Terms of Use

Definitions and interpretation

In this Agreement, the following terms have the meanings given below:

Platform / Fenchurch Compliance

The Fenchurch Compliance self-serve compliance platform operated by RegTechPRO Limited, including all boards, registers, People records, forms, policies, AI Compliance Reports and related services made available through our website and application.

Board

A Client’s isolated data workspace within the Platform. One firm is one board; higher subscription tiers include more than one board.

Client

The UK FCA-regulated firm, or the individual, subscribing to Fenchurch Compliance.

Authorised Users / Seats

The individuals, each occupying a seat (login), that the Client authorises to access and use the Platform under its subscription.

Agreement

These Terms of Use, as updated from time to time by RegTechPRO Limited.

Data Protection Laws

The UK GDPR, the Data Protection Act 2018, and any other applicable data privacy legislation.

Fees

The subscription charges payable by the Client for using the Platform, as set out on our pricing page.

Confidential Information

Proprietary, non-public or sensitive information shared between the parties under this Agreement.

Licence to access and use the platform

Grant of licence

Subject to compliance with this Agreement and the payment of Fees, RegTechPRO Limited grants the Client and its Authorised Users a non-exclusive, non-transferable, revocable licence to use the Platform for internal business purposes related to regulatory compliance.

Account creation and accuracy

To access the Platform, the Client must create an account. The information provided during registration must be accurate, and the Client is responsible for keeping this information up to date.

Login and account security

Access to the Platform is passwordless: an Authorised User signs in with a one-time code sent to their registered email address, which mints a time-limited session token. There are no passwords to store or share. The Client is responsible for keeping its registered email accounts secure and for controlling who is able to receive login codes and access the Platform. Login codes and session tokens must not be shared with anyone other than Authorised Users. In the event of a suspected compromise of an email account, session or account, the Client must notify us immediately at [email protected] so that active sessions can be revoked. Failure to do so may result in suspension or termination of access for the affected account.

Access monitoring and security

RegTechPRO Limited reserves the right to monitor use of the Platform to ensure compliance with this Agreement. If unauthorised access or usage is detected, we may suspend the Client’s access to the Platform and require corrective action before reinstating access.

Fees, payments and billing

Subscription model

Fenchurch Compliance is offered on a straightforward monthly subscription across three tiers — Starter (£95), Growth (£145) and Pro (£195) per month, each excluding VAT. Each tier includes a defined number of boards and seats, with higher tiers providing additional boards, seats and features. Current pricing for each tier is published at fenchurchcompliance.co.uk/pricing and forms part of this Agreement.

Annual billing is available where offered, with a discount equivalent to two months free. The Client may upgrade or downgrade its tier at any time; any increase in Fees takes effect from the start of the next billing cycle. Subscriptions with bespoke requirements or a service level agreement are available on request and priced separately by written agreement with the Client.

Payment method and billing cycle

Subscription payments are collected automatically through our payment processor, Stripe, from the payment method provided by the Client at registration. Monthly subscriptions are billed monthly; annual subscriptions are billed annually. Payments will continue until the subscription is cancelled in accordance with this Agreement. Card details are handled by Stripe and are not stored by us.

Failed payments

If a payment is declined or cannot be processed, we will notify the Client, who must provide an alternative payment method within seven days. Failure to provide a valid payment method may result in suspension of access to the Platform.

Late payment and suspension

If payment is not received within seven days of the due date, RegTechPRO Limited reserves the right to suspend access to the Platform until full payment is received. Any Fees that remain unpaid for more than 30 days may be referred for debt recovery, and the Client may incur additional charges.

Fee adjustments

RegTechPRO Limited may adjust subscription Fees with 30 days’ written notice to the Client. Any adjustment will take effect at the start of the next billing cycle. Continued use of the Platform after the fee adjustment date constitutes acceptance of the new Fees.

Cancellation

RegTechPRO Limited does not offer refunds for partial subscription periods. This three-month notice period applies to both monthly and annual subscriptions.

