Terms of Service

1. Acceptance of Terms

By accessing or using Kelvora's product and services ("Services"), you agree to be bound by these Terms of Service. If you do not agree, you must not use the Services.

These Terms are designed to support use within regulated, safety-critical, and security-sensitive environments, including defence, transportation, and government programmes.

2. Description of Service

Kelvora provides a product that enables organisations to:

• Structure and manage requirements across complex systems
• Link evidence, artefacts, and documentation
• Support compliance, assurance, and audit readiness
• Integrate with existing engineering and document management toolchains

Kelvora operates alongside existing systems and does not replace authoritative data sources unless explicitly agreed.

3. User Accounts and Organisational Access

To access certain features, you must register an account. You agree to:

• Provide accurate, complete, and authorised information
• Maintain strict control of login credentials
• Ensure access is restricted to authorised personnel only
• Notify Kelvora immediately of any unauthorised access or security incident
• Accept responsibility for all activities conducted under your account

Where used within an organisation, accounts may be subject to enterprise access control, audit logging, and role-based permissions.

4. Acceptable Use and Security Obligations

4.1 Prohibited Activities

You must not:

• Use the Services in violation of applicable laws, regulations, or contractual obligations
• Attempt to gain unauthorised access to systems, environments, or data
• Interfere with system integrity, availability, or performance
• Upload or distribute malicious code or harmful content
• Attempt to reverse engineer, decompile, or extract source code
• Circumvent security controls, audit mechanisms, or access restrictions

4.2 Sensitive and Controlled Data

You acknowledge that Kelvora may be used in environments involving sensitive, controlled, or classified information. You agree:

• Not to upload classified information unless explicitly authorised and supported within an agreed secure deployment model
• To ensure all data uploaded complies with applicable security classifications, export controls, and handling policies
• To manage access and sharing in accordance with your organisation's security policies

4.3 Regulatory Compliance

You are responsible for ensuring that your use of Kelvora complies with all applicable laws and regulations, including but not limited to:

• Data protection and privacy laws (e.g. UK GDPR)
• Export control and national security regulations
• Industry-specific standards (e.g. defence, rail, aviation, or safety-critical systems)

Kelvora is designed to support compliance activities, but ultimate responsibility for compliance remains with you.

5. Intellectual Property

All rights, title, and interest in the Kelvora product, including software, design, and underlying technology, remain the property of Kelvora.

• You retain ownership of all data, documents, and artefacts you upload
• You grant Kelvora a limited licence to process your data solely for providing the Services
• No rights are granted to access or reuse Kelvora intellectual property beyond agreed use

6. Data Security and Assurance

Kelvora implements technical and organisational measures aligned with industry best practices, including:

• Encryption of data in transit and at rest
• Role-based access control and authentication
• Audit logging and traceability
• Secure system architecture and monitoring
• Regular security reviews and testing

Where applicable, Kelvora may align with recognised standards such as ISO 27001 and secure-by-design principles.

7. Limitation of Liability

To the maximum extent permitted by law, Kelvora shall not be liable for:

• Indirect, incidental, or consequential damages
• Loss of data, business, contracts, or profits
• Delays or failures caused by third-party systems or integrations

Kelvora provides tools to support compliance and assurance but does not guarantee regulatory approval or certification outcomes.

8. Termination and Suspension

Kelvora may suspend or terminate access immediately where:

• These Terms are breached
• There is a security risk or suspected misuse
• Required by law or regulatory authority

Upon termination:

• Access to the Services will cease
• Data will be handled in accordance with agreed retention and deletion policies

9. Data Processing Agreement (DPA)

9.1 Roles

For the purposes of data protection laws:

• You act as Data Controller
• Kelvora acts as Data Processor

9.2 Scope of Processing

Kelvora processes personal data solely to provide the Services, including requirements management, evidence linking, and compliance tracking.

9.3 Security Measures

Kelvora applies appropriate safeguards, including:

• Encryption (in transit and at rest)
• Access controls and identity management
• Security monitoring and incident response
• Personnel training and confidentiality obligations

9.4 Sub-processors

Kelvora may use approved sub-processors to deliver the Services. A list is available upon request, and customers will be notified of material changes.

9.5 Data Subject Rights

Kelvora will support you in responding to data subject requests in line with applicable data protection laws.

9.6 Data Retention and Deletion

Upon termination or request, Kelvora will delete or return personal data within an agreed timeframe, unless retention is required by law or contract.

9.7 International Transfers

Where data is transferred internationally, Kelvora ensures appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms.

10. Changes to Terms

Kelvora may update these Terms periodically. Material changes will be communicated via the product or website with an updated revision date.

11. Contact Us

If you have any questions regarding these Terms, please contact:

Email: support@kelvora.ai