Terms of Use

This English version is provided for convenience. Only the German version is legally binding.

The terms governing access to and use of the Sightadel compliance platform.

Last updated: 8 October 2026

These Terms of Use ("Terms") govern access to and use of the compliance platform "Sightadel" and all related services, applications and websites (together the "Services"). The provider of Sightadel is neonotu GmbH, Edelsbergstr. 8, 80686 München, Germany, registered in the commercial register of the Local Court (Amtsgericht) of Munich under HRB 313206, legally represented by its managing director Armin Haller (hereinafter "Sightadel", "we", "us").

By registering an account, placing an order (e.g. via an Order Form or online checkout), clicking a button indicating acceptance or otherwise using the Services, you agree to these Terms. If you act on behalf of a company or other legal entity ("Customer", "you"), you represent that you are authorised to do so. If you do not agree to these Terms, you may not use the Services.

Where Sightadel and the Customer have concluded a separate written agreement (e.g. an individually negotiated framework agreement or an Order Form) that expressly refers to these Terms, any deviating provisions agreed therein shall prevail in the event of conflict; otherwise, these Terms apply in addition.

Definitions

"Data Processing Agreement" / "DPA" means the agreement concluded between the parties on the processing of personal data on behalf of the controller pursuant to Art. 28 GDPR, insofar as such processing takes place within the scope of the Services.

"Customer Data" means all electronic data and information that the Customer or its Users upload, enter or otherwise provide via the Services, including contact details of third-party vendors to whom questionnaires are sent via the Services.

"Users" means natural persons authorised by the Customer to use the Services, such as the Customer's employees, contractors or consultants.

"Security Score" means the security ratings, scores, reports and analyses generated by the Services on the basis of externally observable information about the domains specified by the Customer.

"Order Form" means an order, a quotation, an online subscription confirmation or any other ordering document that specifies the Services purchased by the Customer.

"Services" means the cloud-based software-as-a-service platform for compliance and information security management provided by Sightadel, in particular guided assessments for standards and frameworks (e.g. ISO 27001, ISO 9001, NIS2, DORA, GDPR), industry templates with AI support, evidence archive, action plans, audit trail, vendor risk management, Security Score and Trust Center, including related documentation and support.

"Third-Party Applications" means software, services or content of third parties that are not provided by Sightadel but interact with the Services or are accessible through them.

Description of services

Sightadel provides a multi-tenant SaaS platform with which Customers implement, maintain and evidence management systems and regulatory requirements in a structured way. This includes in particular guided assessments for each framework, industry templates and AI-supported drafting help, the management of evidence, action plans and risks, and roles for internal and external participants, including a separate role for external auditors without deletion rights. Sightadel does not provide certification or legal advice; decisions on content, risks and measures are made by the Customer. In addition, the platform may include a Security Score based on publicly accessible or externally observable information ("outside-in" data) about the domains specified by the Customer. No invasive techniques are used; Sightadel does not attempt to circumvent the security controls of a Customer or third parties and does not obtain access to the Customer's internal systems unless the Customer expressly provides access or data.

The Services may also include functions for sending security questionnaires to the Customer's business partners and evaluating them, as well as a publicly accessible Trust Center page for presenting the Customer's own security and compliance status. Consultancy services can be booked separately as packages; their scope is set out in the respective booking.

The specific range of functions is set out in the respective Order Form or plan and the current product documentation. Sightadel is entitled to adapt the Services in the course of ongoing development, provided that this does not materially restrict the core functionality during a current contract term.

As the Services are a shared multi-tenant platform, the security, data protection and usage terms apply uniformly to all Customers; individual deviations from these Terms are generally not possible unless expressly agreed in writing.

Registration and accounts

An account must be set up in order to use the Services. The Customer shall ensure that the information provided during registration is accurate, complete and up to date.

The Customer is responsible for all activities carried out via its account or its Users' accounts and for the confidentiality of the access credentials. Unauthorised access must be reported to Sightadel without undue delay.

The Customer shall ensure that its Users comply with these Terms and is liable for breaches by its Users as for its own breaches.

Free trial and beta features

If the Customer registers for a free trial, Sightadel provides the relevant Services free of charge until the end of the trial period or until the start of a paid subscription. Customer Data and configurations from the trial period may be deleted after it ends unless a paid subscription has been concluded beforehand.

