Terms of Service

Aegis Intelligence Pte Ltd

These Terms of Service ("Terms") are a binding agreement between Aegis Intelligence Pte Ltd ("Aegis", "we") and the entity or individual accessing the Platform ("you"). By using the Platform, you accept these Terms. If you accept on behalf of a company, you confirm you have authority to bind it.

You must be at least eighteen (18) years old and legally capable of entering into binding contracts.

Some features of the Platform have additional terms, which we show to you when you use that feature. Those terms form part of these Terms. If they conflict with these Terms, the additional terms apply to that feature.

In these Terms:

  • -"Aegis" (or "we", "us", "our") means Aegis Intelligence Pte Ltd.
  • -"Platform" means the Aegis software platform accessible via aegis-intel.sg and related applications.
  • -"Service" means the Platform and any related services we provide.

Aegis provides software and services for compliance program management, audit readiness, and governance, risk, and compliance (GRC). We may modify or discontinue features at any time, with reasonable notice to paying customers for material reductions.

To use the Platform you must register an account. You agree to provide accurate and complete information, keep your credentials confidential, and promptly notify us of any unauthorised use of your account. You are responsible for all activity under your account.

The Platform supports two roles: Customers (who engage compliance services and manage compliance work) and Consultants (who offer their services to Customers). If you operate in both capacities, both sets of terms apply to you in the respective role.

Aegis's role. We perform commercially reasonable due diligence and KYC on users before granting access — verifying business registration, identity, and stated professional credentials. We cannot detect every forgery or misrepresentation, and we are not liable for losses arising from a user's false credentials or breach of these Terms. Conduct your own due diligence appropriate to the engagement before relying on another user's information.

Consultants are independent service providers, not employees or agents of Aegis. Aegis's involvement in a Consultant engagement depends on the engagement structure described in section 5.2.

A person who is invited, without registering an account, to supply a document for one project or to answer a questionnaire for one third-party assessment (a guest), may use only the page for that project or assessment, is bound by these Terms in respect of that use, and has none of the rights of a Customer or Consultant. A guest who answers for a company confirms that they are authorised to answer for it.

As a Customer you may engage Consultants, upload compliance evidence and related User Data, connect external services on your behalf, and manage projects on the Platform. You are responsible for:

  • -Providing accurate and complete information during onboarding and KYC.
  • -Ensuring you have authority and consent to upload any data, including data about employees, contractors, and third parties.
  • -Paying fees applicable to your subscription or any engagement.
  • -Using Consultants' information (including CVs, certifications, and credentials) only for the purpose of evaluating and engaging their services through the Platform.

As a Consultant you may publish your profile and credentials, accept engagements from Aegis or from your own clients, and deliver services through the Platform. You are responsible for:

  • -Ensuring all credentials, certifications, qualifications, and work history you submit are accurate and current.
  • -Performing engagements with reasonable professional skill and care.
  • -Maintaining the confidentiality of information you access in the course of an engagement.
  • -Complying with applicable laws, professional regulations, and tax obligations.
  • -Paying any subscription or platform fees applicable to your use of the Service.

If Aegis engages you to deliver work to a Customer, we will give you a separate Consultant Agreement before the engagement starts, and that engagement is governed by it.

(a) What they are. Where the Platform offers them, you may buy hours of professional time ("Professional Hours"), delivered by Aegis or by a service provider you choose on the Platform. No subscription plan includes Professional Hours.

(b) Paid in advance. Professional Hours are paid in advance, in whole hours, at the price shown on the Platform when you buy. A request for professional time that your remaining Professional Hours cannot cover will not be accepted until you buy more.

(c) Expiry. Each purchase of Professional Hours expires twelve (12) months after the date of that purchase. Hours are used from your oldest unexpired purchase first. We will notify you at least thirty (30) days before a purchase expires. Expired hours are cancelled.

(d) No refund. Professional Hours are not refundable, including unused and expired hours.

