PromiseProof / Customer terms

Terms of Service

These terms explain the working relationship for PromiseProof AI Risk Audit and Monthly Monitoring services. They are written to help both sides understand what is being purchased and what remains the client’s responsibility.

Draft business policy

These business policy terms are a practical draft for PromiseProof and should be reviewed by the owner's attorney before they are relied on.

Services and scope

PromiseProof provides structured, informational risk-assessment services for agreed customer-facing AI tools, such as chatbots, hiring screens, and AI-generated content workflows. A one-time AI Risk Audit reviews the named system and scope agreed at purchase or kickoff. Monthly Monitoring provides recurring review of the agreed system and may include re-testing after relevant changes.

The specific tool, user journeys, timing, deliverables, access, assumptions, and any exclusions are confirmed in the engagement materials or kickoff conversation. Requests outside that agreed scope may require a separate agreement, timeline, or fee.

What our work is — and is not

Our findings and recommendations are practical observations based on the information, access, and testing available during the engagement. They are intended to support business decision-making and do not constitute legal advice, a legal opinion, regulatory advice, security penetration testing, or a legal or compliance certification.

PromiseProof does not promise that every issue, bias, failure pattern, legal requirement, or future change will be identified. We also do not guarantee a particular business, regulatory, customer, or financial outcome.

Client responsibilities

The client remains responsible for its AI systems, vendors, prompts, policies, data, customer communications, implementation choices, and decisions about whether or how to act on any finding. The client should seek advice from qualified legal, compliance, security, privacy, and technical professionals when those decisions call for it.

The client is responsible for providing accurate information, appropriate test access, and any permissions needed for PromiseProof to perform the agreed work. Please do not provide personal, protected health, payment, credential, or other sensitive data unless it is necessary, authorized, and covered by an agreed handling approach.

Payment, changes, and communications

Fees and the billing cadence shown at checkout apply to the selected service. One-time audit work begins after payment and any needed kickoff information are received. Monthly Monitoring continues on the cadence shown at checkout until it is cancelled under the applicable service terms or billing arrangement.

If a client needs to change the agreed scope, timing, or access conditions, the parties should discuss the impact before PromiseProof begins that additional work. Questions about an order or scope can be sent through the PromiseProof contact page.

Related policies: Terms of Service, Liability & Scope, and Return/Refund Policy.