Terms of Service

1. Company Status

SimpleSecurity is operated by a Swedish company currently under registration. Until registration is complete, these Terms are offered on a good-faith, pre-launch basis and do not constitute a binding commercial agreement backed by a registered legal entity. We will publish the organization number, registered address, and full corporate details here as soon as they exist.

2. The Service

SimpleSecurity ("the Service") is a security monitoring and compliance platform providing asset management (CMDB), uptime monitoring, SSL certificate tracking, vulnerability scanning, and compliance framework mapping (ISO 27001, SOC 2, NIS2) for businesses. The Service is provided as-is during this pre-launch phase and is subject to change without notice as it matures toward general availability.

3. Waitlist & Beta Access

Registration is currently gated. Access is granted at our discretion to waitlisted and invited users. Features, pricing, data retention behavior, and availability during this beta period may change, and we may reset or remove test data without notice. We will give reasonable notice before any change that affects data you have entered in good faith once the Service reaches general availability.

4. Accounts

You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. Notify us immediately at security@simplesecurity.se if you suspect unauthorized access.

5. Data Processing Agreement (Business Customers)

For business accounts, our Data Processing Agreement (GDPR Art. 28) — including Annex 1 (Technical & Organisational Measures) and Annex 2 (Sub-processor List) — forms an integral part of these Terms and is accepted when you register a business account or otherwise accept these Terms. On matters of data protection, the Data Processing Agreement prevails over these Terms.

6. Acceptable Use

You agree not to:

• Use the Service to monitor, scan, or process assets you do not own or lack authorization to assess.
• Attempt to gain unauthorized access to the Service's infrastructure, other tenants' data, or underlying AWS resources.
• Interfere with or disrupt the integrity or performance of the Service.
• Use the Service to store or transmit unlawful content, or in violation of applicable Swedish or EU law, including GDPR.
• Reverse engineer, resell, or white-label the Service without our written consent.

7. No Security Guarantee

SimpleSecurity provides monitoring, scanning, and compliance-mapping tools on a best-effort basis. The Service is an aid to your security and compliance posture — it is not a warranty, guarantee, or certification that your infrastructure is secure, compliant, or free of vulnerabilities. Detection coverage, scan frequency, and alerting are not infallible. You remain solely responsible for the security of your own infrastructure and for verifying compliance obligations with qualified advisors where required.

8. Limitation of Liability

To the maximum extent permitted by applicable law, SimpleSecurity and its operators shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of data, revenue, or business opportunity, arising from your use of or inability to use the Service — including damages arising from a security incident, vulnerability, or compliance gap the Service did not detect or alert on. Nothing in these Terms limits liability that cannot be excluded under mandatory Swedish or EU consumer protection law.

9. Termination

You may close your account at any time. We may suspend or terminate access if these Terms are violated, if required by law, or — during the pre-launch/beta period — at our discretion with reasonable notice where practicable. On closure, your data is deleted in line with our Privacy Notice.

10. Withdrawal Right for Private Customers (Ångerrätt)

If you are a consumer purchasing a paid Personal plan, you have a 14-day right of withdrawal from your first purchase under the Swedish Distance Contracts Act (lag (2005:59) om distansavtal och avtal utanför affärslokaler). Withdraw within 14 days and we refund the full amount paid.

You can exercise this right self-service: cancel your subscription under Account Settings → Privacy & data and request the refund, or write to security@simplesecurity.se. This is in addition to — not instead of — the ability to cancel your monthly subscription at any time.

11. Governing Law

These Terms are governed by the laws of Sweden. Any dispute arising from these Terms or use of the Service shall be subject to the exclusive jurisdiction of the Swedish courts.

12. Changes to These Terms

We may update these Terms as the Service and company status evolve, particularly once the operating company completes registration. Material changes will be reflected by updating the "Last updated" date above. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

13. Contact

Questions about these Terms can be sent to security@simplesecurity.se.