Terms of Service

Current version: 2026-07-13
Effective from: 13 July 2026

When we materially change these Terms we publish a new version here and require signed-in users to re-accept the updated Terms before continuing to use the Service. Non-material edits (typos, formatting, clarifications that do not change rights or obligations) may be made without a version bump.

Archived versions of previous Terms are retained on request — contact info@sentinel42.com for a copy.

The Service is provided by Sentinel42 Ltd, registered in England & Wales, company number 17286468, ICO registration number C1974552, registered office 66 Paul Street, London EC2A 4NA (“Sentinel42”, “we”, “us”). The Customer is the legal entity identified on the Order Form.

The Service is a multi-tenant SaaS platform supporting information-security management aligned to ISO/IEC 27001 control patterns. Features include asset and risk registers, controls, audits, incident and non-conformity management, supplier due diligence, management review, and related governance workflows.

We may add, change or remove features on reasonable notice, provided we do not materially reduce the overall functionality of the tier purchased during a paid term.

Standard tiers under the MSA:

Actual pricing for a Customer is the price stated on that Customer’s signed Order Form.

• Initial term: 12 months from the Order Form start date, whether billed annually or monthly.
• Renewal: auto-renews for successive 12-month terms unless either party gives at least 30 days’ written notice before the current term ends.
• VAT: all fees are exclusive of VAT, which is added where applicable.
• Payment method: BACS to the account stated on the invoice, or card / direct debit via our payment processor where offered. We do not act as a merchant of record for the Customer’s own business.

Two payment options are available at sign-up:

• Annual, paid in full on signup. The full annual fee for the chosen tier is charged at the point of subscription and covers the entire 12-month term in advance. Access is provisioned once payment clears.
• Monthly subscription over a 12-month term. The Customer commits to a 12-month term and is charged the monthly fee for that tier on each monthly billing date. The 12-month commitment is not cancellable for convenience mid-term; missed months remain payable for the remainder of the term (see “Non-payment” below).

Invoices for BACS customers are due within 30 days of invoice date. Card and direct-debit customers are charged automatically on the billing date shown on the Order Form.

Continuous, timely payment is a condition of access to the Service. Where an amount is overdue we will notify the billing contact and may take the steps below:

• Monthly subscribers — missed monthly payment: after 7 days overdue we may suspend access to the Service. The 12-month commitment remains in force and unpaid months continue to accrue. Access is restored once the arrears are cleared.
• Annual subscribers — unpaid invoice at end of term: if the renewal invoice for the next annual term is not paid by the renewal date, we may suspend access to the Service until the invoice is paid. Customer Data remains available for export during the 30-day export window described in “Customer data”.
• Persistent non-payment: if an amount remains unpaid 30 days after suspension we may terminate the MSA for cause, disable the account, and pursue the outstanding balance (including the remaining committed months for monthly subscribers) as a debt.
• Interest: statutory interest under the Late Payment of Commercial Debts (Interest) Act 1998 applies to overdue amounts.
• Reinstatement: we may charge a reasonable administration fee to reinstate a suspended or terminated account, in addition to the outstanding balance.

Suspension for non-payment is not a breach by Sentinel42 and does not reduce the Customer’s payment obligation for the suspended period.

We may offer a 14-day free trial of the Service prior to contract execution. Trials are provided on an “as-is” basis, may be modified or withdrawn at any time, and are subject to separate trial terms displayed at sign-up. No MSA is required until the trial is converted to a paid subscription.

Onboarding and other professional services are optional and chargeable at £399 per day (ex VAT). Where engaged, they are documented in a separate statement of work issued by our sales team; they are not billed through the platform.

Customer and its Users shall not:

• use the Service in breach of applicable law or in a way that infringes third-party rights;
• upload malware or attempt to disrupt, probe or reverse-engineer the Service;
• share user credentials or exceed the seats purchased;
• use the Service to store or process data outside the ordinary scope of information-security management (e.g. medical records, payment card data as a merchant of record) without our prior written agreement.

The Customer retains all rights in the data it uploads to the Service (“Customer Data”). We process Customer Data only to provide and support the Service, and, where it includes personal data, in accordance with the DPA.

On termination or expiry, the Customer may export its data for 30 days, after which we securely delete it in line with clause 12 of the DPA.

We target 99.5% monthly availability, measured excluding planned maintenance and events outside our reasonable control. Support is provided by email in UK business hours; enterprise support terms, if any, are set out on the Order Form.

Sentinel42 owns all rights in the Service, including its software, templates, libraries and documentation. The Customer receives a non-exclusive, non-transferable right to use the Service during the paid term for its own internal business purposes.

Each party shall keep the other’s confidential information confidential and use it only to perform the MSA. This obligation survives termination for three years, or indefinitely for information that is a trade secret or personal data.

Neither party excludes or limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded by law. Subject to that, each party’s total aggregate liability under or in connection with the MSA is capped at the fees paid by the Customer in the 12 months preceding the event giving rise to the claim.

Neither party is liable for indirect or consequential loss, loss of profit, loss of revenue, loss of anticipated savings, loss of goodwill, or loss or corruption of data (save where such data loss results from our breach of the DPA).

Either party may terminate the MSA with immediate effect on written notice if the other:

• commits a material breach that is not remedied within 30 days of notice;
• becomes insolvent or enters an equivalent process.

Termination does not affect fees already accrued and does not entitle the Customer to a refund of pre-paid fees except where termination is for our uncured material breach.

The MSA is governed by the law of England & Wales. The parties submit to the exclusive jurisdiction of the courts of England & Wales.

Commercial and contractual queries: info@sentinel42.com.