Terms of service.

By accessing or using the Sylure website ("Site") or the Sylure platform ("Platform"), you agree to these terms. If you do not agree, please do not use the Site or Platform. If you are acting on behalf of an organisation, you confirm you have authority to bind that organisation.

"Sylure", "we", "us" or "our" refers to Sylure Ltd, a company registered in England and Wales. Our registered office is in London, United Kingdom. Contact details are provided in section 16 below.

You may use the Site for lawful purposes to learn about Sylure, evaluate capabilities and request a demo. You may use the Platform solely for lawful data protection and privacy operations, including personal data discovery, DSAR fulfilment and compliance reporting.

Access to the Platform is by invitation only. An organisation's Admin creates user accounts and assigns roles (Admin, Analyst, or Viewer). Each user must keep their credentials secure and must not share access with others.

We may suspend or terminate accounts that violate these terms, pose a security risk, or are inactive for an extended period. We will notify the organisation's Admin before or promptly after any suspension, except where immediate action is required to protect the service or other users.

The Starter plan includes a defined monthly upload quota, workspace allocation and user seats as described on the pricing page. Upload quota resets automatically on your billing anniversary. Failed or rejected uploads do not count against your quota.

We may adjust pricing or plan features with at least 30 days' written notice. Changes take effect at the start of the next billing cycle. If you do not agree with a change, you may terminate your subscription before the change takes effect.

You remain the data controller for all personal data you upload to the Platform. Sylure acts as a data processor on your behalf, in accordance with UK GDPR. We process your data solely to provide the service — scanning, DSAR search, analytics and AI-assisted summaries.

We do not use customer data to train AI models or for any purpose beyond delivering the service. You can delete your data at any time through the Platform. After deletion, data is purged from storage following a configurable grace period. A Data Processing Agreement (DPA) is available on request.

We implement technical and organisational measures to protect your data, including: AES-256-GCM encryption at rest, TLS 1.2+ encryption in transit with HSTS enforcement, ClamAV antivirus scanning on every upload, role-based access control, account lockout, rate limiting, CSRF protection and a structured tamper-evident audit log. Personal data is matched using HMAC-SHA256 hashes — raw personal data is never stored in search indexes. All infrastructure runs in UK data centres (AWS eu-west-2).

For a detailed description of our security controls, see the Trust centre.

We aim to provide high availability but do not guarantee specific uptime. We may perform planned maintenance with reasonable advance notice to account administrators. Email support is available with a next-business-day response target.

The Site is provided for information only. We aim to keep it accurate and up to date, but we do not guarantee that content is complete, accurate, or current. Product features and availability may change over time, including as the platform evolves.

We may update the Site, the Platform and these terms from time to time. The "Last updated" date above indicates when this page was last revised. Continued use of the Site or Platform after changes means you accept the updated terms.

If you submit a demo request or contact us via the Site, you agree that we may respond using the details you provide. Please do not submit personal data you do not have the right to share. For information about how we handle contact details, see our Privacy Notice.

The Site and Platform, including their content, branding, layout, design elements and underlying technology, are owned by Sylure or its licensors and are protected by intellectual property laws. You may view and print pages for internal evaluation purposes only. You may not reproduce, distribute, modify, create derivative works from, publicly display, or commercially exploit any part of the Site or Platform without our written consent.

The Site may include links to third-party websites. We do not control those sites and are not responsible for their content, policies, or practices. Accessing third-party sites is at your own risk.

To the maximum extent permitted by law, the Site and Platform are provided "as is" and "as available". We exclude all implied warranties, including implied warranties of merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the Platform will detect all personal data in every file or that scan results will be error-free.

Nothing in these terms limits liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation, or any other liability that cannot be excluded by law.

Subject to the above, to the maximum extent permitted by law, we will not be liable for any losses arising out of or in connection with your use of (or inability to use) the Site or Platform, including indirect or consequential losses, loss of profits, loss of business, or loss of data. Our total aggregate liability for any claims arising under or in connection with the Platform is limited to the fees paid by you to Sylure in the twelve (12) months preceding the event giving rise to the claim.

Either party may terminate a Platform subscription by giving 30 days' written notice. We may suspend access immediately if we reasonably believe there has been a material breach of these terms, a security incident, or activity that threatens the integrity of the service.

On termination, your access to the Platform will cease. Customer data will be deleted in accordance with our retention policy, which includes a configurable grace period before permanent purge. Sections relating to intellectual property, limitation of liability and governing law survive termination.

These terms are governed by the laws of England and Wales and the courts of England and Wales will have exclusive jurisdiction, except where mandatory local law provides otherwise.

If you have questions about these terms, you can reach us at sylure@sylure.com or use the contact form on this Site.