Website and Platform User Terms

These User Terms ("Terms") govern your use of the AdvantaISO website at advantaiso.com and the AdvantaISO compliance management platform ("Platform"), operated by AdvantaISO Limited, a company registered in England and Wales under company number 14929611, whose registered office is at Lakeview House, 4 Woodbrook Crescent, Billericay, Essex, CM12 0EQ.

By accessing or using our website or Platform, you agree to these Terms. These Terms should be read alongside our Privacy Policy and the Online Licence Agreement between AdvantaISO and your organisation.

The AdvantaISO Platform is a cloud-based compliance management system providing tools for ISO 27001 information security management, ISO 9001 quality management and security self-assessment. Access is subject to your organisation holding a valid licence with AdvantaISO. Individual access is granted by your organisation's administrator.

3.1 Account Creation

Upon account creation, you will receive a secure temporary password by email. You are required to change this password on your first login. Your login credentials are personal to you and must not be shared.

3.2 Password Requirements

Your password must be at least eight (8) characters and include at least one uppercase letter, one lowercase letter, one number and one symbol.

3.3 Account Security

You are responsible for maintaining the confidentiality of your credentials and all activity that occurs under your account. Notify your administrator immediately if you believe your credentials have been compromised.

3.4 Multi-Factor Authentication

The Platform supports and strongly recommends multi-factor authentication (MFA) using an authenticator app such as Google Authenticator or Microsoft Authenticator. You will be prompted to enable MFA upon first login. AdvantaISO may require MFA for all users at its discretion.

When you enable MFA, you will be issued recovery codes. Store these securely offline. They are single-use and allow you to access your account if your authenticator device is unavailable.

The Platform records an activity log of actions performed by all users, including:

• login and logout events;
• failed login attempts;
• creation, modification and deletion of records; and
• document uploads, previews and downloads.

Activity logs record your username, the action performed, the date and time, and your IP address. These logs are used for security monitoring, audit purposes and to assist with data recovery. By using the Platform you acknowledge and consent to this monitoring.

Activity logs are accessible to AdvantaISO and to your organisation's administrator and are retained for the duration of your organisation's subscription.

5.1 Soft Deletion

When you delete a record within the Platform, it is not immediately and permanently removed. Deleted records enter a recovery state for up to thirty (30) days, during which they may be restored upon request. After thirty (30) days, deleted records may be permanently removed.

5.2 Data Recovery

If you accidentally delete a record, contact your administrator or AdvantaISO at [email protected] as soon as possible. Recovery is only possible within the thirty (30) day recovery window.

5.3 Data Retention

All data is retained for two (2) years from the date of last submission, after which it is permanently deleted.

You must not use the Platform to:

• upload or transmit any material that is unlawful, harmful, defamatory or that infringes any third party's rights;
• upload or transmit viruses, malware or any other malicious code;
• attempt to gain unauthorised access to any part of the Platform;
• interfere with or disrupt the integrity or performance of the Platform;
• circumvent any security or access control measures including MFA; or
• impersonate any other person or misrepresent your affiliation with any organisation.

All intellectual property rights in the Platform belong to AdvantaISO or its licensors. You retain ownership of content you upload, but grant AdvantaISO a limited licence to process and store it for the purposes of providing the Platform.

AdvantaISO processes your personal data in accordance with our Privacy Policy and the Data Processing Agreement between AdvantaISO and your organisation. Personal data processed includes your name, email address, login activity records and IP address. All data is hosted within the United Kingdom.

We may suspend or terminate your access immediately if you breach these Terms, if your organisation's licence expires or is terminated, or if we reasonably suspect fraudulent or unlawful activity. Suspicious activity identified through the activity log may result in immediate suspension pending investigation.

To the maximum extent permitted by law, AdvantaISO's liability to you is limited to the fees your organisation paid in the twelve (12) months preceding the claim. AdvantaISO is not liable for indirect, incidental or consequential damages. Nothing limits liability for death or personal injury caused by negligence or fraud.

These Terms are governed by the laws of England and Wales. Any disputes are subject to the exclusive jurisdiction of the courts of England and Wales.

AdvantaISO Limited
Registered in England and Wales. Company No. 14929611.
Lakeview House, 4 Woodbrook Crescent, Billericay, Essex, CM12 0EQ
Email: [email protected]
Website: www.advantaiso.com