CRACI Terms of Service
Last updated: October 9, 2026
1.
Purpose and Scope
1.1.
These Terms of Service (“Terms”) govern the use of the CRACI compliance platform (“Services”) offered by CRACI Corporation Oy (“CRACI”) to its business customers (each a “Customer”) and their users.
1.2.
The Services are available only to individuals who are acting in their professional capacity as an employee or representative of a business entity or other organisation. By accepting these Terms as part of the sign-up process or in connection with a separate agreement with CRACI, you as the Customer or on behalf of the Customer represent and warrant that you have full legal authority to enter into an agreement on behalf of the Customer and agree to these Terms. The Services are not intended for consumer use or for use of persons under the age of 18.
1.3.
These Terms together with their appendices constitute a legally binding agreement between CRACI and the Customer (“Agreement”).
2.
Definitions
2.1.
“Customer Content” means any content, such as files, source code, artifacts, documents, text, or other data that the Customer uploads, transmits, or otherwise directly or indirectly provides to the Services and processes in the Services.
2.2.
“Free Version” means a version of the Services referred to in section 4.5.
2.3.
“Intellectual Property Rights” means copyrights and related rights (including database and catalogue rights and photography rights), patents, utility models, design rights, trademarks, tradenames, trade secrets, know-how and any other form of registered or unregistered intellectual property rights or statutory protection of any kind and applications for any of the foregoing.
2.4.
"Parties" means CRACI and the Customer together.
2.5.
"Party" means either CRACI or the Customer individually.
2.6.
“Subscription Period” means the time period for which the Customer has acquired a license and right to use the Services.
2.7.
“Third-Party Products” means any third-party products, components or services provided with or incorporated into the Services.
2.8.
“User” means an employee or another authorized individual using the Services on behalf of the Customer.
3.
Right to use the Service
3.1.
Subject to due payment of all applicable fees and compliance with the terms of the Agreement, CRACI grants the Customer a limited, non-exclusive, revocable, non-transferable and non-sublicensable right to access and use the Services for the Subscription Period in accordance with the Agreement.
3.2.
Customer acknowledges that the right to use the Services is granted on an individual basis to each User. The use of shared user accounts is prohibited.
4.
Provision of the Services
4.1.
Except as specifically provided under this Agreement, the Services are provided "as is" and with the functionalities available at each time without warranty of any kind, either express or implied, including but not limited to the warranties of merchantability and fitness for a particular purpose.
4.2.
CRACI shall make reasonable efforts to keep the Services available at all times without any specific service level or availability commitments. In the event or suspicion of a failure, emergency, security breach or vulnerability, or in case of a legal or regulatory change or other liability, the Services may be temporarily or permanently modified, suspended, or discontinued without limiting any other rights of CRACI.
4.3.
The Services are intended to support the Customer’s compliance work. CRACI shall not be liable for the Customer’s compliance with any applicable law or regulation, or any decisions taken or not taken by the Customer based on the Services. The Customer shall at all times remain responsible for its code, build process, and all use of the Services.
4.4.
CRACI reserves the right to develop, modify, or suspend the Services at its sole discretion. CRACI strives to give the Customer thirty (30) business days’ written notice of any modification or suspension that materially impacts the use of the Services.
4.5.
The Services may, at CRACI’s sole discretion, include features offered free of charge. Other terms of the Agreement notwithstanding, CRACI may at its sole discretion, without prior notice and without any liability modify, suspend, or discontinue the Free Version, or limit the Customer’s access to the Free Version.
4.6.
CRACI shall have the right to use subcontractors to provide the Services.
4.7.
The Services may include features or components that rely on Third-Party Products, such as application programming interfaces (API) provided by third parties. CRACI is not responsible for any such Third-Party Products or their impact on the Services, including any impacts of any outages, disruptions, or changes of Third-Party Products on the Services.
4.8.
CRACI shall at its sole discretion have the right to suspend access of the Customer or any of its Users to the Services without prior notice if the Customer has not paid due fees, or if CRACI reasonably suspects or discovers that the Customer or any of its Users has breached the Agreement or uses the Services in a manner which jeopardizes the security, integrity, or availability of the Services or the reputation of CRACI.
