Terms of Service

Effective date: June 6, 2026 · Last updated: June 6, 2026

Quick summary

• You retain your data. Configuration, evidence artifacts, and other outputs the Service produces for you remain yours.
• We retain our IP. The Service, including its architecture, the patent-pending innovations behind it, and our trademarks, remains ours.
• The Service is policy orchestration, not a traffic proxy. Your enforcement planes (Microsoft Purview, Intune, SASE, AI gateways) do the enforcing; the Service directs and produces evidence.
• You are responsible for your environment — what you connect, what policies you turn on, and how you act on findings.
• This is the legal version. The quick summary is for orientation; the binding terms are below.

1. Acceptance of these Terms

By accessing or using the Service or the Site, you accept these Terms. If you do not accept these Terms, do not access or use the Service or the Site. If you accept on behalf of an organization, you confirm that you have the authority to bind that organization, and the organization will be the “Customer” under these Terms. These Terms incorporate by reference our Privacy Policy and our published subprocessor list. Where you have signed a separate written agreement with AIVONS (for example, an Order Form, Master Subscription Agreement, or Enterprise Agreement), that signed agreement controls in the event of any conflict with these Terms.

2. The Service

2.1 What the Service does

Govern360 is a vendor-neutral AI governance control plane. It compiles Customer-defined policy intent into native configuration artifacts for the Customer’s designated enforcement planes (which may include Microsoft Purview, Microsoft Intune, SASE providers, and AI gateways), receives telemetry from those planes and from other connected sources, evaluates that telemetry against the Customer’s policies, and generates audit-defensible evidence artifacts mapped to compliance frameworks (which may include the EU AI Act, ISO/IEC 42001, NIST AI RMF, SOC 2, HIPAA, and GDPR).

2.2 What the Service does not do

• The Service does not proxy AI traffic. It does not sit in the request path of prompts or AI responses.
• The Service does not hold standing write credentials to your enforcement planes. The Service compiles enforcement artifacts; your administrators apply them in the underlying systems unless an integration explicitly states otherwise.
• The Service does not auto-execute remediation in your systems unless explicitly configured to do so by you for a specific integration that supports it.
• The Service does not provide legal, regulatory, financial, or audit advice. Compliance outcomes depend on your configuration, policies, operations, and applicable law. You are responsible for engaging qualified counsel and qualified auditors as appropriate.

2.3 Three-state honesty model

The Service reports the deployment status of each compiled policy across three states: Compiled (the Service has produced an enforcement artifact), Marked applied (you or your administrator has indicated the artifact has been applied), and Verified (the Service has confirmed application by reading back from an authorized platform API where one exists). Where a platform does not expose a read-back API, the Service will display “Not evidenced” rather than a false confirmation.

3. Eligibility and account

3.1 Eligibility

You must be at least 18 years old and capable of forming a binding contract to use the Service. The Service is intended for business and professional use, not personal or consumer use.

3.2 Account registration

To access the Service, the Customer creates an account and may invite Authorized Users. The Customer is responsible for: (i) the accuracy of registration information; (ii) safeguarding account credentials; (iii) all activity occurring under its account; and (iv) promptly notifying AIVONS of any unauthorized access or use.

3.3 Authorized Users

The Customer may permit its employees, contractors, advisors, and other personnel to access the Service as Authorized Users, provided each such user is bound by terms substantially as protective as these Terms and the Customer remains responsible for their compliance.