Use of the platform and Client obligations

Permitted use

The Client and its Authorised Users may use the Platform solely for internal compliance management and business processes. Use of the Platform for commercial resale is strictly prohibited.

Prohibited use

The Client agrees not to:

• Use the Platform to engage in any illegal or fraudulent activity;
• Attempt to reverse engineer, modify, or tamper with any part of the Platform;
• Access the Platform for competitive analysis, including creating or offering a competing service;
• Allow any unauthorised third parties to use the Platform or access its contents without our express consent;
• Upload or transmit any malicious code, viruses, or harmful content;
• Use automated systems, bots, or scrapers to access the Platform.

Responsibility for Authorised Users

The Client is solely responsible for ensuring that its Authorised Users comply with this Agreement. Any breach by an Authorised User will be treated as a breach by the Client. The Client must remove access, or notify us immediately, if an Authorised User leaves the organisation or should no longer have access.

Data backup

While we maintain robust data security measures — including append-only, dated record snapshots and point-in-time database recovery — the Client is responsible for regularly exporting any critical data stored on the Platform. RegTechPRO Limited shall not be liable for any data loss resulting from the Client’s failure to maintain adequate backups.

Compliance with applicable laws

The Client is responsible for ensuring that its use of the Platform complies with all applicable laws and regulations, including FCA rules, anti-money laundering (AML) requirements, and relevant Data Protection Laws. The Platform is designed to assist firms in fulfilling their compliance obligations; however, the Client remains solely responsible for ensuring compliance with all applicable legal and regulatory requirements.

Platform availability and support

Service availability

RegTechPRO Limited aims to provide uninterrupted access to the Platform 24 hours a day, 7 days a week, except for planned maintenance, system updates, or unforeseen technical issues. Where possible, we will notify Clients of planned maintenance at least 24 hours in advance.

Technical support

Support services are available during business hours (Monday to Friday, 9:00 a.m. to 5:00 p.m. UK time) via email at [email protected]. Technical issues will generally be addressed within two business days; however, we do not guarantee specific response times unless otherwise agreed in writing (such as under a subscription with a service level agreement).

Emergency support

RegTechPRO Limited may, at its discretion, offer emergency support outside of standard business hours in cases of critical security incidents or unexpected system failures.

Third-party providers

RegTechPRO Limited is not liable for service disruptions caused by third-party service providers, including network providers, our cloud hosting provider (Cloudflare), our payment processor (Stripe), or our email delivery provider (Postmark). If such disruptions occur, we will work with the relevant provider to resolve the issue as quickly as reasonably possible.

Data security and privacy

Data protection compliance

RegTechPRO Limited complies with all applicable Data Protection Laws, including the UK GDPR and the Data Protection Act 2018. The Platform uses industry-standard encryption to safeguard data in transit (TLS 1.2 or above) and at rest. Personal data is processed in accordance with data protection principles, including data minimisation, accuracy, and appropriate retention.

Client data ownership

The Client retains full ownership of all data uploaded to the Platform. RegTechPRO Limited will process Client data solely to provide the services outlined in this Agreement. We will not disclose Client data to third parties except as required by law or as necessary to provide the services through our sub-processors (published on our Sub-processors page).

Data security measures

RegTechPRO Limited implements appropriate technical and organisational measures to protect Client data, including:

• Encryption of data in transit (TLS 1.2 or above) and at rest;
• Tenant isolation — every record is scoped to the firm’s board, and the server enforces that a session can only read or write its own board’s data;
• Passwordless, one-time email code authentication, with only a hash of each session token stored server-side and rate-limiting on code requests and verification;
• Hosting on certified infrastructure, with data at rest held in Cloudflare’s Western Europe (WEUR) region on ISO 27001, SOC 2 and PCI DSS certified infrastructure;
• Append-only, dated record snapshots so that prior versions remain recoverable, together with point-in-time database recovery (approximately 30 days).

