The terms for using Trisova

Trisova is an online platform for third-party, supply chain, procurement, health and safety and environmental risk. Your organisation gets the areas, plan and limits in its order form. We may improve and change features; we won't take away something your organisation relies on during its term without telling you first.

• Your organisation's owners and admins decide who gets an account and what each person can see.
• Each person uses their own login and keeps it safe. Owners and admins must use two-factor sign-in.
• Tell us straight away at hello@trisova.com if you think an account has been misused.

• Your organisation owns what it puts into Trisova. We use it only to provide the service, as the data processing agreement says.
• You're responsible for having the right to put that data in, including your suppliers' and staff's personal data.
• Owners and admins can download everything your organisation holds in Trisova at any time, from Settings, in open formats (CSV and JSON, plus your uploaded files).
• When the contract ends, we delete your data after the retrieval period below, except what the law makes us keep.

AI features draft and suggest; a person at your organisation decides. AI output can be wrong, so check it before relying on it. Trisova's risk ratings, alerts and suggestions support your judgement; they aren't legal, financial or safety advice. See how we use AI.

Don't use Trisova to break the law, to harass anyone, to try to get into another organisation's data, to overload or probe the service, or to copy it to build a competing product. We may suspend access to stop serious misuse, and will tell you why.

Fees, billing dates and any pilot terms are in your order form. Invoices are due within 30 days. Plans are Pilot, Essentials, Professional and Enterprise.

We aim to keep Trisova available at all times except planned maintenance, which we announce in advance where we can. Support is by email at hello@trisova.com; any service-level commitments are in your order form.

Each side keeps the other's confidential information confidential. We protect your data as described on the trust pages and in the data processing agreement.

Neither side is liable for indirect or consequential loss. Each side's total liability in a contract year is limited to the fees paid or payable in the 12 months before the claim. Nothing limits liability that the law doesn't allow to be limited, such as for death or personal injury caused by negligence, or fraud.

The contract runs for the term in your order form and renews unless either side gives notice as the order form says. Either side may end it if the other seriously breaks it and doesn't fix that within 30 days of being told.

So you're never locked in (the EU Data Act, Articles 23 to 31):

• You can ask to switch to another provider, or to your own systems, with up to two months' notice. You can also ask us to delete everything instead.
• After the notice, we help for up to 30 days while you move (longer if you need it and we agree, or if moving takes longer for technical reasons, which we'd explain).
• What moves: every record your organisation entered or Trisova produced for it (suppliers, assessments, incidents, risks, contracts, reports and the rest), the files you uploaded, and the settings and lists you set up, as CSV and JSON with a description of how the tables link. Passwords and keys for systems you connected stay behind; you reconnect those in the new tool.
• Then you have at least 30 more days to download anything you missed, before we delete it and confirm the deletion.
• No charge for switching, for the data download or for ending the contract to switch.
• The contract ends once the move is done, or at the end of the notice if you only want your data deleted.

These terms are governed by the law of England and Wales, and its courts decide disputes, unless your order form says otherwise.