4. Acceptable use

You will not, and will not permit any Authorized User or third party to:

• Use the Service in violation of applicable law, regulation, or any rights of a third party (including intellectual property, privacy, and publicity rights);
• Use the Service to send unsolicited communications, malware, or harmful code, or to engage in fraud, deceptive practices, or harassment;
• Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service, except to the extent that applicable law expressly permits such activity notwithstanding this restriction;
• Copy, modify, create derivative works of, distribute, sublicense, sell, lease, rent, or otherwise transfer the Service or any portion of it;
• Use the Service to build or train a product or model that competes with the Service, or to benchmark the Service for the purpose of public comparison without prior written consent;
• Use the Service to develop or train any artificial intelligence model using AIVONS’s confidential information or the Service’s proprietary outputs (other than the Customer’s own configuration and Customer Data);
• Probe, scan, or test the vulnerability of the Service except through AIVONS’s designated responsible disclosure channel;
• Interfere with or disrupt the Service, the Site, or any servers or networks connected to them;
• Use the Service in any way that imposes a disproportionate load on the Service or could disable, overburden, or impair it;
• Remove, alter, or obscure any proprietary notices on the Service or in materials we provide.

AIVONS may suspend access to the Service if we reasonably believe your use violates this Section 4, our Acceptable Use Policy, or applicable law, or poses a security risk to the Service or other Customers. Where reasonably practicable, we will provide notice and an opportunity to cure before suspension.

5. Customer Data

5.1 Ownership

As between AIVONS and the Customer, the Customer retains all right, title, and interest in and to its Customer Data, including all metadata, configuration, governance events, evidence artifacts, and other content the Customer submits to the Service or the Service produces specifically for the Customer (collectively, “Customer Data”). AIVONS does not claim ownership of Customer Data.

5.2 License to operate

The Customer grants AIVONS a worldwide, royalty-free, non-exclusive license to host, copy, transmit, process, display, and otherwise use Customer Data solely as necessary to: (i) provide and operate the Service for the Customer; (ii) prevent, detect, and respond to security threats and abuse; (iii) comply with applicable law; and (iv) improve the Service through aggregated or de-identified analysis that cannot reasonably be linked back to the Customer or any individual.

5.3 No model training on Customer Data

AIVONS will not use Customer Data to train, fine-tune, or otherwise improve AI models, whether for AIVONS or any third party. Aggregated and de-identified statistics about Service use may be used to improve the Service consistent with Section 5.2.

5.4 Privacy and data processing

AIVONS’s handling of personal data is described in the Privacy Policy. Where AIVONS processes personal data on behalf of the Customer (as a processor or service provider), processing is governed by our Data Processing Addendum, which is hereby incorporated and which the Customer accepts by using the Service.

5.5 Export and deletion

During the subscription term, the Customer may export Customer Data through the Service’s standard export capabilities. After termination, AIVONS will retain Customer Data for a transition period (typically 30 days unless a longer period is specified in your Order Form) during which the Customer may export it; after the transition period, AIVONS will delete or de-identify Customer Data in accordance with our retention schedule and the DPA, except where retention is required by law.

6. Customer responsibilities

The Customer is responsible for, and represents and warrants that it has, the following:

• Authority and lawful basis: the right and authority to connect its systems to the Service and to process the personal data of its Authorized Users and end users through the Service, including any required notices and consents under applicable law.
• Configuration: selecting and configuring the policies, detectors, integrations, and enforcement modes that match its risk tolerance and regulatory obligations.
• Application of enforcement artifacts: applying compiled enforcement artifacts (e.g., Purview specifications, Intune profiles) in the underlying systems and reviewing the results.
• Acting on findings: reviewing incidents, posture scores, evidence gaps, and recommendations, and taking appropriate action.
• End-user transparency: providing any notices to end users about the use of the Service that may be required under applicable law.
• Compliance: complying with applicable law in its use of the Service, including data protection, employment, and sector-specific regulations.

7. Intellectual property

7.1 AIVONS rights

The Service, the Site, all underlying software, the architecture and methods that implement them, the documentation, and all related intellectual property rights are and remain the exclusive property of AIVONS and its licensors. AIVONS has filed multiple U.S. patent applications covering inventions embodied in the Service, including (but not limited to) the automated enforcement-plan generation, verified governance execution, multi-platform governance orchestration, and runtime AI cost and usage governance described in our public materials. Pending applications do not grant exclusive rights until issued; nothing in these Terms grants you a license under any AIVONS patent.

