Terms of Service

1. The service

SuperCompli provides software to help organizations manage US export control compliance, including ITAR eligibility assessment, registration guidance, compliance program documentation, training, secure communication and encrypted file storage.

2. Not legal advice

SuperCompli is not a law firm and does not provide legal advice. The questionnaires, generated documents, classification suggestions and AI responses are informational tools to support your compliance program. They are not a substitute for advice from qualified export control counsel, and they do not constitute a determination by any government agency.

You remain solely responsible for your compliance obligations, including registration, licensing, classification, and any determination about whether a person may access controlled technical data.

3. Your responsibilities

• Provide accurate information, and keep your account credentials secure.
• Determine which of your personnel may access your organization's data, and administer the access controls the service provides. We do not make export control determinations on your behalf.
• Use the US person verification workflow in a manner consistent with applicable law, including obtaining any consent required to collect identity documents from your personnel.
• Do not upload content you are not authorized to possess or disclose, and do not use the service to violate export control law or any other applicable law.

4. Encryption and the limits of recovery

Secure chat, the encrypted vault and identity verification documents are encrypted in your browser. We hold only ciphertext and cannot read this content. This is a deliberate design property, and it has a consequence you must understand before relying on the service:

• If you lose your recovery phrase and every device holding a usable copy of your private key, you lose access to content encrypted for that key. We cannot restore your private key or recovery phrase.
• Resetting your encryption keys does not restore access to content encrypted under your previous keys. Other authorized recipients may retain access to their shared copies.

You are responsible for keeping your recovery phrase safe. Organization key recovery is not available.

5. Accounts and organizations

An organization administrator may invite members, assign roles, review identity verification submissions, and access files shared with the organization owner. Administrators cannot restore a member's private key or recovery phrase, and organization membership alone does not grant access to private chat messages.

6. Subscriptions and billing

Paid plans are billed in advance on a recurring basis through Stripe, at the plan and seat count you select. Charges renew automatically until cancelled. You may cancel at any time, and cancellation takes effect at the end of the current billing period. Except where required by law, payments are non-refundable.

We may change pricing with notice; changes apply from your next billing period.

7. Acceptable use

You may not attempt to gain unauthorized access to the service or another organization's data, interfere with its operation, reverse engineer it except where that right cannot lawfully be excluded, resell it without authorization, or use it to store content unrelated to your compliance program.

8. Your content

You retain all rights to the content you upload. You grant us only the limited rights necessary to operate the service for you — which, for end-to-end encrypted content, amounts to storing and transmitting ciphertext we cannot read.

9. Availability

We aim to keep the service available but do not guarantee uninterrupted operation. We may modify or discontinue features, and will give reasonable notice of material changes affecting paid plans.

10. Disclaimers

The service is provided "as is" and "as available", without warranties of any kind to the fullest extent permitted by law, including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not warrant that use of the service will result in compliance with ITAR or any other regulation.

11. Limitation of liability

To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits or lost data. Our total liability arising out of these terms will not exceed the amount you paid us in the twelve months preceding the claim.

This limitation applies to loss of access to encrypted content, including where a recovery phrase and usable device keys have been lost.

12. Termination

You may stop using the service and request deletion of your account at any time. We may suspend or terminate access for material breach of these terms, or where required by law. On termination, your right to use the service ends; encrypted content becomes permanently unreadable once the associated keys are destroyed.

13. Changes to these terms

We may update these terms and will revise the date at the top. Material changes will be communicated through the application or by email. Continued use after changes take effect constitutes acceptance.

14. Governing law

These terms are governed by the laws of the State of Colorado, without regard to its conflict-of-law rules. Any dispute arising out of these terms or the service will be resolved exclusively in the state or federal courts located in Colorado.

15. Contact

Questions about these terms can be sent to legal@supercompli.com. See also our Privacy Policy.