Trust Center · Legal
Certyze Acceptable Use Policy
Effective 19 October 2026. Questions: legal@thinkdatalabs.com
1. Introduction and Provider Information
This Acceptable Use Policy (“Policy”) governs the use of certyze.com and the Certyze platform (collectively, the “Platform”). The Platform is provided by:
| Field | Detail |
|---|---|
Provider | Thinkdata Labs LLP |
LLPIN | AAI-9081 |
GSTIN | 06AAMFT4128J2ZW |
Registered Office | 176 First Floor, Sector-10, Panchkula, Haryana 134112, India |
Contact | legal@thinkdatalabs.com |
This Policy is effective as of 19 October 2026. It establishes the standards of acceptable conduct applicable to all Customers and Authorised Users of the Platform, and it supplements the Certyze Platform User Terms.
2. Definitions
In this Policy, the following capitalised terms have the meanings set out below:
“Authorised User”: any individual granted access to the Platform by or on behalf of a Customer.
“CAB” (Conformity Assessment Body): a Customer that performs conformity assessment activities using the Services.
“Content”: any data, documents, records, or materials uploaded to, generated within, or transmitted through the Platform.
“Customer”: the entity that has entered into the Certyze Master Software-as-a-Service Agreement and holds a subscription to the Services.
“Platform”: the Certyze web application at app.certyze.com and any associated interfaces or APIs operated by Thinkdata Labs LLP.
“Services”: the conformity assessment, certification management, audit management, and related functionality provided through the Platform.
“Tenant”: the logically isolated environment within the Platform provisioned for a Customer and its Authorised Users.
3. Scope and Applicability
3.1 This Policy applies to every Customer, each Authorised User, and any person or system that accesses or uses the Platform, the Services, or any application programming interface (API) provided through certyze.com.
3.2 The Policy is binding from the date an Authorised User first accesses the Platform and remains in effect for the duration of the Customer’s subscription and any post-termination period during which access persists.
3.3 This Policy supplements, and is incorporated by reference into, the Certyze Platform User Terms. Where a conflict arises, Section 14 (General Provisions) governs the order of precedence.
4. Permitted Use
4.1 Customers and their Authorised Users may access and use the Platform solely for the purposes enabled by the Customer’s active subscription, including:
Planning, scheduling, and managing audits and assessments;
Recording auditor qualifications, competencies, and assignments;
Documenting audit findings, nonconformities, and corrective actions;
Issuing, maintaining, suspending, and withdrawing certificates;
Managing accreditation-related records and scheme documentation;
Administrative and reporting functions provided within the Customer’s Tenant.
4.2 Any use of the Platform beyond the scope described in clause 4.1, or beyond the entitlements of the Customer’s subscription, is not permitted under this Policy.
5. Prohibited Conduct
Customers and Authorised Users shall not, and shall not permit any third party to, engage in any of the following when using the Platform or Services:
Use the Platform for any unlawful purpose.
Share credentials or permit access by unauthorised persons.
Access another Customer’s Tenant without authorisation.
Bypass or circumvent security or access controls.
Conduct unauthorised security testing (see Section 11).
Introduce malware, viruses, or other harmful code.
Perform bulk data extraction or automated scraping.
Reverse-engineer, decompile, or disassemble the Platform.
Engage in denial-of-service or similar disruptive activity.
Upload illegal or infringing content.
Use unlicensed ISO, IAF, or scheme-owner content.
Record false auditor competencies.
Falsify audits, findings, or related records.
Issue certificates without proper authorisation.
Make misleading accreditation claims.
Impersonate any person or entity.
Send abusive or harassing messages through the Platform.
Violate applicable privacy or data-protection laws.
Transact with sanctioned persons or jurisdictions in violation of applicable sanctions laws.
6. Customer Responsibilities
Each Customer shall:
6.1 Ensure that all Authorised Users within its Tenant are aware of, and comply with, this Policy.
6.2 Maintain accurate, current account and billing information for the Customer’s organisation.
6.3 Implement appropriate internal access controls, including prompt revocation of access for personnel who no longer require it.
6.4 Supervise use of the Platform within the Customer’s Tenant and take reasonable steps to prevent and address any misuse.
6.5 Promptly notify Thinkdata Labs LLP at legal@thinkdatalabs.com upon becoming aware of any actual or suspected breach of this Policy by an Authorised User.
7. Monitoring, Investigation, and Cooperation
7.1 Thinkdata Labs LLP may monitor Platform usage, including logs, metadata, and access patterns, to verify compliance with this Policy and applicable law.