4.9.
Unless separately agreed to by the Parties, the service fees do not include integration or implementation services, or similar related consulting services.
5.
Service Fees
5.1.
The fees, subscription models and payment methods applicable to the Services from time to time are described on the CRACI pricing website at craci.com/pricing.
5.2.
All fees and payments made to CRACI under the Agreement, including the purchase of credits, are non-refundable. For clarity, in the event of a decrease in the number of licenses, suspension of the Customer’s access in accordance with this Agreement, or cancellation or the termination of the subscription or the Agreement for any reason, the Customer shall not be entitled to a refund of any fees.
5.3.
All fees include public charges determined by the authorities, except for value-added tax and other applicable taxes, which shall be added to the fees in accordance with the then-current regulations. If such taxes or their collection basis changes, CRACI shall revise the fees correspondingly.
5.4.
CRACI shall have the right to change the fees by providing the Customer with thirty (30) business days’ written notice. The change shall not affect the charges for a Subscription Period that has commenced before the effective date of the change.
6.
Customer’s Obligations
6.1.
The Customer shall be responsible for all of its and its Users’ activities in and concerning the Services, including the acquisition and functionality of any equipment, systems, software, and connections that it may use to access and use the Services or integrate them into its own systems, applications or equipment.
6.2.
The user licenses to the Services are granted on an individual basis. A license assigned to an individual User may be reassigned to another User once every one hundred and eighty (180) days. The Customer shall be responsible for ensuring that user licenses are used only by the individual whose account they are.
6.3.
The Customer shall at all times keep its contact details up to date in the Services.
6.4.
The Customer shall be responsible for the use of its users’ credentials to the Services. The Customer shall promptly notify CRACI of any loss of or unauthorized use of user credentials, or any data breach related to the Services.
6.5.
The Services are not intended for consumer use.
7.
Restrictions of Use
7.1.
The Customer shall not, unless agreed with CRACI or separately authorized by CRACI:
- sublicense, lease, or redistribute access to the Services to a third party;
- remove, obscure, or alter any copyright, trademark, or other proprietary rights notices;
- use the Services in violation of any applicable law or the rights of third parties;
- circumvent or reverse engineer any features, functionalities, logic, algorithms, source code, or usage restrictions and limits of the Services;
- access or use any information beyond what CRACI allows under this Agreement, or break or circumvent any technical or administrative security measures related to the Services except as specifically authorized by CRACI under its bug bounty program;
- use the Services to create a substantially similar service;
- perform any actions that could damage, disable, disrupt, overburden or impair the Services or its underlying services or systems, or probe, scan, or test the vulnerability of the Services, or perform any actions that could disrupt or otherwise adversely affect use of the Services by other users;
- exfiltrate any data out of the Services beyond the functionalities offered in the Services;
- attempt to change, distort or modify the Services or its underlying systems; or
- transmit any malware, viruses, or other computer code that may damage or detrimentally interfere with the Services, use the Services for any malicious activity, including attacks or distributing or building code for malicious purposes.
8.
Customer Content
8.1.
When using or accessing the Services, the Customer may create, upload, transmit, use, and otherwise process Customer Content in the Services. The Customer shall have sole responsibility for all Customer Content, including the legality, integrity, accuracy and quality of Customer Content.
8.2.
The Customer shall be responsible that the Customer Content does not infringe any rights of third parties, including intellectual property rights, or violate any applicable laws or regulations. In case CRACI reasonably believes any Customer Content violates the Agreement, the rights of a third party or any applicable law or regulation, CRACI shall have the right to remove such Customer Content from the Services or suspend the Customer’s access to the Services without liability.
8.3.
All right, title, and any Intellectual Property Rights to the Customer Content belong to the Customer or its licensors.
8.4.
The Customer grants CRACI a limited, non-transferable, non-exclusive, non-sublicensable right to use Customer Content for the purpose of providing the Services in accordance with the Agreement.
8.5.
