Terms of Service
Governing terms for access and use of the OMNiGRC platform, advisory AI assistance, tenant isolation, and risk/control operating workflows.
LAST UPDATED: SEPTEMBER 2026
Temporary Operational Master Service Agreement
These Terms of Service ("Terms") govern your organization's evaluation and operational use of OMNiGRC, including our multi-framework mapping, asset inventory correlation, risk registers, and advisory AI components.
01. Platform Access & Tenant Isolation
OMNiGRC provides a multi-tenant cloud GRC environment with strict logical tenant isolation. Each account operates inside isolated database schemas, preventing cross-customer data leakage.
- Authorized users must maintain secure credentials and MFA enforcement across team access.
- You retain 100% ownership of all uploaded asset metadata, control mappings, risk scores, and evidence artifacts.
02. Advisory AI & Human-in-the-Loop Policy
OMNiGRC incorporates advisory artificial intelligence ("Advisory AI Engine") to recommend framework clause correlations and evidence checks.
AI suggestions never alter live risk scores or framework alignments automatically. Every AI recommendation requires explicit review and approval by an authorized GRC analyst or team lead.
03. Security, Encryption & Availability
We enforce AES-256 encryption at rest and TLS 1.3 encryption in transit for all platform data. All AI queries undergo automated payload sanitization to ensure sensitive PII and secret tokens are redacted prior to external API processing.
04. Limitation of Liability
OMNiGRC provides audit readiness and framework alignment tools. While our software helps streamline compliance workflows across SOC 2, ISO 27001, and DPDP, final regulatory responsibility and formal audit certification remain with accredited third-party auditing bodies and the customer's compliance officers.
Questions about our Terms?
Contact our legal and architecture team for detailed enterprise SLA agreements.
Contact Legal Team