Terms of Service

1. The agreement

These terms form a binding agreement between NIS2Fill ("we", "us") and the organisation whose administrator created your account ("you"). By using the service you accept them. If you are using it on behalf of a company, you confirm you are authorised to accept these terms for that company.

2. What the service does

The service matches incoming security-questionnaire questions against answers your organisation has previously stored, uses an AI language model to draft responses grounded in those stored answers, and asks you to fill in whatever it cannot answer. It can also fill Excel and Word questionnaires in place and export PDF reports.

3. Accounts and access

• There are two ways to get an account: you sign up yourself (for example with Google or Microsoft), which creates a new free workspace for you, or an administrator of an existing organisation creates an account for you inside theirs.
• If you sign up yourself, you become the administrator of a new organisation and are treated as authorised to accept these terms for it. If that is not the case, do not sign up - ask your organisation's administrator to invite you instead, so your work lands in the right workspace.
• You can also try the service WITHOUT an account, using the coverage preview on our website. What happens to what you upload there is described in section 3a and in our Privacy Policy.
• You are responsible for keeping your login credentials confidential and for everything done under your account.
• Your administrator controls who in your organisation has access, and can remove access at any time.
• Tell us promptly at support@nis2fill.nl if you believe an account has been compromised.

3a. Trying the service without an account

The coverage preview on our website lets you upload a document and see how much of a questionnaire we could answer, before you create anything. Because that has to actually run the product on your file, you should know exactly what it does:

• What you upload is sent to our servers, processed the same way as any other document (including being sent to our AI sub-processor - see the Privacy Policy), and the result is stored temporarily so we can show it to you.
• The preview shows you WHICH questions we could answer, not the answers themselves. The drafted text is only released to you once you have an account to put it in.
• A temporary session identifier is stored in a cookie in your browser so we can connect your upload to your screen. It is not used to track you.
• If you sign in within 24 hours, that content is moved into your new workspace and becomes yours. If you do not, it expires and is deleted automatically.
• Do not use the preview to upload anything confidential that you are not willing to have processed under these terms and our Privacy Policy. If in doubt, create an account first.

5. Your content and your responsibilities

• You keep all ownership of the content you upload and the answers you write. We claim no ownership of it.
• You grant us only the limited licence needed to host, process and display that content in order to provide the service to you.
• You confirm you have the right to upload what you upload, including any third-party documents.
• You agree not to upload special categories of personal data (see our Privacy Policy), unlawful content, or malware.
• You agree not to attempt to break, overload, reverse-engineer or gain unauthorised access to the service or to other customers' data.
• You agree not to resell or provide the service to third parties without our written agreement.

6. Plans and usage limits

The service runs on paid AI infrastructure, so every plan has a limit on how many questionnaires it covers. If you reach a limit we tell you in the interface rather than failing silently, and your data always stays accessible.

A questionnaire means one uploaded document of up to 100 questions. A longer document counts as one questionnaire for every 100 questions or part thereof, so a document of 201 to 300 questions counts as three. We show you the exact number before any answers are drafted, and no allowance is used until you start.

The largest single document we process is 1000 questions. Above that we ask you to split the file, and we tell you rather than processing part of it silently.

Prices are stated excluding VAT (BTW). For customers in the Netherlands, 21% BTW is added. For businesses elsewhere in the EU with a valid VAT number, the reverse charge applies.

Payment is taken by card at the moment of purchase, through our payment provider Stripe. We do not invoice in arrears and there is no payment period: access begins when the payment completes. A VAT invoice showing our KVK and BTW numbers is issued automatically for every payment and is available from your billing portal. If you need to be invoiced on account instead, contact us before purchasing.

• Your answer library, your drafts and your data stay yours and remain accessible when an allowance runs out. You simply cannot start a new questionnaire until the allowance renews or you move to a larger plan.
• Accounts created for pilot partners by agreement are not subject to a questionnaire limit.
• All accounts are subject to rate limits per period and to a file-size limit on uploads.

6a. What "unlimited" means on the Team plan

The Team plan is unlimited in the ordinary sense: use it for as many questionnaires as your business genuinely receives, and we will not meter you. We do not publish a hidden number, and we will not switch off your account for being busy.

