Terms of service

These terms govern your use of Skarpix. By creating an account or using the service, you agree to them.

The service

Skarpix is a self-serve compliance platform covering NIS2, GDPR / Personvern, the EU AI Act, ISO 27001 / SOC 2 readiness, and CBAM. We provide assessments, reports, and guidance tooling. We are a software service, not a law firm; see “No legal advice” below.

Your account

You must be at least 18 years old and acting on behalf of a business to create an account. You are responsible for keeping your login credentials secure and for activity under your account. Provide accurate information and update it when it changes.

You may not share your account, resell access, or use the platform to provide compliance services to third parties without a separate written agreement.

Trials and payment

New accounts receive a 14-day trial with no payment required. Beyond the trial, continued access requires a paid plan. Upgrades are arranged manually: you request one at /app/upgrade, the founder contacts you, and a plan is agreed in writing. Skarpix does not currently process payments inside the platform.

If your trial ends without an upgrade, your account remains accessible in a limited state until you upgrade or close it. Data is retained per the privacy policy.

Acceptable use

You agree not to:

• attempt to access accounts, data, or systems that are not yours
• probe, scan, or attempt to bypass our security measures
• scrape or harvest data from the platform at scale
• upload material that is unlawful, infringes others' rights, or contains malware
• use the service to generate content that violates Norwegian or EU law

We may suspend or terminate accounts that violate these rules, typically after one notice unless the violation requires immediate action.

Intellectual property

Skarpix owns the platform, the assessment frameworks we author, the report templates, and all related content. You own your inputs and your outputs, including the assessment answers you submit and the reports generated from them. You grant us a limited licence to process your inputs as needed to deliver the service.

No legal advice

This is important. Skarpix provides information, tooling, and structured frameworks to help you work through compliance requirements. We are not your lawyer. Our content is not legal advice. Assessment scores are informational and do not certify compliance with any law. For binding interpretation of NIS2, GDPR, the AI Act, ISO 27001, CBAM, or any other regulation as it applies to your specific situation, consult qualified counsel.

You are responsible for your own compliance posture. Skarpix output supports your decisions; it does not replace them.

Data and privacy

Our processing of your personal data is described in the privacy policy. Subprocessors are listed at /underleverandorer. For business customers who require a Data Processing Agreement (DPA) under GDPR Article 28, contact Email; a standard DPA is available on request.

Service availability

We aim to keep the service available but do not guarantee uptime, specific response times, or freedom from bugs. We may perform maintenance with reasonable notice. Significant outages affecting paying customers are communicated by email.

Disclaimer of warranties

The service is provided “as is” and “as available”. To the extent permitted by Norwegian law, we disclaim implied warranties including merchantability, fitness for a particular purpose, and non-infringement.

Limitation of liability

To the extent permitted by Norwegian law, our aggregate liability arising out of or in connection with the service is limited to the total fees you have paid to Skarpix in the 12 months preceding the event giving rise to the claim. This limitation does not apply to liability for gross negligence, intent, personal injury, or any liability that cannot be limited under Norwegian law.

Termination

You may close your account at any time from /app/settings or by email. We may close your account with reasonable notice for material breach of these terms, non-payment, or extended inactivity. On termination, your data is handled per the privacy policy.

Changes

We may update these terms as the service evolves. Material changes will be communicated by email to active users at least 14 days before they take effect. If you do not accept a material change, you may close your account before it takes effect.

Governing law and venue

These terms are governed by the laws of Norway. Disputes are resolved in the ordinary Norwegian courts, with Oslo District Court (Oslo tingrett) as the agreed venue, subject to mandatory consumer protection rules where they apply.

Contact

Email