Terms of Use

The website and related online services are operated by Cyvalent S.à r.l., a Luxembourg private limited liability company / société à responsabilité limitée.

For full company, registration, management, contact and publication information, please see our Legal Notice: [Legal Notice link to be inserted].

For legal questions about these Terms, you may contact us at: [legal contact email to be confirmed, e.g. legal@cyvalent.lu].

These Terms apply to your access to and use of:

These Terms are general website and online-use terms. They do not replace any written agreement separately entered into between Cyvalent and a customer.

Separate terms may apply to, for example:

Cyvalent's website, platform and services are intended for business and professional use.

By using the website or services on behalf of an organisation, you confirm that:

Submitting a demo request, contact form, waitlist registration or similar request does not guarantee access to Cyvalent RGX, any product feature, any particular timeline, pricing, subscription plan or service availability.

Cyvalent may accept, reject, prioritise, postpone or close waitlist, demo, beta or pilot access at its discretion, subject to any separate written agreement.

Beta, pilot or trial features may be incomplete, experimental, limited in availability, changed, suspended or withdrawn. They should not be used as the sole basis for critical business, legal, regulatory, audit, certification, security or compliance decisions unless Cyvalent has expressly agreed otherwise in writing.

Where account access is made available, you are responsible for:

You must use the website, platform and services only for lawful, professional and authorised purposes.

You must not, and must not allow anyone else to:

Because Cyvalent operates in the cybersecurity and GRC domain, additional restrictions apply.

Unless Cyvalent has given prior written authorisation, you must not:

Where you submit information to Cyvalent through the website, contact forms, demo requests, waitlist registrations, support channels or the Cyvalent RGX platform, you remain responsible for that information.

"Customer Content" means data, files, text, documents, prompts, evidence, security information, risk information, compliance information, governance information, technical information, logs, configuration information or other materials that you or your organisation submit, upload, connect, provide or generate through the services.

As between you and Cyvalent, you retain ownership of your Customer Content.

You grant Cyvalent a limited, non-exclusive, worldwide right to host, store, copy, transmit, process, analyse, display and otherwise use Customer Content only as reasonably necessary to:

Cyvalent processes personal data as described in its Privacy Policy / Privacy Notice: [Privacy Policy link to be inserted].

Where Cyvalent processes personal data on behalf of a customer as part of a SaaS, pilot, beta, consulting or other customer service, a separate Data Processing Agreement or data-processing clause may be required.

Information about cookies and similar technologies is provided in the Cookie Notice: [Cookie Notice link to be inserted].

The website may include public information about Cyvalent's services. Information made publicly available on the website is not confidential.

If you provide non-public business, technical, security, risk, compliance or governance information to Cyvalent, Cyvalent will handle it with reasonable care and in accordance with the applicable agreement, privacy documentation and security arrangements.

Detailed confidentiality obligations for SaaS subscriptions, consulting engagements, beta or pilot programmes should be set out in the applicable customer agreement, statement of work, beta terms, DPA or other written agreement.

Cyvalent and its licensors retain all rights, title and interest in and to the website, Cyvalent RGX platform, software, source code, object code, interfaces, designs, databases, workflows, documentation, graphics, logos, names, trademarks, service marks, AI prompts, models, algorithms, rule sets, control mappings, templates, methods, know-how and other materials made available by or on behalf of Cyvalent.

Except as expressly permitted by these Terms or a separate written agreement, you may not copy, reproduce, modify, adapt, translate, distribute, publish, resell, sublicense, make available, reverse engineer or create derivative works from Cyvalent content, software or services.

Cyvalent grants you a limited, revocable, non-exclusive, non-transferable right to access and use the website and any service made available to you solely for your internal business purposes and in accordance with these Terms and any applicable agreement.

No rights are transferred to you except as expressly stated.

If you provide suggestions, ideas, improvement requests, bug reports or other feedback, Cyvalent may use that feedback to improve its website, platform, services and business without obligation to compensate you.

