Terms of Service

Last updated: 10 June 2026
Effective date: 10 June 2026

1. About these Terms

These Terms of Service form a binding agreement between you and Aicura Pty Ltd. ABN 85 696 789 876 ("Aicura", "we", "us", "our"). They govern your use of the Aicura platform and any related services we provide (together, the "Service").

By signing up for the Service, accessing it, or paying a subscription fee, you accept these Terms. If you don't accept them, don't use the Service.

If you're entering into these Terms on behalf of an organisation, you confirm you have authority to bind that organisation. References to "you" mean both you personally and the organisation you represent, as the context requires.

2. The Service

Aicura is an Australian AI governance platform. It helps you catalogue the AI systems and agents your organisation runs, discover AI already in use across sources you connect, assess risk against the frameworks you enable, author governance policies and guardrails, review the documents you upload against Australian regulatory requirements, generate draft policies and statements, record incidents and hold the resulting governance record.

The Service is provided on a self-serve basis. You sign up online and access it through a web browser. Paid tiers are billed through Stripe. A free tier is available on the terms in clause 8.1. Some components are deployed and run by you rather than hosted by us, as set out in clause 3.5.

3. What the Service does and does not do

This is important. Read it.

3.1 What we do

We provide a software platform with content, templates, scanning workflows, and AI-generated drafts to support your AI governance program.

3.2 What we do not do

The Service is informational guidance only. We do not:

• provide legal advice
• assess, certify, audit, or guarantee compliance with any law or framework
• replace your own legal counsel, compliance professionals, or decision-makers
• monitor, audit, or assess the AI systems you actually operate
• guarantee the accuracy, completeness, or currency of any output

Where the Service indicates that its automated checks have raised no findings, that means those checks found nothing on the data you have provided. It does not mean you are compliant with any law or framework.

3.3 AI-generated content

Significant parts of the Service are produced by large language models. AI-generated outputs, including scan findings, draft statements, draft policies and risk assessment text, are probabilistic. They may be incomplete, inaccurate or out of date.

All AI-generated content is provided as a starting point. You are responsible for reviewing, editing and approving everything produced by the Service before relying on it, sharing it or publishing it.

The Service includes human-in-the-loop review steps for outputs that affect your published documents and your governance record. The fact that a document has passed through these steps does not constitute a verdict on its accuracy.

3.4 Regulatory content

The Service includes Aicura's interpretation of various Australian regulatory frameworks, including the Privacy Act 1988 (Cth), the APP 1.7 to 1.9 transparency requirements, the AI6 Essential Practices, and related guidance. Our interpretations are made in good faith and may differ from regulators' or courts' eventual views. The frameworks we cover are updated periodically, but we make no commitment that the platform reflects every change in real time.

You should not rely on the Service as your only source of regulatory information.

3.5 Components you deploy and run

Some parts of the Service are deployed and operated by you inside your own environment, including the Hub, the AI gateway, input and output scanners and drift monitoring. Aicura supplies the software. The Hub connects outbound to the Service, and Aicura does not connect into your environment. Guardrail bundles travel out to your environment and enforcement and monitoring results travel back. Your AI traffic does not pass through Aicura.

You are responsible for deploying, configuring, securing and operating those components, and for the effect of the rules you choose to enforce with them. Because they sit in the request path of your own systems, a rule you configure can block, redact or constrain your traffic. Aicura does not decide what you enforce, does not operate these components and is not responsible for the availability of your own environment or for outcomes arising from your configuration.

4. Accounts and access

You sign up for the Service through our website. The first user we create when your account is activated, whether on the free tier or a paid subscription, is the initial administrator for your organisation. You can add additional users through the platform, subject to your subscription plan.

You're responsible for:

• the accuracy of information you provide at signup
• keeping account credentials confidential
• everything done under your account, whether by you or anyone else using it
• making sure your authorised users follow these Terms

You must use a real email address for each user. Shared accounts are not permitted.

5. Acceptable use

You agree not to:

• use the Service for any unlawful purpose
• attempt to access another customer's data
• attempt to extract, copy, or scrape Aicura's regulatory content, templates, prompts, models, or other proprietary content
• reverse engineer, decompile, or attempt to derive the source code of the Service
• interfere with the Service's operation or attempt to bypass its security
• use the Service to generate content that is illegal, harmful, defamatory, infringing, or that violates any third party's rights
• represent the Service's output as a regulatory certification or as legal advice to any third party
• upload material that you don't have the right to provide
• submit personal information about identifiable individuals to the Service except where you have a lawful basis to do so

We may suspend or terminate your access if you breach this section.

6. Your data

6.1 Ownership

You own the data you upload to the Service and the content you create using it.

6.2 Licence to us

You grant us a non-exclusive licence to host, process, and use your data only as needed to provide the Service to you and your authorised users, including running it through the AI models that power the platform.

6.3 What we don't do with your data

• We don't use your data to train AI models, ours or anyone else's.
• We don't share your data with other customers.
• We don't sell your data.

The AWS Bedrock service we use for AI processing operates under contractual terms that exclude your inputs and outputs from training of foundation models.

6.4 Data hosting and security

Your data is hosted in Australia, in AWS data centres in Sydney (ap-southeast-2). Backups are stored in AWS data centres in Melbourne (ap-southeast-4). Both are within Australia.

Specific security controls are described in our Privacy Policy. You should review the Privacy Policy alongside these Terms.

6.5 Personal information

You're responsible for your own compliance with the Privacy Act 1988 (Cth) and any other privacy laws that apply to you when you upload documents or otherwise put personal information into the Service. This includes any personal information about your customers, employees, or other third parties that may be present in the documents you upload.

7. Aicura's intellectual property

We own the Service. That includes the platform's software, the regulatory content we curate, the policy templates we provide, the prompts and AI configurations we use, our trade marks, and everything else we've created.

AICURA is a trade mark of Aicura Pty Ltd. Aspects of the Service are the subject of pending Australian patent applications 2026905992 and 2026906023.

We grant you a non-exclusive, non-transferable right to use the Service during your subscription, for your organisation's internal AI governance purposes, in line with these Terms.

You can use the AI-generated drafts we produce for you (scan findings, draft policies, draft statements) as starting points for your own documents. You can edit them, adapt them, and incorporate them into your own internal materials. The underlying templates, prompts, and regulatory content remain ours.

You may not redistribute, sublicense, sell, or publicly republish the templates, prompts, or regulatory content as standalone products.

8. Subscription and fees

8.1 Free tier

The Register tier is offered free of charge at its lowest band, subject to the limits published on our pricing page. A payment method is required at signup and is not charged while you remain within the free tier's limits. There is no time limit on the free tier. These Terms apply to your use of the free tier in the same way they apply to a paid subscription, except for the clauses about fees and payment. We may change or withdraw the free tier on 30 days notice, and clause 9.4 applies to your data if we do.

8.2 Subscription term

Paid subscriptions run either monthly or yearly, as selected at checkout, and begin on activation. They automatically renew at the end of each term unless you cancel before renewal. We will send you a reminder before a yearly subscription renews.

8.3 Fees

Fees are payable in advance through Stripe, monthly or yearly according to the term you selected. Fees are exclusive of GST unless stated otherwise. Australian customers will be charged GST. You can change between monthly and yearly billing at a renewal.

8.4 No refunds

Fees are non-refundable. We don't refund any part of a paid subscription term, including if you cancel mid-term, stop using the Service, or are suspended for breach. The only exception is set out in clause 14 (Variations).

8.5 Price changes

We may change fees for future renewal terms. We'll give you at least 30 days notice before a renewal where the price has changed. If you don't want to pay the new price, cancel before the renewal takes effect.

9. Term and termination

9.1 Term

These Terms apply from when you sign up and continue until terminated under this section.

9.2 Cancellation by you

You can cancel your subscription at any time. Cancellation takes effect at the end of your current paid term, so your access continues until then and you will not be charged for the next term.

9.3 Termination by us

We may suspend or terminate your access:

• with 30 days written notice, for any reason
• immediately, if you breach these Terms in a way that's material or that we reasonably believe puts the Service or other customers at risk
• immediately, if your payment fails and isn't cured within 14 days of our notice

9.4 What happens on termination

When your subscription ends:

• We retain your tenant data for up to 60 days to allow you to request an export or to reactivate your subscription.
• After 60 days, we delete your tenant data, including your AI Register entries, uploaded documents, risk assessments, generated policies, and support tickets.
• We retain limited records (audit logs of activity on your tenant, billing records) for 7 years to comply with our own legal and tax obligations, after which they are deleted.
• Stripe retains its own records of your transactions in line with its policies.

If you'd like an export of your data before deletion, email [email protected]. We aim to provide the export within 30 days of your request. If you'd like your data deleted sooner than the 60-day window, email [email protected]. We aim to delete within 30 days.

