IRIS Terms of ServiceEffective Date: May 2, 2026 | Last Updated: June 1, 2026

These Terms of Service ("Terms") are a binding agreement between SyloxIT Services Private Limited ("Sylox," "we," "us," or "our") — a company incorporated in India with its registered office at 6th Floor, Metropolis, Balewadi High Street, Balewadi, Pune - 411045, Maharashtra, India — and the person or entity accessing or using our website at www.syloxiris.com (the "Website") or our IRIS Data Security Posture Management platform (the "Service" or "IRIS").

Please read these Terms carefully. If you do not agree, do not use the Website or the Service.

1. Acceptance and Contract Formation
1.1 Acceptance

You accept these Terms by (a) accessing or using the Website, (b) clicking "I accept" or a similar button when creating an account, or (c) accessing or using the Service in any way. If you accept these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.

1.2 Order Forms

Paid access to the Service is provided pursuant to one or more written ordering documents that reference these Terms or a Master Services Agreement (each, an "Order Form"). An Order Form sets out the subscription, fees, term, and any product- or customer-specific terms.

1.3 Precedence

If you and Sylox have signed a separate Master Services Agreement ("MSA") covering the Service, the MSA governs your use of the Service and these Terms apply only to your use of the Website (and to any features or trials not covered by the MSA). In case of conflict, the order of precedence is: (1) the Order Form; (2) the MSA; (3) the Data Processing Agreement ("DPA"); and (4) these Terms. Absent an MSA, these Terms govern your use of both the Website and the Service.

1.4 Updates to these Terms

We may update these Terms from time to time. Material changes will be communicated through the Website or by email before they take effect. Continued use after the effective date of an update means you accept the updated Terms. If you do not accept an update, your sole remedy is to stop using the Website and Service and, where applicable, terminate your subscription as set out in Section 12.

2. Definitions

Capitalized terms used in these Terms have the meanings below. Terms not defined here have the meanings given in the Privacy Policy.

  • "Authorized User" means an individual who is authorized by you to access and use the Service under your account, such as your employee or contractor.
  • "Customer Data" means any data, content, or information that you or your Authorized Users submit to, upload to, or generate within the Service, including data ingested from your data sources and outputs such as scan results, classifications, and compliance reports.
  • "Documentation" means the user guides, technical documentation, and policies that Sylox makes generally available for the Service.
  • "Order Form" has the meaning given in Section 1.2.
  • "Personal Data" means any information relating to an identified or identifiable natural person, as defined under applicable data-protection law.
  • "Service" means the IRIS Data Security Posture Management platform and any related features, integrations, APIs, support, and Documentation made available by Sylox under an Order Form or via the Website.
  • "Subscription Term" means the period during which you are entitled to use the Service, as set out on the Order Form.
  • "Third-Party Integration" means any third-party product, service, data source, or system that you connect to or use with the Service.
  • "Website" means www.syloxiris.com and any sub-domains operated by Sylox.

The terms "Controller", "Processor", and "Sub-processor" have the meanings given under applicable data-protection law and are used consistently with our Privacy Policy and DPA.

3. Eligibility and Account Responsibilities
3.1 Eligibility

The Website and Service are intended for business use by adults aged 18 or older, acting on behalf of a legal entity. You may not use the Service if you are barred from doing so under applicable law, or if you are a competitor of Sylox accessing the Service for benchmarking, monitoring, or competitive-intelligence purposes (see Section 5).

3.2 Accounts

To access most features of the Service, you must register an account or be provisioned by your organization. You agree to:

  • provide accurate, current, and complete information at registration and keep it updated;
  • safeguard your credentials and not share them with anyone outside your organization;
  • enable multi-factor authentication where offered;
  • notify us promptly at security@syloxlabs.com of any suspected unauthorized access or security incident.

You are responsible for all activity under your account, including activity by your Authorized Users. Authorized Users must comply with these Terms, and you are responsible for their acts and omissions as if they were your own.

3.3 Provisioning of Authorized Users

You decide who is an Authorized User and what role they hold. You must promptly remove access for individuals who are no longer entitled to use the Service.

4. License and Right to Use the Service
4.1 Right to use

Subject to these Terms, the applicable Order Form, and timely payment of Fees, Sylox grants you a non-exclusive, non-transferable, non-sublicensable, worldwide right during the Subscription Term to access and use the Service for your internal business purposes, and for the Authorized User volume and product configuration set out on the Order Form.

