Terms of Service
Last updated: March 2026
1. Subject of the agreement
Ercel Security (hereinafter, "Ercel") is a SaaS platform that provides automated AI compliance assessment services for artificial intelligence systems, including vulnerability analysis under OWASP LLM Top 10 methodology and compliance mapping with Regulation (EU) 2024/1689 (EU AI Act). These terms govern the relationship between Ercel and the user who subscribes to any of its plans.
2. Service access and accounts
Service access is provided via magic link sent to the email address provided. The user is responsible for maintaining the confidentiality of their access. Ercel reserves the right to suspend accounts that show abusive use or use contrary to these terms.
3. Plans and pricing
Ercel offers the following plans: (a) Regulatory Exposure Assessment — free, no commitment, includes compliance score, compliance matrix, and financial exposure quantification; (b) AI Compliance Assessment — €2,500 one-time payment, includes full assessment, prioritized remediation, due diligence evidence, and validation re-scan; (c) Trust Badge — €199/month, includes continuous monitoring, updated compliance report, and verifiable badge. Prices include VAT where applicable. Ercel reserves the right to modify prices with 30 days' notice to existing customers.
4. Refund policy
Paid plans include a 14-day satisfaction guarantee from the purchase date. If the service does not meet the client's expectations, they may request a full refund by contacting [email protected] within that period. Monthly subscriptions (Trust Badge) can be cancelled at any time from the user dashboard, maintaining access until the end of the billing period.
5. Intellectual property
The assessment methodology, analysis engine, scoring algorithms, and the Ercel brand are the exclusive property of Ercel. Generated reports are the client's property and may be used internally and shared with regulators, auditors, or third parties at their discretion. The client may not resell, sublicense, or commercially distribute the reports without Ercel's express authorization.
6. Third-party data and scan authorization
The user declares and warrants that they have legitimate authorization to assess the AI system provided. Ercel executes automated security tests on the indicated URL; the user assumes responsibility for having the necessary permissions from the system owner. Ercel is not responsible for unauthorized use of the service on third-party systems.
7. Limitation of liability and SLA
Ercel reports document the results of automated technical assessments and do not constitute legal advice or official certification. Ercel's maximum liability to the client shall be limited, in all cases, to the total amount paid by the client in the 12 months prior to the event giving rise to the claim. Ercel commits to a target availability of 99% monthly for paid plans, excluding scheduled maintenance windows.
8. Modifications and termination
Ercel reserves the right to modify these terms with 30 days' notice. Substantial modifications will be communicated to the user's registered email. Continued use of the service after notification implies acceptance of the new terms. Either party may terminate the contractual relationship with 30 days' notice. Termination does not affect payment obligations already accrued.
9. Applicable law
These terms are governed by Spanish law. For the resolution of disputes, the parties submit to the courts and tribunals of Madrid, Spain, expressly waiving any other jurisdiction that may apply.