Certyze Platform User Terms

1. Definitions and Interpretation

1.1 In these User Terms, the following capitalised terms have the meanings set out below:

1.2 In the event of any conflict or inconsistency between these User Terms and the MSA or Order Form, the MSA and Order Form shall prevail to the extent of such conflict.

2. Acceptance, Eligibility and Authority

2.1 By clicking “I Accept,” “Agree,” or any similar affirmative button or checkbox presented during registration or login to the Certyze Platform, the User enters into a binding agreement with the Provider on the terms set out herein.

2.2 The Certyze Platform is provided exclusively for business and professional use. Personal or consumer use is not permitted.

2.3 Each User represents and warrants that: (a) they are authorised by their CAB, Customer, or organisation to accept these User Terms; (b) they are at least eighteen (18) years of age; and (c) the information provided during registration is accurate and complete.

2.4 If a User lacks the authority described in Section 2.3(a), the User must not access or use the Certyze Platform.

3. Account Registration, Credentials and Security

3.1 Accurate Registration Information. Each User must provide truthful, accurate and current information when creating an Account. Users shall promptly update registration details if they change.

3.2 Individual Accounts. Accounts are assigned to individual natural persons. Users shall not create shared, generic or group Accounts. Each User must maintain a separate Account.

3.3 Credential Security and MFA. Users shall keep all login credentials strictly confidential, use multi-factor authentication (MFA), which is mandatory for all accounts on the Platform, and not disclose credentials to any third party.

3.4 Responsibility for Account Activity. Each User is responsible for all activity occurring under their Account, whether or not authorised by the User. Users must notify the Provider promptly at legal@thinkdatalabs.com upon discovering any unauthorised access or security breach.

4. User Roles and Access Limits

4.1 The Platform operates on a role-based access control model. Each Authorised User is assigned one or more User Roles that determine the features, data, and functions available to that User.

4.2 User Roles include the following categories:

4.3 User Roles and associated permissions are assigned and managed by the Customer’s designated CAB Administrator. The Provider does not determine which Users receive access or the scope of their permissions, except for its own authorised support personnel.

4.4 Each User shall operate strictly within the permissions granted by the assigned User Role. Users shall not attempt to access features, data, or functions beyond their designated privileges, whether by technical means or otherwise.

4.5 The Customer, through its CAB Administrator, is responsible for promptly reviewing, updating, and revoking User Role assignments to reflect changes in personnel or organisational requirements.

5. Permitted Use and Acceptable Use

5.1 Permitted Use. Each Authorised User may access and use the Certyze Platform solely for legitimate certification and audit workflow purposes within the scope of the User Role assigned to that User and in accordance with the MSA, the applicable Order Form, and these User Terms.

5.2 Acceptable Use Policy. The Provider’s Acceptable Use Policy, as published at certyze.com/legal/acceptable-use and updated from time to time, is incorporated herein by reference. Each User agrees to comply with that policy.

5.3 Prohibited Conduct. Without limiting Section 5.2, no User shall:

5.4 No Accreditation Advice. The Certyze Platform is a workflow tool. Nothing available on or through the Platform constitutes accreditation advice, and no User may rely on Platform outputs as a substitute for independent professional or regulatory guidance.

6. Customer Data Ownership, Uploads and Electronic Records

6.1 Ownership. All Customer Data remains the exclusive property of the Customer. Nothing in these User Terms transfers any ownership interest in Customer Data to the Provider.

6.2 Limited Licence. The Customer (through its Users) grants the Provider a non-exclusive, non-transferable licence to process Customer Data solely to the extent necessary to operate and maintain the Certyze Platform in accordance with the MSA.

6.3 Upload Responsibilities. Each User is responsible for ensuring that any documents or data uploaded to the Platform are accurate, lawfully obtained, and authorised for upload by the applicable Customer or CAB.

6.4 Electronic Records and Audit Trails. Audit trails and electronic records generated by the Platform are intended to constitute valid electronic records under the Information Technology Act, 2000 and applicable rules. Users shall not alter, delete, or tamper with any audit trail entry.

7. Confidentiality

7.1 Each User shall treat as confidential all non-public information accessed through the Certyze Platform, including Customer Data, audit findings, certificate details, and any other Confidential Information (collectively, “Protected Information”). Users shall not disclose Protected Information to any third party except as required to perform their assigned role.

7.2 The obligations in Section 7.1 do not apply to information that: (a) is or becomes publicly available without breach of these User Terms; (b) was known to the User prior to disclosure through the Platform; (c) is independently developed without reference to Protected Information; or (d) must be disclosed under applicable law, regulation, or valid legal process, provided the User gives prompt notice where permitted.

7.3 Confidentiality obligations under this Section 7 survive termination of a User’s access to the Certyze Platform.

8. Privacy and Communications

8.1 Platform Privacy Notice. The Provider processes personal data collected through the Certyze Platform in accordance with its Platform Privacy Notice, available at certyze.com/legal/platform-privacy. Each User should review the Platform Privacy Notice before accepting these User Terms.

8.2 Legal Basis. The Provider processes User account data as necessary for the performance of these User Terms and the MSA, and for the Provider’s legitimate interests in operating, securing, and improving the Platform.

8.3 Communications. By registering an Account, each User consents to receive transactional, security, and system communications related to Platform operation (for example, login alerts, MFA codes, role changes, and service notifications). These communications are operational in nature and are not marketing messages.

9. Certification and Audit Actions; Certificate Restrictions

9.1 CAB Responsibility. The CAB, not the Provider, bears sole responsibility for all audit findings, certification decisions, and related professional judgments made through the Certyze Platform. The Provider supplies the technology platform only and does not participate in, endorse, or validate any certification outcome.

9.2 No Accreditation Advice. Nothing on the Certyze Platform constitutes accreditation advice, and Users shall not rely on Platform content as a substitute for independent professional judgment.

9.3 Certificate Restrictions. Certificates issued via the Certyze Platform are subject to the issuing CAB’s own terms and conditions. Users shall not: (a) misrepresent the status, scope, or validity of any certificate; (b) alter, forge, or tamper with any certificate or related record; or (c) use a certificate in a manner that implies endorsement by the Provider.

10. Intellectual Property and Third-Party Services

10.1 Provider IP. The Provider and its licensors retain all right, title, and interest (including all intellectual property rights) in and to the Certyze Platform, its software, documentation, trademarks, and all related materials. Nothing in these User Terms transfers any ownership to any User or Customer.

10.2 Limited Access Right. Subject to these User Terms and the applicable MSA, the Provider grants each Authorised User a limited, non-exclusive, non-transferable, revocable right to access and use the Certyze Platform solely for permitted business purposes during the term of the relevant Customer’s subscription.

10.3 Restrictions. Users shall not: (a) copy, modify, or create derivative works of the Certyze Platform; (b) remove, obscure, or alter any proprietary notices, labels, or markings on the Platform; or (c) attempt to decompile, disassemble, or reverse-engineer any part of the Platform.

10.4 Third-Party Services. The Certyze Platform may integrate with or link to third-party services or applications. The Provider does not control, endorse, or assume any responsibility for such third-party services. Use of any third-party service is at the User’s own risk and subject to that third party’s terms.

10.5 Feedback. If a User voluntarily provides suggestions, ideas, or feedback regarding the Platform, the Provider may use such feedback without restriction or obligation to the User.

11. No Payment Obligations for Users; No Consumer Use

11.1 No Direct Payment Obligations. These User Terms do not impose any fee, charge, or payment obligation on individual Users. All fees for access to and use of the Certyze Platform are governed exclusively by the MSA and Order Form between the Provider and the Customer. No provision of these User Terms shall be construed as creating a debtor-creditor relationship between the Provider and any User.

