Terms of Service

1. Services Description

Scrutora provides an automated data-privacy analysis platform. It reads source code, infrastructure definitions, dependencies and connected cloud accounts to identify personal data, trace where that data travels, and report practices that may conflict with data-protection obligations, together with remediation suggestions.

IMPORTANT: Scrutora is a platform to ASSIST with compliance efforts. It is NOT a comprehensive compliance solution and does NOT guarantee HIPAA, GDPR, SOC 2, PCI DSS, DPDPA, Singapore MGF, or any regulatory compliance.

2. No Guarantee of Compliance

2.1 Tool Limitations

Scrutora:

• Analyzes code for POTENTIAL violations based on technical safeguards
• May produce false positives (flagging code that is actually compliant)
• May produce false negatives (missing actual violations)
• Cannot assess organizational, administrative, or physical safeguards
• Cannot evaluate business processes, policies, or procedures
• Cannot determine if your organization is compliant with HIPAA, GDPR, DPDPA, SOC 2, or any other regulation overall

2.2 Your Responsibility

YOU are solely responsible for:

• Achieving and maintaining compliance with all applicable regulations including HIPAA, GDPR, SOC 2, PCI DSS, DPDPA, and Singapore MGF
• Validating all scan results
• Implementing appropriate safeguards
• Consulting with legal and compliance professionals
• Conducting comprehensive risk assessments
• Implementing business associate agreements
• Training workforce members
• Ensuring compliance with all applicable regulations

2.3 No Legal or Compliance Advice

Scrutora does NOT provide legal advice, compliance advice, or professional services. Our Services identify potential technical issues in code but do not constitute legal guidance.

For compliance and legal questions, consult qualified legal counsel or certified compliance professionals.

3. Disclaimer of Warranties

3.1 "AS IS" Service

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:

• Warranties of merchantability
• Fitness for a particular purpose
• Non-infringement
• Accuracy or completeness
• Uninterrupted or error-free operation

3.2 Results Accuracy

We do NOT warrant that:

• Scan results are accurate, complete, or error-free
• All violations will be detected
• Flagged items are actual violations
• Following recommendations will ensure compliance
• Your use of the Services will prevent regulatory violations or penalties

4. Limitation of Liability

4.1 No Consequential Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SECUREHEALTH AI SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:

• Regulatory fines or penalties (including but not limited to HIPAA, GDPR, SOC 2, PCI DSS, DPDPA, and Singapore MGF)
• Regulatory enforcement actions
• Data breach costs
• Lost profits or revenue
• Business interruption
• Reputation damage
• Legal fees

4.2 Liability Cap

IN NO EVENT SHALL SECUREHEALTH AI'S TOTAL LIABILITY EXCEED THE AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM.

This limitation applies even if we have been advised of the possibility of such damages.

5. Indemnification

You agree to indemnify, defend, and hold harmless Scrutora, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses (including attorneys' fees) arising from:

• Your use of the Services
• Your violation of these Terms
• Your violation of any law or regulation
• Any claims that your use of the Services caused you to be non-compliant
• Any regulatory violations or enforcement actions against you, including but not limited to HIPAA, GDPR, SOC 2, PCI DSS, DPDPA, and Singapore MGF

6. User Responsibilities

6.1 Code Security

You are responsible for:

• Sanitizing uploaded code (removing production secrets, API keys, passwords)
• Not uploading code containing actual Protected Health Information (PHI), personally identifiable information (PII), or production data
• Ensuring you have rights to upload the code
• Reviewing and validating all scan results

6.2 False Positives

You acknowledge that:

• Automated scanning may produce false positives
• You must validate flagged items before taking action
• Not all flagged items require remediation
• You are responsible for determining what constitutes a violation

7. Intellectual Property

7.1 Our IP

Scrutora retains all rights to:

• The platform and Services
• Our algorithms, models, and methodologies
• Reports and output formats
• Trademarks and branding

7.2 Your Code

You retain all rights to your uploaded code. We do NOT claim ownership of your intellectual property.

7.3 Data Usage

We may use anonymized, aggregated data from scans to improve our Services. We will NOT share your specific code or results with third parties without your consent.

8. Account Terms

8.1 Account Security

You are responsible for:

• Maintaining confidentiality of your account credentials
• All activities under your account
• Notifying us of unauthorized use

8.2 Acceptable Use

You agree NOT to:

• Use the Services for illegal purposes
• Attempt to reverse engineer or copy our technology
• Upload malicious code or content
• Abuse or overload our systems
• Share account access with unauthorized users
• Use the Services to compete with us

9. Payment Terms

9.1 Fees

Fees are as stated on our pricing page. We reserve the right to change pricing with 30 days notice.

9.2 Subscriptions

Subscriptions auto-renew unless canceled. Cancellation takes effect at the end of the current billing period.

9.3 Refunds

We offer a 30-day money-back guarantee on all paid plans. If you are not satisfied within the first 30 days, contact us for a full refund. After the 30-day period, monthly subscriptions may be canceled at any time but are not refundable for partial months. Scan fees are non-refundable once a scan is initiated.

9.4 Taxes

You are responsible for all applicable taxes, duties, and levies associated with your purchase, other than taxes based on Scrutora's net income. For customers of Scrutora Private Limited (India), Goods and Services Tax (GST) will be applied where applicable and shown at checkout.

10. Termination

We may suspend or terminate your access to the Services at any time for:

• Violation of these Terms
• Non-payment
• Illegal or abusive conduct
• Any other reason at our discretion

Upon termination, your right to use the Services immediately ceases.

11. Changes to Terms

We may modify these Terms at any time. We will notify you of material changes via email or platform notification. Continued use after changes constitutes acceptance.

12. Governing Law

These Terms are governed by the laws of India, and the courts at Pune, Maharashtra, India shall have exclusive jurisdiction, subject to any non-waivable rights available to you under applicable consumer-protection law in your country of residence.

13. Severability

If any provision of these Terms is found invalid or unenforceable, the remaining provisions remain in full effect.

14. Contact Information

For questions about these Terms:

15. Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and Scrutora regarding the Services.