CRACI shall not share, sell, license or disclose Customer Content with a third party, excluding (i) authorized subcontractors of CRACI for the purpose of providing the Services and (ii) sharing of Customer Content and other data as chosen by the Customer through certain features of the Services.
8.6.
CRACI stores Customer Content of active Customers accounts to provide the Services. An account shall be deemed inactive if the Customer has no subscriptions and there has been no activity on the account for thirty (30) days. All Customer Content shall be deleted after twelve (12) months of inactivity.
8.7.
CRACI shall, subject to the confidentiality obligations and where applicable, the Customer’s choices in the Services, have the right to generate data from the Customer’s use of the Services and use such data and Customer Content for providing the Services, ensuring the functionality and security of the Services, and developing the Services, provided that any results do not identify the Customer or any individual User. CRACI may also share anonymous data with third parties for the purposes of reporting vulnerabilities.
9.
Confidentiality
9.1.
Neither Party shall disclose to third parties (excluding subcontractors) any material or information received from the other Party marked as confidential or which should be understood to be confidential and shall only use such material or information in accordance with this Agreement.
9.2.
The confidentiality obligation shall not apply to material and information which is generally available or otherwise public, or which a Party is obligated to disclose due to applicable mandatory laws, public authority regulations, or court orders.
9.3.
A Party shall apply appropriate security measures to protect the confidential information of the other Party and treat confidential information at least with the same level of care as its own confidential information.
10.
Intellectual Property Rights
10.1.
All right, title, and any Intellectual Property Rights to and relating to the Services, as well as any related documentation and any copies, modifications, translations, amendments, and derivatives thereof belong to CRACI or its licensors.
10.2.
Except as expressly stated herein, the Customer is not granted any license or right to Intellectual Property Rights of CRACI, and all rights not expressly granted hereunder are reserved by CRACI.
11.
Indemnification
11.1.
Indemnification by CRACI
11.1.1.
If CRACI at its sole discretion determines that any part of the Services infringes Intellectual Property Rights of a third party, CRACI shall have the right to modify the Services to eliminate the infringement or procure to the Customer a right to use the Services at the sole discretion and cost of CRACI. If this is deemed by CRACI not to be reasonably possible, CRACI shall have the right to terminate this Agreement without incurring any liability. In case of such termination, CRACI shall refund a pro rata portion of the fees prepaid by the Customer for the terminated portion of the term, which shall be the sole remedy for the Customer.
11.1.2.
CRACI shall indemnify, defend, and hold the Customer harmless from and against losses, damages, liabilities, or costs (including reasonable attorneys’ fees) incurred by the Customer resulting from any third-party claim, suit, action, or proceeding that the Services infringe or misappropriate the Intellectual Property Rights of a third party. This Section 11.1 contains the Customer’s sole remedy and CRACI’s entire liability for any claims that the Services violate any Intellectual Property Rights of a third-party.
11.1.3.
This Section 11.1 shall not apply to the extent the alleged infringement arises from (i) Customer Content, (ii) modifications to the Services by the Customer or a third party, (iii) use of the Services against the directions or guidelines of CRACI or in a manner not authorized by CRACI, or (iv) other reasons outside the responsibilities of CRACI under the Agreement.
11.2.
Indemnification by Customer
11.2.1.
The Customer shall defend, indemnify and hold CRACI harmless from and against losses, damages, liabilities, or costs (including reasonable attorneys’ fees) incurred by CRACI resulting from any third-party claim that Customer Content, or any use of Customer Content in accordance with the Agreement, infringes or misappropriates such third party’s rights, as well as any third-party claim based on the Customer’s or its Users’ (i) negligence or willful misconduct; (ii) use of the Services against the terms of the Agreement; or (iii) any unauthorized modifications to the Services.
11.3.
Preconditions
11.3.1.
The indemnity obligations under this Section 11 are contingent upon the indemnified Party (i) promptly providing notice to the indemnifying Party of the claim, (ii) cooperating with the indemnifying Party at the indemnifying Party’s sole expense in the defense of such claim, and (iii) giving the indemnifying Party the right to control the defense and settlement of any such claim, with the exception of not entering into any settlement that affects the indemnified Party's rights or interest without such Party's prior written approval.
12.
Limitation of Liability
12.1.
Neither Party shall be liable for any indirect or consequential damages caused to the other Party, including but not limited to the loss of data or loss of revenue.
12.2.
A Party's total aggregate liability under or in connection with this Agreement shall be limited to the aggregate service fees paid by the Customer for the Services during a period of twelve (12) months preceding the occurrence for which damages are claimed.
12.3.
The foregoing shall not apply to damages resulting from wilful misconduct or gross negligence, or the breach of the Sections 7 (Restrictions of Use), 11 (Indemnification) or 9 (Confidentiality).
12.4.
Other terms of this section 12 notwithstanding, CRACI shall have no liability for the Free Version.
12.5.
CRACI shall not be responsible for the Customer Content of the content of any of its other customers or liable for any damage caused by such Customer Content or the content of its other customers.
13.
Miscellaneous
13.1.
Force Majeure
13.1.1.
Neither Party shall be liable for delay and damage caused by an impediment beyond the Party’s control and which the Party could not have reasonably taken into account at the time of conclusion of the Agreement and the consequences of which the Party could not reasonably have avoided or overcome. Such force majeure events shall include, if not proven otherwise, inter alia, war or insurrection, earthquake, flood or other similar natural catastrophe, interruptions in general traffic, data communication or supply of electricity, import or export embargo, strike, lockout, boycott or other similar industrial action.
13.1.2.
Each Party shall without delay inform the other Party in writing of a force majeure event and the ceasing of such event.
13.2.
Amendments
13.2.1.
CRACI may at its sole discretion and at any time amend these Terms by updating them and notifying the Customer in writing of any material changes with at least thirty (30) days’ notice. If the Customer does not accept the change, the Customer shall have the right to terminate the Agreement by notifying CRACI thereof in writing prior to the effective date of such change.
13.3.
Subcontractors
13.3.1.
CRACI shall have the right to use subcontractors for the provision of the Services. CRACI shall be liable for the subcontractors’ work and services in the same manner as for its own work and services.
13.4.
Severability
13.4.1.
If any part of the Agreement is held to be invalid or unenforceable by any court or other authority having jurisdiction, this shall not affect the validity or enforceability of the rest of this Agreement. In such cases, this Agreement shall be construed and interpreted so that its effect shall remain as close as legally possible to the effect it would have had without such invalidity or unenforceability.
13.5.
Assignment
13.5.1.
Neither Party may assign the Agreement or any rights or obligations hereunder without the prior consent of the other Party. CRACI may, however, assign all or any of its rights or obligations hereunder in whole or part to an affiliate or successor or to a purchaser or acquirer of its business assets without the Customer’s prior consent. In addition, CRACI shall be entitled to transfer its receivables hereunder to a third-party.
14.
Term and Termination
14.1.
The Agreement shall enter into force upon the Customer’s acceptance of these Terms, or as defined in a separate agreement between the Parties, and remain in force for the duration of the Subscription Period.
14.2.
The Subscription Period shall renew automatically, unless cancelled by either Party before the renewal.
14.3.
Either Party may terminate the Agreement with immediate effect in whole or in part upon written notice to the other Party in the event of any of the following:
the Customer is dissolved or liquidated, is declared bankrupt or otherwise becomes the subject to other insolvency proceedings; or
the other Party materially breaches the Agreement and (if the breach is curable) fails to cure such breach within thirty (30) calendar days of being notified in writing. Failure to pay due fees shall be considered a material breach.
14.4.
This Agreement shall terminate after twelve (12) months of inactivity of the Customer. A Customer shall be deemed inactive if they have no subscriptions on the account for thirty (30) days.
15.
Applicable Law and Dispute Resolution
15.1.
The Agreement shall be governed by and interpreted in accordance with the laws of Finland, excluding its provisions on the choice of law.
15.2.
Any dispute, controversy, or claim arising out of or in connection with the Agreement shall be finally settled by arbitration in accordance with the Arbitration Rules of the Finland Chamber of Commerce. The language of the arbitration shall be English. The seat of the arbitration shall be Helsinki, Finland. The number of arbitrators shall be one (1).