What we ask in return is that the usage is your own. Automated or scripted bulk submission, reselling access, sharing one account across separate organisations, or usage so far above comparable customers that it is clearly not a single business answering its own questionnaires, is not covered.

If your usage ever looks like that, we will contact you first and talk about it. We will not suspend the service or change your price without at least 30 days' written notice and a chance to bring usage back in line or move to a plan that fits. Nothing here allows us to bill you for past usage retroactively.

6b. Refunds

All purchases are final and non-refundable. This applies to the one-off purchase and to both annual subscriptions.

NIS2Fill is business-to-business software sold to organisations, not to consumers. The statutory 14-day right of withdrawal for distance selling applies to consumers, and does not apply here. If you are buying as a consumer rather than on behalf of a business, do not purchase - contact us instead.

The reason the sale is final is delivery: this is digital software delivered immediately. The moment your payment completes, your plan is applied, your allowance is available and your answer library is unlocked for use. There is no shipping period and nothing to return, so the sale completes at that moment. You confirm you understand this by ticking the acknowledgement at checkout, which we record with the payment.

Cancelling a subscription is always available and takes effect at the end of the period you have already paid for. Cancelling stops the next renewal; it does not refund the current invoice or any part of it, and it does not end your access early - you keep the plan you paid for until that period ends.

None of this limits your rights where the service itself is at fault. If we bill you in error, charge you twice, or take payment for a plan we do not provide, we will put it right. This clause is about changing your mind, not about us failing to deliver.

7. Early stage, availability and changes

The plans and prices in section 6 are our published price list. We are an early-stage product and you should understand what that means:

• The service is provided as-is, with no uptime guarantee, no service-level agreement and no promise of support response times. This will change as we mature, and we will say so in these terms when it does.
• Features may change, be added or be removed while we develop the product.
• We may suspend or discontinue the free tier or a pilot. If we do, we will give you reasonable notice and a chance to export your data.
• WE WILL NEVER CONVERT A FREE OR PILOT ACCOUNT INTO A CHARGED ONE AUTOMATICALLY. When we switch payment on, an existing account keeps working as it is until you explicitly choose a paid plan yourself.
• Prices may change for future purchases, but never for a period you have already paid for. If we change a price we will publish it here before it applies.

8. Data protection

How we handle personal data is described in our Privacy Policy. Where we process personal data on your behalf, our Data Processing Agreement applies and forms part of these terms.

9. Disclaimer of warranties

To the fullest extent permitted by law, the service is provided "as is" and "as available", without warranties of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, or non-infringement.

We do not warrant that the service will be uninterrupted or error-free, that drafts will be accurate or complete, or that the service will meet any particular regulatory requirement.

10. Limitation of liability

To the fullest extent permitted by law, we are not liable for indirect, incidental, special or consequential loss, nor for loss of profit, revenue, goodwill, contracts, data, or for any loss arising from a decision you took on the basis of a draft the service produced.

Our total aggregate liability to you for all claims is limited to €500, or the amount you have actually paid us in the 12 months before the claim, whichever is higher.

Nothing in these terms excludes or limits liability that cannot lawfully be excluded - including liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for intent or wilful recklessness.

11. Indemnity

You agree to hold us harmless against third-party claims arising from content you uploaded, from statements you submitted to your customers, or from your breach of these terms - except to the extent the claim results from our own breach or negligence.

12. Suspension and termination

• You may stop using the service and delete your data at any time.
• We may suspend or terminate access if you materially breach these terms, if your use threatens the security or availability of the service, or if we are legally required to.
• Where circumstances reasonably allow, we will warn you first and give you an opportunity to fix the problem.
• On termination you may export your data. After 30 days we delete it, subject to the retention periods in the Privacy Policy.

13. Changes to these terms

We may update these terms. For material changes we will notify account administrators by email at least 14 days before they take effect. If you do not accept a change, you may terminate and export your data before it takes effect.

14. Governing law

These terms are governed by the law of The Netherlands. Disputes will be brought before the competent Dutch courts. If you are a consumer, this does not affect the mandatory protections of your local law.

Questions about these terms: support@nis2fill.nl.