These General Terms apply to every user of the OrynIQ Service, including free and trial users. Paid subscribers are also bound by Part B: Subscription Terms.
These Terms of Service ("Terms") constitute a legally binding agreement between you or the organization you represent ("Customer," "you," or "your") and Logan Poynter LLC (doing business as OrynIQ), a Kentucky limited liability company ("OrynIQ," "we," "us," or "our").
By creating an account, accessing, or using the OrynIQ platform at oryniq.com or any associated services (collectively, the "Service"), you agree to be bound by these Terms and our Privacy & Data Handling Policy, which is incorporated herein by reference.
If you are accepting these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity to these Terms. If you do not have such authority, or if you do not agree to these Terms, do not use the Service.
To use the Service, you must meet all of the following conditions:
If you are accessing the Service on behalf of an organization, that organization must also meet these eligibility requirements. OrynIQ reserves the right to refuse service or terminate accounts that do not comply with these requirements.
To access most features of the Service, you must register for an account. You agree to provide accurate, complete, and current information during registration and to keep that information up to date throughout the term of your subscription.
You are responsible for maintaining the confidentiality of your account credentials, including your password and any API keys issued to you. You must notify OrynIQ immediately at security@oryniq.com if you suspect unauthorized access to or use of your account.
OrynIQ will not be liable for any loss or damage arising from unauthorized use of your credentials where you have failed to take reasonable precautions to protect them.
If you are a Customer administrator, you are responsible for managing access for all users within your organization's account, including provisioning appropriate role-based permissions and promptly revoking access for departing personnel.
You agree not to impersonate any person or entity or to misrepresent your affiliation with any person or entity. Providing false information may result in immediate termination of your account.
OrynIQ is a Software-as-a-Service (SaaS) platform that provides AI-assisted ServiceNow administration, platform health analysis, CMDB governance diagnostics, and continuous monitoring capabilities. The Service connects to your ServiceNow instance via OAuth 2.0 credentials that you provide and performs automated health checks, AI-assisted investigation, and guided remediation workflows.
OrynIQ's handling of data accessed through the Service is governed by the Privacy & Data Handling Policy. In particular, OrynIQ does not retain raw bulk data from your ServiceNow instance beyond what is needed to generate and support a finding, and does not use your data to train AI models.
Paid subscribers are covered by the OrynIQ Service Level Agreement (the "SLA"), available through the OrynIQ Trust Center at trust.oryniq.com (Resources section) and incorporated into these Terms by reference. The SLA sets out the availability commitment (target Monthly Uptime % of 99.5% for Covered Endpoints), the exclusions, the service-credit schedule, scheduled-maintenance practices, and the support-tier response targets. Service Credits under the SLA are the paid subscriber's sole and exclusive remedy for any failure of OrynIQ to meet the availability commitment, except for the chronic-SLA-failure termination right preserved in the SLA. OrynIQ will provide the version of the SLA in effect on the customer's subscription start date upon written request. Free and trial users are not covered by the SLA; OrynIQ will use commercially reasonable efforts to make the Service available to those users on a best-effort basis.
OrynIQ may make certain features available on a beta or preview basis. Beta features are provided "as is" without any warranty and may be modified or discontinued at any time without notice.
The Service is offered under subscription plans as described on the Pricing page, which is subject to change. Current plan tiers include the free 30-day Trial, Foundation, and Professional, each with defined seat limits, scan quotas, and feature access. Plan details are confirmed at the time of order.
Subscription fees are as quoted at time of Stripe checkout or as set out in a written order form. All fees are in U.S. dollars and are non-refundable except as expressly stated in these Terms or required by applicable law.
Payment terms, invoicing schedule, and accepted payment methods will be specified in your order. Overdue balances may accrue interest at the lesser of 1.5% per month or the maximum rate permitted by law. OrynIQ reserves the right to suspend access to the Service for accounts with overdue balances after reasonable notice.
All fees are exclusive of applicable taxes. You are responsible for all sales, use, GST, VAT, or other taxes associated with your subscription, except for taxes on OrynIQ's net income.
You may request an upgrade or downgrade of your subscription plan at any time. Upgrades take effect immediately; downgrades take effect at the start of the next billing period. Feature access will be adjusted accordingly.
