Terms of Service

Last updated: August 1, 2026

These Terms of Service are provided in English. The English version is the sole legally binding text. Any translation is provided for convenience only and is not authoritative.

Welcome to Cautium. By using our service at cautium.org, you agree to these Terms of Service. Please read them carefully.

1. Service Description

Cautium is an AI-powered Third-Party Risk Management (TPRM) platform. You upload your security material — policies, certifications, and previous responses — to build a private knowledge base. When you upload a security questionnaire (such as SIG, CAIQ, VSA, or a client's own form), our system uses artificial intelligence to draft answers grounded in your own sources, citing the exact document each answer comes from. You review, adjust, and export the result.

2. Not Professional Advice

Important: Cautium is a technology tool. It is not a law firm, security auditor, or compliance certifier. The answers, summaries, and risk assessments generated by Cautium are informational aids only and do not constitute legal, security, or compliance advice. AI-generated output can contain errors or omissions. You are responsible for reviewing every answer for accuracy and completeness before submitting it to a client, auditor, or any third party. Cautium does not certify, validate, or vouch for your security posture.

3. Your Responsibility to Review

Because the answers Cautium drafts are sent by you to your own clients and auditors, you remain solely responsible for their content. Cautium helps you find and phrase answers from your material faster; it does not replace your own judgement or your organization's review and approval process. You should verify that each answer accurately reflects your current controls and evidence before you export or send it.

4. Privacy and Data Protection

Our collection and processing of personal data, including any personal data contained in the documents you upload, is governed by our Privacy Policy, which is incorporated into these Terms by reference and forms part of this agreement. Where the EU General Data Protection Regulation (GDPR) applies, we process personal data as described there, including the legal basis for processing, retention periods, and your rights as a data subject. If you upload a document containing personal data of third parties, you are responsible for ensuring you have a lawful basis to share that data with us for the purpose of operating your knowledge base and generating your answers.

5. Account Responsibilities

• Cautium uses passwordless sign-in: you log in with a one-time code sent to your email. You are responsible for maintaining control of the email account associated with Cautium.
• You must not share your account with others.
• If you invite team members to your organization, you are responsible for managing their access and for the activity of the members you invite.
• You must be at least 18 years old to use Cautium.
• You are responsible for all activity that occurs under your account and organization.

6. Acceptable Use

You agree not to:

• Upload documents that you do not have the right to share with us.
• Use the service for any illegal purpose.
• Attempt to reverse engineer or scrape the service.
• Upload malicious files or attempt to compromise our systems.
• Resell or redistribute the service without our written permission.

7. Subscription and Payment

Cautium offers paid subscription plans. By subscribing, you authorize us to charge your payment method on a recurring basis. You may cancel your subscription at any time; cancellation takes effect at the end of the current billing period, and you retain access to your plan until then. Cancelling a subscription does not, by itself, entitle you to a refund — see the right of withdrawal below.

7.1 EU/EEA consumers — 14-day right of withdrawal

If you are a consumer residing in the European Union or European Economic Area, you have the right to withdraw from your subscription within 14 days of subscribing, without giving any reason ("cooling-off period"), under Directive 2011/83/EU. This right applies to consumers; most Cautium subscriptions are entered into by businesses, to which Section 7.2 applies.

To exercise this right, email support@cautium.org with a clear statement of your decision to withdraw. We will acknowledge receipt of your request and process any refund due within 14 days, using the same payment method you used for the original transaction.

7.2 All other customers

For customers not covered by Section 7.1 (including business customers and consumers outside the EU/EEA), subscription fees are non-refundable once a billing period has been charged, except at our discretion on a case-by-case basis.

8. Intellectual Property

The Cautium service, including its design, code, and AI workflows, is owned by Cautium and protected by intellectual property laws. The documents you upload and the answers you generate and export remain your property at all times.

9. Limitation of Liability

To the maximum extent permitted by law, Cautium shall not be liable for any indirect, incidental, special, or consequential damages arising from your use of the service. Our total liability to you for any claims shall not exceed the amount you paid us in the 12 months preceding the claim.

Nothing in these Terms excludes or limits any liability, or any statutory right you may have as a consumer, that cannot lawfully be excluded or limited under the law of your country of residence, including mandatory consumer protections under EU or Spanish law where applicable. If any part of this limitation is found unenforceable as to a consumer claim, the remainder of this Section 9 remains in effect to the fullest extent permitted by law.

10. Disclaimer of Warranties

The service is provided "as is" without warranties of any kind. We do not guarantee that our AI-generated answers or analyses will be accurate, complete, or suitable for any particular purpose. This disclaimer does not exclude or limit any statutory warranty or consumer right that cannot lawfully be excluded under applicable law.

11. Termination

We reserve the right to suspend or terminate your account if you violate these Terms. You may terminate your account at any time by contacting us.

12. Governing Law

These Terms are governed by the laws of Spain. Any disputes shall be resolved in the courts of Madrid, Spain.

13. Changes to Terms

We may update these Terms from time to time. For minor or non-material changes, continued use of the service after the change constitutes acceptance of the updated Terms. For material changes that meaningfully reduce your rights or increase your obligations — for example, a price increase or a significant change to the cancellation or refund terms in Section 7 — we will notify you by email in advance and, where you are a consumer protected by EU law, will require your active acceptance before the change applies to you.

14. Contact

For questions about these Terms, contact us at: support@cautium.org