9.5 Surviving clauses

The following sections survive termination: 3 (disclaimers), 6.5 (your responsibility for personal information), 7 (intellectual property), 8.4 (no refunds), 9.4 (post-termination data handling), 10 (warranties), 11 (liability), 12 (indemnity), 13 (confidentiality), and 15 (general).

10. Warranties and disclaimers

10.1 Our warranty

We will provide the Service with the due care and skill expected of a competent provider of similar services.

10.2 Things we expressly do not warrant

To the extent the law allows, we make no other promises about the Service. In particular, we do not warrant that:

• the Service will be uninterrupted, error-free, or available at any specific time
• the Service or its outputs will be free of errors or omissions
• the Service or its outputs will result in compliance with any law or framework
• AI-generated content will be accurate, complete, fit for any particular purpose, or appropriate for your circumstances
• the Service will detect every relevant finding, risk or issue in the documents you provide

You're responsible for evaluating whether the Service meets your needs.

10.3 Australian Consumer Law

Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, warranty, or other right under the Competition and Consumer Act 2010 (Cth) (including the Australian Consumer Law) that we cannot lawfully exclude.

Where we can lawfully limit our liability for a breach of a non-excludable consumer guarantee in respect of services, we limit it to one of the following, at our option: (a) supplying the services again, or (b) paying the cost of having the services supplied again.

11. Limitation of liability

11.1 Cap

To the extent the law allows, our total aggregate liability to you under or in connection with these Terms or the Service, whether arising in contract, tort (including negligence), under statute or on any other basis, is limited to the fees you have paid to us under these Terms in the 12 months immediately before the event giving rise to the liability.

11.2 Exclusions

To the extent the law allows, we are not liable for any:

• indirect, consequential, special, or incidental loss
• loss of profits, revenue, business, contracts, anticipated savings, or opportunity
• loss of goodwill or reputation
• loss of, or corruption to, data
• regulatory fines, penalties, or enforcement costs
• legal costs or third-party claims arising out of your reliance on the Service

This applies whether or not we were advised of the possibility of the loss.

11.3 Things we don't try to exclude

Nothing in these Terms limits or excludes liability that cannot lawfully be limited or excluded, including liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or anything else the law does not permit us to exclude.

12. Indemnity

You will indemnify us against any third-party claim, loss, damage, or cost (including reasonable legal costs) arising from:

• your breach of these Terms
• your unlawful use of the Service
• any material you upload to the Service that you didn't have the right to provide
• your use of any output of the Service in a way that was misleading, deceptive, or in breach of any law

13. Confidentiality

Each party will keep the other party's confidential information confidential and only use it as needed to perform under these Terms or to use the Service.

Aicura's confidential information includes the platform's regulatory content, templates, prompts, and the inner workings of the AI pipelines. Your confidential information includes the data you upload, your AI Register entries, your risk assessments, and your generated policies.

This obligation continues for 5 years after termination.

14. Variations

We may update these Terms from time to time. If we make a change that materially affects your rights, we'll give you at least 30 days notice, usually by email and through the platform. If you don't accept the change, you can cancel your subscription before it takes effect, and we will refund the unused portion of your current term (calculated pro-rata from the date of cancellation).

Other changes (clarifications, formatting, links) take effect when published.

15. General

15.1 Notices

Notices to us go to [email protected]. Notices to you go to the email address on your account. Notices are taken to be received the next business day after sending.

15.2 Assignment

You can't assign these Terms without our consent. We can assign these Terms to a successor in connection with a sale, merger, or restructure of our business.

15.3 No waiver

If we don't enforce a right under these Terms, that's not a waiver of that right.

15.4 Severability

If any part of these Terms is unenforceable, that part is severed and the rest continues to apply.

15.5 Entire agreement

These Terms, together with the Privacy Policy and any order or subscription confirmation we send you, are the entire agreement between us about the Service.

15.6 Force majeure

Neither party is liable for failure or delay caused by events outside its reasonable control (natural disasters, war, pandemic, civil unrest, internet or cloud-provider outages, government actions). The affected party must notify the other promptly.

15.7 Relationship

These Terms don't create a partnership, joint venture, agency, or employment relationship.

15.8 Governing law

These Terms are governed by the law of Victoria, Australia. Each party submits to the exclusive jurisdiction of the courts of Victoria and the federal courts in Victoria.

16. Contact

For questions about these Terms or the Service: [email protected]
For privacy matters: [email protected]
For legal notices: [email protected]

Aicura Pty Ltd.
ABN: 85 696 789 876
Melbourne, Victoria, Australia