Terms of Service

eGARC provides an integrated platform for audit, risk, compliance, governance, fraud management, reporting, and related organizational assurance activities. You agree to use the platform only for lawful business purposes and in accordance with these Terms, your organization's policies, and any applicable laws or regulations.

Organizations and authorized users are responsible for maintaining the confidentiality of account credentials and for ensuring that users are assigned appropriate roles and permissions. You are responsible for activity performed through your account and should promptly report suspected unauthorized access, compromised credentials, or security incidents to the eGARC team or your organization's designated administrator.

You must not use eGARC to gain unauthorized access to another organization's information, interfere with the operation or security of the platform, attempt to circumvent access controls, introduce malicious software, conduct fraudulent activity, reverse-engineer protected components, scrape data through unauthorized automated processes, or use the service for unlawful purposes. We may restrict or suspend access where reasonably necessary to protect the platform, users, or other organizations.

Organizations using eGARC are responsible for determining how the platform is configured and used within their organization. This includes assigning appropriate users and permissions, maintaining the accuracy of information entered into the platform, reviewing generated reports and workflows, and ensuring that organizational policies and regulatory requirements are appropriately addressed. eGARC provides technology and workflow capabilities but does not replace the professional judgment of auditors, risk professionals, compliance officers, legal advisers, management, or other qualified personnel.

eGARC may process information relating to audits, risks, controls, compliance requirements, governance activities, investigations, fraud cases, policies, procedures, findings, evidence, assessments, and other organizational records. Organizations remain responsible for the accuracy, completeness, legality, and appropriateness of information submitted to the platform. Platform outputs, dashboards, analytics, recommendations, and reports should be reviewed by appropriately authorized personnel before being relied upon for material business, regulatory, legal, financial, or governance decisions.

We implement reasonable technical and organizational measures designed to protect the eGARC platform and information processed through it. These measures may include authentication controls, role-based permissions, secure session management, encryption in transit, access controls, audit logging, infrastructure protections, and security monitoring. However, no online service can guarantee absolute security. Customers are responsible for maintaining appropriate internal security practices, including protecting credentials, managing user access, and configuring permissions appropriately.

We aim to provide reliable and secure access to eGARC, but uninterrupted availability cannot be guaranteed. The platform may occasionally be unavailable due to scheduled maintenance, upgrades, infrastructure issues, security events, third-party dependencies, or circumstances beyond our reasonable control. Where practical, material planned maintenance will be communicated in advance.

eGARC may integrate with third-party services, systems, APIs, identity providers, communication services, storage providers, or other external technologies. Your use of an integrated third-party service may be subject to that provider's separate terms and policies. eGARC is not responsible for the independent operation, availability, security, or policies of third-party services outside our reasonable control.

To the extent permitted by applicable law, eGARC and its service providers will not be responsible for indirect, incidental, special, consequential, or punitive losses arising from the use of the platform. This may include loss of revenue, business interruption, loss of anticipated savings, or loss resulting from reliance on information entered into or generated by the platform. Organizations should maintain appropriate internal controls, backups, professional review processes, and business continuity procedures.

eGARC is a technology platform and does not provide legal, accounting, audit opinions, regulatory determinations, investment advice, or other professional advice unless expressly agreed under a separate written engagement. Platform information and analytical outputs are intended to support organizational processes and professional decision-making. Users remain responsible for obtaining appropriate professional advice and making final decisions based on their organization's circumstances and applicable requirements.

Access to certain eGARC features may depend on the organization's subscription plan, selected modules, usage limits, or other commercial terms. Applicable pricing, billing cycles, renewal conditions, taxes, payment obligations, and cancellation terms may be specified in the organization's order, subscription agreement, or applicable pricing documentation. Failure to meet payment obligations may result in restricted access after reasonable notice, subject to the applicable agreement.

eGARC may improve, modify, update, or introduce new features to the platform from time to time. We may also retire features where necessary for security, technical, operational, or business reasons. Where a material change substantially affects an organization's use of the service, we will provide reasonable notice where practical.

These Terms may be updated periodically to reflect changes in the eGARC platform, business operations, security practices, or applicable requirements. Material changes may be communicated through the platform, email, or other reasonable means. The updated version will indicate its effective or last-updated date. Continued use of the service after the effective date of updated Terms may constitute acceptance where permitted by applicable law.