Terms of Usefor Norvex Assurance

These Terms of Use ("Terms") govern access to and use of the website located at norvexassurance.com (the "Site") and any related content, tools, and inquiry or contact forms made available on the Site (together, the "Site Services"), provided by Norvex Assurance ("Norvex Assurance," "we," "us," or "our").

By accessing or using the Site, submitting an inquiry through the Site, or otherwise indicating your acceptance, you ("you," "User," or "Client") agree to be bound by these Terms. If you are accessing the Site on behalf of a company or other legal entity, you represent that you have the authority to bind that entity, in which case "you" refers to that entity. If you do not agree to these Terms, you must not access or use the Site.

These Terms govern use of the Site only. They do not, by themselves, constitute an engagement for professional services. Where Norvex Assurance provides compliance, audit, advisory, or tax services to a Client ("Services"), those Services are governed by a separate signed engagement letter, statement of work, master services agreement, or equivalent order document ("Engagement Agreement") entered into between Norvex Assurance and the Client. See Section 6 below.

Norvex Assurance is a compliance and audit advisory firm that helps organisations achieve and maintain certifications and compliance postures including, without limitation, SOC 2, ISO 27001, HIPAA, GDPR, PCI DSS, ISO 42001, HITRUST, and US tax compliance support (collectively, the "Compliance Services"). The Site is provided to give prospective and existing clients information about the Compliance Services, industries served, and a means of contacting us to discuss an engagement.

Norvex Assurance is an advisory and audit-preparation firm. Certain certifications referenced on the Site (such as SOC 2 examinations) are ultimately issued or attested to by independent, appropriately licensed or accredited third-party bodies (e.g., licensed CPA firms for SOC 2 attestation, accredited certification bodies for ISO standards). Nothing on the Site or in these Terms should be read as Norvex Assurance itself being the certifying or accrediting authority unless expressly stated in your Engagement Agreement.

The Site does not require you to create a login account to browse its content. Certain features, such as the contact and inquiry form, request that you submit accurate identifying and business information. You must be at least 18 years old, or the age of legal majority in your jurisdiction, and have the authority to act on behalf of any organisation you represent, to use the Site or submit an inquiry.

• Use the Site in any way that violates applicable local, state, national, or international law or regulation;
• Reproduce, duplicate, copy, sell, resell, scrape, or exploit any portion of the Site, its content, or access to the Site without our prior written consent;
• Use any automated system, bot, spider, or scraper to access the Site for any purpose without our express written permission;
• Interfere with, disrupt, or attempt to gain unauthorised access to the Site, its servers, or any connected network or system, or attempt to probe, scan, or test the vulnerability of the Site;
• Upload, transmit, or submit through the Site any material that is unlawful, defamatory, infringing, fraudulent, or that contains viruses, malware, or other harmful code;
• Impersonate any person or entity, or misrepresent your affiliation with any person or entity, when submitting an inquiry;
• Submit through the contact or inquiry form any regulated, sensitive, or confidential data (including protected health information, payment card data, government identification numbers, or similar categories) prior to and outside the scope of a signed Engagement Agreement with appropriate safeguards in place; or
• Use the Site to build a competing product or service, or to conduct competitive analysis or benchmarking of Norvex Assurance's offerings.

When you submit information through the Site's inquiry or contact form, you represent that the information you provide is accurate and that you are authorised to submit it on behalf of yourself or the organisation you represent. Submitting an inquiry does not, by itself, create an engagement, client relationship, or obligation for Norvex Assurance to provide Services; an engagement is formed only upon execution of an Engagement Agreement. By submitting the form, you consent to Norvex Assurance contacting you at the details provided regarding your inquiry and related Compliance Services, consistent with our Privacy Policy.

Any Compliance Services provided by Norvex Assurance — including SOC 2 readiness and examination support, ISO 27001 implementation, HIPAA readiness reviews, GDPR framework development, PCI DSS assessments, ISO 42001 AI governance support, HITRUST support, and US tax compliance support — are governed exclusively by the Engagement Agreement executed between Norvex Assurance and the Client. Where any conflict exists between these Terms and an Engagement Agreement with respect to the Services described in that agreement, the Engagement Agreement will control. These Terms continue to govern use of the Site itself.

