Terms of Use

These Terms of Use ("Terms") govern access to and use of the Vyzko GRC platform ("Platform"), available at vyzko.app, provided by Vyzko Tecnologia da Informação Ltda., enrolled with the Brazilian National Registry of Legal Entities (CNPJ) under No. 68.798.965/0001-05, headquartered at Av. Primeira Avenida, Quadra 01B, Lote 10, Sala 103, Condomínio Empresarial Village, Aparecida de Goiânia/GO, Brazil, ZIP 74934-600 ("Vyzko").

By creating an account, subscribing to a plan or using the Platform, the Customer declares that it has read, understood and fully accepted these Terms and the Privacy Policy. If you do not agree, do not use the Platform.

1. Definitions

• Customer: the legal entity that subscribes to the Platform, represented by the user who creates the account and declares to have the authority to do so.
• User: an individual authorized by the Customer to access the Platform (administrators, team members and guests).
• Customer Content: data, documents, evidence, policies, assessments, risks and other information entered into the Platform by the Customer or its Users.
• Plan: the subscription tier purchased (Starter, Pro or Expert), with the features and limits described on the pricing page.

2. Purpose

Vyzko provides, as software as a service (SaaS), a governance, risk and compliance (GRC) platform that supports maturity assessments against reference frameworks (such as ISO 27001, NIST CSF, CIS Controls, ISO 27701 and the Brazilian General Data Protection Law, LGPD), risk management, policies, controls, evidence, vendors, incidents, obligations and reports, including features assisted by artificial intelligence.

The Platform is a management support tool. It does not replace legal advice, independent audits, certification by an accredited body or the Customer's professional judgment. The results, scores and recommendations generated are indicative and depend on the quality of the information provided by the Customer.

3. Account and access

• Registration requires a valid corporate e-mail. The Customer is responsible for the accuracy of the information provided and for keeping it up to date.
• Credentials are personal and non-transferable. The Customer is responsible for all activities carried out with its Users' accounts and must immediately report any unauthorized use to contato@vyzko.app.
• Vyzko recommends enabling two-factor authentication for all Users.
• The Customer is responsible for granting and revoking its Users' access, including when employees leave the company.

4. Free trial

Vyzko may offer a 14 (fourteen) day free trial to new Customers who register a credit card. At the end of the trial, the subscription is automatically charged according to the chosen Plan, unless cancelled before the trial ends. Payment methods by boleto or Pix do not include a trial period.

5. Plans, prices and payment

• Current prices are listed at vyzko.app and may be purchased on a monthly or annual cycle. In the annual cycle, the amount equals ten monthly fees and is charged in full at the beginning of the period.
• Payments are processed by Stripe. Vyzko does not store full credit card data.
• Payment methods: credit card (recurring), boleto (one invoice per cycle) and Pix (prepaid annual cycle), subject to availability.
• For each confirmed payment, an electronic Service Invoice (NFS-e) will be issued in the Customer's name, based on the registration data provided (company name, CNPJ and address). The Customer must keep this data correct.
• Prices may be adjusted annually, with at least 30 (thirty) days' prior notice, applying to the next renewal cycle.
• In case of non-payment, Vyzko may suspend access 7 (seven) days after the due date, keeping the Customer Content for the period set out in section 9.

6. Cancellation, renewal and refund

• Subscriptions renew automatically at the end of each cycle, unless cancelled by the Customer on the Platform before the renewal date.
• Cancellation stops future charges. Access remains active until the end of the period already paid.
• For distance contracts, the Customer may withdraw within 7 (seven) calendar days of the first charge, with a full refund, under article 49 of the Brazilian Consumer Protection Code, where applicable.
• Outside this case, there is no pro rata refund of periods already charged, including in the annual cycle.

7. Acceptable use

The Customer and its Users must not:

• use the Platform for unlawful or fraudulent purposes or in a way that infringes third-party rights;
• upload malicious content, attempt to gain unauthorized access, exploit vulnerabilities or interfere with the operation of the services;
• copy, modify, decompile, reverse engineer or create derivative works of the Platform;
• resell, sublicense or make the Platform available to third parties outside the scope of the subscribed Plan;
• use the artificial intelligence features to generate content that is unlawful, discriminatory or infringes third-party rights.

