LEGAL

Terms & Conditions

AT A GLANCE

What these terms cover

These Terms govern access to kennedyriskgroup.com, the Risk Command Center platform, and any advisory work we perform together. The full agreement is below. The summary boxes are for orientation only and do not replace the binding text.

Your data stays yours

You retain all ownership of risk data, financial figures, and content entered into the platform.

Clear, fair terms

Plain-language commitments on subscriptions, cancellations, and service availability.

Decision support, not advice

Platform outputs and AI features assist judgment but are not financial, legal, or professional advice.

Governed by Delaware law

Disputes resolved in Delaware courts, with reasonable carve-outs for injunctive relief.

ON THIS PAGE

1. Agreement to Terms

These Terms & Conditions ("Terms") form a binding agreement between you and Kennedy Risk Group, LLC ("Kennedy Risk Group," "KRG," "we," "our," or "us") and govern your access to and use of our website, the Risk Command Center platform, and any related advisory services (collectively, the "Services"). By accessing or using the Services, or by signing an order form or statement of work that references these Terms, you agree to be bound by them. If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization.

2. Definitions

3. Description of Services

Kennedy Risk Group provides enterprise risk management ("ERM") advisory services and the Risk Command Center, a cloud-based platform for designing, operating, and reporting on ERM programs. Specific functionality, scope, and deliverables are described in the applicable Order, statement of work, or published Documentation. We may modify the Services from time to time, provided that material reductions in functionality of a paid subscription will not take effect during the then-current subscription term.

4. Eligibility

The Services are intended for business use by individuals 18 years of age or older. By using the Services you represent that you meet this requirement and that your use complies with all laws applicable to you and your organization.

5. Accounts & Authorized Users

Customer is responsible for the acts and omissions of its Authorized Users and for ensuring credentials are kept confidential. Authorized Users must use accurate registration information and must promptly notify us of any suspected unauthorized access. Accounts are not transferable. Customer administrators may provision, modify, or revoke user access at any time.

6. Acceptable Use

You agree not to, and not to permit any third party to:

7. Subscriptions, Fees & Taxes

Paid subscriptions are billed in advance on a monthly or annual basis as set out in the Order. Fees are non-refundable except as expressly stated. Subscriptions automatically renew for successive periods of the same length unless cancelled before the end of the then-current term. Cancellation takes effect at the end of the current billing period; access continues until that date. Fees exclude taxes, levies, and duties, which are Customer's responsibility unless we are required by law to collect them. We may revise pricing on renewal with at least thirty (30) days' notice.

8. Trials & Beta Features

We may offer free trials, free tiers, and beta or preview features. These are provided "as is" and may be modified, suspended, or discontinued at any time without liability. Beta features may have reduced functionality, may not be supported, and are not subject to any service commitments.

9. Customer Data & Ownership

As between the parties, Customer owns all right, title, and interest in Customer Data. Customer grants KRG a limited, worldwide, non-exclusive license to host, process, transmit, and display Customer Data solely as needed to provide and improve the Services and to comply with law. We will not sell Customer Data and will not use Customer Data to train third-party AI models. Our handling of personal information is described in our Privacy Policy.

10. AI-Assisted Output

Certain features of the platform use AI to suggest content such as risk descriptions, mitigations, and board summaries ("AI Output"). AI Output may contain errors, omissions, or assumptions that are not appropriate for your situation. Customer is responsible for reviewing AI Output before relying on it and for ensuring its accuracy, suitability, and compliance with applicable requirements. AI Output is not financial, legal, regulatory, or professional advice.

11. Advisory Engagements

Advisory services, including diagnostics, framework builds, and reporting engagements, are governed by the applicable statement of work in addition to these Terms. Deliverables are provided for Customer's internal business use. Recommendations reflect professional judgment based on information available at the time and are not a guarantee of any particular outcome.

12. Intellectual Property

The Services, including all software, designs, methodologies, frameworks, scoring models, templates, and documentation, are the intellectual property of Kennedy Risk Group or its licensors and are protected by applicable laws. Subject to these Terms and payment of fees, KRG grants Customer a non-exclusive, non-transferable, worldwide right to access and use the Services during the subscription term. No other license is granted by implication, estoppel, or otherwise.

13. Feedback

If you provide suggestions, ideas, or feedback about the Services, you grant us a perpetual, irrevocable, royalty-free, worldwide license to use that feedback for any purpose, including improving the Services. We are not obligated to keep feedback confidential or to compensate you for it.

