Terms of Service

1. Service overview

VendorTrace ("the Service") is a compliance intelligence platform operated by LINA Solutions AB ("we", "us"). It performs passive, outside-in analysis of publicly available information about domains you submit.

2. Account & access

You must create an account to use the Service. You are responsible for maintaining the security of your credentials and for all activity under your account.

You must be at least 18 years old to create an account and use the Service. By creating an account you confirm that you meet this requirement and, where you are acting on behalf of an organisation, that you have authority to bind that organisation to these Terms.

3. Acceptable use

You agree to use the Service only for lawful purposes. You may not:

• Submit domains you do not have a legitimate reason to analyse
• Use scan results to harm, harass, or misrepresent vendors
• Attempt to circumvent rate limits or plan quotas
• Resell or redistribute scan data without written permission

4. Plans & billing

Scan quotas and data retention periods vary by plan tier. Current limits are shown in the plan selection page and in your account settings. Quotas reset at the start of each calendar month. We reserve the right to change pricing with 30 days notice.

Paid plans are billed monthly or annually depending on the plan selected at checkout.

Subscriptions renew automatically. Cancelling takes effect at the end of the current billing period. You retain access to paid features until then.

Annual subscriptions are non-refundable except where required by applicable law. If you are a consumer (an individual not acting in a business capacity), statutory withdrawal rights under your local law may apply and are not excluded by these Terms. Business customers confirm they are acting in a commercial capacity and that statutory consumer withdrawal rights do not apply.

Monthly subscribers may submit a refund request within 7 days of their billing date, provided they have cancelled their subscription. Requests are reviewed case-by-case. To submit a request, use the billing page in your account.

Payments are processed by Stripe. By subscribing to a paid plan, you authorise Stripe to charge your payment method on a recurring basis.

5. AI-generated research

The Service uses AI to research vendor compliance information: certifications, data processing agreements, sub-processor lists, and headquarters locations. This research is automated and draws on publicly available web content.

AI-generated findings may be incomplete, outdated, or incorrect. VendorTrace is not a certification body and does not independently verify vendor claims. All AI-sourced data includes the evidence URL and the text excerpt it was drawn from so you can verify it yourself.

Where the Service cannot locate a piece of information, it says so rather than generating a placeholder. You may manually add compliance data (DPA URLs, certification names) to your vendor records. You are responsible for the accuracy of data you add manually.

VendorTrace's AI systems are designed for informational purposes and do not produce legally binding decisions or automated decisions with significant effects on individuals. Under the EU AI Act (Regulation 2024/1689), we classify our AI-assisted vendor research as a limited-risk system. No AI output from VendorTrace constitutes a compliance determination, legal advice, or regulatory finding.

VendorTrace does not make automated decisions with legal or similarly significant effects on individuals within the meaning of GDPR Article 22.

6. Disclaimer

Scan results reflect publicly observable signals at the time of scanning. They are not legal advice, compliance certifications, or security assessments. Observed serving regions are indicators, not proof of data storage or processing location.

Reports are intended to support internal compliance assessments. They should not be used as the sole basis for legal or regulatory decisions. Consult your DPO and legal team before relying on any finding for regulatory purposes.

7. Limitation of liability

The Service is provided "as is" without warranties of any kind. To the maximum extent permitted by law, LINA Solutions AB shall not be liable for any indirect, incidental, or consequential damages arising from your use of the Service.

8. Termination

We may suspend or terminate your account if you violate these terms. You may delete your account at any time from your account settings. On deletion, your account data is removed as described in the Privacy Policy.

9. Governing law

These terms are governed by the laws of Sweden. Any disputes shall be resolved in the courts of Sweden.