Terms of Service

Last updated: 14 October 2026

These Terms of Service (“Terms”) govern your use of the website at aicompliancy.co.uk and the preparation tool available through it (together, the “Service”), operated by AI Compliancy (“we”, “us”, “our”). By creating an account or using the Service, you agree to these Terms. If you do not agree, please do not use the Service.

1. The Service

AI Compliancy is a self-service tool that helps UK small and medium-sized businesses, acting as deployers of third-party AI systems, to build a software inventory, carry out and record risk assessments, track actions, and generate reports, and to write their own AI Use Rules and share AI-literacy learning modules with their staff. The Service assesses obligations from a deployer’s perspective only; it does not assess the obligations of the organisations that develop or supply the AI tools.

A preparation tool, not a certificate. The Service helps you assess, organise, and document your EU AI Act groundwork so that you are ready for a compliance assessment or review. It provides general guidance only. It does not make your business compliant, it does not certify that your business is compliant, and it is not a substitute for legal advice. Whether your organisation complies with the EU AI Act, or with any other law, is a matter for you and your professional advisers.

2. Accounts

• You must provide accurate information when registering and keep it up to date.
• You are responsible for maintaining the confidentiality of your login credentials and for all activity that takes place under your account.
• You must notify us promptly of any unauthorised use of your account.
• You must be authorised to act on behalf of the business you register.
• An account is for one person. Your login must not be shared, and a pass covers the single account it was bought for.

3. Passes and access

The Service is sold as a pass: a single payment that gives you access for a fixed period, currently 60 days. There is no subscription. Nothing renews automatically, no payment card is kept on file, and there is nothing to cancel. The price and the length of the pass are shown before you pay.

For businesses, starting straight away. Passes are sold to businesses. At checkout you confirm that you are buying for your business, not as a private individual, and your pass starts as soon as you have paid, because you ask for it to start straight away.

VAT. AI Compliancy is not registered for VAT, so no VAT is charged and the price you are shown is the whole of what you pay.

Some parts of the Service are free and need no pass: browsing the software catalogue, viewing the worked examples, creating an account, building your software library, watching the AI-literacy training videos, and reading the how-it-works guide and the FAQ.

What a pass covers. While your pass is running you may create risk assessments, answer the assessment questions, work through the actions tracker, produce reports, write and release your AI Use Rules, and share AI-literacy learning modules with your team and receive their knowledge check results, and you may change them and reproduce your reports as often as you like.

When a pass ends. Records you have already created remain available to you to view, print, download and delete, and we do not remove them because a pass has ended. You will not be able to create new records, change existing ones, or produce a new dated report until you buy another pass. Knowledge check links stop working when a pass ends; the results already received stay available to you. Your existing data remains in your account and is available to you again when you do.

Buying while a pass is running. A further pass is added to the end of the period you already hold, not to the date of purchase, so no remaining days are lost.

Refunds and deletion. A pass is a single payment for a fixed period and is not refundable, in whole or in part, except in the three cases these Terms set out, where the unused part of your pass is refunded: we close your account for a reason that is not a serious breach (section 10), we stop providing the Service (section 7), or an event outside our control stops you using it for more than 30 days (section 13). Access runs for the full 60 days whether or not you use it, and an unused part of a pass is lost if you delete your account. The Service can be seen in full before you buy: the worked examples show a complete risk assessment, actions tracker, report and set of AI Use Rules, and building your software library is free. If something has gone wrong, contact us, tell us what went wrong, and we will deal with it fairly; nothing in these terms affects your rights under consumer law.

Chargebacks. If there is a problem with a payment, contact us first — we will look at it and deal with it fairly. Raising a chargeback with your bank or card issuer instead may suspend your access while the claim is investigated, and where a chargeback is made against a payment properly due under these Terms, you are responsible for the fee our payment provider charges us for handling it.

Features available may change over time. We may modify, add, or remove features to improve the Service. What you buy is access to the Service as it stands at the time you buy it: no purchase depends on us delivering any feature that is planned, described as forthcoming, or discussed with you before it is released.