(e) Recording and confirming sessions. The person who delivers a session records it on the Platform. You may confirm it, or reject it with a written reason. A confirmed session uses Professional Hours. A rejected session does not, and if the two sides do not agree, Aegis decides how many minutes, if any, the session uses; that decision is final.

(f) Deemed confirmation. If you neither confirm nor reject a recorded session within fourteen (14) days after we notify you of it, the session is treated as confirmed and uses Professional Hours. We will remind you before that happens.

(g) Balance below zero. A session that is longer than your remaining Professional Hours uses them in full and leaves an amount owed. While an amount is owed, you cannot make a new request. Your next purchase first pays the amount owed.

(h) Refunds made by us. If we refund all or part of a purchase, the refunded hours are cancelled. Hours from that purchase that you already used stay used, and any shortfall is treated as an amount owed under (g).

This section applies to a plan that you buy on the Platform for a paid period.

(a) Renewal. A plan renews by itself at the end of each paid period, and we charge the fee for the next period to the payment method on file, unless the buyer has turned auto-renew off before the end of the period.

(b) Turning auto-renew off. The buyer may turn auto-renew off at any time. The plan then stays active until the end of the period already paid, and ends.

(c) No cancellation in the middle of a period. A paid period cannot be cancelled part-way, and fees for a period already paid are not refunded in whole or in part, except as set out in (c-1).

(c-1) First 14 days of an annual plan. If you first buy an annual plan and cancel it within 14 days after that first payment, we refund the fee for that year in full, and the plan ends when we make the refund. This does not apply to a renewal.

(d) Failed payment. If a renewal charge fails, we will tell you by email. The plan ends at the end of the paid period. If a later charge succeeds, the plan starts again from that time.

(e) When a plan ends. When a plan ends, you cannot start a new project and AI features stop. Your existing projects and your User Data stay available for manual work, and renewing restores the plan.

(f) Fee changes. We may change the fee of a plan. A new fee applies only from a renewal that falls at least thirty (30) days after we make the change. Before a renewal charges a higher fee, we will email you at least thirty (30) days in advance, with the old fee, the new fee, the renewal date and how to turn auto-renew off. If you do not agree to the new fee, turn auto-renew off before that renewal; if you do not, the renewal at the new fee is your acceptance of it.

The Platform produces two kinds of outputs:

Consultant deliverables — the signing-off Consultant is solely responsible for the quality, accuracy, and completeness of their deliverable. Aegis is not liable for defects in Consultant deliverables.

AI-generated outputs — outputs from the Platform's AI agents (suggested controls, draft policies, evidence mapping, gap analysis) are assistive, not authoritative. You must review, validate, and approve AI outputs before relying on them for any compliance, audit, regulatory, or business decision. Human-in-the-loop (HITL) review is required for any AI output you act on.

You agree not to:
(a) use the Service in violation of law;
(b) attempt unauthorised access, probe vulnerabilities, or disrupt the Service;
(c) upload malicious code;
(d) reverse engineer the Service except where permitted by law;
(e) infringe third-party rights;
(f) use the Service to send unsolicited communications; or
(g) impersonate another person or entity, or misrepresent your identity, qualifications, or affiliations.

We may suspend or terminate access for breach.

Data you upload to the Platform, and data the Service reads from a Connected System (section 9A) ("User Data"), remains yours. You grant us a licence to host, process, and display User Data solely to provide the Service. You are responsible for the accuracy and legality of User Data and for obtaining necessary consents. Our handling of personal data is governed by our Privacy Notice at https://www.aegis-intel.sg/privacy-notice.

We do not use User Data to train our AI models. We may collect aggregated and de-identified usage statistics (such as feature usage, error rates, and acceptance rates of AI suggestions) to improve the Service.

A Data Processing Addendum is available on request for customers requiring one to comply with applicable data protection laws.

The Service integrates with third-party services such as Google Drive, Microsoft OneDrive, and Atlassian Confluence. Use of those services is subject to their own terms; we are not responsible for them. You may revoke your authorisation to any connected service at any time through your account or directly with that service; doing so may limit functionality. Changes, suspension, or discontinuation of a third-party service by its provider is not a breach of these Terms by Aegis.

This section applies if you connect a Connected System, where the Service offers it.

  1. 1.Authorisation. If you connect a cloud account, an identity directory or another system you control to the Service (a "Connected System"), you authorise Aegis to read it, with the access you grant, to provide the Service.
  2. 2.Authority. You confirm that you have the authority to grant that access for the Connected System and on behalf of its owner.
  3. 3.Scope. The Service shows the access it needs for each Connected System. Grant only that access. If you grant more, you do so at your own risk, and we will still read only what the Service needs.
  4. 4.Personal data in a Connected System. A Connected System may hold personal data of your staff and others (for example names, login names, roles and group memberships). You are the controller of that data. You confirm that you have given any notice and have any consent or other legal basis that applicable law requires for us to read and process it for you.
  5. 5.Read-only, metadata only. We use the access you grant only to read. We do not change anything in a Connected System. We read configuration and metadata (such as names, identifiers, types, status and role assignments). We do not read or keep the content of files, databases, mailboxes or messages, and we do not keep passwords, access keys or authentication secrets of your users.
  6. 6.The grant. You grant access, in your own account, to an identity that Aegis controls. We keep no credential, token or password of yours. We use that access only to read the Connected System. You can disconnect at any time. We then stop reading at once. The access stays in your account until you remove it, and we will not use it after you disconnect. You should remove the access in the Connected System.

The Service is the property of Aegis and our licensors. We grant you a limited, non-exclusive, non-transferable right to use the Service for your internal business purposes. You may not resell the Service or use it to build a competing product.

Outputs and deliverables. Subject to your compliance with these Terms and applicable fees:

  • -AI-generated outputs produced for you remain yours to use for your own business purposes. Aegis retains all rights in the underlying models, prompts, and infrastructure used to generate them.
  • -Consultant deliverables produced through Aegis-engaged work belong to the Customer, on the terms set out in the Customer's subscription and the Consultant Agreement for that engagement.

If you provide feedback or suggestions about the Service, we may use them without restriction or compensation to you.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE MAXIMUM EXTENT PERMITTED BY LAW, AEGIS DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR PURPOSE, AND NON-INFRINGEMENT. THE SERVICE SUPPORTS YOUR COMPLIANCE PROGRAM; IT DOES NOT REPLACE INDEPENDENT LEGAL, AUDIT, OR ACCOUNTING ADVICE.

TO THE MAXIMUM EXTENT PERMITTED BY LAW:
(a) Neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenues, goodwill, or data.
(b) Aegis's aggregate liability for all claims under these Terms will not exceed the fees paid by you to Aegis in the 12 months preceding the event giving rise to liability.
(c) The limits in (a) and (b) do not apply to: (i) your payment obligations; (ii) your indemnification obligations under section 13; (iii) infringement of the other party's intellectual property; (iv) fraud, gross negligence or wilful misconduct; or (v) any liability that cannot be limited by law.

You will indemnify Aegis from third-party claims arising from your User Data, your use of the Service in violation of law, or your breach of these Terms.

Either party may terminate for material breach not cured within 30 days of written notice. We may suspend immediately for serious breaches, non-payment, or as required by law. On termination, your right to use the Service ends; we will provide reasonable assistance to export User Data for 30 days, after which it may be deleted. On termination we stop reading every Connected System at once. Within seven (7) days we delete every identifier you gave us for a Connected System. The access you granted to an identity that Aegis controls (section 9A.6) stays in your account until you remove it; we will not use it after termination, and you should remove it. Sections 8, 9A, 10, 11, 12, 13, and 15 survive.

These Terms are governed by the laws of Singapore.

Any dispute arising out of or in connection with these Terms, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre (SIAC) in accordance with the Arbitration Rules of the Singapore International Arbitration Centre for the time being in force, which rules are deemed to be incorporated by reference in this clause. The seat of the arbitration shall be Singapore. The tribunal shall consist of one (1) arbitrator. The language of the arbitration shall be English.

We may update these Terms; material changes will be notified through the Service or by email at least 30 days before they take effect.