Cyvalent will not intentionally identify you publicly as the source of feedback without your permission, unless required by law or agreed otherwise.

Cyvalent RGX may include or later include AI-supported functionality, such as analysis, drafting, summarisation, mapping, recommendations, workflow support, risk or control suggestions, evidence support, compliance support or similar assistance.

AI-supported features are intended to assist professional users. They do not replace human expertise, professional judgment, legal review, audit review, compliance assessment, management decision-making or customer validation.

AI outputs may be incomplete, inaccurate, outdated, biased, inconsistent or unsuitable for your specific circumstances. You are responsible for reviewing, validating and deciding whether and how to rely on any AI-supported output.

Unless expressly agreed in writing, Cyvalent does not warrant or represent that AI outputs or platform outputs are:

Cyvalent may provide information, tools, workflows, templates, recommendations, reports or consulting support relating to cybersecurity, cyber governance, risk management, compliance, controls, evidence, policies, third-party risk, security operations or regulatory frameworks.

Unless expressly agreed in writing, such outputs are provided as professional support and business information only. They do not constitute legal advice, regulatory advice, audit opinion, certification, assurance opinion, financial advice or regulator-approved guidance.

You remain responsible for:

The website or services may refer to, integrate with or link to third-party websites, tools, platforms, providers, standards, frameworks, content or services.

Cyvalent is not responsible for third-party websites, services, content, terms, availability, security or privacy practices. Your use of third-party services may be subject to separate terms between you and the relevant third-party provider.

Where integrations or third-party providers are used as part of a customer service, further details may be set out in the applicable customer agreement, DPA, subprocessor list, security documentation or order form.

Cyvalent aims to provide accurate and useful website and service information, but the website and any online services are provided on an "as available" basis.

Cyvalent may update, change, suspend, discontinue or restrict access to the website, content, demos, waitlists, beta features, pilot features, platform features or services at any time, subject to any separate written agreement.

Public statements about planned features, roadmaps, timelines, prices or availability are informational only and do not create a binding commitment unless expressly agreed in a written contract signed or accepted by Cyvalent.

Cyvalent may suspend or restrict your access to the website, platform or services if Cyvalent reasonably believes that:

To the maximum extent permitted by applicable law, the website, content and services covered by these Terms are provided on an "as is" and "as available" basis.

Cyvalent does not warrant that:

To the maximum extent permitted by applicable law, Cyvalent will not be liable under these Terms for indirect, incidental, special, punitive or consequential damages, loss of profit, loss of revenue, loss of business opportunity, loss of goodwill, loss of anticipated savings, business interruption or loss of data, whether based on contract, tort, negligence or any other legal theory.

Where a separate written customer agreement applies, liability will be governed by that agreement.

Where no separate written customer agreement applies, Cyvalent's liability under these Terms is limited to direct and foreseeable loss caused by Cyvalent's breach of these Terms, subject always to any mandatory liability that cannot lawfully be excluded or limited.

Nothing in these Terms limits liability for fraud, wilful misconduct, or any other liability that cannot be excluded or limited under applicable law.

You are responsible for your use of the website and services, your Customer Content, your accounts, and the actions of users you authorise.

To the extent permitted by applicable law, you agree to hold Cyvalent harmless from third-party claims, losses, damages, costs or expenses arising from:

Cyvalent may update these Terms from time to time, for example to reflect changes in services, website functionality, legal requirements, business operations or security practices.

The updated version will be indicated by the "Last updated" date above. Continued use of the website or relevant services after the updated Terms are posted means that you accept the updated Terms.

For material changes affecting paid customers, the applicable customer agreement may provide additional notice or change-management rules.

These Terms and any non-contractual obligations arising out of or in connection with them are governed by the laws of the Grand Duchy of Luxembourg, without prejudice to any mandatory laws that may apply.

Subject to any mandatory jurisdiction rules and any separate written agreement, the competent courts of Luxembourg City, Grand Duchy of Luxembourg, shall have jurisdiction over disputes arising out of or in connection with these Terms.

For questions about these Terms, contact: