Liability & Scope

PromiseProof uses structured testing and review methods to identify meaningful issues within the agreed scope. AI behavior can vary with model changes, vendor updates, user inputs, integrations, data, settings, and circumstances that may not be visible or available during the review.

For that reason, a report, monitoring update, or lack of a finding is not a guarantee that a system is error-free, unbiased, lawful, secure, safe for every use, or acceptable to a regulator, customer, insurer, platform, or other third party.

The client controls its systems and remains responsible for deployment, oversight, user notices, vendor management, remediation, and all decisions made using or about the AI tool. PromiseProof does not operate the client’s systems or make decisions for the client.

The client should independently evaluate recommendations and obtain professional advice appropriate to its industry, jurisdiction, data, customers, and risk profile before relying on them.

PromiseProof’s responsibility is limited to performing the purchased services with reasonable care within the agreed scope. Findings are based on the information and access available at the time. Work outside that scope, including legal review, regulatory filings, full security testing, implementation, or ongoing operational monitoring beyond the purchased service, is not included unless specifically agreed in writing.

If there is a concern about the delivered work, the client should notify PromiseProof promptly and give us a reasonable opportunity to review the concern and, where appropriate, clarify or correct the affected deliverable. Any further remedy is limited to what is stated in the engagement materials and applicable law.

PromiseProof cannot promise that an audit or monitoring service will prevent complaints, regulatory action, litigation, losses, reputational harm, or other outcomes. The service is intended to help clients see and prioritize risks; it does not eliminate the need for ongoing ownership and judgment.