Terms of Service

1. Acceptable Use

You agree to use the Platform only for lawful purposes related to IAM product selection, evaluation, and research. You must not use the Platform for:

• Competitive intelligence gathering against IAM Posture™ or to build a competing product
• Automated scraping, crawling, or bulk extraction of Platform data or Output Data
• Redistributing, reselling, sublicensing, or publicly disclosing report outputs without written consent
• Any activity that may disrupt, interfere with, or degrade the Platform's operation

2. Intellectual Property & Output Data Ownership

The IAM Posture™ framework, LENS™ assessment methodology, scoring algorithms, vendor evaluation data, and all original content, benchmarks, and research provided via the Platform (collectively, "Platform IP") are the exclusive intellectual property of IAM Posture™ and its founder.

2.1 Output Data License

All reports, scores, rankings, vendor assessments, shortlists, gap analyses, and any other outputs generated by the LENS™ engine (collectively, "Output Data") are the exclusive intellectual property of IAM Posture™ and its founder. By accessing Output Data, you are granted a limited, personal, non-exclusive, non-transferable, non-sublicensable license to use Output Data solely for your organisation's internal business evaluation purposes.

2.2 Prohibited Uses of Output Data

You expressly agree not to:

• Reproduce, copy, screenshot, or extract Output Data for redistribution, publication, or public disclosure
• Incorporate Output Data into any competing product, service, or commercial offering
• Resell, sublicense, or transfer Output Data to any third party without prior written consent from IAM Posture™.
• Remove, obscure, or alter any watermark, attribution, or copyright notice embedded in Output Data
• Use Output Data to train, fine-tune, or develop any machine learning model, AI system, or automated decision-making tool

Any unauthorised reproduction, redistribution, or commercial use of Output Data constitutes copyright infringement and a material breach of this agreement, entitling IAM Posture™ to seek injunctive relief, damages, and recovery of legal costs.

2.3 Trade Secrets

The LENS™ scoring methodology, dimension weighting algorithms, pillar scoring rubrics, vendor evaluation criteria, and associated implementation details constitute protectable trade secrets of GreyBeard Intelligence under the Defend Trade Secrets Act (18 U.S.C. § 1836) and applicable state law. You agree to: (a) maintain the confidentiality of any proprietary methodological information disclosed to you through the Platform; (b) not attempt to reverse-engineer, reconstruct, or derive the scoring methodology from Platform outputs; and (c) not disclose any such information to any third party without prior written consent. Misappropriation of trade secrets may result in civil and criminal liability.

2.4 Trademarks

IAM Posture™, LENS™, IAM Verdict™, IAM Fit™, Digital Verdict™, COST-X™, Posture Map™, and the IAM Posture™ logo are unregistered trademarks of GreyBeard Intelligence. These marks may not be used without prior written permission in connection with any product, service, or marketing material in a manner that is likely to cause confusion, or in any manner that disparages or discredits IAM Posture™ or GreyBeard Intelligence. All other trademarks and service marks referenced on the Platform are the property of their respective owners.

3. Disclaimer of Warranties — Assessment Output

IAM Posture™ assessment outputs, scores, rankings, and vendor recommendations are provided for informational and decision-support purposes only. They do not constitute:

• Professional advisory, consulting, or procurement advice
• A warranty or guarantee of vendor fitness for any particular purpose
• A guarantee of any procurement outcome, implementation success, or security posture improvement
• Legal, financial, or regulatory compliance guidance

Vendor capability data is sourced from publicly available documentation, vendor-submitted profiles, and third-party reviews, and is accurate as of the data freshness date displayed on each assessment. IAM Posture™ makes no representation that Output Data is complete, error-free, or suitable for any specific procurement decision.

All purchasing decisions remain the sole responsibility of the subscribing organisation. You are solely responsible for conducting your own independent due diligence, including proof-of-concept testing, before committing to any vendor relationship.

THE PLATFORM AND OUTPUT DATA ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

3.1 AI-Assisted Features

Certain Platform features — including the LENS™ conversational assessment and requirements document analysis — transmit your input content to AI language model inference providers (currently Anthropic, PBC) for processing. These providers act as sub-processors under our Data Processing Agreement and are contractually prohibited from using your content for AI model training. The scored outputs, rankings, and reports generated by the LENS™ engine are produced by deterministic mathematical algorithms, not by AI inference. AI inference is used solely to assist with natural-language input gathering and document parsing.

3.2 Enterprise Data Processing Agreement

Enterprise customers requiring a Data Processing Agreement (DPA) to satisfy GDPR Article 28, CCPA contractual requirements, or their organisation's vendor management programme may request one by contacting [email protected]. The DPA governs the processing of personal data by GreyBeard Intelligence as a data processor on behalf of the enterprise customer. For all other customers, our Privacy Policy at /privacy governs data processing.

4. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

• IAM Posture™'s total aggregate liability for any claim arising from use of the Platform or its Output Data shall not exceed the amount paid by the subscriber in the 12 months preceding the claim
• IAM Posture™ shall not be liable for any indirect, consequential, special, incidental, or punitive damages, including lost profits, lost revenue, loss of data, business interruption, or procurement losses, regardless of the theory of liability (contract, tort, strict liability, or otherwise) and even if advised of the possibility of such damages
• IAM Posture™ shall not be liable for vendor selection decisions made in reliance on Platform outputs, nor for any failure of a selected vendor to meet the subscriber's operational or security requirements

Some jurisdictions do not allow the exclusion or limitation of implied warranties or liability for certain types of damages. In such jurisdictions, our liability is limited to the maximum extent permitted by law.

5. Data Accuracy & Dispute Resolution

IAM Posture™ maintains a data quality programme including vendor profile reviews, Trust Rule T8 (90-day data freshness alerts), and ongoing editorial oversight. We aim to review vendor profiles at least quarterly. Every report displays the data freshness date for each scored dimension.

5.1 Accuracy Dispute Process

If you believe a specific data point in your report is materially inaccurate, you may submit a formal data dispute by contacting [email protected] within 30 days of report generation. Your dispute must include:

• The specific data point or vendor score you believe is incorrect
• A reference to publicly available documentation that contradicts our data
• Your report ID (displayed in the report header)

We will review disputes within 10 business days and, where substantiated, issue a corrected report at no additional charge. Disputes that cannot be substantiated with public source documentation will not result in score changes or refunds.

5.2 Audit Record

Every report generated on the Platform is logged with a timestamped record of the exact data version served and the user's assessment inputs. This record constitutes the authoritative record of what was delivered to the subscriber and may be used to resolve accuracy disputes. Where a user exercises a valid right of erasure under GDPR or applicable privacy law, we will delete personal data from our systems in accordance with our Privacy Policy, subject to our right to retain anonymised or aggregated records necessary for legal compliance, dispute resolution, and legitimate business purposes as permitted under GDPR Article 17(3).

6. Data Privacy & Security

Your privacy is critical. Please review our Privacy Policy to understand how we handle your assessment data and organisational profile details. You are responsible for maintaining the security of your account credentials. You must not share access to your report with persons outside your subscribing organisation.

7. Refund Policy & Digital Products

Due to the immediate access and digital nature of the research reports provided by IAM Posture™, all sales of Standard, Full, and Enterprise reports are final and non-refundable.

In the event that you believe a report contains inaccuracies, our sole obligation is to provide Technical Clarification under the accuracy dispute process in Section 5.1. We do not issue refunds based on:

• Dissatisfaction with specific vendor rankings or scoring outcomes
• A change in your organisation's requirements after report generation
• A vendor making capability changes after the report's data freshness date
• A disagreement with our scoring methodology (which is publicly documented at /methodology)

8. B2B Partner Hub & Third-Party Services

IAM Posture™ provides a B2B Partner Hub for the convenience of various advisors, consultants, and system integrators ("Partners"). These Partners are independent third parties and are not agents or employees of IAM Posture™. While our Platform may facilitate co-branded reporting and referrals, we are not responsible for the specific advice, implementations, or professional services provided by these Partners. Any engagement with a Partner is a separate legal relationship between you and that third party.

Rule T7-PARTNER: Partner co-branding does not affect vendor scoring, rankings, or algorithmic outputs in any way. No financial consideration from any Partner has influenced the LENS™ scoring engine.

9. Governing Law

These terms shall be governed by and construed in accordance with the laws of the Commonwealth of Massachusetts, USA, without regard to conflict of law principles. Any dispute arising out of or relating to these terms that cannot be resolved informally shall be submitted to binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, with proceedings conducted in Boston, MA. Each party retains the right to seek injunctive or other equitable relief in a court of competent jurisdiction to prevent irreparable harm pending arbitration. Nothing in this section limits either party's right to bring an individual action in small claims court.

EU and UK Consumer Carve-out. If you are a consumer habitually resident in the European Union or United Kingdom, nothing in these terms removes or limits any mandatory rights you have under the law of your country of residence, including rights under the EU Consumer Rights Directive (2011/83/EU), the UK Consumer Rights Act 2015, or any applicable national consumer protection legislation. In particular, the mandatory consumer protection laws of your country of residence apply alongside these terms, and to the extent of any conflict, those mandatory laws prevail. The arbitration and class action waiver clauses below do not apply to EU or UK consumers.

Class Action Waiver. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, YOU AGREE THAT ANY CLAIM AGAINST IAM POSTURE™ OR GREYBEARD INTELLIGENCE MUST BE BROUGHT IN YOUR INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, REPRESENTATIVE, OR MULTI-PLAINTIFF PROCEEDING. The arbitrator may not consolidate more than one person's claims and may not preside over any form of representative, class, or collective proceeding.

Force Majeure. Neither party shall be liable for any failure or delay in performance due to circumstances beyond their reasonable control, including but not limited to acts of God, internet outages, cyberattacks, natural disasters, pandemic, or government action.

10. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated via email to your registered address and displayed as a notice on the Platform for 30 days prior to taking effect. Continued use of the Platform after that period constitutes acceptance of the updated Terms.