The 30-day Trial is free and requires no payment or credit card. Trial access expires at the end of the 30-day window; trial data is then retained for a 30-day grace period (during which you may convert to a paid subscription), after which the account and its data are deleted.
Foundation and Professional subscriptions bill on a recurring basis (monthly or annual, as selected at checkout) and automatically renew at the end of each billing period unless canceled. You may cancel at any time via the Customer Billing Portal accessible from your account; cancellation takes effect at the end of the current billing period.
Trial customers upgrading to Foundation are billed immediately at checkout for the selected Foundation subscription (monthly or annual). No trial fee applies, as the trial is free.
If a payment fails, your account will enter a grace period during which we will attempt to notify you and re-attempt collection per Stripe's default dunning policy. After the grace period, access will be suspended until payment is resolved.
The 30-day Trial is free, so no fee is charged for it and no refund applies. Where a fee has been charged and we are unable to deliver the Service for reasons on our side, we will issue a full refund in the following cases:
Foundation and Professional subscription fees are non-refundable. You may cancel future renewals at any time via the Customer Billing Portal.
Refunds, when issued, are processed via Stripe to the original payment method within 5–10 business days.
If you have a billing concern, please contact support before initiating a chargeback or dispute with your card issuer. We will respond to billing inquiries within 2 business days. Chargebacks issued without prior contact may result in suspension of access pending resolution.
You agree to use the Service only for its intended purpose and in compliance with all applicable laws and regulations. Without limiting the foregoing, you must not:
OrynIQ reserves the right to investigate suspected violations of this policy and to suspend or terminate access to the Service, with or without notice, if a violation is confirmed or reasonably suspected.
OrynIQ further reserves the right to suspend or terminate access for non-payment, fraudulent activity (including but not limited to chargeback abuse, duplicate signup attempts to circumvent abuse controls, or scanning ServiceNow instances you do not have authorization to assess), or violation of these Terms.
Representation and warranty. For every system, ServiceNow instance, integration endpoint, downstream system, or third-party asset that Customer connects to, scans, tests, queries, writes back to, or otherwise directs the Service to interact with (each, a "Target System"), Customer represents and warrants that Customer either (a) owns the Target System, or (b) holds documented written authorization from the Target System's owner that, at a minimum, identifies the Target System with sufficient specificity to be auditable, names the activities Customer is permitted to initiate through the Service against the Target System (including scanning, AI-assisted investigation, remediation proposals, and write-backs), and is in effect at the time each such activity is initiated (the "Authorization").
Retention and production. Customer shall retain each Authorization for the longer of three (3) years after the last activity initiated under it or the Subscription Term, and shall produce the Authorization to OrynIQ on OrynIQ's reasonable written request within ten (10) business days. Failure to produce a requested Authorization is a material breach of these Terms.
Allocation of liability. Customer is solely responsible for, and shall defend, indemnify, and hold harmless OrynIQ against, any third-party claim arising from Customer's failure to hold or maintain an Authorization required by this Section 6.3, including claims by the Target System's owner. The indemnification procedure in Section 12 (Indemnification) applies to claims under this Section 6.3.
MSP flow-down. Where Customer is a managed service provider operating End-Customer Tenants within the MSP Edition of the Service, this Section 6.3 applies independently to each Target System bound to each End-Customer Tenant. The MSP shall obtain the warranty in this Section 6.3 from each of its End-Customers in writing and shall flow down obligations substantially equivalent to this Section 6.3 into each of its End-Customer agreements.
You retain all ownership of and responsibility for the data you provide to or make accessible through the Service, including ServiceNow instance data accessed via the credentials you supply ("Customer Data"). OrynIQ does not claim any intellectual property rights in Customer Data.
You grant OrynIQ a limited, non-exclusive license to access, process, store, and use Customer Data solely to provide and improve the Service as described in these Terms and the Privacy & Data Handling Policy.
OrynIQ's collection, storage, and use of personal data and Customer Data is governed by the Privacy & Data Handling Policy, which is incorporated into these Terms by reference. By using the Service, you acknowledge that you have read and understood the Privacy Policy.
