Terms of Service

These Terms of Service ("Terms") govern your access to and use of the websites, applications, and services (collectively, the "Service") provided by Trooth, LLC ("Trooth," "we," "us," or "our"). By creating an account, clicking "I agree," or using the Service, you agree to these Terms. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization.

1. The Service and how Trooth works

The Service lets you connect tools and data sources, after which Trooth collects, records, and analyzes observed configuration and operational signals, maps them to frameworks (such as SOC 2, ISO 27001, ISO 42001, the EU AI Act, HIPAA, GDPR, NIST AI RMF, PCI DSS, FedRAMP, and DORA), helps you manage policies, risk, AI governance, and trust documentation, and lets you publish a Trust Center. Outputs reflect observed signals only and may be incomplete, delayed, or inaccurate due to factors outside our control, including third-party systems. You are solely responsible for your security, compliance, and regulatory obligations.

2. Accounts and eligibility

You must provide accurate registration information and keep it current. You are responsible for safeguarding your credentials and for all activity under your account. You must be at least 18 years old and capable of forming a binding contract. You may not use the Service if you are barred from doing so under applicable law.

3. Fees

The Service is free. There is no paid plan, no subscription, no recurring charge and no card on file. We do not take payment for access to the Service, and nothing in these Terms obliges you to pay us anything.

If we introduce a paid offering, we will publish its price on our pricing page before it takes effect and we will not charge any account that has not agreed to it. No company can pay to change what Trooth publishes about it, now or under any future paid offering: what a Trust Profile shows is what was witnessed.

4. Connected integrations and customer data

When you connect a third-party tool or upload material ("Customer Data"), you grant Trooth a limited, non-exclusive license to access, process, store, and display that data solely to provide the Service. You represent and warrant that you have all rights and authorizations necessary to connect those systems and to provide the Customer Data, including any third-party or personal data. You are responsible for the credentials and tokens you provide. Our handling of personal data is described in our Privacy Policy and, where applicable, our Data Processing Addendum.

5. Acceptable use

You agree not to: (a) use the Service to violate any law or third-party right; (b) connect systems or data you are not authorized to access; (c) probe, scan, or breach security or authentication measures; (d) interfere with or disrupt the Service; (e) reverse engineer or copy the Service except as permitted by law; (f) resell or provide the Service to third parties except as expressly permitted; (g) upload malware or unlawful, infringing, or harmful content; or (h) misrepresent your security or compliance posture to deceive others. You may not present Trooth output as a certification, guarantee, or audit opinion.

6. Intellectual property

Trooth and its licensors own all rights in the Service, including software, models, designs, and trademarks. We grant you a limited, revocable, non-transferable, non-exclusive right to use the Service while you hold an account. You retain all rights in your Customer Data. You grant us a limited license to use aggregated and de-identified data (which does not identify you or any individual) to operate and improve the Service.

7. Third-party services

The Service integrates with third-party products you choose to connect. We do not control and are not responsible for third-party services, their availability, or their data practices. Your use of third-party services is governed by their terms. Trooth is not affiliated with or endorsed by the third-party providers listed in our catalog unless expressly stated.

8. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. TROOTH DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT OUTPUTS ARE ACCURATE OR COMPLETE. TROOTH IS NOT AN AUDITOR, CERTIFICATION BODY, OR LAW FIRM, AND THE SERVICE DOES NOT CONSTITUTE LEGAL, AUDIT, OR CERTIFICATION ADVICE.

9. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, TROOTH AND ITS AFFILIATES WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL. TROOTH'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO TROOTH IN THE TWELVE MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (US$100). Some jurisdictions do not allow the exclusion or limitation of certain damages, so some of the above limitations may not apply to you; in such cases Trooth's liability is limited to the maximum extent permitted by law.

10. Indemnification

You will defend, indemnify, and hold harmless Trooth and its affiliates from and against any claims, damages, liabilities, and expenses (including reasonable legal fees) arising out of your Customer Data, your use of the Service, your connected systems, or your breach of these Terms or applicable law.