Engagement-specific matters — including scope of work, deliverables, timelines, fees and payment terms, confidentiality obligations specific to an engagement, and termination of an engagement — will be set out in the applicable Engagement Agreement and are not established by these Terms.

Compliance and certification outcomes depend on many factors outside Norvex Assurance's control, including the Client's own systems, personnel, evidence, cooperation, and the independent judgment of third-party auditors, examiners, or certification/accreditation bodies. Accordingly, use of the Site, submission of an inquiry, or engagement of our Compliance Services does not guarantee that any particular certification, attestation, or compliance outcome will be achieved, or achieved within any particular timeframe. Statistics referenced on the Site (such as pass rates or number of certifications delivered) reflect historical results and are not a guarantee of future performance for any individual engagement.

The Site may reference or link to third-party platforms, tools, or websites (for example, cloud, security, or compliance tooling providers) for informational purposes. We do not control, endorse, or assume responsibility for the content, privacy practices, or terms of any third-party site or service. Your use of any third-party site or service is at your own risk and subject to that third party's own terms and policies.

Norvex Assurance treats information submitted through the Site, and information shared in the course of a Client engagement, as confidential in accordance with our Privacy Policy and, where applicable, the confidentiality provisions of the relevant Engagement Agreement. Please refer to our Privacy Policy for details on how we collect, use, and protect personal information.

Norvex Assurance does not warrant that the Site will be uninterrupted, secure, timely, or error-free, or that any defects will be corrected. Any general compliance, regulatory, or tax information presented on the Site is provided for general informational purposes only, does not constitute legal, financial, tax, or professional advice, and should not be relied upon as such. You should seek independent professional advice, or engage Norvex Assurance under a formal Engagement Agreement, before making decisions based on information found on the Site.

Some jurisdictions do not allow the exclusion or limitation of certain damages or warranties. In such jurisdictions, our liability will be limited to the fullest extent permitted by applicable law.

You agree to indemnify, defend, and hold harmless Norvex Assurance and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses, including reasonable legal fees, arising out of or in any way connected with: (a) your access to or use of the Site; (b) your violation of these Terms; (c) your violation of any applicable law or the rights of any third party; or (d) any information or content you submit through the Site.

We may suspend or terminate your access to the Site, in whole or in part, at any time and without notice, if we reasonably believe you have violated these Terms, engaged in unlawful or harmful conduct, or for any other reason at our discretion, including to protect the security or integrity of the Site. Sections of these Terms that by their nature should survive termination (including Sections 4, 7, 9–12, and 15–18) will survive.

You represent that you are not located in, and will not access or use the Site from, any country or region subject to comprehensive U.S. or other applicable trade sanctions or embargoes, and that you are not identified on any restricted party, denied party, or sanctions list maintained by a governmental authority with jurisdiction over Norvex Assurance's operations. Norvex Assurance reserves the right to refuse or discontinue access to the Site where required to comply with applicable export control or sanctions laws.

We may update these Terms from time to time to reflect changes in our Site, Compliance Services, or legal and regulatory requirements. When we do, we will revise the "Effective Date" at the top of this page. Material changes will, where appropriate, be highlighted on the Site. Your continued use of the Site after any changes take effect constitutes your acceptance of the revised Terms. If you do not agree to the revised Terms, you must stop using the Site.

These Terms, and any dispute arising out of or relating to the Site or these Terms, will be governed by and construed in accordance with the laws of India, without regard to its conflict of laws principles, except where mandatory local consumer-protection or data-protection laws of your country of residence apply and cannot be excluded by agreement.

Any dispute that cannot be resolved informally will be subject to the exclusive jurisdiction of the competent courts located in India, except that Norvex Assurance may seek injunctive or equitable relief in any court of competent jurisdiction to protect its intellectual property or confidential information. Because Norvex Assurance serves clients globally, engagement-specific governing law and dispute-resolution terms (which may differ by client jurisdiction) will be set out in the applicable Engagement Agreement.

If you have questions about these Terms, please contact us at: