Compliance

Terms of Use (MSA)

Master Services Agreement governing the access and usage of the Corporate Impact Stewardship (CIS) cloud platform.

Last Updated: January 5th, 2026

ESG DATA CORE ("Company", "we", "us", or "our"), a legal entity incorporated in Dublin, Ireland, provides the Corporate Impact Stewardship (CIS) platform, a SaaS solution for ESG data management, sustainability benchmarking, and automated reporting.

By accessing or using the CIS Platform ("Service"), you ("Customer" or "User") agree to be bound by these Terms. If you are entering into this agreement on behalf of a company, you represent that you have the authority to bind that entity.

1. Definitions

  • "Service" or "Platform": Refers to the CIS cloud-based software, including MVP versions, ESG integration modules, and dashboards hosted on Amazon Web Services (AWS).
  • "Customer Data": All data, metrics, and materials submitted by the Customer to the Service.
  • "MVP Period": A specific phase wherein the Service is provided on an experimental basis for testing, feedback, and development purposes.
  • "Deliverables": Specific reports or custom analysis created for the Customer through Professional Services.
  • "Order Form": The document specifying the Service purchased, fees, and Subscription Term.

2. Access and Use of Services

2.1. License Grant: Subject to these Terms and payment of fees, ESG Data Core grants Customer a limited, non-exclusive, non-transferable right to access and use the Platform for internal business purposes during the Subscription Term.

2.2. The "MVP" & Beta Nature

Customer acknowledges that the Platform is currently an MVP:

  • Continuous Evolution: We may modify or discontinue features without prior notice to optimize the Service.
  • No Warranty on Perfection: During the MVP Period, the Service is provided to gather feedback, and occasional interruptions may occur.

2.3. Acceptable Use Policy (AUP): Customer shall not:

  • Reverse engineer or attempt to derive the source code of the Platform.
  • Use the Service to build a competitive product.
  • Upload sensitive personal data (e.g., health or genetic data) without prior written consent.
  • Use the Platform for any illegal purpose or to violate environmental or social regulations.

3. Professional Services & Consulting

3.1. Scope: Customers may purchase Professional Services (implementation, ESG consulting) via an Order Form or Statement of Work (SOW).

3.2. Ownership of Deliverables:

  • Customer Ownership: Customer owns the final reports and data analysis created specifically for them.
  • Company Ownership: ESG Data Core retains all rights to its underlying methodologies, templates, frameworks, and "Background IP" used to produce those reports.

4. Data Protection and Security

4.1. Data Processing Agreement (DPA): The parties agree that the processing of personal data is governed by our DPA, which is hereby incorporated by reference.

4.2. Ownership of Customer Data: The Customer retains all rights to its Customer Data. Customer grants ESG Data Core a license to host, copy, and display such data solely to provide the Service.

4.3. Aggregated Analytics & AI Training

Customer agrees that ESG Data Core may use anonymized and aggregated data derived from the Customer's use of the Platform to generate industry benchmarks, improve Machine Learning models, and enhance the Service. This process uses Differential Privacy mathematical techniques to ensure that no individual, entity, or specific data point can be re-identified. This data shall never identify the Customer or any individual.

5. Infrastructure & Security

Our infrastructure is built with rigorous enterprise-grade isolation and reliability standards:

  • Hosting: The Service is hosted on AWS with complete logical isolation of customer data at the database and application layers.
  • Encryption: Data is encrypted via TLS 1.2 or superior protocols (in transit) and AES-256 (at rest).
  • Audits: We conduct regular vulnerability assessments based on the AWS Well-Architected Framework and OWASP guidelines.

6. Availability and Support

  • Uptime Target: We aim for 99.5% availability during business hours (GMT), excluding scheduled maintenance windows.
  • Support: Support is provided via email or platform-integrated chat during standard business hours in Ireland.

7. Confidentiality

Each party shall protect the other's Confidential Information (technical data, business plans, etc.) with at least a reasonable degree of care. This obligation survives for three (3) years after the termination of this Agreement.

8. Intellectual Property

ESG Data Core owns all rights, title, and interest in the CIS Platform, including its underlying logic, automated algorithms, visual design, and code. Any feedback or feature suggestions provided by the Customer may be used by the Company without compensation.

9. Fees, Term, and Termination

9.1. Fees: Fees are non-refundable and based on the Subscription Term specified in the Order Form.

9.2. MVP Renewal: 60 days prior to the end of the MVP Period, ESG Data Core will present a proposal for a long-term commercial contract. If no agreement is reached, access expires at the end of the current term.

9.3. Data Export & Permanent Deletion

Upon termination, Customer Data will be available for export in CSV format for 60 days, after which it will be permanently and irreversibly deleted from our production systems.

10. Limitation of Liability

  • Exclusion: In no event shall ESG Data Core be liable for indirect, incidental, or consequential damages (loss of profits, loss of ESG rating/certification, or compliance fines).
  • Liability Cap: Our total aggregate liability shall not exceed the amount paid by the Customer in the 12 months preceding the claim.

11. Warranty Disclaimer

THE SERVICE IS PROVIDED "AS IS". TO THE MAXIMUM EXTENT PERMITTED BY LAW, ESG DATA CORE DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, REGARDING THE ACCURACY OF ESG BENCHMARKS, OR THE SUITABILITY OF THE PLATFORM FOR SPECIFIC REGULATORY FILINGS.

12. Governing Law

These Terms are governed by the laws of Ireland. Any disputes arising from this agreement shall be resolved exclusively in the courts of Dublin, Ireland.