Terms of Service

These Terms of Service (“Terms”) constitute a legally binding agreement between the user or client (“User”, “Client”, “you”, “your”) and TISA Hub Private Limited (“Company”, “we”, “us”, or “our”), a company incorporated under the Companies Act, 2013, having its registered office at F no. A504, The Almonds, Sno 1-47/1/1, Kemse Wasti, Wakad, Pune, MH, India, 411057.

By accessing, browsing, or using the websites, software, advisory, engineering, or CloudOps services provided by the Company (collectively, the “Service”), you acknowledge that you have read, understood, and agree to be bound by these Terms, along with our Privacy Policy and any applicable Statement of Work (SOW).

1. Acceptance of Terms

By accessing or using the Service, you expressly agree to comply with these Terms, applicable laws, and regulations, including but not limited to the Information Technology Act, 2000 and rules made thereunder.

If you do not agree with any provision of these Terms, you must immediately discontinue use of the Service.

Where the Service is used on behalf of an organization, you represent and warrant that you have the authority to bind such organization to these Terms.

2. Description of the Service

The Company provides professional technology services across three core practices: Security & Compliance, Software & AI, and CloudOps (“Service”).

The Service is intended for internal governance, operational enablement, risk management, and infrastructure management support purposes and shall not be construed as legal, regulatory, or formal accredited audit certification advice.

The Company assists clients with audit readiness and compliance engineering but does not issue third-party regulatory accreditations or guarantee external audit outcomes.

3. Eligibility and Lawful Use

You must be at least 18 years of age and legally competent to enter into a binding contract under the Indian Contract Act, 1872.

You agree to use the Service only for lawful purposes and in compliance with:

• The Information Technology Act, 2000
• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
• Digital Personal Data Protection Act, 2023 (as applicable)
• Any other applicable laws, rules, and regulations in India and relevant jurisdictions.

You shall not use the Service for:

• Uploading unlawful, harmful, or infringing content
• Reverse engineering, scraping, or unauthorized access
• Any activity violating cybersecurity or data protection laws.

4. User Accounts and Responsibilities

You are responsible for maintaining the confidentiality of credentials and all activities conducted through your account or authorized environment access.

You agree to:

• Provide accurate and complete information
• Ensure secure handling of access credentials
• Validate all operational deliverables before production deployment.

The Company shall not be liable for any unauthorized access resulting from your failure to safeguard account credentials.

5. User Data, Ownership and License

You retain full ownership of all data, documents, repositories, and materials shared or submitted to the Service (“Service Data”).

You grant the Company a limited, non-exclusive, revocable license to process and use Service Data solely for:

• Delivering the agreed advisory, engineering, or CloudOps services
• Technical delivery, maintenance, and support
• Security and compliance verification.

The Company shall not claim ownership over User Data.

6. Data Protection and Privacy Compliance

The Company processes personal data in accordance with applicable Indian data protection laws, including the Digital Personal Data Protection Act, 2023 (where applicable).

Where Sensitive Personal Data or Information (SPDI) is processed, the Company shall implement reasonable security practices in line with Rule 8 of the SPDI Rules, 2011.

Users warrant that they have obtained all necessary consents and lawful authority before sharing any personal or confidential data during an engagement.

7. Use of AI and Data Processing

The Service may utilize artificial intelligence and automated engineering tools to assist in analysis and delivery.

Client data shall not be used to train public or foundational AI models without explicit, informed, and documented opt-in consent from the User.

The Company may use anonymized and aggregated operational metrics for internal process optimization in compliance with applicable law.

8. AI Outputs and Limitation of Reliance

All automated analytical observations generated during engagements are:

• Informational in nature
• Non-evidentiary until verified
• Point-in-time observations subject to human-in-the-loop validation

Users must independently verify outputs before making final regulatory, audit, or business decisions.

9. Framework References and Disclaimers

References to standards or frameworks such as ISO, NIST, SOC, or similar represent advisory mappings and readiness targets only.

The Service does not provide direct accredited certification, registrar endorsement, or official audit validation.

10. Information Security and Confidentiality

The Company implements reasonable security practices and procedures aligned with recognized industry standards such as ISO 27001 principles.

Both parties agree to maintain strict confidentiality of proprietary and confidential information exchanged during the engagement.

The Company takes reasonable technical and organizational measures to prevent unauthorized access, disclosure, alteration, or destruction of data.

11. Data Storage, Location and Cross-Border Transfer

Engagement artifacts may be processed on secure infrastructure located in India or other jurisdictions as agreed in project scopes, subject to applicable data protection laws.

12. Intellectual Property Rights

All pre-existing intellectual property, frameworks, methodologies, and tools remain the exclusive property of the Company. Custom code and specific deliverables developed under an executed Statement of Work shall be assigned to the Client upon full settlement of applicable fees.

13. Service Availability and Modifications

Professional services and deliverables are provided on an agreed scope and milestone basis.

The Company reserves the right to update its service delivery methodologies and specifications in line with industry best practices.

14. Limitation of Liability

To the fullest extent permitted under applicable law, the Company shall not be liable for:

• Indirect, incidental, or consequential damages.
• Loss of profits, data, goodwill, or business interruption.

The total aggregate liability of the Company, whether in contract, tort, or otherwise, shall not exceed the fees paid by the User to the Company in the preceding twelve (12) months for the specific service giving rise to the claim.

15. Indemnification

You agree to indemnify, defend, and hold harmless the Company, its directors, officers, and employees from any claims, damages, losses, or liabilities arising out of:

• Misuse of the Service.
• Violation of applicable laws
• Breach of these Terms

16. Suspension and Termination

The Company reserves the right to suspend or terminate services or access, without prior notice, if:

• There is a material breach of these Terms or applicable SOW
• There is unlawful or fraudulent activity
• Required by law or regulatory authority

17. Data Retention and Deletion

The Company retains project data only for as long as necessary for service delivery, legal compliance, dispute resolution, and enforcement of agreements.

Upon contract completion or written request, project data shall be securely returned or deleted, unless retention is required under statutory requirements.

18. Force Majeure

The Company shall not be liable for any failure or delay in performance due to events beyond its reasonable control, including acts of God, cyber incidents, government actions, natural disasters, or infrastructure failures.

19. Governing Law and Jurisdiction

These Terms shall be governed by and construed in accordance with the laws of India.

Subject to applicable arbitration provisions, courts having jurisdiction over Pune, Maharashtra, India shall have exclusive jurisdiction over disputes arising out of these Terms.

20. Amendments to Terms

The Company reserves the right to update or modify these Terms at any time to reflect legal, regulatory, or operational changes.

Updated Terms shall be effective upon publication on the website.

21. Contact Information

For any legal, compliance, or grievance-related queries under the Information Technology Act, 2000 and applicable rules, you may contact:

• Grievance Email: contact@tisahubs.com
• Registered Office: F No. A504, The Almonds, Sno 1-47/1/1, Kemse Wasti, Wakad, Pune, Maharashtra, India, 411057