Terms of Service

By creating an account, connecting an integration, or using Shieldoq, you agree to these Terms and our Privacy Policy. If you use the service on behalf of a company, you represent that you have authority to bind that company.

Shieldoq provides a Universal Compliance Engine: continuous mapping of security findings from code, cloud, and identity sources to controls across frameworks including SOC 2, HIPAA, ISO 27001, ISO 42001, GDPR, PCI DSS, FedRAMP, CMMC, and others supported in the product.

We may update features, frameworks, and integrations over time. Beta or preview features are provided as-is and may change without notice.

• Maintain accurate account information and protect login credentials
• Ensure you have permission to connect third-party systems to Shieldoq
• Review AI-generated policies, gap remediations, and questionnaire answers before relying on them for audits
• Use the service in compliance with applicable laws and integration provider terms
• Not attempt to probe, disrupt, or reverse engineer the platform

Paid plans are billed according to the pricing shown at signup or in your order form. Fees are non-refundable except where required by law or explicitly stated in writing. We may change pricing with reasonable notice to existing customers.

The free assessment tier includes limited integrations and features as described on our pricing page.

Shieldoq owns the platform, software, and documentation. You retain ownership of your data. You grant us a limited license to process your data solely to provide and improve the service.

Aggregated, de-identified analytics may be used to improve product quality. We will not use your identifiable compliance data to train public models without your consent.

Shieldoq helps identify gaps and organize evidence; it does not guarantee certification, audit outcomes, or regulatory approval. The service is provided "as is" to the maximum extent permitted by law.

Our total liability for any claim arising from these Terms is limited to fees paid by you in the twelve months before the claim, except for fraud or liability that cannot be limited by law.

You may cancel at any time through account settings or by contacting support. We may suspend or terminate access for material breach, non-payment, or security risk after notice where practicable.

Upon termination you may export data for a limited grace period; thereafter we delete or anonymize data per our retention schedule.

Questions: legal@shieldoq.com