HouseGRC End User Licence Agreement

Copyright (c) 2026 Justin White. All rights reserved.

Version 2026-10-09

This agreement is between you - the person, or the organisation on whose behalf that person accepts it ("you") - and Justin White, the licensor ("we", "us"). It covers HouseGRC: the server application, its container images, its installation files, and their documentation and updates (the "Software").

By installing, copying or using the Software you accept this agreement. If you do not accept it, do not install or use the Software. If you accept it for an organisation, you confirm that you are authorised to do so.

The Software is licensed only for business and professional use, including by individuals who use it in their trade or profession, and not to consumers for personal, family or household use.

This agreement applies to HouseGRC version 2.0.0 and later.

1. Definitions

"Licence key" means the key we issue when you buy a licence. It states who the licence is for, the plan (Starter, Business or Enterprise), the number of users, and the date the subscription ends.

"Installation" means one running copy of the Software with its own database. A "production installation" holds your working records; a "test installation" is used only to try out upgrades, settings and integrations.

"User" means an individual with an active account that can sign in to an installation, whatever its role, including read-only and auditor accounts. Deactivated accounts, and people who only answer a questionnaire or form through a link without signing in, are not users.

"Subscription term" means the period from the date a licence key is issued to the expiry date stated in it, as extended by any renewal.

2. Evaluation

You may use the Software free of charge for 30 days from the first start of an installation, with up to 5 users, to evaluate it. All features work during the evaluation; a licence key issued from a test-mode checkout is an evaluation too. After it ends, the installation becomes read-only until you activate a licence key: creating and changing records stops, while signing in, viewing, searching, exporting and backups keep working. You may not reinstall the Software or reset an installation to extend an evaluation.

3. Licence grant

Subject to this agreement and to payment of the applicable fees, we grant you a non-exclusive, non-transferable licence, for the subscription term and for your own business purposes, to install and use the Software as follows:

(a) one production installation and one test installation; and

(b) in each of them, no more users at any time than the number stated in the licence key.

You may use the Software for your own organisation and its affiliates, and to provide services to your own clients, including by keeping each client's records in a separate organisation within your installation, provided that every person who signs in, including your clients' personnel, counts as a user.

You may make backup copies of the Software and of your installations for archival and recovery purposes.

4. Subscription term and continued use after it ends

While the subscription term runs, you may use every version of the Software we release. If the subscription term ends without renewal, you may continue to use, under this agreement and without time limit, any version of the Software that was released on or before the date the subscription term ended. Versions released after that date require a renewed licence. Updates and support are provided only during the subscription term.

5. Restrictions

Except as this agreement expressly allows, or as applicable law permits despite this restriction, you may not:

(a) copy, distribute, sell, resell, rent, lease, lend, sublicense or otherwise make the Software or a licence key available to anyone else;

(b) use a licence key for more installations or more users than it covers;

(c) provide the Software to others as a hosted, managed or software-as-a- service offering, except for your own clients as section 3 allows;

(d) remove, alter or obscure any copyright, licence or other proprietary notice in the Software;

(e) circumvent, disable or interfere with the licence keys, the evaluation period, the user count or any other part of the Software's licensing;

(f) reverse engineer, decompile or disassemble the Software, or modify it, except to the extent applicable law expressly permits it, and except as the licences of the third-party components described in section 9 permit for those components; or

(g) use the Software in breach of any law.

6. Your installation

The Software runs on servers that you provide and control. You are responsible for them and for the Software's installation, configuration, security, access control, updates and backups. The database encryption key is generated on your server and we never have it: if it is lost, the data it protects cannot be recovered, by you or by us. Keep backups of your data, your evidence and the key, separately and securely.

You are responsible for the content you put into the Software, including any personal information, and for having the right to process it there. The Software connects only to the systems, services and domains you configure it to use, with the credentials you give it; you are responsible for having the authority to connect to and check them in the way you use the Software.

7. Frameworks, regulations and results

The Software includes summaries of, and mappings between, standards, frameworks, laws and regulations, with implementation guidance. They are our own work, provided for reference to help you organise your programme; they are not the official texts, which you should consult and, where their owners require it, license yourself. Names of standards and frameworks are used only to identify them and may be trademarks of their owners, who do not endorse the Software.

The Software does not give legal, audit, regulatory or other professional advice. Its scores, readiness ratings, findings, deadlines and AI-generated content are aids to your own judgement and depend on the information you and your systems give it. You remain responsible for your compliance decisions, for meeting any notification or reporting obligation, and for verifying results before relying on them.

