Profile Guidelines

These Profile Guidelines govern how software and service listings (“Profiles”) are created, maintained, evaluated, and removed on the Compliance Labs Websites, and apply to all Vendors. They are incorporated by reference into these Terms of Use.

1. What a Profile Is. A Profile is Compliance Labs’s compiled record of a Vendor’s software or service, including the Vendor’s name and logo, product name and description, and Compliance Labs’s evaluation of the product’s coverage of applicable cybersecurity, OT, or AI regulatory frameworks.

2. Profile Creation. Compliance Labs creates Profiles primarily from publicly available information about a Vendor’s product or service. Vendors may submit or request corrections to factual information (e.g. product name, description, category, publicly listed features) through the Vendor Portal or our contact form. Compliance Labs’s evaluation of a Profile is based on its own methodology; it is not negotiable by, nor guaranteed to, the Vendor. The final content of a Profile remains at Compliance Labs’s sole discretion.

3. Criteria for Inclusion. To be eligible for a Profile, a product or service must:

• be a packaged (pre-built) software or service offering, not a custom-built or bespoke solution;
• have a demonstrable connection to at least one cybersecurity, OT, or AI regulatory framework covered by Compliance Labs;
• be publicly available, with a working website and an identifiable commercial offer;
• be listed under the name of the Vendor that owns or controls the product; Compliance Labs does not list resellers, integrators, or consultants as the Vendor of record unless expressly authorized in writing by the product owner.

Compliance Labs may, at its sole discretion, decline to create or maintain a Profile that does not meet these criteria.

4. Profile Removal.

• At Vendor’s request: Compliance Labs reviews removal requests submitted through the Vendor Portal or our contact form. We generally do not remove a Profile for a product that remains commercially available and within scope of a covered framework, but we may update it to reflect current, accurate information.
• Discontinued products: Where a Vendor has ceased operations or discontinued the product (as reflected on the Vendor’s own website), Compliance Labs may remove the Profile or mark the product as discontinued.
• At Compliance Labs’s discretion: Compliance Labs may modify, restrict, or remove a Profile at any time, including where it no longer meets the criteria in Section 3, contains inaccurate or unverifiable information, or its continued publication would violate these Terms of Use or applicable law.

5. Renaming and Corporate Changes. Where a Vendor’s company name or product name changes as a result of a rebrand, merger, acquisition, or divestiture, Compliance Labs updates the corresponding Profile once the change is publicly verifiable, for example through an official press release or the Vendor’s own website. Where a product is retired or superseded by a successor product, Compliance Labs may mark the Profile as discontinued or redirect it to the successor product’s Profile, consistent with Section 4 (Profile Removal) above.

6. Content Standards. Profile descriptions and other written content must:

• accurately and neutrally describe the product or service;
• avoid first-person language (“we,” “our,” “us”), unverifiable superlatives (“best,” “fastest,” “most secure”), and promotional calls to action;
• avoid direct contact information (phone, email, personal URLs) within the description itself; Vendor contact and commercial details belong in the Vendor’s own account, not the public description;
• not mention awards, rankings, or recognition received by the product or company;
• not reproduce content copied from another source without the right to do so;
• avoid raw HTML, excessive punctuation, or non-standard formatting.

Profiles display the Vendor’s logo only; Compliance Labs does not publish product screenshots or other visual assets of the product interface. Logos must be current, official, and free of taglines, badges, or promotional overlays.

7. Ownership of Derived Content. Any analysis, aggregation, or derivative content that Compliance Labs generates from public information, Vendor submissions, or User activity (“Derived Content”) is the sole and exclusive property of Compliance Labs, regardless of the source of the underlying facts. Vendor retains ownership of its own trademarks, logos, and any content it directly submits, and grants Compliance Labs a non-exclusive, royalty-free license to host, display, and use that content solely to operate and maintain the Vendor’s Profile, as further described under “Intellectual Property Rights” below.

8. Vendor Disputes. Any dispute regarding the content, accuracy, or removal of a Profile must be submitted through our contact form at https://www.compliance-labs.com/contact/. Compliance Labs reviews disputes submitted in good faith and responds within a reasonable time. Submitting a dispute does not suspend the Profile’s publication unless Compliance Labs determines, at its discretion, that suspension is warranted pending review.

9. Updates to these Profile Guidelines. Compliance Labs may update these Profile Guidelines to reflect changes to the law, the Websites, or our business, using the same notice mechanism as these Terms of Use.