7.2 Trademarks

“AIVONS,” “Govern360,” the Govern360 logo, and related marks are trademarks of AIVONS. You may not use them without our prior written consent.

7.3 Feedback

If you provide AIVONS with feedback, suggestions, or ideas about the Service, you grant AIVONS a perpetual, irrevocable, royalty-free, worldwide license to use that feedback for any purpose without restriction or obligation to you. AIVONS will not associate feedback publicly with your name or your organization without your consent.

7.4 Reservation of rights

Except for the rights expressly granted in these Terms, no other rights are granted, express or implied, by estoppel or otherwise.

8. Fees, payment, and taxes

• Fees: fees, billing frequency, and any committed-use commitments are specified in your Order Form or, for self-service plans, on the Site at the time of purchase. The Service may be priced per Authorized User, per managed device, per governed AI model, per governed agent, per enforcement plane, or as a combination of these meters, as set out in your Order Form or self-service plan. Where any meter is consumption-billed, overage charges accrue based on actual usage and are billed monthly in arrears.
• Payment method: payments are processed by Stripe, Inc. By providing payment information, you authorize AIVONS (through Stripe) to charge the applicable amount, including any usage-based or recurring charges.
• Late payment: invoices not disputed in good faith within 30 days are deemed accepted. Past-due amounts may accrue interest at the lower of 1.5% per month or the maximum rate permitted by law, and AIVONS may suspend the Service after reasonable notice.
• Taxes: fees are exclusive of taxes. The Customer is responsible for any sales, use, value-added, withholding, or similar taxes imposed on the transaction, other than taxes on AIVONS’s net income.
• Price changes: AIVONS may change prices for renewal terms with at least 60 days’ notice before the renewal date.
• Refunds: except as expressly stated in these Terms or your Order Form, fees are non-refundable.

9. Free trials and beta features

AIVONS may offer free trials, design-partner access, and beta features. The following terms apply unless otherwise agreed in writing:

• Free trials are offered for the period stated at sign-up and may be discontinued at AIVONS’s discretion.
• Beta features are made available “as is” for evaluation, may be modified or discontinued at any time, and may not be subject to the warranty or SLA that applies to general-availability features.
• If the Customer transitions from a trial or beta to a paid subscription, configuration and Customer Data may be retained, subject to the terms of the resulting Order Form.

10. Confidentiality

“Confidential Information” means non-public business and technical information disclosed by one party to the other in connection with the Service that is identified as confidential or that a reasonable recipient should understand to be confidential. Each party will: (i) use the other’s Confidential Information only as needed to perform under these Terms; (ii) protect it with at least the same degree of care it uses for its own confidential information of like importance and no less than reasonable care; and (iii) not disclose it to any third party except to its personnel and advisors bound by substantially similar confidentiality obligations. Confidential Information does not include information that is (a) publicly available through no breach of these Terms; (b) known to the recipient before disclosure; (c) lawfully received from a third party without confidentiality obligations; or (d) independently developed without use of the disclosing party’s Confidential Information. Disclosures required by law are permitted, with prompt notice to the disclosing party where lawful and practicable.

11. Term, suspension, and termination

11.1 Term

These Terms begin when you first accept them and continue until terminated. Subscription term, renewal, and notice of non-renewal are governed by your Order Form (or, for self-service plans, the schedule selected at sign-up).

11.2 Termination for cause

Either party may terminate these Terms or any Order Form for cause if the other party materially breaches and fails to cure the breach within 30 days after written notice. AIVONS may terminate immediately for the Customer’s material breach of Section 4 (Acceptable use) or Section 7.1 (AIVONS rights).

11.3 Suspension

AIVONS may suspend access to the Service if (i) the Customer’s use materially endangers the security, availability, or integrity of the Service or another Customer; (ii) the Customer has a past-due, undisputed invoice and has failed to cure after notice; or (iii) we are required by law to suspend access. We will use reasonable efforts to provide notice before suspension when feasible.