8. Your data

Everything you put into the Software stays in your installations, and wherever you choose to export, back up or send it. The Software sends none of it to us, and licence keys are checked in your installation, without contacting us. Features that you enable may fetch public reference data (such as vulnerability and exploitation feeds) directly from their publishers, and connect to the systems you configure; we receive none of it.

If you configure an AI service or provider, the Software sends the questions and the data needed to answer them to that service, under your own agreement with its provider. We do not receive that data.

Licences are sold through https://housegrc.com by our reseller Paddle.com, the merchant of record; the terms of sale and privacy notice there cover the purchase and the details you give when you buy.

9. Third-party components

The Software includes open-source components that are licensed to you under their own licences, listed in the third-party notices distributed with the Software. Nothing in this agreement limits the rights those licences give you, including any right to modify and replace a component licensed under the GNU Lesser General Public License, which the Software keeps as a separate, replaceable library.

10. Ownership

The Software is licensed, not sold. We and our licensors keep all right, title and interest in it, including all intellectual property rights. All rights not expressly granted in this agreement are reserved. Your records are yours, and we claim no rights in them. If you send us suggestions or feedback, we may use them without obligation to you.

11. Updates and support

During the subscription term we make updates available through https://housegrc.com and provide support through https://housegrc.com/support, with reasonable efforts. Each version of the Software may come with an updated version of this agreement; the agreement that comes with a version applies to that version.

12. No warranty

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTY OR CONDITION OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY, MERCHANTABLE QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE OR NON-INFRINGEMENT. We do not warrant that the Software will be error-free or uninterrupted, that its content or results are complete, accurate or current, or that using it will make you compliant with any law, standard or framework, pass any audit or certification, or prevent any security incident. Where the law does not allow a warranty or condition to be excluded, it is limited to the shortest period and the narrowest scope the law permits.

13. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW:

(a) WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL OR DATA, ANY REGULATORY FINE OR PENALTY, OR ANY BUSINESS INTERRUPTION, ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE SOFTWARE, EVEN IF WE WERE ADVISED OF THE POSSIBILITY OF THEM; AND

(b) OUR TOTAL LIABILITY ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE SOFTWARE, FOR ALL CLAIMS TOGETHER, IS LIMITED TO THE FEES YOU PAID US FOR THE SOFTWARE IN THE TWELVE (12) MONTHS BEFORE THE EVENT THAT GAVE RISE TO THE CLAIM.

Nothing in this agreement limits or excludes liability that cannot be limited or excluded by law, such as liability for fraud.

14. Termination

This agreement continues until it is terminated. You may terminate it at any time by uninstalling the Software and deleting your copies of it. We may terminate it if you breach it and, where the breach can be remedied, you do not remedy it within thirty (30) days after we notify you. If the payment for a licence key is refunded, reversed or charged back, or an invoice for it is still unpaid fourteen (14) days after we notify you that it is overdue, the licence granted under that key ends, including the right in section 4 to keep using earlier versions. When this agreement or a licence ends, you may keep running the Software for ninety (90) days only to view and export your records, and must then stop using it and delete your copies of it. Your records remain yours. Sections 5 to 10, 12, 13, 15 and 16 survive termination.

15. Governing law

This agreement, and any dispute arising out of or relating to it or the Software, is governed by the laws of the Province of New Brunswick and the federal laws of Canada applicable there, without regard to conflict-of-laws rules. The courts of New Brunswick have exclusive jurisdiction over any such dispute, and you and we submit to them. The United Nations Convention on Contracts for the International Sale of Goods does not apply. If, despite the business-use limitation above, a consumer protection law applies to you, nothing in this agreement takes away any right under it that cannot be waived.

16. General

This agreement, together with the terms of sale you accepted when you bought your licence (https://housegrc.com/legal/terms, which cover price, payment, refunds and disputes), is the entire agreement between you and us about the Software. If a provision of this agreement is held to be unenforceable, it is enforced to the maximum extent possible and the rest of the agreement remains in effect. A failure or delay in enforcing a provision is not a waiver of it. You may not assign this agreement without our written consent, except to a successor to all or substantially all of your business; we may assign it. You must comply with the export control and sanctions laws that apply to your use of the Software, and you confirm that you are not named on, or owned or controlled by anyone named on, a Canadian sanctions list. We may give you notices under this agreement by email to the address in your licence key or the address you bought with; send notices to us by email to [email protected].

17. Contact

Justin White (HouseGRC), New Brunswick, Canada.