Data breaches

If a data breach affects the Client’s data, RegTechPRO Limited will notify the Client without undue delay and take appropriate measures to mitigate the impact. The Client is responsible for notifying affected individuals and regulatory authorities if required by law.

Data retention and deletion

Upon termination of this Agreement, the Client will have a 30-day grace period to download and export its data from the Platform. After this grace period, we will delete Client data from our systems within 30 days (60 days total from termination), except where retention is required by law or for the establishment, exercise or defence of legal claims. The Client is responsible for downloading all necessary data before the termination date.

Intellectual property rights

Ownership of the platform

All intellectual property rights related to the Platform, including but not limited to software, source code, designs, documentation, trade marks, and branding (including the Fenchurch Compliance name and marks), are the exclusive property of RegTechPRO Limited. The Client and its Authorised Users are granted no ownership rights in the Platform.

Prohibited acts

The Client agrees not to:

• Copy, modify, distribute, or create derivative works based on the Platform;
• Reverse engineer, decompile, disassemble, or attempt to extract the source code of the Platform;
• Remove or obscure any proprietary notices or labels on the Platform;
• Use the Fenchurch Compliance or RegTechPRO Limited trade marks or branding without prior written consent.

Feedback and improvements

We welcome feedback and suggestions for improving the Platform. By submitting feedback, the Client agrees that RegTechPRO Limited may use, modify, and incorporate such feedback without any obligation or compensation to the Client. We shall have the unrestricted right to use any ideas, concepts, know-how, or techniques contained in the feedback for the development of new features or services.

Limitation of liability

No warranty

The Platform is provided on an “as is” and “as available” basis. While RegTechPRO Limited strives to provide a reliable and high-quality service, we make no warranties, express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, or non-infringement. We do not guarantee that the Platform will be error-free or uninterrupted at all times.

Limitation of liability

To the maximum extent permitted by law, RegTechPRO Limited’s total aggregate liability for any claims arising out of or relating to this Agreement shall be limited to the total Fees paid by the Client in the 12 months preceding the claim. We will not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to lost profits, loss of data, business interruption, or damage to systems, regardless of the cause of action.

Exclusion of liability for third-party services

RegTechPRO Limited is not liable for any damages or issues arising from third-party services or integrations, including but not limited to payment processing (Stripe), cloud hosting (Cloudflare), email delivery (Postmark), AI processing (Anthropic), or other third-party applications. The Client is responsible for reviewing and agreeing to any applicable third-party service terms.

Client indemnification

The Client agrees to indemnify, defend, and hold harmless RegTechPRO Limited, its officers, directors, employees, and agents from and against all claims, losses, damages, liabilities, costs, and expenses (including reasonable legal fees) arising from the Client’s use of the Platform, violation of this Agreement, or infringement of any third-party rights.

Liability that cannot be excluded

Nothing in this Agreement shall limit or exclude liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by applicable law. Nothing in this Agreement affects any statutory rights that cannot be excluded, including, where the Client deals as a consumer, its rights under the Consumer Rights Act 2015.

Termination and suspension

Termination by the Client

To cancel your subscription, please email [email protected]. The Client is responsible for downloading all relevant information and data before the termination date, as access to the Platform will be disabled after termination.

Termination by RegTechPRO Limited

RegTechPRO Limited reserves the right to terminate this Agreement or suspend access to the Platform immediately if the Client:

• Breaches any material term of this Agreement and fails to remedy the breach within 14 days of receiving notice;
• Engages in fraudulent, illegal, or harmful activity;
• Fails to pay Fees due within 30 days of the payment due date;
• Becomes insolvent or enters into liquidation, administration, or bankruptcy proceedings.

If we terminate for cause, the Client remains responsible for any unpaid Fees up to the termination date.

Suspension of access

RegTechPRO Limited reserves the right to suspend access to the Platform without notice if it suspects any unauthorised access, misuse, or security threat, or if required to do so by law. We will notify the Client as soon as reasonably practicable in such circumstances, and access will be restored once the issue has been resolved.