11.4 Effects of termination

Upon termination: (i) the Customer’s right to access the Service ends; (ii) the Customer remains responsible for fees accrued through the termination date; (iii) the Customer may export Customer Data during the transition period described in Section 5.5; and (iv) Sections 5.1, 5.5, 7, 8 (for accrued amounts), 10, 12.2, 13, 14, 15, and 17 survive termination.

12. Warranties and disclaimers

12.1 Mutual warranties

Each party warrants that it has the right and authority to enter into and perform these Terms.

12.2 Disclaimer

EXCEPT AS EXPRESSLY SET FORTH IN THESE TERMS, THE SERVICE AND THE SITE ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTY ARISING FROM A COURSE OF DEALING OR USAGE OF TRADE. AIVONS does not warrant that the Service will be uninterrupted, error-free, or free of harmful components, or that any data, including Customer Data, will not be lost or corrupted. AIVONS does not warrant that the Service will detect all AI use, all sensitive data exposure, all policy violations, all risks, or that any compliance outcome will result. Compliance outcomes depend on Customer configuration, policies, operations, and applicable law, all of which are the Customer’s responsibility.

13. Limitation of liability

13.1 Exclusion of certain damages

TO THE FULLEST EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, COVER, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS, ARISING OUT OF OR RELATING TO THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

13.2 Cap on liability

EACH PARTY’S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS, REGARDLESS OF THE THEORY OF LIABILITY, WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY THE CUSTOMER TO AIVONS UNDER THE APPLICABLE ORDER FORM IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

13.3 Exceptions

The limitations in Sections 13.1 and 13.2 do not apply to: (a) the Customer’s payment obligations; (b) either party’s breach of confidentiality (Section 10); (c) the Customer’s breach of Section 4 (Acceptable use) or Section 7.1 (AIVONS rights); or (d) either party’s indemnification obligations under Section 14.

13.4 Allocation of risk

The parties acknowledge that the limitations in this Section 13 are an essential element of the bargain and that the pricing of the Service reflects this allocation of risk.

14. Indemnification

14.1 By AIVONS

AIVONS will defend the Customer against any third-party claim alleging that the Service, as provided by AIVONS and used in accordance with these Terms, directly infringes that third party’s patent, copyright, trademark, or trade secret, and will indemnify the Customer for damages and reasonable legal fees finally awarded by a court of competent jurisdiction or agreed in settlement, subject to Section 14.3.

If a claim under this Section 14.1 is made or appears likely, AIVONS may, at its option: (i) procure for the Customer the right to continue using the Service; (ii) modify the Service to be non-infringing while preserving substantially equivalent functionality; or (iii) if neither (i) nor (ii) is commercially reasonable, terminate the affected portion of the Service and refund any prepaid, unused fees.

AIVONS has no obligation under this Section 14.1 for claims arising from: (a) Customer Data; (b) modifications to the Service not made by AIVONS; (c) use of the Service in combination with other products or services not provided by AIVONS, where the claim would not have arisen but for the combination; or (d) use of the Service in violation of these Terms.

14.2 By Customer

The Customer will defend AIVONS against any third-party claim arising out of: (i) Customer Data; (ii) the Customer’s use of the Service in violation of these Terms or applicable law; or (iii) the Customer’s breach of Section 6 (Customer responsibilities), and will indemnify AIVONS for damages and reasonable legal fees finally awarded by a court of competent jurisdiction or agreed in settlement, subject to Section 14.3.

14.3 Procedure

The indemnified party must: (i) promptly notify the indemnifying party of the claim; (ii) give the indemnifying party sole control of the defense and any settlement (provided that no settlement that imposes liability or admission on the indemnified party may be agreed without the indemnified party’s consent, not to be unreasonably withheld); and (iii) provide reasonable cooperation at the indemnifying party’s expense.

14.4 Sole remedy

This Section 14 states the indemnifying party’s entire liability and the indemnified party’s exclusive remedy for third-party claims of the type described.

15. Compliance with laws and export

Each party will comply with applicable law in performing under these Terms, including data-protection, anti-bribery, anti-corruption, sanctions, and export-control laws. You represent and warrant that: (i) you are not on, and will not access the Service from, any country or list subject to U.S. or other applicable trade sanctions; and (ii) you will not export, re-export, or transfer the Service in violation of applicable export-control laws. The Service may not be used for any purpose prohibited by applicable law.

16. Modifications

16.1 To the Service

AIVONS may modify, enhance, or discontinue features of the Service from time to time. AIVONS will not materially decrease the core functionality of the Service during a paid subscription term without providing notice and a commercially reasonable alternative.

16.2 To these Terms

AIVONS may update these Terms by posting a revised version at govern360.ai/terms and updating the “Last updated” date. If we make material changes, we will provide notice (for example, by email or through the Service) at least 30 days before the changes take effect. If you do not accept the changes, you may terminate your subscription and receive a refund of prepaid, unused fees for the remainder of the then-current subscription term, as your sole and exclusive remedy. Your continued use of the Service after the effective date of an updated version constitutes acceptance.

17. Governing law and disputes

17.1 Governing law

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

17.2 Venue

Subject to Section 17.3, each party submits to the exclusive jurisdiction of the state and federal courts located in New Castle County, Delaware for any dispute arising out of or relating to these Terms.

17.3 Informal resolution

Before filing a claim against the other, each party agrees to attempt to resolve the dispute informally by contacting the other in writing with a description of the dispute. If the dispute is not resolved within 30 days, either party may proceed in accordance with Section 17.2.

17.4 Equitable relief

Nothing in this Section 17 prevents either party from seeking injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property or confidential information.

18. General provisions

18.1 Order of precedence

In the event of conflict, the order of precedence is: (i) the signed Order Form or Master Subscription Agreement; (ii) the Data Processing Addendum; (iii) these Terms; (iv) the Privacy Policy; (v) the subprocessor list.

18.2 Independent contractors

The parties are independent contractors. These Terms do not create any partnership, joint venture, agency, fiduciary, or employment relationship.

18.3 Assignment

Neither party may assign these Terms without the other party’s prior written consent, except that either party may assign these Terms in connection with a merger, acquisition, reorganization, or sale of substantially all of its assets, with notice to the other party. Any attempted assignment in violation of this Section is void.

18.4 Force majeure

Neither party is liable for any failure or delay in performance (other than payment) due to causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, pandemic, government action, network or utility outage, or supplier failure, provided the party uses reasonable efforts to mitigate.

18.5 Notices

Notices to AIVONS must be sent to legal@aivons.com with a copy to info@aivons.com. Notices to the Customer may be sent to the email address(es) associated with the Customer’s account or to any address provided in an Order Form. Notices are deemed given upon receipt.

18.6 Severability

If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions remain in full force and effect, and the parties will substitute the invalid provision with a valid one that most closely matches the original intent.

18.7 No waiver

A party’s failure to enforce any provision of these Terms is not a waiver of its right to do so later.

18.8 Entire agreement

These Terms, together with the Privacy Policy, the Data Processing Addendum, the subprocessor list, and any signed Order Form or Master Subscription Agreement, constitute the entire agreement between the parties regarding the Service and supersede all prior agreements, representations, and understandings.

18.9 Government end users

The Service is “commercial computer software” as defined in 48 C.F.R. 2.101. If acquired by or on behalf of a U.S. government agency, use, duplication, or disclosure is subject only to the rights set forth in these Terms.

19. Contact

Questions about these Terms:

AIVONS, Inc.
Attn: Legal — Govern360
Email: legal@aivons.com
General inquiries: info@aivons.com