Terms of service

Rivetmoss helps you organise compliance obligations, keep the evidence for them, and prepare for audits. It does not perform compliance work, certify your facilities, or replace your auditors, consultants or legal advisers.

AI review is advisory. Rivetmoss uses AI to judge whether a document appears to prove a requirement. It can be wrong. Your company remains responsible for its compliance decisions and for the accuracy of what it submits to auditors and regulators.

• You are responsible for the people you invite and the roles you give them.
• Keep passwords private and tell us promptly if you suspect unauthorised access.
• You must be authorised to act for the company that holds the account.

Your company owns the records and documents it puts into Rivetmoss. You give us permission to store and process them only to provide and secure the service, as described in our privacy policy and on our security page. You can request an export or deletion at any time.

Do not upload material you have no right to share, malware, or other customers' information; do not attempt to access data that is not yours, probe the service for weaknesses without our written permission, or overload it.

Paid plans, their prices and billing terms are set out in your order or subscription. Unless it says otherwise, fees are billed in advance and are non-refundable.

We work to keep Rivetmoss available and secure but do not promise uninterrupted service. We may improve or change features; if a change materially reduces what you pay for, we will tell account administrators in advance.

To the fullest extent the law allows, the service is provided "as is", and Rivetmoss is not liable for indirect or consequential losses, including failed audits, lost business or regulatory penalties. Our total liability for any claim is limited to the fees you paid us in the twelve months before the claim arose.

You can stop using Rivetmoss at any time. We may suspend accounts that break these terms or put other customers at risk. After an account closes you may request an export of your data within 30 days.

These terms are governed by the laws of the State of Utah, USA. Questions go to hello@rivetmoss.contact.