4. Acceptable use

You agree not to:

• use the Service in any way that breaches applicable law or regulation;
• attempt to gain unauthorised access to the Service, other users’ data, or our systems;
• interfere with or disrupt the integrity or performance of the Service;
• copy, resell, or redistribute the Service or its content except as expressly permitted;
• upload malicious code or use the Service to store or transmit unlawful material.

5. Your content

You retain ownership of the information and data you enter into the Service, including the knowledge check results sent through a learning-module link you share (“Your Content”). You grant us a limited licence to host, process, and display Your Content solely for the purpose of providing the Service to you. You are responsible for the accuracy and lawfulness of Your Content and for ensuring you have the right to provide it. Our handling of personal data is described in our Privacy Policy, and where Your Content contains personal data about other people, section 14 sets out the terms on which we process it for you.

What not to put in. The Service records facts about the software your organisation uses, not facts about individual people. Please do not enter special category personal data — such as anything revealing a person’s health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade-union membership, sex life or sexual orientation, or their biometric or genetic data — or details of criminal offences or convictions, into feature descriptions, notes, actions, or any other free-text field. Where you need to record an AI use that touches data of that kind, describe the use, not the person. The Service does not ask for this information and is not built to hold it.

6. Intellectual property

The Service, including its software, design, text, and branding (but excluding Your Content and any official regulatory text reproduced within it), is owned by or licensed to AI Compliancy and is protected by intellectual-property laws. Quotations from the EU AI Act are reproduced from the official source for reference and remain subject to their own terms. You are granted a limited, non-exclusive, non-transferable right to use the Service for your own business compliance purposes.

The public catalogue pages. The pages at aicompliancy.co.uk/ai-features/, including the selection, arrangement and wording of the software catalogue, are protected by copyright and by database right. Anyone may read them, link to them, and quote short passages with a link back. Copying them in bulk, by automated means or otherwise, or republishing the catalogue or a substantial part of it elsewhere, is not permitted without our written permission. This applies to every visitor, whether or not they hold an account.

Feedback. You are never obliged to send us suggestions. If you do — an idea, a correction, or a report that a catalogue entry is wrong or out of date — we may use it to improve the Service, freely and without restriction, and without any payment or obligation to you. Feedback gives you no rights in the Service or in the software catalogue, and none of this affects your ownership of Your Content. Feedback is not Your Content: we hold it for ourselves, not for you, section 14 does not apply to it, and it is handled as described in the Privacy Policy. We will not publish your feedback in a way that identifies you or your business without your permission.

7. Availability

We aim to keep the Service available and reliable, but we do not guarantee that it will be uninterrupted or error-free. We may suspend or restrict access for maintenance, updates, or reasons outside our reasonable control.

If we stop providing the Service. We may decide to stop offering the Service. If that happens we will tell you by email at least 60 days beforehand, keep your account open throughout that period so that you can read, print and download everything you have created, and refund the unused part of any pass you are holding. At the end of the notice period your account and its contents are deleted, as described in the Privacy Policy. The closing of a single account is dealt with in section 10 instead.

8. Disclaimers

The Service is provided “as is”, “with all faults”, and “as available”, and you accept it in that condition. To the fullest extent permitted by law, we make no warranties, express or implied, that the Service or its outputs will meet your requirements, be accurate or complete, or ensure your compliance with the EU AI Act or any other law. All warranties, conditions, and other terms implied by statute or by common law are excluded so far as the law allows. If you are dealing as a consumer rather than in the course of a business, nothing in this section affects your statutory rights.

In particular, we do not promise that the Service will be uninterrupted, timely, or error-free, that defects will be corrected, that it will be free of viruses or other harmful code, or that it will work with any particular device, browser, or other software you use. We take the security measures described in our Privacy Policy, but no online service can be guaranteed secure, and we are not responsible for delays, failures, interception, or loss that are outside our reasonable control.

Assessment outcomes, risk classifications, and reports are generated from the information you provide and from general reference material, and should be reviewed by a qualified professional before you rely on them.

