Legal
Last updated 30 August 2026
These terms are a contract between you and Deepak Gandhi (trading as SOC2Starter) ("we", "us"), governing your use of the SOC2Starter mobile application, our website and the services behind them (the "Service"). By creating an account you agree to them.
The most important clause, first. SOC2Starter is a readiness and evidence-management tool. It does not make you SOC 2 compliant, does not certify anything, does not perform an audit, and does not guarantee that you will pass an examination. A SOC 2 examination is performed by an independent, licensed CPA firm. The percentage the product shows is our internal readiness estimate — not an official score, and not an opinion any auditor is bound by.
The Service is for businesses. By using it you confirm you are at least 16, and that you have authority to bind the company whose workspace you create or join. It is not offered to consumers for personal use.
Data in the Service belongs to a company workspace, not to an individual. The person who creates a workspace is its owner and may invite others and assign roles. Owners and administrators can see, change and delete everything in that workspace, including content added by other members.
You are responsible for keeping your credentials secure and for what happens under your account. Tell us promptly if you believe an account has been compromised.
You keep all rights to everything you put into the Service — questionnaire answers, policies, evidence files, tasks. You grant us only the licence needed to host, process, back up and display that content in order to operate the Service for you. We do not use it for advertising, do not sell it, and do not use it to train any model of our own.
You are responsible for having the right to upload what you upload.
Policy drafts, classifications, action plans and explanations produced with AI assistance are drafts. They are generated from the information you give us and may contain errors, omissions or assumptions that do not match how your company actually operates.
You must review, edit and approve every draft before relying on it. Approving a policy in the Service is your statement that it describes your actual practice. We are not responsible for the consequences of publishing or acting on an unreviewed draft. Section 3 of our privacy policy explains what is sent to a model provider.
When you connect a third-party tool you authorise us to read data from it on your behalf, using the credential you supply. We request read-only access and never request a permission that can change anything in your account. You are responsible for having authority to connect that account, and for the credential's scope. Your relationship with that provider is governed by their terms, not ours.
You agree not to:
Plans, limits and prices are published on the pricing page. Every account starts with a 14-day free trial. When a trial or subscription ends, the workspace becomes read-only: your data is retained and remains readable, but cannot be edited until you subscribe.
Subscriptions renew automatically until cancelled. Payments are handled by our payment provider acting as merchant of record; their buyer terms apply to the transaction as well as these terms. Prices exclude tax unless stated; any tax that applies is shown at checkout.
Subscription fees are non-refundable. See the refund policy, which forms part of these terms.
We work to keep the Service available but do not promise a specific uptime level unless we have signed a separate agreement with you saying so. We may need to take it down for maintenance, and we will give notice where we reasonably can.
We may add, change or remove features. If we remove something you materially rely on while you are a paying subscriber, we will give reasonable notice by email.
You may stop using the Service at any time and delete your account from inside the app (Settings → Danger zone). We may suspend or terminate an account that breaches these terms, or where required by law — where practical, with notice and a chance to fix the problem first.
Deleting your account permanently deletes your login, your profile, and every company where you are the only owner or administrator, including its policies, evidence files, tasks and activity log. This cannot be undone. Export anything you want to keep first.
The Service is provided "as is" and "as available". To the fullest extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement.
We specifically make no warranty that using the Service will result in passing a SOC 2 examination, satisfying an auditor, meeting any regulatory obligation, or closing any deal. Compliance depends on what your company actually does, and on an auditor's professional judgement.
To the fullest extent permitted by law, neither party is liable for indirect, incidental, special or consequential damages, or for lost profits, lost revenue, lost business or lost data, however caused.
Our total aggregate liability arising out of or relating to the Service is limited to the amount you actually paid us in the 12 months before the event giving rise to the claim. If you are on a free trial and have paid us nothing, our liability is limited to USD 100.
Nothing here limits liability that cannot lawfully be limited.
You agree to indemnify us against claims arising from your content, your use of the Service in breach of these terms, or any representation you make to a third party about your compliance status.
Your compliance content is confidential. We will not disclose it except to the subprocessors listed in our privacy policy, to people you have invited to your workspace, or where legally compelled — in which case we will tell you unless we are prohibited from doing so.
We may update these terms. For material changes we will notify account owners by email at least 30 days before they take effect. Continuing to use the Service after that means you accept the updated terms.
These terms are governed by the laws of India, and the courts of the courts of India have exclusive jurisdiction, without regard to conflict-of-law rules.
Deepak Gandhi (trading as SOC2Starter)
deepakgandhi2007@gmail.com