Terms of Service

1. Who these terms apply to

These terms govern your use of praxis-q.com (the "Site") and, unless a signed proposal, statement of work or master services agreement says otherwise, every engagement delivered under the Praxis-Q brand (the "Services").

Where a signed proposal or agreement conflicts with these terms, the signed document prevails for that engagement.

2. Who you contract with

"Praxis-Q" is a brand operated by two related companies. The entity that signs your proposal is the entity you contract with, and the governing law follows that entity:

3. Scope of the Services

Praxis-Q delivers readiness, gap analysis, implementation support, evidence collection, internal audit and audit-liaison services across frameworks including ISO 27001, SOC 1/2/3, PCI DSS, HIPAA, GDPR, DPDP, NIST CSF and RBI SAR, together with penetration testing and vCISO advisory. The exact scope, deliverables, timeline and fees for an engagement are set out in its proposal or statement of work.

Certification and attestation decisions are made by independent third parties. Management-system certificates (for example ISO 27001) are issued by accredited certification bodies; SOC reports are issued and signed by a licensed CPA firm; PCI DSS Reports on Compliance are issued by a Qualified Security Assessor. Praxis-Q prepares you for those assessments and supports you through them but does not control, and cannot guarantee, their outcome or timing.

Timelines quoted on the Site (for example "weeks, not months") are typical for clients who provide evidence and access promptly. They are estimates, not commitments, unless a signed proposal states otherwise.

4. Your responsibilities

You will provide accurate information, timely access to systems, people and evidence, and the internal decisions needed to progress the engagement. Delays in providing these extend timelines correspondingly.

You are responsible for the accuracy and completeness of evidence you submit through the Praxis-Q compliance portal or otherwise, and for ensuring you have the right to share it with us.

You must not use penetration-testing or security-assessment deliverables against systems you do not own or are not authorised to test.

5. Fees and payment

Fees, currency, milestones and payment terms are stated in the proposal. Unless it says otherwise, invoices are payable within 15 days; late amounts may accrue interest at 1.5% per month or the maximum permitted by law, whichever is lower.

Fees exclude third-party charges such as certification-body, CPA-firm or QSA fees unless the proposal expressly includes them, and exclude applicable taxes.

6. Confidentiality and data

Each party will keep the other's confidential information confidential and use it only for the engagement. This obligation survives for three years after the engagement ends, and indefinitely for trade secrets and personal data.

Personal data we process is handled as described in our Privacy Policy. Where we act as a processor of your personal data, a data processing agreement is available on request and forms part of the engagement.

Evidence and working papers are retained for the period required by the relevant standard or by law, then securely deleted.

7. Intellectual property

You own your data and the final deliverables prepared specifically for you once paid for. Praxis-Q retains ownership of its methodologies, templates, tooling and the compliance portal, and grants you a non-exclusive licence to use any of them embedded in your deliverables for your internal compliance purposes.

8. Warranties and disclaimers

Praxis-Q will perform the Services with reasonable skill and care in line with recognised professional practice. Except as expressly stated, the Services and the Site are provided "as is" without any other warranty, express or implied, including fitness for a particular purpose.

Nothing on the Site is legal advice. Regulatory obligations vary by jurisdiction and sector; confirm them with your own counsel.

9. Limitation of liability

To the extent permitted by law, neither party is liable for indirect, consequential, special or punitive loss, or for loss of profit, revenue, data or goodwill, arising from the Services or the Site.

The total liability of the contracting Praxis-Q entity for any engagement is limited to the fees paid for that engagement in the twelve months before the claim arose. Nothing limits liability for fraud, wilful misconduct, or anything that cannot be limited by law.

10. Term and termination

Either party may terminate an engagement on 30 days' written notice, or immediately if the other party materially breaches these terms and fails to remedy within 15 days of notice. You pay for work performed up to the termination date.

11. Dispute resolution

The parties will first try to resolve any dispute through good-faith discussion between senior representatives for 30 days. Failing that, the dispute is subject to the governing law and courts of the contracting entity set out in section 2.

12. Use of the Site

You may not scrape, reverse-engineer, disrupt or attempt unauthorised access to the Site, the compliance portal or the certificate-verification service. Certificate verification at praxis-q.com/verify is provided for genuine verification requests only.

13. Changes and contact

We may update these terms; the "last updated" date at the top changes when we do. Material changes to an active engagement require written agreement.

Questions: hello@praxis-q.com · +1 917-508-5334 (USA) · +91 90234 44183 (India).