Legal
Terms of service
Including the clause that matters most in a compliance product: what Scopecanon does not claim, and what you remain responsible for.
Version 2026-10-14, last updated 14 October 2026. You accept these terms, and the data processing agreement that forms part of them, when you create an account or accept an invitation, and the version you accepted is recorded against your account.
Who you are contracting with
Scopecanon is operated by Nimavera Inc. (in formation) ("we", "us"), contactable at support@scopecanon.com. Until incorporation completes, the operator is the founder trading as Nimavera; these terms will name the incorporated entity once it exists, and do not name it early.
A postal address for service of notice is available on request at privacy@scopecanon.com.
Scopecanon is offered to businesses and public bodies, not to consumers. By creating an account you confirm that you act for an organisation and are authorised to accept these terms on its behalf; "you" then means that organisation.
The service
Scopecanon maintains a register of AI systems in your software estate, classifies them against the EU AI Act (Regulation (EU) 2024/1689) with a stated reason and clause, derives the obligations those classifications engage, and records the evidence you attach.
Scopecanon is provided "as is" and "as available", on a best-effort basis. It is built and released gradually: features may be marked preview, may change, and may be withdrawn. We give reasonable notice before withdrawing a paid feature you rely on.
Not legal advice, and not a statement of compliance
Scopecanon is software, not a law firm, a notified body or a conformity assessment body. No output of it is legal advice, and nothing it produces is a certificate or a statement that you comply with any obligation under the AI Act or any other law. The product deliberately has no status called compliant: the strongest thing it records is that evidence exists for one obligation.
Whether an obligation applies and whether it is met are legal conclusions about a specific deployment in a specific member state, under rules whose application dates and transitional provisions change. Classifications and derived obligations are proposals that a person at your organisation must review and confirm; you remain the deployer, responsible for your own compliance and for taking advice where you need it.
Accuracy and the catalogue
The catalogue states which commercial products ship which AI capability, cited to the vendor's own public material. Software changes: an entry can be correct when written and wrong a quarter later, which is why every row shows when its source was last checked, or says plainly that it is unverified. Matches are offered as proposals; a classification is part of your register only once a person at your organisation confirms it, and that person's judgement — not ours — is what the register records.
Acceptable use
You are responsible for your credentials and for the people you give seats to; tell us promptly at support@scopecanon.com if you believe an account has been compromised. You must not: use the service to build a public directory of other organisations' failings (the catalogue describes products, never their customers); scrape, bulk-export or resell the catalogue; probe, overload or try to bypass the security or the limits of the service; upload malware or material you have no right to hold; or put special categories of personal data in the register when the obligation does not need them. We may suspend or terminate an account used in breach of this clause, proportionately and, where practical, after telling you.
Plans, prices and tax
Plans and their numeric limits are published on the pricing page and enforced as published. Paid plans are monthly subscriptions, priced in euros, bought inside the product and billed in advance through our payment processor, Stripe. When a limit is reached the service says so and stops accepting new systems or seats; it does not degrade silently and never bills overage.
Prices are shown excluding VAT and other taxes. Where tax applies, it is calculated at checkout from the billing address and any VAT number you give, and shown before you pay; you are responsible for the taxes that apply to your purchase. We never store full card details.
Renewal, failed payments and plan changes
A subscription renews automatically each month until cancelled, and you authorise Stripe to charge the payment method on file at each renewal. If a renewal payment fails, Stripe retries it and the plan stays in force while it does; if the payment still cannot be collected, the subscription ends and the Free limits apply.
An owner or admin can switch between paid plans from the Plan & billing page. The switch applies at once, on the same subscription, and Stripe prorates it: the difference for the rest of the current month is added to, or credited against, your next invoice. Credits are applied to future invoices, not paid out.
Cancellation and refunds
You can cancel at any time from the Plan & billing page; no message to us is needed. Renewal stops, the plan runs to the end of the period already paid, and the cancellation can be withdrawn until then. After it ends the Free limits apply: nothing you recorded is deleted, and anything above the Free limits stays readable and exportable.
Fees are paid in advance for a period you keep access to, so they are not refunded, in whole or for part of a month, once that period has started. We will refund a charge where you were billed twice for the same period, where you were billed after a cancellation took effect, where a billing error was ours, or where the law requires it. Refunds go back to the original payment method; write to support@scopecanon.com.
We will tell you by email at least 30 days before a price increase applies to your subscription; if you do not accept it, cancel before the next renewal.
Your data
Your register is yours. Any member can export it in full at any time from Settings, as one file with every evidence file attached. An owner can delete the organisation and any person can delete their own account; deletion removes the data rather than hiding it. Where we process personal data in the register on your behalf, the data processing agreement at /dpa applies; it forms part of these terms and needs no separate signature.
Suspension and termination
You may stop using Scopecanon and delete your organisation at any time. We may terminate an account for a material breach of these terms that is not remedied after notice, or at once for a serious breach of the acceptable-use clause. On termination access stops; the organisation can be restored intact for 30 days, after which it is deleted, as the data processing agreement describes.
Warranty and liability
Except where the law does not allow it, we give no warranty that the service is uninterrupted, error-free or fit for a particular purpose, and we do not guarantee any outcome, including any compliance, audit or regulatory result. To the extent the law permits, we are not liable for indirect or consequential loss, including lost profits, lost data you could have exported, fines or regulatory outcomes, and our aggregate liability is limited to the greater of the fees you paid in the twelve months before the claim and one hundred euros.
Nothing excludes liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded, and nothing limits rights under mandatory law that applies to you. We do not exclude liability by pretending the product does more than it does: it is stated plainly above precisely so this clause is not the first place you learn it.
Changes and governing law
Material changes to these terms are notified by email at least 30 days ahead, and you may cancel before they take effect.
These terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws principles. Subject to mandatory applicable law, the parties submit to the exclusive jurisdiction of the state and federal courts located in New Castle County, Delaware for any dispute arising out of or relating to the service or these terms. If your organisation is established in the European Economic Area, the United Kingdom or another jurisdiction whose mandatory law applies to you, nothing here deprives you of the protection of that law, including the General Data Protection Regulation, or of any right that law gives you to bring proceedings in your local courts.