11. Term and termination

These Terms apply while you use the Service. You may stop using the Service and cancel at any time. We may suspend or terminate access if you breach these Terms, fail to pay, or create risk or legal exposure. On termination, your right to use the Service ends. While your account is open you can download your Customer Data at any time, as a JSON file, from your account settings (Download my data) or through the API (GET /me/export). If you delete your account yourself, it is erased from our live systems at once and cannot be restored, so download your data first; backup copies expire as the Data Retention Summary describes. If we suspend or terminate your access, you may ask for that download by writing to privacy@trooth.co within 30 days of termination, and we will provide it unless the law prevents us; after that we may delete your Customer Data. Sections that by their nature should survive (including 4, 6, 8, 9, 10, and 12) survive termination.

12. Governing law and disputes

These Terms are governed by the laws of the State of Florida, USA, without regard to conflict-of-laws rules. The state courts located in Miami-Dade County, Florida, and the federal courts for the Southern District of Florida (Miami Division) will have exclusive jurisdiction, and you consent to their jurisdiction and venue, except that either party may seek injunctive relief in any court of competent jurisdiction. If any provision is unenforceable, the remainder remains in effect.

13. Changes to these Terms

We may update these Terms from time to time. Material changes will be posted here with a new "Last updated" date and, where appropriate, notified to you. Continued use of the Service after changes take effect constitutes acceptance.

14. Force Majeure

Trooth will not be liable for any delay or failure to perform resulting from causes beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, labor disputes, governmental action, internet or telecommunications failures, power outages, and the acts, outages, or failures of third-party systems, hosting providers, or data sources that Trooth does not control.

15. Miscellaneous

Assignment. You may not assign or transfer these Terms without Trooth's prior written consent. Trooth may assign these Terms in connection with a merger, acquisition, reorganization, or sale of assets. Entire agreement. These Terms, together with the documents they reference, are the entire agreement between you and Trooth and supersede all prior agreements on this subject. No waiver. A failure to enforce any provision is not a waiver of it. Notices. Legal notices to Trooth must be sent to legal@trooth.co; we may notify you through the Service or the email on your account. Severability. If any provision is held unenforceable, the remainder remains in effect.

Additional terms and order of precedence. These documents form part of these Terms where they apply to what you use: the Acceptable Use Policy, the API Terms, the Service Level Agreement, the End User License Agreement, the Badge Terms, the Network Trust Profile Terms, the Refund Policy and, where Trooth processes personal data for you, the Data Processing Addendum. The Privacy Policy explains how we handle personal data. If two of them conflict, this order decides: a written agreement signed by both parties; then the Data Processing Addendum, for the processing of personal data; then the additional term written for the subject in question; then these Terms.

16. Contact

Trooth, LLC, 777 Brickell Ave, Suite 500, PMB 1174, Miami, FL 33131, United States - legal@trooth.co · support@trooth.co

Revision note. Revised September 3, 2026. Section 3 previously described priced subscription plans. Trooth is free and sells no plan, so the section now says so. No other right or obligation was changed, and the correction is recorded under our publication and correction policy.

Revised September 4, 2026: descriptions of retired features (composite figure, plan tiers, TruePass badge, Verified Inquiries) removed; the document now describes the witness record as published. Section 6 still granted the license "during your subscription"; it now runs while you hold an account, which is what it always meant, since there is no subscription.

Revision note. Revised September 23, 2026. Section 3 stated the commitment that payment cannot change what Trooth publishes in a word this product no longer uses about a company; it now says it directly: no company can pay to change what Trooth publishes about it. Section 11 said Customer Data could be exported for a reasonable period after termination "as described in our documentation", and no documentation described such a period. It now says what the product offers: a JSON download at any time while the account is open, from account settings or GET /me/export; erasure at once when you delete the account yourself; and the same download on request for 30 days after we end your access. Dates are written month first. No right or obligation was narrowed, and the correction is recorded under our publication and correction policy.

Revision note. Revised October 21, 2026. Section 15 now lists the additional terms that say they form part of these Terms, links each of them, and states which one governs if two conflict. Those documents already said they were part of these Terms; these Terms now say so too. No right or obligation was narrowed, and the change is recorded under our publication and correction policy.