4.2 Reservation of rights

The Service, the Documentation, the Website, and all related software, models, algorithms, designs, and content are owned by Sylox or its licensors and are licensed, not sold. We reserve all rights not expressly granted in these Terms.

4.3 No implied rights

No rights are granted to you by implication, estoppel, or otherwise in respect of any Sylox or third-party intellectual property.

5. Acceptable Use Restrictions

You agree that you will not, and will not permit any Authorized User or third party to:

  1. use the Service in violation of applicable law, regulation, or third-party rights;
  2. copy, modify, translate, adapt, or create derivative works of the Service or the Documentation, except as expressly permitted;
  3. reverse engineer, decompile, or disassemble the Service, or attempt to derive the source code, models, or underlying ideas, to the extent that this restriction is prohibited by applicable law;
  4. resell, sublicense, lease, time-share, or otherwise make the Service available to any third party other than Authorized Users;
  5. use the Service to build, train, or improve a competing product, or for competitive benchmarking, performance benchmarking, or security benchmarking, or to publish benchmarks of the Service without our prior written consent;
  6. probe, scan, or test the vulnerability of the Service, or breach or attempt to breach security or authentication measures, except under a written authorization from Sylox or under a Sylox-published responsible-disclosure or bug-bounty program;
  7. interfere with or disrupt the integrity or performance of the Service, including by sending viruses, denial-of-service traffic, or excessive automated requests;
  8. use the Service to transmit unlawful, infringing, defamatory, harassing, or harmful content;
  9. remove, obscure, or alter any proprietary notices on the Service or the Documentation;
  10. circumvent or disable any usage limits, license keys, or access controls;
  11. use the Service to process data of children under 13 (or the equivalent minimum age in your jurisdiction) where such use would require special protections you have not implemented;
  12. submit any data to the Service that you do not have a lawful basis to process under applicable data-protection law.

We may suspend or terminate access for violations of this Section as set out in Section 12.

6. Customer Content and Data
6.1 Ownership

As between you and Sylox, you own all Customer Data. We claim no ownership in Customer Data.

6.2 License to Sylox

You grant Sylox a worldwide, royalty-free, non-exclusive license to host, copy, transmit, process, display, and otherwise use Customer Data solely to provide and support the Service to you, to maintain and improve the security and performance of the Service, to prevent and address technical or security issues, and to comply with law. This license terminates on deletion of the Customer Data in accordance with Section 12.

6.3 Your responsibilities

You represent and warrant that:

  • you have all rights, consents, and lawful bases necessary to submit Customer Data to the Service and to authorize its processing as set out in these Terms and the DPA;
  • Customer Data does not violate any law or third-party right;
  • you will configure the Service appropriately for the sensitivity of the data you process (for example, role-based access controls, retention rules, and connector permissions).
6.4 Data-protection roles

For Personal Data within Customer Data, you are the Controller and Sylox is the Processor, processing Personal Data only on your documented instructions. The DPA governs that processing and is incorporated by reference into these Terms when you submit Personal Data to the Service.

6.5 Aggregated and de-identified data

Sylox may generate aggregated, de-identified, or anonymized data from use of the Service that does not identify you, your Authorized Users, or any individual ("Aggregated Data"). We may use Aggregated Data for any lawful purpose, including improving the Service. We will not re-identify Aggregated Data or share it in a manner that identifies you.

6.6 Backups

We perform routine backups for operational continuity, but you are responsible for maintaining your own backups of Customer Data outside the Service where required by your policies or applicable law.

7. Trials and Beta Features
7.1 Trials

We may offer free trials, proofs of concept, or evaluation access to the Service ("Trials"). Trials are provided "as is" and "as available", without any warranties, indemnities, or service-level commitments, and may be modified, suspended, or terminated by us at any time. At the end of a Trial, the Service will revert to a no-access state unless you have entered into a paid Order Form. Customer Data submitted during a Trial may be deleted after the Trial ends; export your data before then if you need it.

7.2 Beta features

We may make pre-release, alpha, beta, preview, "early access", or experimental features available ("Beta Features"). Beta Features are optional, are provided "as is", may be incomplete, may change or be discontinued, and are excluded from any service-level agreement, support commitment, indemnity, or warranty. Your use of Beta Features is at your own risk.

