RaptorGRC Software Licence (Community Edition)

This licence governs your use of the RaptorGRC software: the container image, its bundled content and any updates we make available (the "Software"). It is granted by Biff Labs Ltd ("we", "us"). By installing, activating or using the Software you agree to it; if you are acting for an organisation, you confirm you have authority to bind it. A copy also ships inside the container image as EULA.md. Use of this website is governed separately by the Terms of Use.

1. Licence grant

We grant you a non-exclusive, non-transferable, revocable licence, free of charge, to install and run the Software on infrastructure you control, for your organisation's internal governance, risk and compliance purposes. Every module of the Community Edition is included.

2. Restrictions

You must not: (a) sell, rent, sublicense or redistribute the Software, or offer it to third parties as a hosted or managed service, without our prior written agreement; (b) remove or alter proprietary notices; (c) circumvent or attempt to circumvent licence activation; or (d) reverse engineer, decompile or disassemble the Software except to the extent the law permits notwithstanding this restriction.

3. Pre-release software

The Software is currently provided as a beta. It may contain defects, features may change or be removed between releases, and upgrades may require manual steps. Maintain your own backups of your database and attachments volume; take a backup before every upgrade.

4. Your data, your responsibility

The Software runs entirely on your infrastructure; we have no access to your deployment or its data. As with any tool of this kind, the security of the deployment depends on your organisation's own security controls, and you are responsible for operating it securely. In particular:

• the Software is designed for internal use and should not be made accessible from outside your organisation; where remote access is required, we recommend placing it behind a reverse proxy and a web application firewall;
• host hardening, network exposure, credential management and TLS configuration are your responsibility;
• databases and data volumes should be subject to routine backups aligned to your organisation's recovery time (RTO) and recovery point (RPO) objectives, and restores should be tested.

You are also responsible for disaster recovery and for ensuring your use of the Software, including any data you store in it, is lawful.

5. No compliance guarantee

RaptorGRC is a tool that supports governance, risk and compliance processes. It does not, by itself, make you compliant with any framework, standard, regulation or contractual obligation. Scores, dashboards, reports, deadline clocks and other outputs are informational aids, not professional, legal or regulatory advice. You remain solely responsible for your compliance decisions, for the accuracy of information you record, and for making any regulatory notification or submission on time, regardless of what the Software displays.

6. AI-assisted features

AI features are optional and run against models you configure. Their output is suggestion only, may be inaccurate or incomplete, and must be reviewed by a competent person before being relied on or applied. We give no warranty as to the accuracy of AI output.

7. Support and updates

Support is provided on a reasonable-endeavours basis only: we will do what we reasonably can, when we can. We do not commit to response times, service levels, bug-fix timescales, or the continued availability of any feature, update or the Software itself. We may release updates, but we are not obliged to.

8. No warranty

The Software is provided "as is" and "as available". To the fullest extent permitted by law we exclude all warranties, conditions and other terms, express or implied, including satisfactory quality, fitness for a particular purpose, non-infringement, and that the Software will be uninterrupted or error-free.

9. Liability

Nothing in this licence excludes or limits liability that cannot lawfully be excluded or limited, including for death or personal injury caused by negligence, or for fraud. Subject to that: we are not liable for any indirect or consequential loss, loss of profit, revenue, business, goodwill, anticipated savings, or loss or corruption of data; we are not liable for any regulatory fine, penalty or enforcement action, or for any failure to meet a compliance or reporting obligation; and our total aggregate liability arising out of or in connection with the Software is limited to the greater of £100 and the amount you paid us for the Software in the 12 months before the event giving rise to the claim. The Community Edition is free of charge; this limitation reflects that.

10. Termination

This licence ends automatically if you materially breach it. On termination you must stop using the Software, though you keep your data, which is stored in your own database and volumes. Sections 4, 5, 8, 9 and 11 survive termination.

11. General

This licence is the entire agreement between us concerning the Software and is governed by the laws of England & Wales; the courts of England & Wales have exclusive jurisdiction. If any provision is found unenforceable, the rest remains in force.

12. Contact

Biff Labs Ltd
privacy@bifflabs.co.uk