Terms of Service

By accessing or using the Imara Trust platform, our website, or related services ("Services"), you agree to be bound by these Terms of Service. If you are using the Services on behalf of an organization, you represent that you have authority to bind that organization. If you do not agree to these terms, do not use the Services.

Imara Trust is a cybersecurity and compliance SaaS platform that helps organizations manage security programs, compliance frameworks (e.g., SOC 2, ISO 27001, GDPR), risk management, control automation, evidence collection, third-party assessments, trust programs, and audit readiness. The platform includes software tools, integrations with third-party systems, and features designed to support continuous compliance monitoring and security governance. Imara does not provide legal, audit, or certification services; the platform supports your internal processes and preparation for independent audits and certifications.

You must be at least 18 years old and have the legal capacity to enter into a binding agreement. You may not use the Services if you are prohibited by applicable law or if your use would violate these terms. Each user must have their own account credentials; sharing credentials or circumventing access controls is prohibited.

You must create an account to use the Services. The organization or entity that subscribes to the Services owns the workspace and associated data. You are responsible for maintaining the confidentiality of account credentials, for all activities under your account, and for notifying us promptly of any unauthorized access. Account administrators are responsible for managing user access, roles, and permissions within their workspace.

We grant you a limited, non-exclusive, non-transferable right to access and use the Services in accordance with your subscription. You agree to use the platform only for lawful purposes and in compliance with these terms. You must not: use the Services for illegal purposes or to violate any laws; attempt to gain unauthorized access to our systems, other customers' data, or any third-party systems; interfere with or disrupt the integrity or performance of the Services; reverse engineer, decompile, or disassemble the platform except as permitted by law; resell, sublicense, or redistribute the Services without our written consent; or use the Services to build a competing product.

You retain ownership of content you upload to the platform ("Customer Content"), including evidence, policies, risk data, and configuration. You grant us a limited license to use, store, and process Customer Content solely to provide and improve the Services. You represent that you have all necessary rights to provide Customer Content and that it does not infringe third-party rights or violate applicable law. You are responsible for the accuracy and legality of Customer Content.

We implement technical and organizational measures to protect the platform and data. You are responsible for: maintaining secure credentials and access controls; configuring your workspace and integrations appropriately; ensuring that users with access to sensitive data are authorized and trained; and complying with your own security and compliance obligations. We will notify you of security incidents affecting your data in accordance with applicable law and our agreements.

The platform may integrate with third-party services (e.g., cloud providers, identity providers, ticketing systems). Your use of integrations is subject to the terms and policies of those third parties. We are not responsible for third-party services. You are responsible for configuring integrations and for the data shared with third parties through those integrations.

Imara retains all rights to the platform, software, documentation, and our trademarks. You retain ownership of Customer Content. Nothing in these terms grants you rights to our intellectual property except the limited right to use the Services as permitted herein.

You may not: use the Services for illegal purposes or to violate any laws; attempt to gain unauthorized access to our systems or other customers' data; interfere with other users' use of the Services; reverse engineer or copy our software; resell or redistribute the Services without permission; use the Services to build a competing product; or use the Services in a manner that could harm, disable, or overburden our infrastructure.

We strive to maintain high availability but do not guarantee uninterrupted access. We may modify, suspend, or discontinue features with reasonable notice where practicable. Material changes that adversely affect your use will be communicated in advance when feasible. Scheduled maintenance will be communicated through standard channels.

Imara Trust supports security governance and compliance operations but does not itself grant certifications, guarantee audit outcomes, or replace independent legal, audit, or compliance advice. Achieving and maintaining compliance, certifications, and audit readiness depends on your organization's practices, controls, and the judgment of auditors and regulators. We recommend consulting qualified professionals for legal, audit, and compliance matters.

Either party may terminate the agreement in accordance with the subscription terms. We may suspend or terminate access for material breach, non-payment, or to protect the platform and other users. Upon termination, your right to use the Services ceases. We will provide a reasonable period for data export where applicable. After the export period, we may delete your data in accordance with our retention practices.

The Services are provided "as is" and "as available" without warranties of any kind, express or implied. We do not warrant that the Services will be uninterrupted, error-free, or meet your specific requirements. To the extent permitted by law, we disclaim all warranties, including merchantability and fitness for a particular purpose.

To the maximum extent permitted by law, Imara shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunities. Our total liability shall not exceed the fees paid by you for the Services in the twelve months preceding the claim. These limitations apply regardless of the theory of liability.

You agree to indemnify and hold Imara harmless from any claims, damages, losses, or expenses (including reasonable attorneys' fees) arising from your use of the Services, your violation of these terms, your Customer Content, or your violation of any third-party rights or applicable law.

Each party agrees to protect the other's confidential information with reasonable care and not to disclose it except as necessary to perform under these terms or as required by law. Confidential information includes non-public technical, business, and pricing information. These obligations survive termination.

These terms shall be governed by the laws of the State of California, without regard to its conflict of law provisions. Any disputes shall be resolved in the courts of California.

We may modify these terms at any time. We will provide notice of material changes by posting the updated terms and updating the "Last updated" date. For material changes, we may provide additional notice by email or through the platform. Your continued use of the Services after such notice constitutes acceptance of the updated terms.

For questions about these Terms of Service: Email: [email protected] Address: Hortolândia, SP, Brazil