8. Fees, Payment, Taxes, and Renewals
8.1 Fees

You agree to pay the fees set out on the applicable Order Form ("Fees"). Unless the Order Form says otherwise, Fees are stated in the currency on the Order Form, are based on the subscription tier and Authorized User volume you select, and are non-cancellable and non-refundable except as expressly stated in these Terms or required by applicable law.

8.2 Billing frequency

Subscriptions may be billed monthly or annually in advance, as set out on the Order Form. Annual subscriptions are typically invoiced for the full Subscription Term in advance.

8.3 Payment terms

Unless the Order Form states otherwise, invoices are due 30 days from invoice date. Overdue amounts may bear interest at the lower of 1.5% per month or the maximum rate permitted by law, calculated from the due date until paid.

8.4 Taxes

Fees are exclusive of all taxes, levies, duties, and similar governmental assessments, including GST, VAT, sales tax, withholding tax, and equivalents (collectively, "Taxes"). You are responsible for all Taxes associated with your purchase, except for taxes based on Sylox's net income. If you are required by law to withhold tax on a payment, you will gross up the payment so that Sylox receives the amount it would have received absent the withholding.

8.5 Renewals

Unless the Order Form states otherwise, subscriptions automatically renew for successive periods equal to the original Subscription Term at the then-current list price. Either party may prevent auto-renewal by giving written notice at least 30 days before the end of the current Subscription Term.

8.6 Price changes

We may change Fees at the start of a renewal term on at least 60 days' prior notice. Existing fixed-term commitments are not affected mid-term.

8.7 No refunds

Except as expressly stated in these Terms or required by mandatory applicable law, all Fees are non-refundable, including for unused portions of a Subscription Term, downgrades, or termination by you for convenience.

8.8 Payment method

We may invoice by purchase order, bank transfer, or other method set out on the Order Form. Self-serve subscriptions, where offered, may require a valid payment card on file, and you authorize Sylox or its payment processor to charge the card for amounts due.

9. Third-Party Integrations

The Service may interoperate with Third-Party Integrations such as Snowflake, BigQuery, AWS, SAP HANA, HR systems, identity providers, and others. Third-Party Integrations are operated by their respective providers and are governed by separate terms between you and that provider. Sylox does not control Third-Party Integrations and is not responsible for their availability, accuracy, security, or compliance. You are responsible for:

  • obtaining and maintaining the rights, credentials, and permissions to connect Third-Party Integrations to the Service;
  • complying with the third party's terms; and
  • the data you cause to be transmitted between the Service and the Third-Party Integration.

If a Third-Party Integration becomes unavailable, modifies its API, or imposes restrictions, Sylox may suspend or modify the corresponding Service feature without liability.

10. Intellectual Property and Feedback License
10.1 Sylox IP

The Service, the Website, the Documentation, and all related software, models, algorithms, designs, branding, and content, and all intellectual-property rights in them, are and remain the exclusive property of Sylox and its licensors.

10.2 Customer IP

Customer Data and your pre-existing intellectual property remain your property. Section 6.2 sets out the limited license you grant to Sylox.

10.3 Feedback

If you provide suggestions, ideas, enhancement requests, recommendations, or other feedback regarding the Service ("Feedback"), you grant Sylox a perpetual, irrevocable, worldwide, royalty-free, sublicensable license to use, reproduce, modify, and incorporate the Feedback for any purpose, including improvement of the Service, without obligation or attribution to you. You will not provide Feedback that is subject to a third-party license that restricts our use.

10.4 Trademarks

"Sylox", "Sylox Labs", "IRIS", and related logos are trademarks of Sylox. You may not use them without our prior written consent except to factually describe that you are a customer of the Service.

11. Privacy

Our handling of Personal Data is described in our Privacy Policy, which is incorporated by reference into these Terms. For Personal Data within Customer Data, the DPA governs Sylox's processing as a Processor on your behalf. By using the Service, you acknowledge the Privacy Policy and, where applicable, agree to the DPA.

12. Suspension and Termination
12.1 Term

These Terms apply from your first use of the Website or the Service and continue until terminated as set out below. If you have a paid subscription, the Subscription Term and renewal terms are as set out on the Order Form.

12.2 Termination for cause

Either party may terminate these Terms (and any Order Form) for cause if the other party materially breaches these Terms and fails to cure the breach within 30 days of written notice describing the breach in reasonable detail. Material breach includes, without limitation, non-payment of undisputed Fees and breach of Section 5 (Acceptable Use).