Trial versions and features marked as "beta" are provided without any warranty ("as is"). To the extent permitted by law, Sightadel accepts no liability for them.

Subscriptions, fees and payment

The Services are purchased as a subscription in accordance with the respective Order Form. The minimum term is twelve (12) months, even if monthly payment has been agreed. Unless otherwise stated in the Order Form, the term is automatically renewed for further periods of twelve (12) months unless either party objects in writing at least sixty (60) days before the end of the current term.

Fees are payable monthly or annually in advance in accordance with the Order Form. Choosing monthly payment does not change the minimum term. Unless otherwise agreed, invoices are due for payment without deduction within thirty (30) days of the invoice date. To the extent permitted by law, payment obligations cannot be cancelled; fees already paid are not refunded, except in the cases set out in section 12.

If payment is more than thirty (30) days overdue, Sightadel may, without prejudice to its other rights, restrict or suspend access to the Services after giving prior notice with a reasonable period.

Unless expressly stated otherwise, all prices are net, plus VAT at the applicable statutory rate and any other applicable taxes and charges. For Customers established in another EU Member State with a valid VAT identification number, the reverse-charge procedure applies. The offer is directed exclusively at businesses within the meaning of section 14 of the German Civil Code (BGB).

Rights of use and restrictions

For the duration of the contract term, Sightadel grants the Customer a non-exclusive, non-transferable right to use the Services for internal business purposes within the scope of the respective Order Form.

The Customer undertakes not to:

make the Services available to, or use them for the benefit of, third parties other than its authorised Users;

resell, sublicense or rent out the Services or use them as part of a service bureau offering;

use the Services to store or transmit unlawful or defamatory content, content infringing the rights of third parties, or malware;

use the Services to build a competing product or for competitive purposes, in particular not to monitor the availability, performance or functionality of the Services on behalf of a direct competitor of Sightadel;

use the Services in a manner that circumvents contractual usage restrictions, impairs the integrity of the Services or attempts to gain unauthorised access to the Services or connected systems;

replicate the Services by reverse engineering, decompilation or similar methods, except to the extent expressly permitted by mandatory law.

Sightadel is entitled to temporarily suspend a User's access if there is reasonable suspicion of a breach of this section or of a threat to the Services or to other Customers. The suspension is limited to the minimum necessary to avert the threat and, where possible, is announced to the Customer in advance.

Customer Data and data protection

As between the parties, all rights in Customer Data remain with the Customer. Sightadel uses Customer Data exclusively to provide the Services, to communicate with third-party contacts named by the Customer (e.g. when sending questionnaires), to remedy technical faults and, in anonymised and aggregated form, for internal analysis and product improvement purposes, provided that no conclusions about the Customer can be drawn from it.

Insofar as personal data is processed within the scope of the Services, Sightadel's current privacy policy applies and is incorporated into these Terms by reference. Insofar as Sightadel acts as a processor for the Customer within the meaning of Art. 28 GDPR, the parties shall conclude a separate Data Processing Agreement.

The Customer warrants that it is entitled to disclose the personal data it provides to Sightadel and that it complies with all applicable data protection laws, in particular the GDPR.

Sightadel takes appropriate technical and organisational measures to protect Customer Data against unauthorised access, loss or alteration and informs the Customer without undue delay of any security breaches affecting Customer Data that come to its attention.

Intellectual property

Sightadel and its licensors retain all rights, title and interest in the Services, the underlying technology and all works derived from them. These Terms do not grant the Customer any rights beyond the rights of use set out in section 6.

If the Customer provides Sightadel with feedback, suggestions for improvement or ideas regarding the Services, it grants Sightadel a free, worldwide, transferable and perpetual right to use them, without naming the Customer as the source.

Confidentiality

Each party ("receiving party") undertakes to treat confidential information of the other party ("disclosing party") that is marked as confidential or is recognisably confidential by its nature with the same care it applies to its own comparable information, but at least with the care customary in business dealings, and to use it only to perform its obligations under these Terms.

This obligation does not apply to information that is or becomes publicly known, was already known to the receiving party, was lawfully disclosed to it by third parties or was independently developed by it. Disclosure on the basis of a statutory or official obligation remains permissible, provided that the disclosing party is informed in advance to the extent legally permissible.

Warranty and disclaimer

Sightadel warrants that the Services substantially conform to the published documentation and are provided with the care customary in the market.