OrynIQ implements commercially reasonable technical and organizational measures to protect Customer Data, including encryption of Customer Data at rest (the PostgreSQL database, backups, and managed-disk volumes are encrypted via Azure Storage Service Encryption with AES-256; ServiceNow OAuth credentials and tokens are additionally encrypted at the application layer with AES-256-GCM), encryption in transit (TLS 1.2 or higher), role-based access controls on every Service route, immutable audit logging of access and security-relevant actions, Cloudflare WAF and DDoS protection on public endpoints, and network-level isolation of the database. A summary of security controls is available on the Security page; the full processor-side commitments live in the OrynIQ Data Processing Agreement.
You are responsible for ensuring that your use of the Service and the data you provide complies with applicable law, including any obligations to notify or obtain consent from individuals whose data is included in Customer Data.
OrynIQ and its licensors retain all right, title, and interest in and to the Service, including all software, algorithms, AI models, interfaces, documentation, branding, and all intellectual property rights therein. Nothing in these Terms transfers any ownership of OrynIQ intellectual property to you.
Subject to your compliance with these Terms and timely payment of applicable fees, OrynIQ grants you a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Service during the subscription term solely for your internal business purposes.
If you provide suggestions, ideas, or other feedback regarding the Service ("Feedback"), you grant OrynIQ a perpetual, irrevocable, royalty-free license to use, incorporate, and commercialize that Feedback without any obligation to you.
Subject to Customer's prior written consent (which may be granted by email and may be revoked at any time on thirty (30) days' written notice to security@oryniq.com), OrynIQ may identify Customer as a customer of the Service and use Customer's name and logo solely for marketing purposes, in accordance with Customer's reasonable brand guidelines. OrynIQ will not publish Customer's name or logo as a customer reference without that prior consent.
"Confidential Information" means any non-public information disclosed by one party (the "Disclosing Party") to the other (the "Receiving Party") that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Customer Data is deemed Confidential Information of Customer. The Service, pricing, and OrynIQ's technical documentation are Confidential Information of OrynIQ.
Each party agrees to: (a) use the other party's Confidential Information only as necessary to perform its obligations or exercise its rights under these Terms; (b) protect Confidential Information with at least the same degree of care it uses to protect its own confidential information, and no less than reasonable care; and (c) not disclose Confidential Information to any third party without prior written consent, except to employees or contractors who need to know it and are bound by obligations at least as protective as these Terms.
Confidentiality obligations do not apply to information that: (a) is or becomes publicly available through no fault of the Receiving Party; (b) was rightfully known by the Receiving Party prior to disclosure; (c) is independently developed by the Receiving Party without reference to the Disclosing Party's Confidential Information; or (d) is required to be disclosed by law or court order, provided that the Receiving Party gives the Disclosing Party prompt notice where legally permitted.
Obligations of confidentiality under this Section 9 survive termination or expiration of these Terms for a period of five (5) years, except that Confidential Information that constitutes a trade secret under applicable law (including OrynIQ's check logic, AI prompts, scoring formulas, and quality check library) remains protected for as long as it qualifies as a trade secret.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ORYNIQ EXPRESSLY DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
ORYNIQ DOES NOT WARRANT THAT: (A) THE SERVICE WILL MEET YOUR SPECIFIC REQUIREMENTS; (B) THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE; (C) ANY RESULTS OBTAINED FROM USE OF THE SERVICE WILL BE ACCURATE OR RELIABLE; OR (D) ANY ERRORS IN THE SERVICE WILL BE CORRECTED.
EXCEPT FOR THE UNCAPPED EXCEPTIONS IN SECTION 11.4 AND THE SUPER-CAP IN SECTION 11.5, AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ORYNIQ'S TOTAL CUMULATIVE LIABILITY TO YOU ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE — WHETHER BASED ON CONTRACT, TORT, STRICT LIABILITY, OR ANY OTHER LEGAL THEORY — WILL NOT EXCEED THE GREATER OF: (A) THE TOTAL FEES PAID OR PAYABLE BY YOU TO ORYNIQ IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE CLAIM; OR (B) ONE HUNDRED U.S. DOLLARS ($100.00).
EXCEPT FOR THE EXCEPTIONS IN SECTIONS 11.4 AND 11.5, IN NO EVENT WILL ORYNIQ BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES — INCLUDING LOSS OF PROFITS, LOSS OF REVENUE, LOSS OF DATA, BUSINESS INTERRUPTION, OR COST OF SUBSTITUTE SERVICES — EVEN IF ORYNIQ HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
The parties acknowledge that the limitations in this section reflect a reasonable allocation of risk and are an essential basis of the bargain between the parties. These limitations apply notwithstanding any failure of essential purpose of any limited remedy.