Intellectual Property Rights

Our Websites contain content created by us and our Users. The names of listed software are the service marks and trademarks of their respective vendors.

Users: You represent and warrant that you own or have secured all necessary intellectual property rights in the content you transmit, post, upload, email, or otherwise make available to us or on our Websites, and you agree to be liable for all such Users IP. Users grant to Compliance Labs a worldwide, irrevocable, nonexclusive, royalty-free, and fully sub-licensable right to use, reproduce, translate, modify, create derivative works of, publicly display, communicate, and distribute Users IP in any form through any electronic or other media, in the ordinary course of our business. We reserve all intellectual property rights not expressly granted hereunder.

Software vendor: Vendor retains all right, title and interest in its content sent to Compliance Labs for its listing, and its logo, and grants us use in the ordinary course of business; Compliance Labs may alter or remove Vendor content at its sole discretion.

Software listing: Compliance Labs retains all rights, title and interest in the software listing it creates from publicly available content, and grants Vendor a free license to use, update, and (at our discretion) modify its software vendor listing. Derived Content is governed by Section 7 of the Profile Guidelines above and remains Compliance Labs’s exclusive property.

Compliance Labs: Our Websites and all intellectual property rights therein, including any software vendor listings referenced from publicly available content, along with our Services, constitute the property of Compliance Labs and are protected by international copyright, trademark, and other intellectual property laws. Compliance Labs grants Users a non-exclusive, revocable, worldwide, royalty-free license to access and download the Compliance Labs IP for the User’s personal use consistent with these Terms of Use and applicable copyright law.

Addressing Copyright Infringement

We are committed to upholding intellectual property rights. If you are a copyright owner, or an authorized agent, and believe your copyright has been infringed on our Websites or through our Services, contact us at contact@compliance-labs.com or via our contact form at https://www.compliance-labs.com/contact/, with: (i) an identification of the copyrighted work, (ii) an identification of the allegedly infringing material and its location, (iii) your contact details, and (iv) a statement of good-faith belief that the use is unauthorized. We reserve the right to pursue legal action against anyone who knowingly and materially submits a false notification under this section.

Digital Services Act (DSA) Compliance Notice for EU Users

Our commitment to adhering to the DSA involves proactive oversight and moderation of content and activities on our platforms, alongside championing the rights of our EU-based Users. If you come across content or activity on our platforms that appears unlawful, contravenes these Terms of Use, or infringes on the rights and safety of individuals, please report it via contact@compliance-labs.com or our contact form.

Commitment to Data Protection

In the execution of our respective duties under these Terms of Use, each of us agrees to adhere to the GDPR and applicable French data protection law, and to the terms outlined in our Privacy Policy. By interacting with us through email, or engaging in transactional activities on our Websites, you consent to receiving electronic communications from Compliance Labs. Compliance Labs implements industry-standard technical, physical, and operational controls to protect the security of our Services and Websites.

Representations & Warranties

The Users affirms, to the best of their knowledge, the following:

• Authority: Possession of all necessary rights, power, and authority to agree to these Terms of Use and to meet their contractual commitments.
• Content Accuracy: Assurance that all information, including content and reviews, provided to Compliance Labs or on our Websites, is accurate and not subject to third-party claims.
• Rights Compliance: No violation of any third-party rights, including but not limited to intellectual property, publicity, privacy, consumer protection, tort, and product liability rights.
• Security Standards: Adherence to all relevant security standards, ensuring all provided content is free from viruses or malicious software.
• Lawful Compliance: Full compliance with all applicable laws, regulations, and statutes.

Compliance Labs, on our part, represent and warrant, based on our knowledge, that:

• Authority: We hold all necessary rights, power, and authority to enter into these Terms of Use and fulfill our obligations.
• Third-Party Rights: Our Services do not infringe on any third-party rights, including intellectual property, publicity, privacy rights, and more.
• Legal Compliance: Our provision of Services is in full compliance with applicable laws, regulations, and statutes.

Disclaimer

• User Risk: The use of our Websites and Services is at the sole risk of the User.
• As-Is Basis: Our Sites and Services are provided “as is” and “as available,” without any warranties, either expressed or implied. This includes, but is not limited to, implied warranties of merchantability, fitness for a particular purpose, and non-infringement.
• No Responsibility for Listings: While our Websites list software vendors, we do not ensure the legal or regulatory compliance of these software vendors. Users are encouraged to directly consult the software vendor for such information.