Beyond the express warranties in this section, the Services are provided without any further warranty, whether express or implied; in particular, to the extent permitted by law, Sightadel does not warrant fitness for any particular purpose pursued by the Customer.

The Security Score and related reports are based on automatically collected data, some of which originates from third parties, and constitute an assessment, not a guarantee of the actual security situation. Templates and AI-supported wording are working aids; the Customer reviews them and remains responsible for its own decisions made on the basis of the Services.

Limitation of liability

Both parties have unlimited liability for intent and gross negligence, for damage resulting from injury to life, body or health, and under mandatory statutory liability, in particular under the German Product Liability Act (Produkthaftungsgesetz).

For damage caused by slight negligence, Sightadel is only liable in the event of a breach of a material contractual obligation (cardinal obligation), the fulfilment of which is essential for the proper performance of the contract and on whose observance the Customer may regularly rely. In this case, liability is limited in amount to the damage typically foreseeable for this type of contract at the time of the damaging event and in any event to the amount of fees paid by the Customer in the twelve (12) months before the event giving rise to the damage.

Any further liability is excluded, in particular for loss of profit, indirect damage or consequential damage, unless already covered by the preceding paragraphs.

Term and termination

These Terms apply from the time the Customer accepts them for as long as Sightadel provides the Services to the Customer, subject to the term provisions of the respective Order Form in accordance with section 5.

Either party may terminate these Terms or the respective Order Form for good cause without notice, in particular if the other party breaches a material contractual obligation and fails to remedy this breach within thirty (30) days of a written request, or if insolvency proceedings are opened over the assets of the other party or rejected for lack of assets.

If the Customer validly terminates for good cause due to an unremedied material breach of contract by Sightadel, Sightadel will refund on a pro rata basis fees already paid but not yet used for the remaining term. In all other cases, fees already paid are not refunded.

After termination of these Terms, Sightadel is entitled to delete Customer Data after a reasonable transition period of up to thirty (30) days, unless a statutory retention obligation prevents this.

Changes to these Terms

Sightadel may amend these Terms with effect for the future in order to take account of changes in the legal framework, the range of functions of the Services or other legitimate interests. The Customer will be notified of material changes with reasonable advance notice, as a rule at least thirty (30) days before they take effect, in text form (e.g. by e-mail or via the Services).

If the Customer does not object to a material change within thirty (30) days of receiving the notification, the change is deemed accepted. The Customer will be specifically informed of this consequence in the change notification. If the Customer objects, the previous version of these Terms continues to apply until the end of the current contract term; in this case, either party may terminate with ordinary notice at the end of the term.

Governing law and place of jurisdiction

These Terms are governed by German law, excluding the UN Convention on Contracts for the International Sale of Goods (CISG) and the conflict-of-laws rules of private international law. For consumers whose habitual residence is outside Germany, the mandatory consumer protection provisions of their country of residence remain unaffected.

To the extent permitted by law, the exclusive place of jurisdiction for all disputes arising out of or in connection with these Terms is the registered office of neonotu GmbH in Munich, Germany. This does not apply to consumers.

Miscellaneous

Entire agreement

These Terms, together with any Order Forms, the privacy policy and the DPA, constitute the entire agreement between the parties regarding the use of the Services and supersede all prior arrangements on this subject matter.

Assignment

The Customer may only transfer rights and obligations under these Terms with Sightadel's prior written consent. Sightadel may transfer these Terms in the course of a corporate restructuring, sale or merger without the Customer's consent.

Severability

Should any provision of these Terms be or become invalid, the validity of the remaining provisions shall not be affected.

Force majeure

Neither party is liable for delays or failures attributable to circumstances beyond its reasonable control, including natural events, government measures, internet outages or pandemics.

No waiver

Failure to assert a right under these Terms shall not constitute a waiver of that right.

Notices

Legally relevant notices to Sightadel must be sent to: neonotu GmbH, attn. Legal Department, Edelsbergstr. 8, 80686 München, with a copy to [E-mail address – please enable JavaScript or use the contact form]. Notices to the Customer are sent to the e-mail address stored in the account.

Contact

If you have any questions about these Terms of Use, you can reach us at:

neonotu GmbH (provider of Sightadel)

Edelsbergstr. 8 80686 München Germany

Commercial register: Local Court (Amtsgericht) of Munich, HRB 313206

Managing director: Armin Haller

E-mail: [E-mail address – please enable JavaScript or use the contact form]