Terms of Use
In short: Netras.GRC gives an indicative self-assessment, not an audit, certification or legal advice. Use the scanner only on websites you own or are authorised to scan. Templates are starting points you must adapt. We provide the service free and “as is”, and our liability is limited.
1. Who we are and what these terms cover
Netras.GRC at grc.netras.ai (the “Service”) is provided by Assurex Limited, trading as Netras by Assurex (“Netras”, “we”, “us”). These terms apply to your use of the Service, including its assessments, scores, checklists, website scanner, reports and downloadable templates. By using the Service, and in particular by ticking the box to accept these terms before a download or scan, you agree to them. If you use the Service for an organisation, you confirm that you are authorised to accept these terms on its behalf. How we handle personal data is explained in our Privacy Notice.
2. Indicative results only
- The Service is a self-assessment and awareness tool. Its results are based on the answers you give and on what is publicly observable, and they cover a representative part of each framework, not every requirement.
- Results are not an audit, certification, attestation, legal opinion, or a determination of compliance or non-compliance with any law or standard, including the Digital Personal Data Protection Act, 2023. A high score does not mean you are compliant, and a gap does not mean you are breaking the law.
- You are responsible for verifying results and for your own compliance decisions, ideally with a qualified professional.
3. Using the website scanner
- Authorisation. You may scan a website only if you own it or are authorised by its owner to have it scanned. You confirm this each time you start a scan.
- What the scanner does. It loads the publicly visible pages of the website once, as an ordinary visitor would, and reads its privacy policy. It does not log in, submit forms, test for vulnerabilities or attempt to bypass any security control.
- Reports. The detailed report is given only when your verified work email belongs to the scanned website’s domain. For other websites you receive a summary only.
- Do not misuse reports. You must not publish, share or use a report, or any part of it, to allege that any person or organisation is non-compliant or acting unlawfully, or in any way that is misleading, defamatory or unlawful. Every report is stamped with the email address of the person who ran it.
- Website owners. If you own a website and do not want it scanned, email assurex@netras.ai from an address at that domain and we will add it to our do-not-scan list.
4. Acceptable use
You must not: use the Service unlawfully or to harm others; scan websites without authorisation; attempt to overload, probe, reverse-engineer or bypass the Service’s security, rate limits or access controls; use automated means to access the Service at scale; submit false information, including someone else’s email address; or resell the Service. We may suspend or refuse access if we reasonably believe these terms are being broken.
5. Templates and content
- We grant you a non-exclusive, non-transferable licence to download, adapt and use the templates, reports and guidance for your own organisation’s internal compliance purposes. You may not sell or redistribute them as your own product.
- Templates are starting points. They cover common requirements, not every obligation that may apply to you, and must be tailored, reviewed and approved before adoption.
- All rights in the Service and its content, other than your own inputs, belong to Assurex Limited or its licensors.
- Netras.GRC is not affiliated with, endorsed by or certified by ISO, IEC, the PCI Security Standards Council, the AICPA, NIST or any regulator. Framework names, control numbers and short titles are used only for reference, and the Service does not reproduce the standards’ text. Refer to the official standards for their full requirements.
6. No warranty
The Service is provided free of charge, “as is” and “as available”. To the fullest extent permitted by law, we give no warranty, express or implied, that the Service or its results are accurate, complete, current, fit for a particular purpose, or uninterrupted and error-free.
7. Limitation of liability
To the fullest extent permitted by law, Assurex Limited and its group companies, officers and employees will not be liable for any indirect, incidental, special or consequential loss, or for any loss of profit, revenue, data, goodwill or business opportunity, arising from your use of, or reliance on, the Service or its results. Our total liability to you for all claims relating to the Service is limited to INR 5,000. Nothing in these terms limits liability that cannot lawfully be limited.
8. Indemnity
You agree to indemnify Assurex Limited and its group companies against any claims, losses and costs (including reasonable legal fees) arising from your breach of these terms, including scanning a website without authorisation or misusing a report.
9. Changes and termination
We may change or withdraw the Service, or update these terms, at any time. The version and date at the top show which terms apply; material changes will ask for your acceptance again. Sections 2, 3.4 and 5 to 10 continue to apply after you stop using the Service.
10. Governing law and disputes
These terms are governed by the laws of India. The courts at New Delhi, India have exclusive jurisdiction over any dispute arising from them or from the Service.
11. Contact
Questions about these terms: assurex@netras.ai.