8. Intellectual property

The Platform, its code, trademarks, layouts, methodologies, questionnaires and knowledge bases are owned by Vyzko or its licensors and are protected by intellectual property laws. These Terms grant the Customer a limited, non-exclusive, non-transferable and revocable license to use the Platform during the subscription term.

Customer Content remains the property of the Customer. The Customer grants Vyzko a limited license to host, process and display such content solely for the provision of the services.

9. Data, privacy and personal data protection

• The processing of personal data complies with Law No. 13,709/2018 (LGPD) and is detailed in the Privacy Policy.
• With respect to personal data contained in Customer Content, the Customer acts as controller and Vyzko as processor, processing the data only according to the Customer's instructions and for the performance of the services.
• With respect to account registration and usage data, Vyzko acts as controller.
• After the subscription ends, Customer Content remains available for export for 30 (thirty) days and is deleted within 90 (ninety) days, unless there is a legal obligation to retain it.

10. Artificial intelligence features

The Platform uses language models from third-party providers to generate summaries, recommendations and reports. Generated content may contain inaccuracies and must be reviewed by the Customer before any decision is made. Information sent for processing is used solely to generate the response to the Customer and is not used to train models.

Secure environment and isolation between Customers. The AI features operate in an environment controlled by Vyzko: each request goes through Vyzko's servers, which verify the User's identity, membership in the organization and permission to use AI before forwarding it to the model provider. The credential used to access the provider is kept only on Vyzko's servers and is never exposed in the browser. Each request contains only information from the User's own organization, to which the User already has access on the Platform. Each Customer's data is kept isolated by organization, with access rules enforced on the server: there is no sharing of data between Customers, and one Customer's data is never used to generate responses for another. Communications are encrypted in transit. The model provider processes the information only to generate the response, does not use it to train models and retains it only for the period set out in its security policy, as described in the Privacy Policy.

Fair use. The artificial intelligence features are included in the plans that provide them, at no additional charge, and are intended for reasonable use in the Customer's own governance, risk and compliance activities. To preserve service quality for everyone, Vyzko applies usage limits, which may include a number of requests per user within a given period and a monthly quota per organization. When a limit is reached, the AI features become temporarily unavailable until the period renews, without affecting the other features of the Platform. Limits are sized for regular use and may be revised by Vyzko; a Customer that needs a higher volume may request an increase through the support channels.

The AI features may not be used in an automated manner, at a volume incompatible with regular use, or as a means of generic access to language models for purposes unrelated to the Platform. In such cases, Vyzko may restrict the organization's access to the AI features, with notice to the Customer.

11. Availability, support and security

• Vyzko uses reasonable efforts to keep the Platform continuously available and may perform scheduled maintenance with prior notice whenever possible.
• Support is provided by e-mail at suporte@vyzko.app, on business days, during business hours in Brasília time.
• Vyzko adopts technical and administrative security measures consistent with market standards, such as encryption in transit and at rest, access control, audit logging and backups.
• The Customer must keep its own copies of critical evidence and documents entered into the Platform.

12. Limitation of liability

To the maximum extent permitted by law, Vyzko's total liability for any damages arising from these Terms or the use of the Platform is limited to the amount actually paid by the Customer in the 12 (twelve) months preceding the event giving rise to the claim. Vyzko is not liable for lost profits, indirect damages, data loss caused by the Customer, decisions made based on the Platform's results, or for sanctions, fines or results of the Customer's audits and certifications.

13. Suspension and termination

Vyzko may suspend or terminate access in case of breach of these Terms, use that compromises the security of the Platform or third parties, or non-payment. The Customer may terminate the subscription at any time as set out in section 6.

14. Changes

Vyzko may update these Terms. Material changes will be communicated by e-mail or notice on the Platform at least 15 (fifteen) days in advance. Continued use after the changes take effect implies acceptance.

15. General provisions

• These Terms constitute the entire agreement between the parties regarding their subject matter.
• Tolerance of a breach of any clause does not imply a waiver.
• If any provision is held invalid, the remaining provisions remain in force.

16. Governing law and jurisdiction

These Terms are governed by the laws of the Federative Republic of Brazil. The courts of the District of Aparecida de Goiânia, State of Goiás, Brazil, are elected to settle any disputes, without prejudice to the consumer's domicile where applicable.

17. Contact