12.3 Termination for insolvency

Either party may terminate immediately on written notice if the other party becomes insolvent, files for bankruptcy, makes an assignment for the benefit of creditors, or has a receiver appointed.

12.4 Suspension

We may suspend your access to the Website or the Service immediately, with notice where reasonably practicable, if (a) we reasonably believe your use poses a security risk to the Service or another customer; (b) you are in material breach of Section 5; (c) you have failed to pay undisputed Fees that are 30 or more days overdue; or (d) suspension is required to comply with law or a governmental order. We will restore access promptly once the cause is resolved.

12.5 Effect of termination

On termination or expiry:

  • your right to access and use the Service and the Website ends immediately;
  • you will pay all Fees accrued through the effective date of termination;
  • each party will return or destroy the other's confidential information, except to the extent retention is required by law or for routine archival;
  • you will have a 30-day export window after termination to retrieve Customer Data through the Service's export tools, after which Sylox will delete or return Customer Data within a further 30 days (i.e., within 60 days of termination in total) in accordance with the DPA, unless retention is required by law. Backup copies are removed in the ordinary course of Sylox's backup-rotation schedule.
12.6 Survival

Sections that by their nature should survive termination — including Sections 2 (Definitions), 6.1, 6.2 (last sentence), 6.5, 8 (for amounts accrued), 10, 11, 12.5-12.6, 13, 14, 15, and 16 — survive termination of these Terms.

13. Disclaimers

To the maximum extent permitted by law, the Website, the Service, the Documentation, Trials, and Beta Features are provided "AS IS" and "AS AVAILABLE". Except as expressly set out in an MSA or Order Form, Sylox disclaims all warranties, express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, and any warranties arising from course of dealing, performance, or usage of trade.

Without limiting the foregoing, Sylox does not warrant that:

  • the Service will be uninterrupted, error-free, or completely secure;
  • the Service will detect every instance of personal data, sensitive data, or compliance risk in your environment;
  • AI- or machine-learning-derived outputs (such as classifications, risk scores, or recommendations) will be accurate, complete, or appropriate for any specific purpose; or
  • the Service will meet any specific compliance, regulatory, or audit requirement on its own.

The Service is a tool that supports your data-protection and compliance program; it is not a substitute for legal advice or independent compliance assessment. You remain responsible for your data-handling decisions, your compliance posture, and the actions you take on the basis of Service outputs.

Some jurisdictions do not allow the exclusion of certain warranties; in those jurisdictions, this disclaimer applies to the maximum extent permitted by law.

14. Limitation of Liability
14.1 Exclusion of indirect damages

To the maximum extent permitted by law, neither party will be liable to the other for any indirect, incidental, consequential, special, exemplary, or punitive damages, or for loss of profits, revenue, business, goodwill, anticipated savings, or data, even if advised of the possibility of such damages and even if a remedy fails of its essential purpose.

14.2 Aggregate cap

To the maximum extent permitted by law, each party's aggregate liability arising out of or relating to these Terms, the Website, the Service, or any related Order Form, regardless of the form of action, will not exceed the total Fees paid or payable by you to Sylox under the applicable Order Form in the twelve (12) months immediately preceding the event giving rise to the claim (or, where no Fees have been paid, INR 10,000 or its equivalent).

14.3 Carve-outs

The exclusions and limitations in Sections 14.1 and 14.2 do not apply to:

  • a party's indemnification obligations under Section 15;
  • your obligation to pay Fees due;
  • breaches of Section 5 (Acceptable Use), Section 10 (Intellectual Property), or confidentiality obligations;
  • a party's gross negligence, wilful misconduct, or fraud; or
  • liability that cannot be excluded or limited under applicable law.
14.4 Allocation

The parties agree that the limitations in this Section reflect a reasonable allocation of risk and form an essential basis of the bargain between them, and would not be entered into without these limitations.

15. Indemnification
15.1 By Sylox (IP)

Sylox will defend you against any third-party claim that your authorized use of the Service, as provided by Sylox and used in accordance with these Terms and the Documentation, infringes that third party's intellectual-property rights, and will pay damages and costs finally awarded against you by a court of competent jurisdiction or agreed in a settlement approved by Sylox in writing.

If the Service is, or in Sylox's opinion is likely to become, the subject of an infringement claim, Sylox may at its option and expense: (a) procure for you the right to continue using the Service; (b) modify or replace the Service so that it is non-infringing while remaining substantially equivalent in functionality; or (c) terminate the affected portion of the Service and refund any pre-paid, unused Fees for that portion.

