Terms of use
Last updated: February 1, 2026
1. Acceptance of terms
By accessing the CapGRC platform or using its services, you agree to be bound by these terms of use. If you do not accept these terms, you must not use the platform.
2. Service description
CapGRC is a SaaS platform for governance, risk and compliance (GRC) management developed by CAPTOSEC Inc. The service is provided as is, with the availability levels described in the applicable service agreement.
3. Account and access
Access to CapGRC requires the creation of an organizational account. You are responsible for the confidentiality of your credentials and all activities carried out under your account. Any unauthorized use must be reported immediately to info@captosec.com.
4. Acceptable use
It is prohibited to use CapGRC for:
- Any illegal or fraudulent activity
- Attempting to access data from other organizations
- Introducing malware or harmful code
- Disrupting or overloading the platform infrastructure
- Bypassing security or authentication mechanisms
5. Intellectual property
The CapGRC platform, its source code, interfaces, pre-configured frameworks and documentation are the exclusive property of CAPTOSEC Inc. The service agreement grants you a limited, non-exclusive and non-transferable license to use it. You retain full ownership of your GRC data.
6. Data privacy
The processing of your personal information is governed by our privacy policy. Your GRC data remains your property — CAPTOSEC only accesses it in the context of service delivery and at your explicit request.
7. Service availability
CAPTOSEC commits to maintaining 99.5% availability (excluding planned maintenance) on Professional and Enterprise plans. Planned maintenance is announced 48 hours in advance. The detailed SLA is available in your service agreement.
8. Limitation of liability
CapGRC is a GRC management support tool. CAPTOSEC does not guarantee that use of the platform will automatically result in regulatory compliance. CAPTOSEC's liability is limited to the amount of fees paid during the 12 months preceding the event giving rise to the claim.
9. Termination
Either party may terminate the agreement in accordance with the provisions of the applicable service agreement. Upon termination, your data will be provided to you in an exportable format within 30 days, after which it will be permanently deleted.
10. Governing law
These terms are governed by the laws of the province of Quebec and the federal laws of Canada. Any dispute shall be subject to the exclusive jurisdiction of the courts of Montreal, Quebec.