Terms of Service.

Last updated: July 2026

Acceptance

These Terms of Service ("Terms") govern access to and use of VendorGuard, including vendorguard.spot-suite.com and the application made available through your organisation's Spot Suite environment (the "Service"). The Service is operated by Spot Cloud B.V., registered in the Netherlands ("Spot Cloud", "we", "us"). By creating an account or using the Service, you agree to these Terms on behalf of yourself or the organisation you represent ("Customer", "you").

The service

VendorGuard is a third-party risk management application: vendor inventory, risk assessments against DORA, NIS2, and ISO 27001:2022 supplier controls, a register of information view, incident logging, contract records, and follow-up tasks. We grant Customer a limited, non-exclusive, non-transferable right to use the Service during the subscription term. We may update features and underlying infrastructure over time, provided such changes do not materially reduce core functionality covered by the active subscription.

Accounts

Customer is responsible for all activity under its accounts. Administrative users should use strong authentication where offered. Spot Cloud may suspend access if we reasonably believe an account has been compromised or is being used in violation of these Terms.

Acceptable use

Customer will use the Service only for lawful business purposes. Customer must not: (a) attempt to gain unauthorised access to other tenants, systems, or data; (b) transmit malware or probe network boundaries without written permission; (c) use the Service to store content that infringes third-party rights or violates applicable law; or (d) reverse engineer the Service except where expressly permitted by mandatory law.

Customer data

Customer retains ownership of the vendor risk data it enters into VendorGuard — vendor records, assessment answers, incidents, contracts, tasks, and uploaded documents ("Customer Data"). We process Customer Data only to provide the Service and as instructed by Customer.

Liability

The Service is provided on an "as is" and "as available" basis to the extent permitted by law. Spot Cloud does not warrant uninterrupted or error-free operation. Our aggregate liability arising out of or related to the Service or these Terms is limited to the fees paid by Customer for the Service in the twelve (12) months preceding the event giving rise to the claim. Neither party is liable for indirect, incidental, or consequential damages, except where liability cannot be excluded under mandatory law.

Termination

Either party may terminate for material breach not cured within thirty (30) days of written notice. Upon termination, access to the Service ends at the close of the paid period. Customer may export Customer Data during a limited wind-down window. Sections that by nature should survive termination — including fees owed, liability limits, and governing law — remain in effect.

Governing law

These Terms are governed by the laws of the Netherlands. The courts of Amsterdam, the Netherlands, have exclusive jurisdiction over disputes arising from or relating to these Terms, subject to mandatory consumer protections where applicable.

Contact

Questions about these Terms may be sent to legal@spot-cloud.com or via the contact page.