Sylox has no obligation under this Section 15.1 to the extent a claim arises from: (i) Customer Data; (ii) modification of the Service by anyone other than Sylox; (iii) combination of the Service with software, data, or systems not provided by Sylox; (iv) use of the Service after Sylox has notified you to discontinue such use; or (v) Trials, Beta Features, or no-charge use.

15.2 By Customer (IP and data)

You will defend Sylox against any third-party claim arising from or relating to: (a) Customer Data, including any claim that Customer Data infringes a third-party right or violates law; (b) your or your Authorized Users' use of the Service in breach of Section 5; or (c) Third-Party Integrations you choose to use, and will pay damages and costs finally awarded or agreed in settlement.

15.3 Procedure

The indemnified party will (a) promptly notify the indemnifying party of the claim, (b) give the indemnifying party sole control of defense and settlement (provided that no settlement requiring an admission of liability or payment by the indemnified party may be made without the indemnified party's consent, not unreasonably withheld), and (c) provide reasonable cooperation at the indemnifying party's expense. Failure to give prompt notice excuses indemnification only to the extent the indemnifying party is materially prejudiced.

This Section 15 states each party's sole and exclusive remedy for third-party intellectual-property claims.

16. Governing Law, Disputes, and General Provisions
16.1 Governing law

These Terms are governed by the laws of India, without regard to its conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

16.2 Jurisdiction

Subject to Section 16.3, the courts at Pune, Maharashtra, India have exclusive jurisdiction over any dispute arising out of or relating to these Terms, the Website, or the Service, and each party submits to that jurisdiction.

16.3 Arbitration (enterprise customers)

For Order Forms with a total annual contract value above the threshold set out in the applicable MSA (or, where no MSA exists, where the parties so agree in writing), any dispute that is not resolved through good-faith negotiation within 30 days will be finally settled by arbitration under the Arbitration and Conciliation Act, 1996, before a sole arbitrator, seated in Pune, conducted in English. The award will be final and binding. Either party may seek interim or injunctive relief from a court of competent jurisdiction.

16.4 Notices

Notices to Sylox must be sent to legal@syloxlabs.com with a copy to our registered office. Notices to you may be sent to the email address on your account. Notices are effective on receipt (email) or three business days after dispatch (post).

16.5 Assignment

You may not assign these Terms without our prior written consent. Sylox may assign these Terms in connection with a merger, acquisition, financing, or sale of all or substantially all of its assets. Any non-permitted assignment is void.

16.6 Force majeure

Neither party is liable for any failure or delay in performance (other than payment obligations) caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, government action, internet or telecommunications failure, pandemic, or labour disturbance.

16.7 Independent contractors

The parties are independent contractors. Nothing in these Terms creates a partnership, joint venture, agency, or employment relationship.

16.8 No third-party beneficiaries

These Terms do not confer any rights on any third party.

16.9 Severability

If any provision of these Terms is held unenforceable, the remaining provisions remain in effect, and the unenforceable provision will be modified to the minimum extent necessary to make it enforceable.

16.10 Waiver

Failure to enforce a provision is not a waiver of the right to enforce it later. Waivers must be in writing and signed by the waiving party.

16.11 Entire agreement

These Terms, together with the Privacy Policy, the DPA (where applicable), and any Order Form or MSA, constitute the entire agreement between you and Sylox with respect to the Website and the Service, and supersede all prior or contemporaneous understandings on that subject. Pre-printed terms on a purchase order or other ordering document issued by you have no effect and are expressly rejected.

16.12 Contact

SyloxIT Services Private Limited 6th Floor, Metropolis, Balewadi High Street, Balewadi, Pune - 411045, Maharashtra, India

General legal: legal@syloxlabs.com Privacy: privacy@syloxlabs.com Security: security@syloxlabs.com

AI-native data security for the DPDP era. Enterprise-grade protection with intelligent classification.
Resources
Resource HubBlogSupport
Solutions
DPDP ComplianceData VisibilityRisk AssessmentFinancial ServicesHealthcareTechnologyE-commerce
Platform
OverviewSnowflake Data CloudDatabricks Data Intelligence PlatformAWSGoogle Cloud PlatformMicrosoft AzureMongoDB Atlas
© 2025 Sylox Technologies. All rights reserved.