1. Agreement
These Terms of Service (“Terms”) form an agreement between you and Cynapse (“Cynapse”, “we”, “us”, or “our”). If you use the service on behalf of an organization, you confirm that you have authority to bind that organization, and “you” refers to both you and that organization.
If your organization has signed a separate written agreement, order form, or licence with Cynapse, that document governs to the extent it conflicts with these Terms. Our Privacy Policy explains how we handle personal data and forms part of these Terms.
2. Accounts and eligibility
- The service is intended for business and professional use. You must be at least 18 years old and provide accurate, current, and complete registration information.
- You are responsible for keeping your credentials confidential, for enabling multi-factor authentication where required, and for all activity under your account.
- Organization administrators are responsible for the users they invite, the roles they assign, and removing access that is no longer needed.
- Notify us promptly at support@cynapse.app if you suspect unauthorized access to your account.
3. Plans, trials, and fees
- Access to modules such as RABUILD GRC and Exposure Engine is licensed per organization and governed by the plan, entitlements, and limits that apply to your account.
- Free, evaluation, or preview access is provided for a limited period and with limited features, may be changed or ended at any time, and is provided without any service commitment.
- Paid subscriptions are charged according to the quote, order form, or invoice agreed with Cynapse. Unless stated otherwise, prices exclude applicable taxes, duties, and bank or payment processing charges, which are your responsibility.
- Fees are non-refundable except where required by law or expressly agreed in writing.
4. Acceptable use
You agree not to, and not to allow anyone else to:
- use the service in violation of any applicable law or regulation, or to infringe the rights of others;
- access or attempt to access another organization’s data, or probe, scan, or test the vulnerability of the CYNAPSE platform itself except under our coordinated disclosure process;
- circumvent authentication, licensing, rate limits, or other security or usage controls;
- upload malicious code, or use the service to distribute malware, spam, or phishing content;
- interfere with or disrupt the integrity or performance of the service;
- reverse engineer, decompile, or copy the service except to the extent this restriction is prohibited by law; or
- resell, sublicense, or provide the service to third parties except as expressly permitted by your agreement with us.
5. Authorized scanning and agents
CYNAPSE includes capabilities, such as the Exposure Engine agent, that discover assets, software, services, and vulnerabilities. You may use them only on systems, networks, and devices that you own or are explicitly authorized in writing to assess.
- You are solely responsible for obtaining all permissions required before installing an agent or running an assessment, and for complying with any rules that apply to the target environment.
- In operational technology, industrial control, and safety-related environments, you are responsible for planning assessments with the asset owner and applying appropriate change control so that operations and safety are not affected.
- Cynapse may suspend scanning features where it reasonably believes they are being used without authorization.
6. Customer data
- You retain all rights in the data, files, and content you or your users submit to the service (“Customer Data”).
- You grant Cynapse a limited licence to host, process, transmit, and display Customer Data solely to provide, secure, and support the service and as described in our Privacy Policy.
- You are responsible for the accuracy and lawfulness of Customer Data and for having the rights and notices needed to provide it to us.
- You can export your data during your subscription. After it ends, we will delete or return Customer Data in accordance with your agreement and our retention practices.
7. AI-assisted output
The service includes AI-assisted features, such as the Navai intelligent navigator and assessment review, that generate suggestions, summaries, and guidance. AI output may be incomplete or inaccurate. It is provided to support, not replace, professional judgement, and you are responsible for reviewing it before relying on it for security, compliance, engineering, or safety decisions.
8. Intellectual property
The service, including its software, design, frameworks, content libraries, report templates, and the CYNAPSE, RABUILD, Exposure Engine, and Navai names and logos, is owned by Cynapse or its licensors and is protected by intellectual property laws. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable right to use the service during your subscription for your internal business purposes. Reports you generate from your own Customer Data may be used freely within your organization and shared with your auditors, regulators, and advisers.
If you send us feedback or suggestions, we may use them without restriction or obligation to you.
9. Community and Academy
- Content you post in the Community is visible to other members. Do not post confidential, personal, or security-sensitive information about any organization.
- You keep ownership of your posts and grant Cynapse a licence to host and display them within the service. We may moderate or remove content that breaches these Terms.
- Academy materials are for your personal professional development. Certificates confirm completion of Cynapse learning content and are not a third-party accreditation.
10. Availability and changes
We work to keep the service available, secure, and reliable, but it may be interrupted for maintenance, upgrades, or reasons outside our control. We may improve, change, or retire features over time. Where a change materially reduces functionality you have paid for, we will give reasonable notice. Service level commitments, if any, are set out in your written agreement.
11. Suspension and termination
- You may stop using the service and close your account at any time.
- We may suspend or terminate access immediately if you materially breach these Terms, if your use creates a security risk or legal exposure for Cynapse or others, or if fees remain unpaid after notice.
- Sections that by their nature should survive termination, including those on intellectual property, disclaimers, limitation of liability, and indemnity, will continue to apply.
12. Disclaimers
To the maximum extent permitted by law, the service is provided “as is” and “as available”. Cynapse disclaims all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement. No security tool can identify every vulnerability or prevent every incident, and use of the service does not by itself guarantee compliance with any law, standard, or certification scheme.
13. Limitation of liability
To the maximum extent permitted by law, Cynapse will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, revenue, data, or goodwill, arising out of or related to the service. Cynapse’s total aggregate liability arising out of or related to these Terms will not exceed the fees you paid to Cynapse for the service in the twelve (12) months before the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law.
14. Indemnity
You will defend and indemnify Cynapse against third-party claims arising from your Customer Data, your breach of these Terms, or your use of scanning or agent capabilities on systems you were not authorized to assess.
15. General
- Changes to these Terms. We may update these Terms from time to time. We will post the revised version on this page and update the “Last updated” date, and will give additional notice of material changes. Continued use after changes take effect constitutes acceptance.
- Governing law. These Terms are governed by the laws of the jurisdiction in which Cynapse is established, unless your written agreement with Cynapse specifies otherwise, and disputes will be resolved by the competent courts of that jurisdiction.
- Assignment. You may not assign these Terms without our written consent. We may assign them in connection with a merger, acquisition, or reorganization.
- Entire agreement and severability. These Terms, together with any written agreement and the Privacy Policy, are the entire agreement on their subject. If any provision is unenforceable, the rest remain in effect.
- No waiver. A failure to enforce any provision is not a waiver of our right to do so later.
16. Contact
Cynapse
Email: support@cynapse.app
Web: cynapse.app/contact