We make no representation that the Service is appropriate or available for use in any particular country. It is built around the EU AI Act (Regulation (EU) 2024/1689) and written for UK businesses. Other laws may apply to you, and identifying them and complying with them is your responsibility.

The software catalogue is compiled and reviewed by a person against what each supplier publishes, and is kept up to date as tools change — but it cannot be guaranteed complete or error-free, and an entry may lag a change a supplier has made. If something looks wrong for your business, tell us and it will be checked.

9. Limitation of liability

Nothing in these Terms limits liability that cannot be limited by law — including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, and anything owed to you under the UK GDPR and the Data Protection Act 2018. Subject to that, and to the fullest extent permitted by law:

• we are not liable for any loss of profits, revenue, business, goodwill, or data, for any loss of anticipated savings or wasted expenditure, or for any indirect or consequential loss;
• we are not liable for any regulatory finding, penalty, or third-party claim arising from your organisation’s AI use or your reliance on the Service;
• our total liability arising out of or in connection with the Service shall not exceed the greater of the amount you paid us for the Service in the twelve months before the claim, or £100.

These limits apply however the claim is brought — in contract, in tort (including negligence), for breach of statutory duty, or on any other basis — and whether or not we had been told that the loss was possible. The cap is cumulative, not per incident: it is a single ceiling on everything you may claim in connection with the Service, not a fresh limit for each claim.

The same limits apply to the suppliers and subcontractors we use to run the Service — our hosting, database, email, and payment providers — in respect of anything they do in providing it, and each of them may rely on this section under the Contracts (Rights of Third Parties) Act 1999. Beyond that, no one other than you and us has any right to enforce these Terms.

The Service is priced on this basis. It is a low-cost self-service tool, not a professional advisory engagement, and the fee reflects that the risk of your organisation’s compliance decisions stays with you. We could not offer it at this price on any other footing. If you would rather that risk sat elsewhere, you are free to take professional advice, which carries the protection that comes with it. By using the Service you confirm that you and we both regard the limits in this section and the disclaimers in section 8 as a reasonable allocation of risk for an arrangement of this kind, and that we have each relied on them in agreeing to these Terms.

10. Termination

You may stop using the Service and close your account at any time. We may suspend or terminate your access if you breach these Terms, if payment is not made, if we are required to by law, or if we need to protect the Service or other users from a security risk. On termination, your right to use the Service ends. If we close your account for any reason other than a serious breach of these Terms, we will tell you first, give you at least 30 days to sign in and download anything you want to keep, and refund the unused part of any pass you are holding. Provisions that by their nature should survive (including sections 5, 6, 8, 9, 12, 13, and 14) will continue to apply.

11. Changes to these Terms

We may update these Terms from time to time. When we do, we will revise the “Last updated” date above. Before a significant change takes effect, we will email the address on your account. Your continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

A pass you have already bought is not affected. If we change these Terms while your pass is running, the version you agreed to when you bought it continues to apply to that pass until it ends. Changes take effect for you when you next buy a pass, and we will not shorten a pass, raise its price, or reduce what it covers after you have paid for it.

12. Governing law

These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them, subject to any mandatory rights you have as a consumer.

13. General

Third-party services and links. The Service links to material published by software suppliers and to other third-party websites, and it is delivered using third-party providers for hosting, storage, email, and payment. We do not control any of them, do not endorse a site by linking to it, and are not responsible for their content, availability, or terms — a link to a supplier’s page is a citation for a fact recorded in the catalogue, and nothing more. Where you deal with a third party directly, such as the payment provider, that dealing is governed by their terms as well as these.

Sanctions. By using the Service you confirm that neither you nor the business you register is located in, or acting on behalf of anyone located in, a country or territory subject to UK, EU, or US sanctions, and that neither is named on any applicable sanctions list. We may suspend or close an account without notice if that turns out not to be so.

Transferring these Terms. You may not transfer your account, or your rights under these Terms, to anyone else without our written agreement. We may transfer ours — if the business is incorporated, restructured, or sold, for example — provided your rights under these Terms are not reduced, and we will tell you if that happens.

The whole agreement. These Terms and the Privacy Policy are the entire agreement between you and us about the Service, and they replace anything said or written beforehand. Nothing elsewhere on the website, in a guide, or in an email adds to them or varies them. Nothing in this paragraph limits liability for anything said fraudulently.

If part of these Terms fails. If a court finds any provision of these Terms unenforceable or invalid, that provision is to be narrowed to the smallest extent that makes it enforceable or, if that is not possible, treated as removed. The rest of these Terms continues in force, unaffected.

Delay is not waiver. If we do not enforce a right under these Terms straight away, or at all, we have not given it up, and we may still enforce it later.

Events outside our control. We are not responsible for any failure or delay in providing the Service that is caused by something outside our reasonable control — including the failure or interruption of a hosting, database, email or payment provider, a network or internet failure, a cyber attack, a power failure, a change in the law, or an act of God, war, fire or flood. We will tell you if such an event is affecting the Service, and do what we reasonably can to limit its effect. If it continues for more than 30 days and leaves you unable to use the Service in any meaningful way, either of us may end this agreement, and we will refund the unused part of any pass you are holding.

14. Data protection

This section applies to personal data inside Your Content — your software library, your assessment answers, actions, notes and reports, your AI Use Rules, and the knowledge check results of the people you share an AI-literacy learning module with. That content can name people: a report records who prepared it, and your notes are free text — Article 26(2) of the EU AI Act asks for human oversight by a named person, and you record that in your own words in the actions tracker. For that data your organisation is the controller and we are the processor. For your own account data we are the controller, and the Privacy Policy explains what we do with it.

What we process, and for how long. The subject matter is the provision of the Service. The duration is for as long as you hold an account. The nature and purpose is storing what you enter, showing it back to you, producing your reports from it, and recording the knowledge check results of the people you share a learning module with. The personal data is the names and business contact details of the people your organisation chooses to record, together with anything else you enter — and, where you share an AI-literacy learning module, the name, work email address, answers, score and number of attempts of each person who takes its knowledge check. The data subjects are those people, who will usually be your own staff.

What we undertake. We will:

• process that data only on your documented instructions — which are these Terms and your use of the Service — unless the law requires otherwise, and where it does we will tell you first unless the law forbids us to;
• keep it confidential, and give access only to people who need it to provide the Service and who are under a duty of confidence;
• take appropriate technical and organisational security measures, as described in the Privacy Policy;
• use only the sub-processors named in the Privacy Policy — currently Supabase, Netlify, Resend and Stripe — place these same obligations on them, and give you notice before we add or replace one, so that you can object or close your account. Encrypted backup copies are also stored in Microsoft OneDrive; they are encrypted before upload and Microsoft holds no key, so it has no access to the data in them;
• help you, so far as we reasonably can, to answer people exercising their data-protection rights, and to meet your own duties on security, breach reporting and impact assessments;
• tell you without undue delay if we become aware of a breach affecting that data;
• delete it when you delete your account, or return it to you, except where the law requires us to keep it — backup copies, which exist only to restore the Service after a fault, are deleted within 60 days; and
• give you the information you reasonably need to satisfy yourself that these obligations are met, and allow an audit on reasonable notice, no more than once a year unless a regulator requires otherwise.

What you undertake. As the controller, you are responsible for having a lawful basis for the personal data you enter, for telling the people concerned what they are entitled to know, and for the accuracy and lawfulness of what you record — including the rule in section 5 about what not to put in.

Where it is held. Your account and your content are stored in Ireland, in the European Economic Area, and backup copies are kept for up to 60 days in the United Kingdom, with an encrypted copy in Microsoft OneDrive. The Privacy Policy names every provider and explains the safeguards that apply to any transfer outside the UK.

15. Contact us

AI Compliancy is a trading name of Boris Semanco, a sole trader in the United Kingdom.

Questions about these Terms? Contact us at aicompliancy@outlook.com, or write to AI Compliancy, 5 Brayford Square, London, E1 0SG, United Kingdom.