ROVERA TERMS OF SERVICE

1. SERVICES DESCRIPTION

Rovera provides automated compliance management solutions specifically designed for organizations in the Kingdom of Saudi Arabia and the Gulf Cooperation Council (GCC) region. Our Services include:

• Automated compliance monitoring for SAMA, CITC, NCA, PCI-DSS, ISO 27001, and PDPL frameworks
• Evidence collection and documentation management
• Compliance gap analysis and remediation tracking
• Integration with third-party cloud and identity providers
• Real-time compliance dashboards and reporting

2. ELIGIBILITY AND ACCOUNT REGISTRATION

2.1 Eligibility

You must be at least 18 years old and have the legal authority to enter into this agreement on behalf of your organization.

2.2 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You must immediately notify us of any unauthorized use of your account.

2.3 Accurate Information

You agree to provide accurate, current, and complete information during registration and to update such information to maintain its accuracy.

3. DATA PROTECTION AND PRIVACY

3.1 Data Residency

All Customer Data processed through our Services is stored and processed within the Kingdom of Saudi Arabia and/or the GCC region to ensure compliance with local data residency requirements.

3.2 PDPL Compliance

We are committed to compliance with the Saudi Personal Data Protection Law (PDPL) and will process any personal data in accordance with applicable data protection laws.

3.3 Data Ownership

You retain all rights, title, and interest in your data uploaded to or generated through our Services ("Customer Data"). We do not claim ownership of Customer Data.

3.4 Data Use License

You grant us a limited license to use Customer Data solely to provide the Services, including automated analysis, compliance scoring, and generating reports for your use.

4. ACCEPTABLE USE

4.1 Permitted Use

You may use our Services solely for your internal business compliance purposes and in accordance with applicable laws and regulations.

4.2 Prohibited Uses

You agree not to:

• Use the Services for any unlawful purpose or in violation of any applicable laws
• Attempt to reverse engineer, decompile, or disassemble any portion of the Services
• Use automated means to access the Services except through our provided APIs
• Share your account access with unauthorized third parties
• Upload malicious code, viruses, or other harmful content
• Use the Services to compete with Rovera or develop competing products

4.3 Competitor Restrictions

Access to our Services is strictly prohibited for any entity that provides similar compliance automation services or regulatory technology solutions ("Competitors"). If you are found to be a Competitor using our Services, we may immediately terminate your access and pursue all available legal remedies.

5. THIRD-PARTY INTEGRATIONS

5.1 Integration Services

Our Services may integrate with third-party platforms including but not limited to AWS, Google Workspace, Microsoft Azure, and other cloud providers ("Third-Party Services").

5.2 Third-Party Terms

Your use of Third-Party Services through our platform remains subject to the respective third party's terms of service and privacy policies.

5.3 Integration Disclaimer

We are not responsible for the availability, functionality, or security of Third-Party Services. Any issues with third-party integrations should be directed to the respective service provider.

6. COMPLIANCE DISCLAIMERS AND LIMITATIONS

6.1 Compliance Advisory Only

The Services provide compliance measurement, monitoring, and advisory capabilities only. Rovera does not guarantee compliance with any regulatory framework or standard.

6.2 Customer Responsibility

You are solely responsible for:

• Ensuring actual compliance with applicable laws and regulations
• Taking appropriate actions based on compliance reports and recommendations
• Implementing necessary security controls and policies
• Maintaining accurate and up-to-date compliance documentation

6.3 No Legal or Audit Advice

Our Services do not constitute legal advice, audit services, or professional consulting. You should consult with qualified legal and compliance professionals for guidance on regulatory requirements.

7. LIMITATION OF LIABILITY

7.1 Disclaimer of Warranties

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT ANY WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

7.2 Limitation of Damages

TO THE MAXIMUM EXTENT PERMITTED BY SAUDI ARABIAN LAW, ROVERA SHALL NOT BE LIABLE FOR:

• Any regulatory fines, penalties, or sanctions
• Any compliance failures or audit deficiencies
• Any indirect, incidental, special, consequential, or punitive damages
• Any loss of profits, revenue, data, or business opportunities
• Any damages exceeding the amount paid by you for the Services in the 12 months preceding the claim

7.3 Regulatory Actions

Rovera specifically disclaims any liability for regulatory actions, investigations, fines, penalties, or sanctions that may result from your use or non-use of the Services.

8. INDEMNIFICATION

You agree to indemnify, defend, and hold harmless Rovera and its affiliates, officers, directors, employees, and agents from and against any claims, damages, losses, and expenses arising out of or related to:

• Your use of the Services
• Your violation of these Terms
• Your violation of any applicable laws or regulations
• Any regulatory actions or compliance failures

9. INTELLECTUAL PROPERTY

9.1 Rovera IP

Rovera retains all rights, title, and interest in the Services, including all software, algorithms, documentation, and proprietary methodologies.

9.2 Customer Feedback

Any feedback, suggestions, or improvements you provide regarding the Services may be used by Rovera without restriction or compensation.

10. TERMINATION

10.1 Termination Rights

Either party may terminate these Terms at any time with or without cause upon written notice.

10.2 Effect of Termination

Upon termination, your access to the Services will cease, and you must stop using all aspects of the Services. Provisions that by their nature should survive termination will remain in effect.

11. GOVERNING LAW AND JURISDICTION

11.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia.

11.2 Dispute Resolution

Any disputes arising under these Terms shall be resolved in the competent courts of the Kingdom of Saudi Arabia.

11.3 Language

In the event of any conflict between an English language version and Arabic translation of these Terms, the English version shall prevail.

12. GENERAL PROVISIONS

12.1 Entire Agreement

These Terms constitute the entire agreement between you and Rovera regarding the use of the Services.

12.2 Modifications

We may modify these Terms at any time by posting the revised Terms on our website. Your continued use of the Services constitutes acceptance of the modified Terms.

12.3 Severability

If any provision of these Terms is found to be unenforceable, the remaining provisions will remain in full force and effect.

12.4 Assignment

You may not assign these Terms without our prior written consent. We may assign these Terms without restriction.

12.5 Force Majeure

Neither party will be liable for any delay or failure to perform resulting from causes beyond their reasonable control.

13. CONTACT INFORMATION

For questions about these Terms, please contact us at: