Terms of service

1. The agreement

These terms apply between Corentis ApS, CVR 46654897, A.P. Møllers Allé 43B, 2791 Dragør, Denmark, trading as nthparty ("we", "us"), and the person or organisation that opens an account ("you"). By opening an account you accept them. The service is for businesses only: by opening an account you confirm you are acting for a business, trade or profession and not as a consumer, and that you are authorised to bind the organisation you open it for.

Where you process personal data through the service, the data processing addendum forms part of this agreement. Where you take part in the referral programme, the referral terms do the same.

2. The service

nthparty compiles a graph of published subprocessor relationships, monitors it for changes, and notifies you when a change matches a rule you wrote. We check daily, we record what we saw and when we saw it, and we keep the evidence so you can show somebody else.

3. What the service is not

It is a monitoring tool built on public disclosures. It is not legal advice, not a certification, not an audit, and not a guarantee that a disclosure is accurate or complete. Decisions about your suppliers remain yours.

4. Coverage and accuracy

We show a coverage figure for every watched vendor precisely because the data thins out below a few levels of depth. Absence of a change event means we did not observe one, not that nothing happened. A vendor that publishes nothing, publishes late, or publishes inaccurately will produce a graph that is wrong in the same way, and we say so on the screen rather than in this document.

5. Your account

You are responsible for what happens under your account. Keep your sign-in to yourself, tell us promptly if you think it has been compromised, and make sure everyone you invite understands these terms. An account may hold several members, and the owner is responsible for all of them.

6. Acceptable use

Use the service for your own risk management. Do not use it to break the law, to attack anybody, or to build a competing dataset. Specifically, do not

• scrape, bulk-export or systematically copy the graph beyond your own reasonable use, or use automated means to do so outside the API and its published rate limits
• resell, redistribute or sublicense the dataset, or make it available to anyone outside your organisation
• share one account between organisations, or resell access to it
• attempt to overwhelm, probe or circumvent the service, its rate limits or its access controls
• use the service to harass or make unfounded public claims about a named company on the strength of a change event

We may suspend an account we reasonably believe is doing any of these, and we will tell you why. Where the problem can be fixed we will say what would fix it before we suspend anything.

7. The API

The API is included on the Pro plan. Keys are yours to keep secret and to rotate. The published rate limit is 60 requests per minute per key. We may change the API with reasonable notice, and we will not remove an endpoint without warning accounts that are calling it.

8. Payment

Paid plans are billed in advance through Stripe, monthly or annually as you choose. Prices are in euro and exclude any tax we are required to collect. If a payment fails we email the account owners. If it is still unpaid 5 days after that first email, the account drops to the Free plan's allowances: vendors above the Free limit are paused, and members above the Free seat limit are suspended — the account's oldest owner always keeps access. Nothing is deleted, and everything is restored when the payment succeeds. Referral credit on your account is applied automatically to your next invoice.

Prices can change. An increase takes effect at your next renewal and we will email you at least 30 days before it does, so you can cancel first if you would rather.

9. Cancelling

Cancel at any time from the billing screen. The account keeps its paid features until the end of the period you have paid for, then reverts to the free plan. We do not refund part-periods, and we do not ask you to explain. Exports you have already taken stay yours.

An owner can also delete the account from its settings. Deletion is immediate and cannot be undone: it cancels any subscription at once, with no refund for the rest of the period, and deletes the account's data. Copies in our backups are gone within 7 days.

An account where no member has signed in for 12 months is dormant. We email its owners and give them 30 days' notice, after which we may delete it. An account on a paid plan is never treated as dormant.

We can end this agreement with 30 days' notice, or immediately if you materially breach it. If we end it without cause we refund the unused part of anything you have paid.

10. The dataset

The graph, the entity identifiers, the classifications, the coverage figures and the generated summaries are ours. Your subscription is a non-exclusive, non-transferable licence to read and use them for your own risk management for as long as it lasts, including in reports you give to your auditors, your customers and your board.

11. Your content

Your vendor inventory, your rules, your notes and anything else you enter stay yours. We process them to run the service and for nothing else. We do not sell them, we do not use them to train anything, and we do not use one customer's inventory to inform another's. You can export your vendor inventory and its change history whenever you like, and on the Pro plan the API gives you programmatic access to more.

One exception, which is the point of asking: when you ask us to cover a company the graph does not hold yet, we may map it and add it to the public graph, where every customer can see it. Which customer asked is never disclosed to anyone else.

We may use aggregate, de-identified statistics about how the service is used — counts, distributions, timings — to improve it and to describe it publicly. Nothing in that identifies you or names what you watch.

12. Feedback

If you send us an idea, we can use it without owing you anything. Do not send us anything you consider confidential in a message that is described as feedback.

13. Availability

We aim for the service to be available continuously and we do not commit to a service level on these plans. Checks run daily; a delayed check is not a breach of this agreement. Planned maintenance that takes the service down is announced in advance on status.nthparty.io.

14. Warranties

We provide the service with reasonable skill and care. Beyond that, and to the extent the law allows, the service is provided as it is, without further warranty — in particular we do not warrant that the dataset is complete, that a disclosure we read is accurate, or that the service will be uninterrupted or error-free.

15. Liability

To the extent the law allows, our total liability in any twelve-month period is limited to the fees you paid us in that period. We are not liable for indirect or consequential loss, for lost profit, revenue, data or goodwill, or for a decision you took on the strength of the service.

Nothing in this agreement limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot be limited by law.

16. Indemnity

If someone brings a claim against us because of how you used the service — a breach of section 6, or a public claim you made on the strength of a change event — you will cover the reasonable cost of dealing with it. We will tell you promptly, let you take conduct of it, and not settle it without asking you.

17. Confidentiality

Each of us will keep the other's non-public information confidential and use it only for this agreement. That does not cover information that is already public, that either of us already had, or that has to be disclosed by law.

18. Changes to these terms

We may change these terms. Material changes are emailed to every account at least 30 days before they take effect, and continuing to use the service after that is acceptance. If you would rather not accept, cancel before they take effect from the billing screen, the same as any other cancellation.

19. General

Neither of us is liable for a failure caused by something genuinely outside our control. You may not transfer this agreement without our consent; we may transfer it to a company that acquires the business, on notice to you. If a clause is unenforceable the rest survives. A right we do not enforce is not a right we have given up. This agreement, with the addenda named in section 1, is the whole agreement between us.

20. Law

Danish law governs this agreement, and the courts of Denmark have jurisdiction. This does not remove any protection consumer law gives you in your own country if you are a consumer.

21. Contact

Write to Corentis ApS, A.P. Møllers Allé 43B, 2791 Dragør, Denmark, or reply to any email we send you.