Terms of service

1. Agreement, eligibility and authority

These terms govern the public website, gap-scan, Workbench and Axiom Proof services supplied by Axiom Minds Private Limited, India (“Axiom Minds”, “we” or “us”). They apply when you accept them during registration or enter an engagement incorporating them. Merely visiting a page does not authorise a purchase, a subscription or access to your systems.

You must be at least 18 and legally competent to contract. If you act for an organisation, you must have authority to bind it and to grant the access and instructions you provide. “Customer” means that organisation or the individual contracting with us. Your authorised users must follow these terms; an account does not confer authority over another organisation.

A signed service agreement, order or statement of work governs the agreed scope, fees, deliverables, support and acceptance criteria. Specific negotiated terms prevail over conflicting general terms; the data processing agreement governs customer-data processing. Mandatory law always prevails. No marketing description expands a signed scope or supplies consent to a system change.

2. Services, outputs and limits

Axiom Proof supports discovery, classification, readiness assessment, remediation planning, authorised execution, verification, evidence capture, reports and closure dossiers. Ongoing privacy support, monitoring and virtual DPO services are available as agreed. Availability depends on the systems connected, permissions, supported operations and the engagement. We do not promise every connector, action or workflow for every environment.

Drishti discovers, Vibhaag classifies, Parikshan assesses, Sudhaar proposes and Karya executes permitted actions. Saakshi manages evidence, Lekha records audit history, Prativedan prepares reports, Nazar supports regulatory monitoring and Pramaan assembles authenticated closure proof subject to the required reviews and signatures.

Reports state their scope, source, version, time and evidence limitations. A Pramaan-authenticated dossier establishes the recorded evidence and sign-offs within that scope; it is not governmental certification, a statutory audit opinion, accreditation, legal advice or a guarantee of compliance. A scan, score, successful action or final report cannot establish facts outside the systems and evidence examined. Reassessment may be needed after changes.

The customer and its qualified advisers decide legal applicability, lawful processing, risk acceptance and regulatory submissions. A virtual DPO retainer is not a statutory appointment unless expressly agreed and legally permitted. No government, regulator or independent certification body is represented as endorsing the service.

3. Access, human approval and execution

You choose the authorised people and systems, grant only necessary access and maintain accurate permissions. Protect passwords, authenticators, recovery codes and credentials; notify us promptly of compromise. Do not share individual accounts or bypass role restrictions. Recovery requires identity verification and the applicable recorded recovery procedure.

Preparing or reviewing a plan does not approve execution. Mutating agent actions require recorded human approval bound to the selected actions and scope. Approval requires completed, current dry-run evidence and validated rollback. Sudhaar holds no execution write credentials. A changed target, expired proof or missing permission may require a fresh rehearsal and approval.

Review the preview, affected systems, selected actions, exclusions and rollback before approving. Only someone authorised for your organisation may approve. Approval does not waive our duty to exercise reasonable care. Do not use our software to manufacture another person’s consent or circumvent a mandatory gate.

Dry runs and rollback reduce risk but cannot guarantee restoration of every external effect. Keep appropriate backups and arrange maintenance windows, target-owner authorisation and incident contacts. Stop and reconcile uncertain execution results before retrying. We may refuse unsafe, unsupported or unverifiable actions and report incomplete work rather than mark it complete.

4. Customer data, privacy and confidentiality

You retain rights in customer data and customer-specific materials. You grant us a limited right to host, access, process and reproduce them only to deliver, secure and support the agreed services, follow lawful instructions and satisfy legal obligations. You are responsible for lawful collection, notices, permissions and authority for connected data, including information about children and third parties.

For customer workspace data, the customer ordinarily determines purposes as Data Fiduciary and we act as Data Processor under its documented instructions and applicable agreement. We independently administer our own account, billing, website and security records. Our privacy policy explains those activities and request routes. Neither party transfers its statutory responsibilities merely by using these labels.

Each party must protect the other’s confidential information using reasonable care and restrict access to people and providers who need it and are bound by appropriate obligations. This excludes information independently developed, lawfully received without restriction, already lawfully known or public without a breach. A legally compelled disclosure must be limited and, where lawful, preceded by notice.

No permission to train a general-purpose third-party model on identifiable customer records is granted by these terms. AI processing, approved providers, residency, retention, incident cooperation, return and deletion are governed by the agreed processing terms. Do not send secrets or personal records through public contact or questionnaire fields.

5. Scope, pricing, taxes and payment

Published INR ranges are indicative and may be exceeded or reduced after a scope discussion. The written proposal identifies the current estate, connected systems, assumptions, deliverables, responsibilities, exclusions, support and fees. Additional work, integration changes, travel and third-party charges require an agreed change in scope or other express contractual authorisation.

The order states payment milestones, billing intervals, GST and other applicable taxes, payment due dates and renewal arrangements. Any legally required tax deduction must be supported by the appropriate certificate. No paid subscription begins merely by following a pricing link, creating an account or completing the free gap-scan. Recurring charges or auto-renewal require express agreement.

Raise an invoice dispute promptly with supporting details; both parties will work in good faith to resolve it and pay undisputed amounts as agreed. Cancellation, refunds and credits follow the order and mandatory law. Where the order is silent, a terminated engagement is reconciled for accepted work and documented, authorised non-cancellable costs; unused prepaid fees for undelivered work are returned. Statutory remedies remain available.

6. Acceptable use and third-party services

Do not access systems without permission, upload malicious or unlawful content, infringe others’ rights, extract another tenant’s information, conduct unapproved security tests, interfere with availability, falsify evidence or signatures, defeat audit controls, or resell access without agreement. Do not present altered reports as authentic or remove material qualifications.

Connected systems and third-party services remain subject to their owners’ terms, availability, licences and charges. You must obtain required permissions. We remain responsible for the providers we engage as required by our agreement and law; a third-party dependency does not excuse our own contractual duties. External links are provided for reference and do not imply endorsement.

7. Intellectual property and report use

We and our licensors retain the platform, software, agent designs, templates, methodologies and general know-how. Subject to the agreement and payment, the customer may use and share customer-specific delivered reports and evidence for its business, advisers, auditors and lawful regulatory purposes, respecting privacy and confidentiality. A negotiated agreement may grant additional rights.

Keep scope, date, attribution, verification references and material limitations with a report. Public sharing must not expose confidential information or imply broader assurance. Verification links and hashes validate only what the relevant verification process actually establishes. Neither party may use the other’s name or logo for a public endorsement without permission. Feedback may be used to improve the service without disclosing confidential information.

8. Service care, support and changes

We will provide agreed services with reasonable skill and care. Service levels, response times, support hours and acceptance procedures apply only as expressly agreed. We do not promise uninterrupted availability or detection of every issue. Assessments depend on complete, accurate and accessible inputs; automated output requires review.

We may maintain or improve the service and will give reasonable notice of material changes affecting an active engagement where practicable. We will not silently replace agreed deliverables with a materially reduced service. Urgent security or legal changes may require immediate action with notice as soon as reasonably possible. We will work with you on an appropriate remedy for material service deficiencies.

9. Suspension, termination and data return

You may stop using free services and request account closure. Paid engagements end or renew as set out in the order. Either party may terminate for a material breach not remedied within 30 days after written notice, or sooner where the breach cannot lawfully or practically be remedied. Either may terminate if continued performance would be unlawful.

We may proportionately restrict access to address a credible security threat, unlawful activity, serious misuse or an overdue undisputed invoice after reasonable notice where practicable. We will explain the restriction unless prohibited by law or doing so would compromise security, and restore access when the grounds are resolved.

On ending an engagement, we will coordinate export of customer data and delivered outputs in an available agreed format before deletion according to the processing agreement. Lawful retention, evidence locks, disputes and backup cycles may limit immediate erasure. Records already committed to an append-only ledger or locked evidence vault cannot simply be rewritten or removed; unnecessary personal data should not be placed there. Confidentiality, accrued payment rights, permitted report use and provisions intended to survive remain effective.

10. Responsibility, liability and claims

To the extent permitted by law and unless a negotiated agreement provides otherwise, each party’s aggregate contractual liability arising from an engagement is limited to the fees paid or payable for the affected services in the 12 months preceding the event. For a free service, liability is limited only to the extent Indian law permits; no term excludes a non-excludable remedy.

Neither party is liable for indirect or consequential losses or lost profits to the extent lawfully excludable. These exclusions and the contractual cap do not limit fraud, wilful misconduct, death or personal injury caused by negligence, amounts properly due, or liability and consumer remedies that cannot lawfully be excluded. Statutory duties and regulatory powers are not contracted away.

Each party remains responsible for its own acts and omissions. Any additional indemnities, insurance requirements or allocation of third-party claims must be expressly agreed; these terms do not impose an unlimited customer indemnity. The affected party should take reasonable steps to limit loss and notify the other of a claim without losing any mandatory rights.

11. Indian law and dispute resolution

Indian law governs these terms, including applicable contract, information technology, data protection, intellectual property, tax and consumer protection law. The DPDP Act, 2023 and Rules, 2025 apply according to their commencement, scope and any relevant sectoral requirements. Legal compliance remains specific to the processing and facts involved.

Contact us first with the issue, relevant engagement and requested remedy so we can attempt a good-faith resolution. This does not prevent urgent protective relief, a regulator complaint or use of a statutory forum. Unless a signed agreement provides a valid alternative, disputes may be brought before the courts or tribunals in India having jurisdiction under applicable law. No compulsory arbitration or exclusive city venue is imposed by these terms.

Nothing removes rights or remedies under the Consumer Protection Act, 2019 where it applies, or restricts lawful access to consumer commissions, the Data Protection Board or other competent authorities. A contractual complaint process does not shorten a statutory limitation period.

12. Notices, updates and general provisions

We will publish updates with an effective date and give reasonable notice of material contractual changes through the service or account contact. Material changes to an existing paid engagement require the agreed contractual change process; a website edit alone does not retroactively change its price or scope. Where fresh acceptance is needed, we will request it.

Neither party is liable for delay caused by events reasonably beyond its control, provided it takes reasonable mitigation steps and promptly informs the other; accrued payment and non-excludable legal duties remain. A prolonged disruption is addressed under the order or an agreed termination and fee reconciliation.

Neither party may transfer an engagement in a way that reduces the other’s agreed protections without its consent, except as expressly permitted in the signed agreement or by law. No partnership, employment, general agency or authority to bind the other is created. If a term is unenforceable, the remaining terms continue so far as lawful. Delay in enforcing a right is not a waiver. The accepted terms and incorporated agreements are the agreement for their subject matter.

13. Questions, grievances and legal notices

For service, billing or contractual questions, contact hello@axiomminds.ai or use the contact page. For privacy requests and grievances, contact privacy@axiomminds.ai with the subject “Privacy grievance”. Include the organisation or account concerned and enough detail to investigate; do not include passwords, authenticator codes or identity documents in an initial message.

We will route the issue to the responsible person, verify authority where needed and respond within the time required by applicable law. This contact route does not limit formal service of legal notices or any statutory complaint or appeal mechanism.