The limitations in Sections 11.1 and 11.2 do not apply to: (a) a party's indemnification obligations under Section 12; (b) Customer's payment obligations; (c) a party's breach of its confidentiality obligations under Section 9; (d) a party's fraud, willful misconduct, or liability for death or personal injury caused by that party's negligence; or (e) any liability that cannot be limited or excluded by applicable law.
A party's gross negligence, and a party's breach of its data-protection obligations under Section 7 or the OrynIQ Data Processing Agreement (a "Data-Protection Breach"), are not uncapped under Section 11.4. Each party's aggregate liability for gross negligence and for a Data-Protection Breach (in each case excluding amounts already uncapped under Section 11.4) is capped at the greater of (i) two (2) times the total fees paid or payable by you to OrynIQ in the twelve (12) months immediately preceding the event giving rise to the claim, or (ii) US$250,000. This super-cap is in addition to, and not in substitution of, the cap in Section 11.1 (meaning this super-cap is the controlling limit for claims falling within this Section 11.5).
You agree to defend, indemnify, and hold harmless OrynIQ and its officers, directors, employees, and agents from and against any claims, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to: (a) your use of the Service in violation of these Terms; (b) Customer Data, including any claim that Customer Data infringes or misappropriates a third party's intellectual property rights; or (c) your breach of any applicable law or regulation.
OrynIQ agrees to defend, indemnify, and hold harmless you and your officers, directors, employees, and agents from and against any third-party claims alleging that the Service, as provided by OrynIQ and used in accordance with these Terms, infringes or misappropriates any U.S. patent, copyright, trademark, or trade secret. This obligation does not apply to claims arising from: (a) modifications to the Service made by anyone other than OrynIQ; (b) combination of the Service with third-party products or services not approved by OrynIQ; or (c) your failure to use a non-infringing version made available by OrynIQ.
The indemnified party must: (a) promptly notify the indemnifying party in writing of any claim; (b) grant the indemnifying party sole control of the defense and settlement; and (c) reasonably cooperate. The indemnifying party may not settle any claim that imposes liability or obligations on the indemnified party without prior written consent.
These Terms begin on the date you first access the Service and continue until terminated by either party in accordance with this section.
For Foundation and Professional subscriptions, you may cancel at any time via the Customer Billing Portal accessible from your account (Stripe-hosted). Cancellation takes effect at the end of the current billing period; you retain access for the remainder of the period you've already paid for. Fees paid are non-refundable except as expressly stated in Section 5.8 (Refund Policy) or as required by applicable law.
The 30-day Trial is free with a 30-day access window (plus a 30-day data grace period after expiry). There is no subscription to cancel. To delete your account sooner, email billing@oryniq.com.
For billing questions or to request a written termination acknowledgment, contact billing@oryniq.com.
OrynIQ may terminate or suspend your account: (a) immediately, if you materially breach these Terms and fail to cure the breach within 30 days of written notice (or immediately if the breach is incapable of cure or relates to the Acceptable Use Policy); (b) for convenience, with 90 days' written notice; or (c) immediately, if required by applicable law or court order.
Upon termination, your right to access and use the Service ceases immediately. OrynIQ will delete or return Customer Data in accordance with the Privacy & Data Handling Policy. Deletion is completed within 30 days of confirmed termination. Sections that by their nature should survive termination — including Sections 8 (Intellectual Property), 9 (Confidentiality, for the survival period in 9.4), 10 (Warranty Disclaimer), 11 (Limitation of Liability, including the super-cap in 11.5), 12 (Indemnification), 15 (Governing Law), and 16 (General Provisions) — will remain in effect.
OrynIQ reserves the right to modify, update, or discontinue any feature of the Service at any time. For material changes that reduce functionality, OrynIQ will provide at least 30 days' advance notice via email or an in-product notice where practicable.
OrynIQ may update these Terms from time to time. When we do, we will revise the "Last Updated" date at the top of this page. For material changes, OrynIQ will provide notice by email to the address on file or via a prominent in-Service notice at least 14 days before the changes take effect. Your continued use of the Service after the effective date of any update constitutes your acceptance of the revised Terms.
If you object to any update to these Terms, your sole remedy is to stop using the Service and terminate your subscription before the effective date of the change.
These Terms and any dispute arising out of or relating to them or the Service will be governed by and construed in accordance with the laws of the Commonwealth of Kentucky, USA, without regard to its conflict-of-law provisions.
Each party irrevocably consents to the exclusive jurisdiction and venue of the state courts located in Pulaski County, Kentucky, or the federal courts sitting in the Eastern District of Kentucky, for the resolution of any dispute arising under or related to these Terms. Each party waives any objection to personal jurisdiction or venue in such courts.
Before initiating any formal proceeding, the parties agree to attempt in good faith to resolve any dispute through direct negotiation. Either party may initiate this process by sending written notice to the other describing the dispute in reasonable detail. The parties will have 30 days from the date of such notice to attempt informal resolution.
Nothing in this section prevents either party from seeking immediate injunctive or other equitable relief in any court of competent jurisdiction to prevent irreparable harm pending informal resolution or litigation.
These Terms, together with any order forms, the Privacy & Data Handling Policy, and any other documents incorporated by reference, constitute the entire agreement between the parties with respect to the Service and supersede all prior and contemporaneous understandings, proposals, negotiations, representations, and agreements relating to the subject matter hereof.
If any provision of these Terms is found to be unenforceable or invalid under applicable law, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.
You may not assign or transfer these Terms or any of your rights or obligations hereunder without OrynIQ's prior written consent. OrynIQ may assign these Terms, including in connection with a merger, acquisition, or sale of substantially all of its assets, upon written notice to you. Any purported assignment in violation of this section is void.
A party's failure to enforce any provision of these Terms will not constitute a waiver of its right to enforce that provision or any other provision in the future. No waiver will be effective unless made in writing and signed by an authorized representative of the waiving party.
Neither party will be liable for any failure or delay in performance (other than a payment obligation) caused by circumstances beyond its reasonable control, including acts of God, natural disasters, war, terrorism, labor disputes, governmental actions, or infrastructure failures. The affected party will give prompt notice and use commercially reasonable efforts to resume performance as soon as possible.
Legal notices to OrynIQ must be sent in writing to security@oryniq.com. Notices to you will be sent to the email address associated with your account. Notices sent by email are deemed received when transmitted.
The parties are independent contractors. Nothing in these Terms creates any partnership, joint venture, agency, franchise, employment, or fiduciary relationship between the parties.
These Terms are for the sole benefit of the parties and their permitted successors and assigns. Nothing herein confers any rights or remedies upon any third party.
For legal and terms-related inquiries:
Email: security@oryniq.com
Company: Logan Poynter LLC (d/b/a OrynIQ)
Website: oryniq.com
We target a response to legal inquiries within 5 business days.
OrynIQ operates a ServiceNow governance platform that delivers automated platform health assessments, AI-powered investigation and remediation guidance, and executive reporting. These Subscription Terms govern your ongoing paid subscription to the OrynIQ platform.
The plan, billing interval, and unit price you have selected are the plan, billing interval, and unit price displayed in OrynIQ's checkout at the moment of acceptance, as recorded by Stripe in the resulting Checkout Session and the customer record on the OrynIQ platform.
The following entitlements apply to each paid plan tier:
Current plan tiers and entitlements are maintained on the Pricing page. OrynIQ may add new entitlements or capabilities to a plan from time to time without notice; reductions to entitlements are governed by Section 14 (Modifications) of Part A.
OrynIQ will make a self-serve onboarding flow available immediately upon subscription activation, covering platform configuration, ServiceNow OAuth credential setup, and a walkthrough of scanning, reporting, and remediation workflows. Professional subscribers additionally receive a scheduled onboarding session within fourteen (14) calendar days of activation.
Support response targets, severity classifications, and acknowledgement times for paid subscribers are governed by the OrynIQ Service Level Agreement (the "SLA") available through the OrynIQ Trust Center at trust.oryniq.com (Resources section). As a summary (the SLA itself controls):
Foundation: Standard email support at support@oryniq.com with the SLA's Standard-tier acknowledgement targets (Sev 1: 1 business hour; Sev 2: 4 business hours; Sev 3: 1 business day; Sev 4: 2 business days).
Professional: Standard email support plus a dedicated ServiceNow Success Advisor accessible via Slack or Microsoft Teams, at Customer's choosing.
The subscription term begins on the date you complete checkout and continues for the billing interval you selected (monthly or annual) ("Initial Term"), unless earlier terminated in accordance with Section B-9.
Upon expiration of the Initial Term, the subscription automatically renews for successive terms equal in length to the Initial Term ("Renewal Terms") at OrynIQ's then-current rates, unless either party provides notice of non-renewal in accordance with Section B-9. You may cancel future renewals at any time via the Customer Billing Portal accessible from your account; cancellation takes effect at the end of the current billing period.
You shall pay the subscription fee for the selected plan at the billing interval and unit price displayed in OrynIQ's checkout at the moment of acceptance, as recorded by Stripe and on the customer record on the OrynIQ platform.
Subscription fees are billed in advance at the start of each billing period beginning on the date of subscription activation. OrynIQ uses Stripe as its billing processor; Stripe will charge your selected payment method on each billing date.
If you select an annual billing interval, you receive the equivalent of two (2) months free relative to the equivalent monthly rate (a 10% discount). Annual prepayment is non-refundable except as set forth in Section B-9 or required by applicable law.
Self-serve subscriptions are payable via the payment methods supported by Stripe Checkout (including credit and debit cards, and ACH/SEPA where available). If a payment fails, your account will enter a grace period during which we will attempt to notify you and re-attempt collection per Stripe's default dunning policy. After the grace period, access will be suspended until payment is resolved.
Invoices not paid within thirty (30) calendar days of the invoice date may accrue interest at the lesser of one and one-half percent (1.5%) per month or the maximum rate permitted by applicable law.
All fees are exclusive of applicable taxes. You are responsible for all sales, use, GST, VAT, or similar taxes arising from the subscription, except for taxes on OrynIQ's net income.
OrynIQ may adjust subscription fees at the start of any Renewal Term by providing written notice at least sixty (60) calendar days prior to the renewal date. If you do not wish to accept the new pricing, you may cancel future renewals via the Customer Billing Portal in accordance with Section B-3.2 prior to the renewal date.
You shall provide OrynIQ with read-only ServiceNow API credentials (OAuth or basic auth) for each designated instance, meeting OrynIQ's minimum-privilege requirements as documented in the OrynIQ ServiceNow Least-Privilege Setup Guide. OrynIQ is not responsible for incomplete scan results caused by insufficient permissions.
You represent and warrant that you have the authority to connect your ServiceNow instance(s) to the OrynIQ platform and to permit OrynIQ to access and analyze data within those instances for the purpose of delivering the services described in these Subscription Terms.
The Acceptable Use Policy in Part A Section 6 applies. In addition, you shall not exceed the entitlements set forth in Section B-2.2 without prior written approval from OrynIQ.
The Platform, including all software, algorithms, check logic, health scoring formulas, AI models, financial model calculations, and documentation, is and remains the sole and exclusive property of OrynIQ. Nothing in these Subscription Terms grants you any ownership interest or intellectual property rights in the Platform.
All data originating from your ServiceNow environment remains your property. OrynIQ processes this data solely to deliver the services described in these Subscription Terms and does not use it for any other purpose. The Privacy & Data Handling Policy linked in Part A Section 7 applies.
You grant OrynIQ a non-exclusive, royalty-free license to use your name and logo to identify you as an OrynIQ customer in marketing materials, case studies, and on OrynIQ's website. OrynIQ will use your branding assets in accordance with your reasonable brand guidelines. You may revoke this license at any time by written notice to security@oryniq.com.
"Confidential Information" means any non-public information disclosed by either party to the other in connection with these Subscription Terms, including but not limited to OrynIQ's platform methodology, check logic, pricing, and roadmap; your ServiceNow instance data, findings, health scores, and reports; and the terms of your subscription. Information is not Confidential if the receiving party can demonstrate it was already publicly known, independently developed without reference to the disclosing party's information, or lawfully received from a third party without restriction.
Each party agrees to keep Confidential Information strictly confidential, use it solely in connection with the subscription, and not disclose it to any third party without prior written consent. Access will be limited to employees and contractors with a need to know who are bound by obligations at least as protective as this Section.
Obligations of confidentiality survive expiration or termination of the subscription for a period of five (5) years, except that Confidential Information that constitutes a trade secret under applicable law (including OrynIQ's check logic, AI prompts, scoring formulas, and quality check library) remains protected for as long as it qualifies as a trade secret.