Effect of termination

Upon termination of this Agreement:

• The Client’s rights to use the Platform will cease immediately;
• The Client will have 30 days to export its data from the Platform;
• RegTechPRO Limited will delete the Client’s data within 30 days after the grace period, except where retention is required by law;
• Any provisions that by their nature should survive termination will remain in effect, including confidentiality, intellectual property, and limitation of liability.

Amendments and modifications

Changes to the Agreement

RegTechPRO Limited reserves the right to amend these Terms of Use at any time. The Client will be notified of any significant changes via email or through the Platform. The updated Terms of Use will also be published on our website with the new effective date.

Notice of changes

Where possible, we will notify the Client of material changes to these terms at least 30 days before the effective date of the change. Continued use of the Platform after receiving notice of the amendments will constitute the Client’s acceptance of the revised terms.

Objection to changes

If the Client does not agree to the amended terms, it must notify us in writing and may terminate its subscription prior to the changes taking effect, in accordance with the termination provisions of this Agreement.

Confidentiality

Confidential Information

Both parties agree to maintain the confidentiality of all proprietary or sensitive information disclosed in connection with the Platform, including but not limited to business plans, financial information, technical data, customer information, and trade secrets (“Confidential Information”). Neither party will disclose Confidential Information to any third party without the prior written consent of the other party, except as required by law.

Use of Confidential Information

Confidential Information disclosed by either party may only be used to fulfil the obligations under this Agreement. Both parties agree to take reasonable precautions to protect the Confidential Information and prevent unauthorised use or disclosure.

Exceptions

Confidential Information does not include information that:

• Is or becomes publicly available through no fault of the receiving party;
• Was rightfully known to the receiving party prior to disclosure;
• Is independently developed by the receiving party without using the disclosing party’s Confidential Information;
• Is disclosed with the prior written consent of the disclosing party;
• Is disclosed pursuant to legal, regulatory, or judicial requirements, provided that the receiving party gives reasonable notice to the disclosing party before making such disclosure where legally permitted.

Governing law and disputes

Governing law

This Agreement shall be governed by and construed in accordance with the laws of England and Wales.

Jurisdiction

Any disputes arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of England and Wales.

Dispute resolution

In the event of a dispute arising between the parties, both parties agree to first attempt to resolve the matter through good-faith negotiations. If the dispute cannot be resolved through negotiations within 30 days, either party may initiate legal proceedings in accordance with the terms outlined above.

Miscellaneous

Entire agreement

This Agreement constitutes the entire agreement between the Client and RegTechPRO Limited concerning the use of the Platform. It supersedes all prior agreements, representations, and understandings, whether written or oral, relating to the Platform.

Severability

If any provision of this Agreement is found to be invalid or unenforceable by a court of competent jurisdiction, the remaining provisions shall remain in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the parties’ original intent.

Waiver

No waiver of any provision of this Agreement shall be effective unless in writing and signed by both parties. The failure of either party to enforce any provision of this Agreement shall not constitute a waiver of future enforcement of that provision or any other provision.

Assignment

The Client may not assign or transfer any of its rights or obligations under this Agreement without RegTechPRO Limited’s prior written consent. RegTechPRO Limited may assign this Agreement to any successor in interest, including in connection with a merger, acquisition, or sale of all or substantially all of its assets.

Force majeure

RegTechPRO Limited shall not be liable for any failure to perform its obligations under this Agreement due to circumstances beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, civil unrest, strikes or other labour disputes, government actions, pandemics, or interruptions in power, telecommunications, or internet services.

Notices

All notices under this Agreement shall be in writing and sent to the email addresses provided by the parties. Notices to RegTechPRO Limited should be sent to [email protected]. Notices to the Client will be sent to the email address associated with its account.

Third-party rights

A person who is not a party to this Agreement has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce any term of this Agreement.