Terms of Service

1. Agreement to Terms

By accessing or using Basenorm's platform ("Service"), you agree to be bound by these Terms of Service. These Terms constitute a legally binding agreement between you and Basenorm.

2. Service Description and AI Assistance

Basenorm provides an AI-powered GRC (Governance, Risk, and Compliance) platform.

• Ask Norman: Our AI assistant helps automate workflows for NIS2, DORA, ISO 27001, and GDPR.
• Nature of AI: You acknowledge that AI-generated content is intended for guidance and efficiency. It does not constitute legal or professional advice.

3. Intellectual Property, AI Output & Community Intelligence

• Basenorm Ownership: Basenorm retains all rights, title, and interest in and to the Service, including software and underlying AI models.
• Your Data: You retain full ownership of all data and documents uploaded to the Service ("Customer Data").
• Ownership of Output: Basenorm hereby assigns to you all its rights, title, and interest in and to the specific output generated by the Service (e.g., generated policies) based on your Customer Data.
• Community Intelligence: Basenorm may use de-identified, anonymous, and aggregated data derived from your use of the Service to provide industry benchmarks, improve AI models, and develop insights for the Basenorm community. This data will never be traceable to you or any individual user.

4. Acceptable Use

You agree NOT to:

• Use the Service for competitive analysis or to build a competing product.
• Reverse engineer any part of our AI models or software.
• Use the Service in a manner that violates GDPR, NIS2, or DORA regulations.

5. Liability & Compliance Disclaimer

• Final Responsibility: Compliance is a continuous process. Basenorm provides tools to assist, but the final responsibility for regulatory compliance lies solely with your organization.
• Limitation of Liability: To the maximum extent permitted by law, Basenorm's total liability shall not exceed the amount paid by you for the Service in the 12 months preceding the claim.

6. Data Sovereignty

7. Governing Law and Jurisdiction

These Terms are governed by and construed in accordance with the laws of The Netherlands. Any disputes arising from these Terms shall be submitted to the exclusive jurisdiction of the competent courts in Amsterdam.