14. Third-Party Services

The Services may interoperate with third-party products, services, or content. We do not control and are not responsible for any third-party offerings. Use of third-party services is governed by their own terms and privacy notices.

15. Confidentiality

Each party may receive non-public information of the other ("Confidential Information"). The receiving party will use the same degree of care it uses to protect its own confidential information (and no less than reasonable care), use Confidential Information only to perform under these Terms, and limit access to personnel and advisors with a need to know who are bound by similar obligations. Confidential Information does not include information that is or becomes public without breach, was already known without confidentiality obligations, or is independently developed.

16. Warranties & Disclaimers

We warrant that the Services will be provided in a professional and workmanlike manner. EXCEPT AS EXPRESSLY STATED, THE SERVICES, AI OUTPUT, AND ALL DELIVERABLES ARE PROVIDED "AS IS" AND "AS AVAILABLE." TO THE MAXIMUM EXTENT PERMITTED BY LAW, KENNEDY RISK GROUP DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING OR TRADE USAGE. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE FROM EVERY THREAT.

17. Indemnification

Customer will defend, indemnify, and hold harmless Kennedy Risk Group from and against any third-party claims arising out of (a) Customer Data, (b) Customer's use of the Services in violation of these Terms or applicable law, or (c) any breach of these Terms by Customer or its Authorized Users. We will provide prompt notice of the claim and reasonable cooperation, and Customer will have sole control of the defense and settlement, provided that any settlement requiring an admission or payment by us requires our consent.

18. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, OR DATA, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID OR PAYABLE BY CUSTOMER TO KRG IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. THESE LIMITATIONS APPLY REGARDLESS OF THE FORM OF ACTION AND DO NOT LIMIT EITHER PARTY'S OBLIGATIONS UNDER SECTION 17 OR LIABILITY THAT CANNOT BE LIMITED UNDER APPLICABLE LAW.

19. Term & Termination

These Terms remain in effect while you use the Services or have an active subscription. Either party may terminate for material breach if the breach is not cured within thirty (30) days of written notice. Customer may cancel a subscription at any time, with cancellation effective at the end of the current billing period. Upon termination: (a) Customer's right to use the Services ends, (b) outstanding fees become immediately due, and (c) Customer may export Customer Data within thirty (30) days, after which we may delete it in the ordinary course. Provisions that by their nature should survive termination will survive.

20. Suspension

We may suspend access to the Services with or without notice if (a) we reasonably believe the Services are being used in violation of these Terms or applicable law, (b) Customer's account is overdue, or (c) continued use poses a security or operational risk to us or other customers. We will restore access promptly once the underlying issue is resolved.

21. Export & Sanctions

The Services may be subject to U.S. export control and sanctions laws. You represent that you are not located in, organized under the laws of, or ordinarily resident in a country or region subject to comprehensive U.S. sanctions, and that you are not on any restricted-party list. You will not export, re-export, or use the Services in violation of applicable export controls.

22. Force Majeure

Neither party will be liable for delays or failures in performance caused by events beyond its reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, government action, labor disputes, internet or utility failures, or pandemics, provided that the affected party uses commercially reasonable efforts to resume performance.

23. Governing Law & Disputes

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict of laws rules. The state and federal courts located in Delaware will have exclusive jurisdiction over any dispute arising out of or related to these Terms, and each party consents to personal jurisdiction and venue in those courts. Notwithstanding the foregoing, either party may seek injunctive or equitable relief in any court of competent jurisdiction to protect its intellectual property or confidential information.

24. Changes to These Terms

We may update these Terms from time to time. When we make material changes, we will revise the "Last updated" date and provide reasonable notice through the Services or by email. Continued use of the Services after the effective date constitutes acceptance of the updated Terms. If you do not agree to a change, your sole remedy is to stop using the Services and, where applicable, cancel your subscription.

25. General Provisions

26. Contact

For questions about these Terms or to provide notice, contact:

Kennedy Risk Group, LLC Attn: Legal Email: contact@kennedyriskgroup.com

These Terms are provided for general information about our standard commercial terms and do not constitute legal advice. Customers with negotiated agreements should refer to their executed Order or statement of work, which controls in the event of any conflict.

How we collect, use, and protect your information.

Enterprise risk management advisory and platform.

Questions about these terms? Reach out.