11.2 No Consumer Use. The Certyze Platform is provided solely for business and professional purposes in connection with certification and audit workflows. The Platform is not intended for personal, household, or consumer use, and consumer-protection statutes applicable to personal transactions do not apply to access granted under these User Terms.

12. Availability Disclaimer, Suspension and Termination

12.1 Availability Disclaimer. The Provider does not guarantee uninterrupted, error-free, or continuous availability of the Certyze Platform. Scheduled and emergency maintenance may occur without prior notice where operationally necessary.

12.2 Suspension. The Provider may suspend or restrict a User’s access immediately if: (a) the User breaches these User Terms; (b) the Customer or its administrator requests suspension; or (c) continued access poses a security or legal risk. The Provider will use reasonable efforts to notify the affected User promptly.

12.3 Termination. User access terminates automatically upon expiration or termination of the applicable MSA or Order Form, or upon revocation by the Customer’s administrator. The Provider may also terminate access for cause.

12.4 Effect of Termination. Upon termination, the User’s right to access the Certyze Platform ceases immediately. Retrieval of Customer Data is governed by the MSA.

12.5 Modification of Features. The Provider may modify or discontinue Platform features with reasonable prior notice to the Customer.

13. Limitation of Liability

13.1 To the maximum extent permitted by applicable law, the Provider shall not be liable to any User under or in connection with these User Terms for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunity, regardless of the theory of liability.

13.2 The Provider’s total aggregate liability to any User arising under these User Terms shall not exceed one thousand Indian Rupees (INR 1,000).

13.3 Each User acknowledges that its primary recourse, if any, is through its CAB or Customer under the applicable MSA and Order Form, and not directly against the Provider under these User Terms.

14. Governing Law and Dispute Resolution

14.1 Governing Law. These User Terms, and any non-contractual obligations arising out of or in connection with them, shall be governed by and construed in accordance with the laws of India.

14.2 Arbitration. Any dispute arising directly between a User and the Provider under these User Terms that cannot be resolved through good-faith negotiation within thirty (30) days shall be referred to and finally resolved by arbitration seated in Chandigarh, India, conducted in English by a sole arbitrator appointed in accordance with the Arbitration and Conciliation Act, 1996, as amended. This clause applies only where legally valid and enforceable in the User’s jurisdiction.

14.3 Severability of Arbitration Clause. If the arbitration provision in Section 14.2 is held unenforceable or inapplicable in any jurisdiction, the parties irrevocably submit to the exclusive jurisdiction of the courts at Chandigarh, India, including the Punjab and Haryana High Court, to the extent permitted by applicable law.

14.4 Subordination to MSA. Nothing in this Section 14 overrides any dispute resolution mechanism agreed between the Customer and the Provider in the MSA or Order Form. Where such mechanisms apply, they shall prevail.

15. General Provisions and Contact

15.1 Entire Agreement. These User Terms, together with the Acceptable Use Policy incorporated by reference and read with the Platform Privacy Notice, constitute the complete agreement between the User and the Provider regarding Platform access. These User Terms are subordinate to the MSA and Order Form between the Provider and the Customer; in the event of conflict, the MSA and Order Form govern.

15.2 Severability. If any provision of these User Terms is held unenforceable, the remaining provisions continue in full force.

15.3 Waiver. No failure or delay by the Provider in exercising any right constitutes a waiver of that right.

15.4 Assignment. Users may not assign or transfer any rights under these User Terms without the Provider’s prior written consent. The Provider may assign these User Terms freely in connection with a merger, acquisition, or sale of substantially all its assets.

15.5 Notices. The Provider may deliver notices to Users via the Platform interface or the email address associated with the User’s Account. Notices to the Provider must be sent to legal@thinkdatalabs.com.

15.6 Publication Date. These User Terms are effective as of 19 October 2026.

15.7 Contact. Questions regarding these User Terms should be directed to: