← graften.io
LEGAL

Terms of Service

Effective date: 10 July 2026  ·  Last updated: 10 July 2026  ·  Version 1.0

Plain English summary: You get access to Graften's security and compliance platform. You pay your subscription. You own your data. We keep the platform running and secure. Neither of us is liable for the other's consequential losses. Australian law applies.

1. Parties and agreement

These Terms of Service ("Terms") form a binding agreement between Graften Pty Ltd ("Graften", "we", "us") and the entity or individual who creates a Graften account ("Subscriber", "you"). By creating an account or using the platform, you agree to these Terms.

If you are accepting on behalf of an organisation, you represent that you have authority to bind that organisation.

2. The service

Graften provides a cloud-based security and compliance platform ("the Platform") including but not limited to:

We reserve the right to modify, add, or remove features at any time. We will provide reasonable notice of material changes.

3. Account types and eligibility

3.1 MSP accounts

MSP plans are available to managed service providers and MSSPs who manage security for multiple client organisations. By selecting an MSP plan, you represent that you operate as a managed service provider. MSP accounts include multi-client management features, client billing pass-through, and white-label capabilities.

3.2 Direct accounts

Direct plans are for single organisations managing their own security posture. Direct accounts are limited to a single subscriber organisation and do not include MSP-specific features.

3.3 Plan gating

MSP plans may not be used by single-organisation subscribers. Direct plans may not be used for managing multiple client organisations. Graften reserves the right to review account usage and require plan changes where usage does not match the selected account type.

4. Trial period

New accounts receive a 14-day free trial with full access to the features of the selected plan. No credit card is required to start a trial. At the end of the trial period, the account will pause unless a paid subscription is activated. Paused accounts retain data for 90 days before deletion.

5. Subscription and billing

5.1 Pricing

Current pricing is published at graften.io/#pricing. All prices are in Australian Dollars (AUD) and exclude GST unless otherwise stated. GST will be added where applicable under Australian law.

5.2 Payment

Subscriptions are billed monthly in advance. Payment is processed by Stripe. By providing payment details, you authorise Graften to charge your payment method on each billing date. Failed payments will result in account suspension after 7 days.

5.3 Changes to pricing

We will provide at least 30 days' notice before increasing subscription prices. Price changes take effect at your next billing cycle after the notice period.

5.4 Cancellation and refunds

You may cancel your subscription at any time from the billing settings page. Cancellation takes effect at the end of the current billing period. We do not provide pro-rata refunds for partial months. If we materially reduce the platform's functionality, we will offer a pro-rata refund at our discretion.

6. Acceptable use

You agree not to:

Violation of acceptable use terms may result in immediate suspension without refund.

7. Your data

7.1 Ownership

You own all data you upload to or generate through the platform ("Subscriber Data"). Graften claims no ownership over Subscriber Data.

7.2 Licence to process

You grant Graften a limited licence to process, store, and display Subscriber Data solely to provide the platform services. This licence ends when you delete the data or close your account.

7.3 Your responsibilities

You are responsible for:

7.4 Data processing

Where Graften processes personal data on your behalf, our Data Processing Agreement applies and forms part of these Terms.

8. Security

Graften implements industry-standard security controls including per-subscriber AES-256-GCM encryption with AWS KMS-managed keys, TLS 1.2+ in transit, role-based access control, and audit logging. However, no system is perfectly secure. You are responsible for implementing appropriate access controls within your account.

If you discover a security vulnerability in the platform, please report it responsibly to security@graften.io before public disclosure.

9. Intellectual property

The Graften platform, including its software, design, trademarks, and documentation, is the intellectual property of Graften Pty Ltd. These Terms do not grant you any rights in Graften's intellectual property beyond the limited right to use the platform as described.

AI-generated outputs (reports, recommendations, analyses) produced through the platform are provided for your use. Graften makes no representation that AI-generated content is free from third-party intellectual property claims.

10. Third-party integrations

The platform integrates with third-party services (PSA tools, RMM platforms, cloud providers, CRM systems, and others). Your use of these integrations is subject to the terms of those third parties. Graften is not responsible for the availability, accuracy, or conduct of third-party services.

When you connect a third-party integration, you represent that you have authority to grant Graften access to that service on your behalf.

11. Availability and uptime

Graften targets 99.5% monthly uptime for the core API and portal, excluding scheduled maintenance. We do not provide a contractual SLA at this time. Status information is available at status.graften.io. Scheduled maintenance will be announced with reasonable notice via the platform's announcement system.

12. Limitation of liability

Important: This section limits what Graften can be held responsible for. Please read it carefully.

To the maximum extent permitted by law:

Nothing in these Terms excludes liability for fraud, personal injury caused by negligence, or any liability that cannot be excluded under applicable Australian consumer law.

13. Indemnification

You agree to indemnify and hold harmless Graften and its directors, employees, and contractors from any claims, losses, or expenses (including legal fees) arising from: (a) your use of the platform in violation of these Terms; (b) your violation of any law or third-party rights; or (c) data you upload to the platform.

14. Suspension and termination

Graften may suspend or terminate your account with immediate effect if you materially breach these Terms, engage in fraudulent conduct, fail to pay undisputed invoices, or if continued service creates legal or security risk for Graften or its other subscribers. We will provide notice where practicable.

You may terminate your account at any time through the billing settings. On termination, your data is retained for 90 days in a paused state and then deleted, except billing records which are retained as required by law.

15. Confidentiality

Each party agrees to keep the other's confidential information confidential and not to disclose it to third parties without consent, except as required by law. Graften's confidential information includes pricing, product roadmaps, and technical architecture. Your confidential information includes Subscriber Data and client information.

16. Governing law and disputes

These Terms are governed by the laws of New South Wales, Australia. The parties agree to attempt to resolve any dispute in good faith before initiating formal proceedings. If a dispute cannot be resolved, it will be submitted to the courts of New South Wales, which have exclusive jurisdiction.

For subscribers in the European Union or United Kingdom, mandatory consumer protection laws in your jurisdiction may also apply.

17. Changes to these Terms

We will notify subscribers by email at least 14 days before making material changes to these Terms. Continued use of the platform after the effective date of changes constitutes acceptance. If you do not agree to the changes, you may terminate your account before the effective date.

18. General

19. Contact

Legal notices and questions about these Terms:
legal@graften.io
Graften Pty Ltd, Australia