No Guarantees: We do not guarantee that our Websites will be secure, continuously available, or error-free, nor do we promise that any errors or defects will be corrected. We also do not assure that the content on our Websites is accurate, complete, or suitable for your specific business needs.

Limitation of Liability Clause

Both parties, Compliance Labs and the Users, agree that neither shall be held liable for any indirect, consequential, special, exemplary, or punitive damages arising from or connected to these Terms of Use or the usage of the Websites and Services. This encompasses, but is not limited to, losses of profits, revenue, interest, goodwill, as well as data corruption or loss, or any interruptions in business operations, irrespective of the nature of the claim (be it contract, tort, or another legal theory), even if previously advised of such potential damages.

Notwithstanding the foregoing, the liability of each party for direct damages under these Terms of Use shall be capped, except in cases involving:

• a breach of indemnification or confidentiality obligations, or
• instances of fraud, willful misconduct, or gross negligence. The maximum liability owed by either party to the other for direct damages shall not exceed the greater of the following two amounts:
  • An amount equal to twelve (12) times the monthly fees that were paid or payable in the month immediately preceding the claim; or
  • An amount that equals the total fees paid or payable by the User over the twelve (12) month period immediately preceding the claim.

This limitation of liability is designed to establish a predictable framework for potential damages, thereby protecting both parties from unforeseen and potentially ruinous financial exposures.

Indemnification Clause

Both parties commit to indemnify, defend, and hold harmless the other party, and employees as Indemnitee against all third-party claims, liabilities, losses, and expenses, including but not limited to damage awards, settlements, and reasonable attorney fees. This obligation is in connection to any breach of these Terms of Use by either party, provided that the indemnification does not apply to losses and expenses resulting from the negligence or wilful misconduct of the Indemnitee.

Termination Policies

Voluntary termination by Users: Users may terminate their account at any time via contact@compliance-labs.com or our contact form.

Vendor disputes and terminations: See “Vendor Disputes” in the Profile Guidelines above: all vendor account and Profile disputes are submitted via our contact form at https://www.compliance-labs.com/contact/.

Termination by Compliance Labs: We reserve the unilateral right to terminate or limit a User’s access to our Websites and Services at our discretion, without penalty and without prior notice, if we determine the User is in violation of these Terms of Use.

Force Majeure Clause

Both parties are exempt from liability for any inability or delay in fulfilling their obligations under these Terms of Use due to force majeure events. These events include, but are not limited to, natural disasters, acts of God, governmental actions, wars, terrorism, labor disputes, and power outages, provided these are beyond a party’s reasonable control.

Governing Law & Jurisdiction

These Terms of Use are governed by French law, excluding its conflict-of-laws principles.

Exclusive Legal Venue: Any dispute arising out of or relating to these Terms of Use that is not resolved via our contact form (see “Vendor Disputes” above, where applicable) shall be submitted to the exclusive jurisdiction of the competent French courts, subject to any mandatory consumer-protection venue rules that may apply.

Time Limitation for Claims: Any claim or cause of action related to the Websites, Services, or these Terms of Use must be initiated within one year after the claim or cause of action arises; otherwise, it is permanently barred.

Confidential Information

Compliance Labs will hold all confidential material of the vendor that is received from the vendor and that relates to the Services, whether marked as confidential at the time of receipt in writing or otherwise, which the vendor orally assigns as confidential through written notice at the time of disclosure, and which a reasonable person should regard as being confidential because of its contents or nature. The obligation of confidence is not intended to apply to information which:

• Is publicly known at the time of its disclosure.
• Became publicly known and made generally available after disclosure by vendor to Compliance Labs.
• Is possessed by Compliance Labs when obtained from the vendor free of any concept of privacy.
• Compliance Labs may disclose any such information to the extent that it is required to do so by law.

Waiver and Severability

Failure by either party to enforce any breach of these Terms of Use does not constitute a waiver of the right to enforce any subsequent or similar breaches.

Should any provision of these Terms of Use be deemed invalid or unenforceable under applicable law, such provision will be severed, leaving the remainder of the terms in full force and effect.

Entire Agreement

These Terms of Use, our Profile Guidelines, and our Privacy Policy form the complete and exclusive understanding between the parties regarding their subject matter, superseding all prior agreements and communications.

Last updated on September 28, 2026.