The OrynIQ Data Processing Agreement (the "DPA") governs the processing of Personal Data under these Subscription Terms and is incorporated into these Subscription Terms by reference. By initiating a paid subscription through OrynIQ's checkout, you accept the DPA electronically alongside these Subscription Terms; the version accepted, the acceptance timestamp, and the Stripe Checkout session identifier are recorded on the customer record and available to your administrators on request. Electronic acceptance is equivalent to a signed instrument under E-SIGN (15 U.S.C. §7001 et seq.) and UETA. The current DPA is available at security@oryniq.com on request and through the OrynIQ Trust Center at trust.oryniq.com. In the event of conflict between these Subscription Terms and the DPA with respect to data-protection matters, the DPA controls.
OrynIQ processes your ServiceNow data solely for the purpose of delivering the services described in these Subscription Terms and the DPA. OrynIQ does not (a) use your data, or any data derived from your data, to train, fine-tune, evaluate, or benchmark machine-learning models, large language models, or AI agents; (b) aggregate or de-identify your data for the purpose of improving the Platform, its check library, or its scoring or AI models; or (c) sell your data. OrynIQ applies a server-side personal-identifier scrubbing pass to outbound prompts transmitted to Anthropic for AI processing; this scrubbing is applied uniformly to all OrynIQ customers regardless of plan tier. If OrynIQ later introduces an industry-benchmarking capability that processes customer data in aggregated and de-identified form, that capability will be opt-in per Customer and will require an updated written acknowledgement under the DPA.
OrynIQ maintains, at minimum, the following security controls: encryption of Customer Data at rest via Azure Storage Service Encryption (AES-256) covering the PostgreSQL database, backups, and managed-disk volumes, with an additional AES-256-GCM application-layer encryption layer for ServiceNow OAuth credentials and access tokens; encryption in transit (TLS 1.2 or higher); role-based access control on all platform routes; network-isolated database infrastructure; immutable audit logging of all access and actions; and Cloudflare WAF and DDoS protection on all public endpoints.
OrynIQ engages the subprocessors listed in the DPA Annex (currently Microsoft Azure, Anthropic, Stripe, Resend, Cloudflare, and PostHog) to deliver the Platform. OrynIQ will provide no less than thirty (30) days' notice of any addition or replacement of a subprocessor. You may object to a new subprocessor on reasonable data-protection grounds within that period; if OrynIQ elects to proceed with a subprocessor over your reasonable objection, you may terminate the affected subscription for convenience on thirty (30) days' written notice and receive a pro-rata refund of any pre-paid fees attributable to the period after the effective date of termination.
Upon expiration or termination of the subscription, OrynIQ will delete all customer data within thirty (30) calendar days, subject to the retention exceptions in the DPA. OrynIQ will provide written confirmation of deletion upon request.
You may cancel future renewals at any time via the Customer Billing Portal accessible from your account; cancellation takes effect at the end of the current billing period and you retain access for the remainder of the period you have already paid for. Annual prepayment fees are non-refundable except as required by applicable law. Monthly subscribers owe no further fees once the current billing month concludes.
Either party may terminate the subscription on written notice if the other party (a) materially breaches these Subscription Terms or Part A and fails to cure such breach within thirty (30) calendar days of receiving written notice; or (b) becomes insolvent, files for bankruptcy, or ceases normal business operations. If OrynIQ terminates for your material breach, no refund of prepaid fees is owed.
You may terminate the subscription on thirty (30) days' written notice if OrynIQ fails to meet the SLA's Monthly Uptime % commitment in three (3) or more consecutive calendar months, or in five (5) or more calendar months in any rolling twelve (12) month period. In such event, you are entitled to a pro-rata refund of any pre-paid fees attributable to the period after the effective date of termination, in addition to any earned but unapplied Service Credits.
Upon termination or expiration of the subscription: (i) your access to the Platform will be deactivated; (ii) OrynIQ will delete customer data in accordance with Section B-8.4; (iii) each party will return or destroy the other party's Confidential Information and certify in writing that it has done so on request; and (iv) all accrued and unpaid fees remain due and payable.
Sections B-6 (Intellectual Property), B-7 (Confidentiality, for the survival period in B-7.3), B-8 (Data Processing and Security, to the extent the DPA expressly survives), B-10 (Limitation of Liability, including the super-cap in B-10.4), and B-11 (General Provisions) survive termination or expiration of the subscription, in addition to the surviving provisions of Part A Section 13.4.
THE PLATFORM IS PROVIDED "AS IS." ORYNIQ DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. ORYNIQ DOES NOT WARRANT THAT THE PLATFORM WILL BE UNINTERRUPTED OR ERROR-FREE.
EXCEPT FOR THE EXCEPTIONS IN SECTIONS B-10.3 AND B-10.4, AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY SHALL BE LIABLE TO THE OTHER FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING OUT OF OR RELATED TO THESE SUBSCRIPTION TERMS, REGARDLESS OF THE THEORY OF LIABILITY. ORYNIQ'S TOTAL AGGREGATE LIABILITY UNDER THESE SUBSCRIPTION TERMS SHALL NOT EXCEED THE TOTAL FEES PAID OR PAYABLE BY YOU IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE CLAIM. The limitations in this Section B-10.2 reflect a reasonable allocation of risk and are an essential basis of the bargain between the parties; they apply notwithstanding any failure of essential purpose of any limited remedy. Where Part A Section 11 imposes a different cap, the more specific provision (this Section B-10.2) controls for paid subscriptions.
The limitations in Section B-10.2 do not apply to: (a) a party's indemnification obligations under Part A Section 12; (b) Customer's payment obligations; (c) a party's breach of its confidentiality obligations under Section B-7 or Part A Section 9; (d) a party's fraud, willful misconduct, or liability for death or personal injury caused by that party's negligence; or (e) any liability that cannot be limited or excluded by applicable law.
A party's gross negligence, and a party's breach of its data-protection obligations under Section B-8 or the DPA (a "Data-Protection Breach"), are not uncapped under Section B-10.3. Each party's aggregate liability for gross negligence and for a Data-Protection Breach (in each case excluding amounts already uncapped under Section B-10.3) is capped at the greater of (i) two (2) times the total fees paid or payable by you to OrynIQ in the twelve (12) months immediately preceding the event giving rise to the claim, or (ii) US$250,000. This super-cap is in addition to, and not in substitution of, the cap in Section B-10.2 (meaning this super-cap is the controlling limit for claims falling within this Section B-10.4).
These Subscription Terms are governed by the laws of the Commonwealth of Kentucky, without regard to its conflict-of-law principles. Any disputes arising under these Subscription Terms shall be resolved in the courts of Kentucky, consistent with Part A Section 15.
These Subscription Terms, together with Part A and any Data Processing Agreement executed pursuant to Section B-8.1, constitute the entire agreement between the parties regarding the paid subscription and supersede all prior discussions, negotiations, and agreements on this subject. These Subscription Terms may only be amended by OrynIQ in accordance with Part A Section 14, or by mutual written agreement.
You may not assign these Subscription Terms without the prior written consent of OrynIQ, except that you may assign to a successor in connection with a merger, acquisition, or sale of substantially all of your assets, provided that you give OrynIQ prior written notice. OrynIQ may assign in accordance with Part A Section 16.3.
If any provision of these Subscription Terms is held to be invalid or unenforceable, the remaining provisions shall remain in full force and effect, modified to the minimum extent necessary.
All notices under these Subscription Terms shall be in writing and delivered to support@oryniq.com for OrynIQ and to the email address associated with your account for you, in accordance with Part A Section 16.6.
Failure by either party to enforce any right or provision of these Subscription Terms shall not constitute a waiver of that right or provision.
The parties are independent contractors. Nothing in these Subscription Terms creates a partnership, joint venture, agency, or employment relationship between the parties.
These Terms of Service are reviewed and updated as the platform evolves. Last Updated: May 15, 2026. Part B Subscription Terms v1.1 (changes since v1.0: SLA now referenced via Trust Center for paid subscribers; DPA acceptance via Stripe Checkout made unconditional and explicit; encryption-at-rest scope clarified to cover Postgres database, backups, and managed disks via Azure Storage Service Encryption; PostHog added to subprocessor list; subprocessor-objection termination remedy added; gross-negligence super-cap added; chronic-SLA-failure termination right added; confidentiality survival aligned to 5 years; marketing reference changed to consent-first; material-breach cure period aligned to 30 days).