Within this agreement, You and Your refer to you as the user of RiskTree. We, Us, and Our refer to 2T Security Ltd, as the owner of the RiskTree service.

These terms

These terms form a legally binding agreement between You and Us for the use of the RiskTree service by You. Please ensure that you read them carefully.

Whilst Your subscription is maintained, You may access and use the RiskTree service subject to the terms in this agreement, which is available to view on the RiskTree website. We reserve the right to update these terms from time to time, and will bring this to your attention when it occurs. 2T Security Ltd retains all right, title, and interest in and to the RiskTree service, including without limitation all software used to provide the Service and all logos and trademarks reproduced through the Service, and this Agreement does not grant You any intellectual property rights in the RiskTree service or any of its components.

Billing and payments

If You pay for Your subscription via a credit or debit card, You will be billed monthly by Our payment provider, Stripe, through a recurring card mandate. If a payment fails, Stripe may attempt the transaction again. After three days, if the payment still cannot be made, Your account will be placed on hold. You will still be able to log in, but only to provide new payment details. If You fail to provide replacement valid payment details within one month, Your RiskTree account will be suspended.

If You cancel Your RiskTree subscription, You will retain access to the service until the end of the current billing month. You will also retain access to any add-ons that you have purchased for the service. Refunds cannot be made for unused time that has been purchased.

Availability of the RiskTree service

We endeavour to make the RiskTree service available between the hours of 08.00 and 18.00 UK time, Monday to Friday. Whilst it will usually be available outside these hours, We make no guarantee that this will be the case.

Use of the RiskTree service

We are not responsible for any actions that You or your organization, clients, or any other entity for whom you are assessing risks might take or not take as a result of the RiskTree process. Risk remains a subjective subject, and RiskTree is a process to facilitate the capture of information about risks to assets, and then help understand and prioritize them. RiskTree does not make any recommendations for actions to be taken as a result of the risk assessment process.

We reserve the right to update, alter, and modify the RiskTree service from time to time. We will endeavour to maintain compatibility with previously saved data files, but cannot guarantee that the formatting of the output from the RiskTree tools will remain identical. A list of key updates will be made available on the RiskTree web site.

Account lifetimes

Paid accounts remain active for as long as the subscription is maintained. For accounts that are purchased on a monthly recurring credit/debit card mandate, the account will remain active until one month after the last successful payment. After this, if the subscription is not renewed, the account will be converted into a Viewer account.

Free accounts have a one-year lifetime. At the end of the year the account can be converted into a read-only Viewer account, allowing you to continue to view any RiskTree data files that you have created. Alternatively, you can upgrade the account to a paid subscription account, using the Upgrade Account function.

Viewer accounts have a one-year lifetime. At the end of the year, if you still require access, please contact either your RiskTree administrator (for organization subscriptions) or 2T Security, and your account can be re-enabled.

Your RiskTree credentials

We will provide You with a username and password to access the RiskTree service, together with a subscription key which is required for certain services. You must not divulge Your username, password, or subscription key to any other person; should You suspect that Your password is known by someone else, You must change it at the earliest opportunity through the Change Password option on the My Account menu. If We suspect that Your credentials are being used by any other person, We reserve the right to suspend Your account access, or require You to change Your password.

You must notify Us if You believe that Your credentials have been used by anyone else.

Your data

You are responsible for the protection of Your data whilst it is held on Your systems, including Your web browsers, computers, networks, storage, and any hard copies of the data or reports derived from the data. RiskTree does not transfer any sensitive risk data to Our servers for processing, and we do not store any of Your risk data on Our systems. All data exchanged between Your web browser and Our servers is transferred using TLS1.2 protocols. We hold a limited amount of Your personal data on Our servers, for account management, billing, and communications with You. By signing up to the RiskTree service, You consent for Us to store these data. If You have signed up to a monthly billing plan on Your credit card, certain of these details are shared with Our payment processor, Stripe. We will not transfer, sell, or exchange them, with any other third party. You can contact Us at any time to request the details that we hold for You, or you can view them directly from the 'My Account' link on the RiskTree menu (click the Account details for ... link to go there – once you have logged in). More information about this can be found in our Privacy Policy.