7.2 Where Thinkdata Labs LLP has reasonable grounds to suspect a violation, it may initiate an investigation and request relevant information from the Customer or Authorised User.
7.3 Each Customer and Authorised User shall cooperate promptly with any investigation, provide requested information, and preserve all evidence (including logs, communications, and records) that may be relevant to the matter until notified otherwise by Thinkdata Labs LLP.
8. Reporting Violations
8.1 Any user, Customer, Authorised User, or third party who becomes aware of conduct that may violate this Policy should report it promptly to Thinkdata Labs LLP at legal@thinkdatalabs.com.
8.2 Reports should include: (a) the identity of the reporter, (b) a description of the suspected violation, (c) relevant dates and times, and (d) any supporting evidence or documentation available.
8.3 Thinkdata Labs LLP will acknowledge receipt within a reasonable period and may follow up for additional information. Reports may be submitted anonymously; however, anonymity may limit the ability to investigate or communicate findings.
9. Enforcement and Remediation
9.1 Thinkdata Labs LLP may take proportionate enforcement action in response to any violation of this Policy, including: written warnings, temporary suspension of access, permanent termination of accounts, or removal of offending Content.
9.2 Where a violation poses imminent harm to the Platform, other Customers, or third parties, Thinkdata Labs LLP may immediately suspend the relevant account or Authorised User access without prior notice.
9.3 Upon notification of a violation, the Customer shall promptly remediate the identified conduct and confirm completion to legal@thinkdatalabs.com.
9.4 Repeat or persistent violations may result in escalated consequences, up to and including permanent termination of the Customer’s subscription and all associated Tenant access.
10. Appeals and Contact
10.1 A Customer or Authorised User subject to an enforcement action under Section 9 may submit a written appeal to legal@thinkdatalabs.com within fifteen (15) calendar days of receiving notice of the action.
10.2 Each appeal must identify the enforcement action in question, state the grounds for appeal, and attach any supporting evidence.
10.3 Thinkdata Labs LLP will acknowledge receipt within five (5) business days and issue a written decision within thirty (30) calendar days of receipt. The decision is final.
11. Security Research and Vulnerability Disclosure
11.1 Thinkdata Labs LLP maintains a separate Certyze Vulnerability Disclosure Policy that governs good-faith security research conducted against the Platform.
11.2 The prohibitions on unauthorised security testing set out in Section 5 of this Policy do not apply to researchers who act in strict compliance with the Vulnerability Disclosure Policy.
11.3 Security research conducted outside the scope, methods, or conditions specified in the Vulnerability Disclosure Policy remains subject to all prohibitions in this Policy and may result in enforcement action under Section 9.
12. Changes to This Policy
12.1 Thinkdata Labs LLP reserves the right to amend this Policy at any time.
12.2 For material changes, Thinkdata Labs LLP will provide at least thirty (30) days’ prior notice through one or more of the following: email to the Customer’s registered contact address, an in-Platform notification, or a prominent posting on certyze.com.
12.3 Non-material corrections or clarifications may take effect upon posting without advance notice.
12.4 Continued access to or use of the Platform after the effective date of any change constitutes acceptance of the revised Policy. Customers who do not agree to a change must discontinue use before the change takes effect.
13. Governing Law and Jurisdiction
13.1 This Policy shall be governed by and construed in accordance with the laws of India.
13.2 Any dispute, claim, or controversy arising out of or relating to this Policy shall be subject to the exclusive jurisdiction of the competent courts at Chandigarh, India, including the Punjab and Haryana High Court.
13.3 Nothing in this Section 13 shall limit the right of Thinkdata Labs LLP to seek interim or injunctive relief in any court of competent jurisdiction to prevent imminent or ongoing harm to the Platform or its users.
14. General Provisions
14.1 Severability. If any provision of this Policy is held invalid or unenforceable, the remaining provisions continue in full force and effect.
14.2 Waiver. Failure by Thinkdata Labs LLP to enforce any provision does not constitute a waiver of that or any other provision.
14.3 Relationship to Other Terms. This Policy forms part of, and is incorporated into, the Certyze Platform User Terms. In the event of conflict, the Customer’s Master Software-as-a-Service Agreement prevails, followed by the Platform User Terms, then this Policy, then any other referenced documents.
14.4 Entire Agreement. Together with the Certyze Platform User Terms, the Master Software-as-a-Service Agreement and any applicable order form, this Policy constitutes the complete agreement regarding acceptable use of the Platform.