compliance with applicable laws and regulations. Compliance scores and reports generated by the Service are informational and do not guarantee regulatory compliance.

9. Indemnification

You agree to indemnify, defend, and hold harmless One Frequency Inc. and its officers, directors, employees, and agents from any claims, damages, or expenses arising from your use of the Service, your violation of these Terms, or your infringement of any third-party rights.

10. Termination

• You may terminate your account at any time from the Settings page or by contacting support.
• We may suspend or terminate your access for violation of these Terms, non-payment, or if required by law, with reasonable notice where possible.
• Upon termination, your right to use the Service ceases immediately. Your Customer Data will be available for export for 90 days.
• Sections relating to data ownership, limitation of liability, indemnification, and governing law survive termination.

11. Modifications to Terms

We may modify these Terms at any time. We will provide at least 30 days' notice of material changes via email or through the Service. Continued use of the Service after changes take effect constitutes acceptance. If you do not agree to the modified Terms, you may terminate your account.

12. Governing Law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law provisions.

Any disputes arising from these Terms or the Service shall be resolved through binding arbitration under the rules of the American Arbitration Association, except that either party may seek injunctive relief in a court of competent jurisdiction for intellectual property infringement or data security breaches.

13. Contact

For questions about these Terms: