InfoDefenders Terms of Service
Last updated: June 2026
1. Acceptance of Terms
By creating an account, accessing, or using the InfoDefenders platform and associated services (collectively, the "Service"), you ("Customer") agree to be bound by these Terms of Service ("Terms") on behalf of yourself and the organization you represent. If you do not agree to these Terms, do not use the Service.
These Terms constitute a binding agreement between Customer and InfoDefenders, LLC, a Florida Limited Liability Company ("InfoDefenders," "we," "us," or "our"). By clicking "I agree," completing the registration process, or using the Service, you represent that you have the authority to bind your organization to these Terms.
2. Definitions
- "Account" means the account created by Customer to access the Service.
- "Admin" means a User designated with administrative privileges within an Organization.
- "Assessment" means a structured AI tool risk evaluation completed within the Service.
- "Browser Extension" means the InfoDefenders Tool Discovery browser extension for Chrome and Microsoft Edge.
- "Customer Data" means all data, content, and information submitted by Customer or its Users to the Service, including incident reports, assessments, governance controls, and tool records.
- "Organization" means the Customer's workspace within the Service, which may include multiple Users.
- "Service" means the InfoDefenders web application, APIs, Browser Extension, and any related services provided by InfoDefenders.
- "Subscription Plan" means the paid tier (Starter, Professional, or Governance) to which Customer subscribes.
- "User" means an individual authorized by Customer to access the Service under Customer's Account.
3. Description of Service
InfoDefenders provides a software platform to help organizations track AI tool incidents, conduct structured risk assessments, and implement governance programs. The Service includes:
- Starter: AI incident tracking, append-only audit trail, incident evidence PDF export, public incident submission, and team management (Admin, Member, and Reporter roles).
- Professional: All Starter features, plus AI tool register, structured risk assessments, AI Risk Assessment Agent (10 runs per billing period), Tool Discovery browser extension, tool intake workflow, Slack and Teams notifications, NIST AI RMF alignment indicators, EU AI Act review indicators, risk assessment PDF export, and governance evidence pack export (incidents and risk assessment PDFs).
- Governance: All Professional features, plus four written AI policy templates, control register and standards hub, governance control starter pack, unlimited AI Risk Assessment Agent runs, and full governance evidence pack export (including policy and control catalog PDF and text).
Features available to Customer depend on the active Subscription Plan. InfoDefenders reserves the right to modify, add, or remove features with reasonable notice to active subscribers.
3.1 AI Risk Assessment Agent Disclaimer
The AI Risk Assessment Agent uses third-party AI services to generate draft assessment content based on Customer-provided tool information and publicly available sources. Agent output is provided for internal review only. It does not constitute legal advice, regulatory certification, compliance verification, or a complete risk assessment. Customer is solely responsible for reviewing, validating, and approving all agent-generated content before relying on it.
3.2 Framework Alignment Disclaimer
The NIST AI RMF alignment indicators and EU AI Act review indicators provided by the Service are intended for internal program-building purposes only. They do not constitute legal advice, regulatory certification, compliance verification, or any representation that Customer is in compliance with any law, regulation, or framework. Customer is solely responsible for determining its compliance obligations and should consult qualified legal counsel for compliance determinations.
4. Account Registration and Organizations
4.1 Registration
To use the Service, Customer must register an Account and provide accurate, complete, and current information. Customer is responsible for maintaining the confidentiality of Account credentials and for all activities that occur under the Account.
4.2 Organization Isolation
Each Account creates an isolated Organization. All Customer Data is scoped to the Organization and is not accessible to other organizations on the platform. Customer is responsible for managing User access within its Organization.
4.3 User Accounts
Customer may invite Users to join its Organization. Customer is responsible for ensuring that Users comply with these Terms. Customer must promptly remove access for any User who is no longer authorized.
4.4 Account Security
Customer must notify InfoDefenders immediately at [email protected] of any unauthorized use of or access to its Account. InfoDefenders is not liable for losses caused by unauthorized access resulting from Customer's failure to secure its credentials.
5. Subscription Plans and Billing
5.1 Subscription
Access to the Service requires a paid Subscription Plan, except during the Free Trial period described in Section 6. Subscription Plans are billed monthly or annually, in advance, at the rates displayed at infodefenders.com/pricing or as agreed in a written order form.
5.2 Payment
Customer authorizes InfoDefenders to charge the payment method on file through our payment processor (Stripe) for all fees due. All fees are in U.S. dollars and are exclusive of applicable taxes. Customer is responsible for all taxes arising from its use of the Service.
5.3 Upgrades and Downgrades
Customer may upgrade its Subscription Plan at any time; the upgrade takes effect immediately and the payment method on file will be charged a prorated amount for the remainder of the billing period. Downgrades take effect at the start of the next billing cycle.
5.4 Auto-Renewal
Subscriptions automatically renew at the end of each billing cycle unless Customer cancels before the renewal date through the billing portal or by contacting [email protected].
5.5 Price Changes
InfoDefenders may change Subscription Plan prices with at least 30 days' advance notice to Customer's registered email address. Continued use of the Service after the price change takes effect constitutes acceptance of the new pricing.
5.6 Refunds
All fees are non-refundable except as required by applicable law or as expressly stated in these Terms. InfoDefenders may, in its sole discretion, issue credits or refunds in exceptional circumstances.
5.7 Late Payment and Suspension
If a payment fails, InfoDefenders will notify Customer and may suspend access to the Service after 7 days of non-payment. InfoDefenders may terminate the Account for non-payment after 30 days.
6. Free Trial
6.1 Trial Period
New Customers receive a free 30-day trial with all Subscription Plan tiers unlocked. No payment method is required to start a trial.
6.2 Trial Limitations
The free trial includes access to features across all tiers, subject to the following documented limits:
- AI Risk Assessment Agent: one (1) run during the trial period
- All other trial features are subject to the quotas and limits of the Governance tier unless otherwise stated in the application
InfoDefenders reserves the right to limit or modify trial access at any time. One free trial per organization; circumventing this limitation (e.g., by creating multiple accounts for the same organization) is prohibited.
6.3 Trial Conversion
At the end of the trial period, access to paid features will be suspended unless Customer activates a Subscription Plan. Customer Data will be retained for 30 days after trial expiration, after which it may be permanently deleted.
7. Acceptable Use
Customer agrees not to use the Service to:
- Violate any applicable law, regulation, or third-party rights.
- Submit false, fabricated, or intentionally misleading incident reports or assessment data.
- Attempt to gain unauthorized access to InfoDefenders systems or another Customer's data.
- Reverse engineer, decompile, or disassemble any part of the Service.
- Use the Service for competitive intelligence, benchmarking against InfoDefenders, or building a competing product.
- Share, sell, or transfer discovery tokens, API keys, or Account credentials to unauthorized third parties.
- Use automated scraping, bots, or crawlers against the Service without express written consent.
- Transmit malware, viruses, or any code designed to disrupt or damage the Service.
- Conduct load testing or security penetration testing without prior written authorization from InfoDefenders.
InfoDefenders reserves the right to suspend or terminate any Account that violates this Section without prior notice.
8. Browser Extension
8.1 Scope of Data Collection
The Browser Extension, when installed and configured by Customer, monitors navigation events in the Customer's browser environment and reports AI tool domain visits (hostname and timestamp only) to Customer's Organization within the Service. The Browser Extension does not collect URLs, page content, form data, passwords, user identity, or any information other than the hostname of visited AI tool domains and the time of the visit.
8.2 Customer Responsibility
Customer is solely responsible for: (a) obtaining any required consent from employees or other individuals whose browsers have the Extension installed; (b) complying with applicable employment, privacy, and monitoring laws before deploying the Extension; and (c) ensuring that deployment of the Extension complies with Customer's own policies and applicable law.
8.3 Configuration Requirement
The Browser Extension requires Customer to configure an API base URL and a discovery token obtained from Customer's InfoDefenders dashboard. Data collected by the Extension is transmitted only to Customer's configured endpoint and only when a valid discovery token is present.
9. Customer Data and Privacy
9.1 Ownership
Customer retains all right, title, and interest in and to Customer Data. InfoDefenders acquires no ownership rights in Customer Data.
9.2 License to Operate the Service
Customer grants InfoDefenders a limited, non-exclusive, worldwide license to process, store, and transmit Customer Data solely to the extent necessary to provide the Service and as described in the InfoDefenders Privacy Policy.
9.3 Privacy Policy
InfoDefenders's collection and use of personal data is governed by the InfoDefenders Privacy Policy, available at infodefenders.com/privacy, which is incorporated into these Terms by reference.
9.4 Security
InfoDefenders implements commercially reasonable technical and organizational measures to protect Customer Data. However, no transmission over the internet or electronic storage is completely secure. Customer is responsible for ensuring that data submitted to the Service is appropriate given these inherent limitations.
9.5 Data Processing Agreement
For Customers subject to the EU General Data Protection Regulation (GDPR) or other applicable data protection laws that require a data processing agreement, InfoDefenders will enter into a Data Processing Agreement (DPA) on request. The DPA is available at infodefenders.com/legal/dpa.
10. Data Retention and Export
10.1 Export Before Cancellation
Customer may export its Customer Data at any time while its Account is active using the evidence pack export feature or by contacting [email protected]. Customer is responsible for exporting any data it wishes to retain before cancellation or termination.
10.2 Retention After Termination
Following cancellation or termination of Customer's Account, InfoDefenders will retain Customer Data for 30 days, during which Customer may request an export. After this period, InfoDefenders may permanently delete all Customer Data from its systems. This deletion obligation does not apply to data retained in backups until those backups are routinely overwritten, or to data InfoDefenders is required to retain by law.
11. Intellectual Property
11.1 InfoDefenders IP
InfoDefenders retains all right, title, and interest in and to the Service, including all software, algorithms, documentation, trademarks, and any improvements or derivatives thereof. Nothing in these Terms grants Customer any rights in the Service except the limited right to use it as expressly set forth herein.
11.2 Feedback
If Customer provides feedback, suggestions, or ideas regarding the Service ("Feedback"), Customer grants InfoDefenders a perpetual, irrevocable, royalty-free license to use and incorporate such Feedback into the Service without any obligation to Customer.
12. Confidentiality
Each party agrees to keep confidential any non-public information disclosed by the other party that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure. This obligation does not apply to information that: (a) is or becomes publicly known through no breach of this Section; (b) was rightfully known before disclosure; (c) is independently developed without use of the disclosing party's confidential information; or (d) is required to be disclosed by law or court order, provided the disclosing party is given reasonable advance notice.
13. Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, INFODEFENDERS EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
INFODEFENDERS DOES NOT WARRANT THAT: (A) THE SERVICE WILL MEET CUSTOMER'S REQUIREMENTS; (B) THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; (C) ANY RESULTS OBTAINED FROM USE OF THE SERVICE WILL BE ACCURATE OR RELIABLE; OR (D) ANY DEFECTS IN THE SERVICE WILL BE CORRECTED.
INFODEFENDERS MAKES NO WARRANTY REGARDING ANY THIRD-PARTY SERVICES, INTEGRATIONS, OR CONTENT ACCESSED THROUGH THE SERVICE.
14. Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW:
14.1 IN NO EVENT WILL INFODEFENDERS, ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING LOSS OF PROFITS, REVENUE, GOODWILL, USE, OR DATA, EVEN IF INFODEFENDERS HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
14.2 INFODEFENDERS'S TOTAL CUMULATIVE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), OR OTHERWISE, WILL NOT EXCEED THE GREATER OF: (A) THE TOTAL FEES PAID BY CUSTOMER TO INFODEFENDERS IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM; OR (B) ONE HUNDRED U.S. DOLLARS ($100).
14.3 THE LIMITATIONS IN THIS SECTION APPLY TO ALL CLAIMS, WHETHER BASED ON WARRANTY, CONTRACT, TORT, OR ANY OTHER LEGAL THEORY, AND WHETHER OR NOT INFODEFENDERS HAS BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGE.
Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In such jurisdictions, the above limitations apply to the fullest extent permitted by law.
15. Indemnification
Customer agrees to indemnify, defend, and hold harmless InfoDefenders and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) Customer's use of the Service in violation of these Terms; (b) Customer's violation of any applicable law or third-party right; (c) Customer Data, including any claim that Customer Data infringes or misappropriates any third-party intellectual property or privacy rights; or (d) Customer's deployment of the Browser Extension, including any failure to obtain required consents from employees or other individuals.
16. Term and Termination
16.1 Term
These Terms begin on the date Customer first accepts them and continue until terminated.
16.2 Termination by Customer
Customer may terminate its Account at any time by canceling its subscription through the billing portal or contacting [email protected]. Termination takes effect at the end of the current billing period. No refunds are issued for partial periods.
16.3 Termination by InfoDefenders
InfoDefenders may terminate or suspend Customer's access to the Service immediately, without prior notice, if: (a) Customer breaches any provision of these Terms and fails to cure the breach within 10 days of notice; (b) Customer fails to pay fees when due; (c) Customer engages in conduct that InfoDefenders reasonably believes poses a security risk or legal liability; or (d) InfoDefenders is required to do so by law.
16.4 Effect of Termination
Upon termination: (a) all licenses granted to Customer immediately terminate; (b) Customer must cease all use of the Service; (c) InfoDefenders will retain and then delete Customer Data as described in Section 10.
16.5 Survival
Sections 9.1, 11, 12, 13, 14, 15, and 18 survive any termination or expiration of these Terms.
17. Modifications to the Service and Terms
17.1 Changes to the Service
InfoDefenders may modify, suspend, or discontinue any part of the Service at any time. InfoDefenders will provide reasonable advance notice of material changes to active subscribers.
17.2 Changes to These Terms
InfoDefenders may update these Terms at any time by posting the revised Terms at infodefenders.com/terms and notifying Customer at the registered email address. Continued use of the Service after the effective date of the revised Terms constitutes acceptance. If Customer does not agree to the revised Terms, Customer's sole remedy is to terminate its Account before the effective date of the changes.
18. Governing Law and Dispute Resolution
18.1 Governing Law
These Terms are governed by and construed in accordance with the laws of the State of Florida, without regard to its conflict of laws provisions.
18.2 Dispute Resolution
The parties agree to first attempt to resolve any dispute through good-faith negotiation. If the dispute is not resolved within 30 days, either party may pursue binding arbitration under the rules of the American Arbitration Association, conducted in English, in St. Petersburg, Florida. Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction.
18.3 Class Action Waiver
TO THE FULLEST EXTENT PERMITTED BY LAW, CUSTOMER AGREES THAT ANY DISPUTE RESOLUTION PROCEEDINGS WILL BE CONDUCTED ON AN INDIVIDUAL BASIS ONLY, AND CUSTOMER WAIVES THE RIGHT TO PARTICIPATE IN ANY CLASS, CONSOLIDATED, OR REPRESENTATIVE ACTION.
19. General Provisions
19.1 Entire Agreement
These Terms, together with the Privacy Policy, any Data Processing Agreement, and any written order forms, constitute the entire agreement between the parties regarding the Service and supersede all prior agreements and understandings.
19.2 Severability
If any provision of these Terms is found to be unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will remain in full force.
19.3 Waiver
Failure by either party to enforce any right under these Terms does not constitute a waiver of that right.
19.4 Assignment
Customer may not assign or transfer its rights or obligations under these Terms without InfoDefenders's prior written consent. InfoDefenders may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets.
19.5 Force Majeure
Neither party will be liable for any failure or delay in performance caused by circumstances beyond its reasonable control, including acts of God, natural disasters, war, terrorism, government actions, or internet infrastructure failures.
19.6 Notices
Notices to InfoDefenders must be sent to [email protected]. Notices to Customer will be sent to the email address on file for the Account.
19.7 No Third-Party Beneficiaries
These Terms do not create any third-party beneficiary rights.
Contact
Questions about these Terms may be directed to:
InfoDefenders, LLC
7901 4th St N. STE 300, St. Petersburg, FL, 33702