Terms and conditions

Last updated: May 19, 2026

  • 1. About Arba
  • 2. Scope of these Terms
  • 3. Business use only
  • 4. Accounts and access
  • 5. Use of the platform
  • 6. Customer data
  • 7. Data protection
  • 8. Security
  • 9. Compliance guidance
  • 10. Templates and resources
  • 11. Subscriptions and payment
  • 12. Trial access
  • 13. Support and onboarding
  • 14. Availability and changes
  • 15. Intellectual property
  • 16. Confidentiality
  • 17. Third-party services
  • 18. Suspension and termination
  • 19. Limitation of liability
  • 20. Indemnity
  • 21. Changes to these Terms
  • 22. Governing law and jurisdiction
  • 23. Contact

These Terms and Conditions govern your access to and use of the website, platform and related services provided by Arba Security ApS, Pustervig 3, 4th floor, 1126 Copenhagen K, Denmark, CVR no. 44895498.

By accessing our website, booking a demo, creating an account or using the Arba platform, you agree to these Terms. If you use Arba on behalf of an organization, you confirm that you are authorized to accept these Terms on behalf of that organization.

1. About Arba

Arba provides a compliance platform that helps organizations manage security and compliance work across frameworks such as ISO 27001, NIS2, CIS 18 and other relevant standards. The platform helps teams structure requirements, tasks, ownership, documentation, evidence and progress tracking in one place.

2. Scope of these Terms

These Terms apply to:

  • Use of the Arba website
  • Booking demos or contacting Arba
  • Access to and use of the Arba platform
  • Subscription-based services provided by Arba
  • Related support, onboarding and guidance

If a separate agreement, order form, data processing agreement or service agreement has been entered into between Arba and the customer, that agreement will take precedence in case of conflict.

3. Business use only

Arba is intended for professional and business use. The platform is not intended for private consumer use.

4. Accounts and access

Customers are responsible for ensuring that user accounts are created and used only by authorized individuals.

You are responsible for:

  • Keeping login credentials confidential
  • Ensuring that user access is appropriate for each role
  • Removing access when users no longer require it
  • Not sharing accounts between individuals
  • Notifying Arba without undue delay if you suspect unauthorized access

Arba may suspend access if we reasonably believe that an account is being misused, compromised or used in breach of these Terms.

5. Use of the platform

You may use the Arba platform only for lawful business purposes and in accordance with these Terms.

You must not:

  • Use the platform for illegal, harmful or fraudulent purposes
  • Attempt to gain unauthorized access to the platform or related systems
  • Interfere with the security, availability or performance of the platform
  • Copy, reverse engineer, decompile or attempt to extract source code from the platform
  • Upload malicious code, malware or harmful content
  • Use the platform in a way that infringes third-party rights
  • Resell, sublicense or make the platform available to third parties unless agreed in writing

6. Customer data

Customers retain ownership of the data, documents, evidence, comments, tasks and other materials uploaded to or created in the platform by the customer or its users.

By using the platform, you grant Arba the right to process customer data as necessary to provide, maintain, support and improve the services.

Arba will handle customer data in accordance with applicable agreements, including any applicable data processing agreement.

7. Data protection

Where Arba processes personal data on behalf of a customer, such processing is governed by a separate data processing agreement, unless otherwise agreed.

Customers are responsible for ensuring that any personal data uploaded to the platform is collected and processed lawfully.

8. Security

Arba works to protect the confidentiality, integrity and availability of the platform and customer data through appropriate technical and organizational measures.

However, no system can be guaranteed to be completely secure. Customers are responsible for managing their own user access, internal security procedures and the content they upload to the platform.

9. Compliance guidance

Arba provides tools, templates, guidance and structure to support compliance work. Arba does not guarantee that use of the platform will result in certification, legal compliance, audit approval or the avoidance of regulatory action.

Customers remain responsible for:

  • Their own compliance decisions
  • Their implementation of controls
  • Their documentation and evidence
  • Their legal and regulatory obligations
  • Their use of professional legal, audit or security advice where needed

10. Templates and resources

Templates, guidance and other resources made available through Arba are provided for general informational and operational purposes. They may need to be adapted to the customer’s organization, risk profile, legal obligations and internal policies.

Arba does not guarantee that templates or resources are complete, suitable for every situation or sufficient for certification or regulatory compliance.

11. Subscriptions and payment

Access to the Arba platform is provided on a subscription basis unless otherwise agreed in writing.

Subscription terms, pricing, billing period, renewal terms and included services are set out in the applicable order form, offer or agreement between Arba and the customer.

Fees are payable in accordance with the agreed payment terms. Late payment may result in suspension of access until payment is received.

12. Trial access

Arba may offer trial access at its discretion. Trial access may be limited in time, functionality or scope.

Arba may modify or end trial access at any time unless otherwise agreed in writing.

13. Support and onboarding

Arba may provide onboarding, support and guidance as part of the subscription or as separately agreed.

Support availability, response times and included services may vary depending on the customer’s plan or agreement.

14. Availability and changes

Arba aims to provide a reliable and secure platform. However, access may occasionally be interrupted due to maintenance, updates, technical issues or circumstances outside Arba’s control.

Arba may update, improve, modify or discontinue features over time. We will aim to avoid changes that materially reduce the core functionality of the platform without reasonable notice.

15. Intellectual property

Arba and its licensors retain all rights, title and interest in the platform, software, design, technology, documentation, templates, trademarks and other materials provided by Arba.

Customers receive a limited, non-exclusive, non-transferable right to use the platform during the subscription period in accordance with these Terms and the applicable agreement.

No intellectual property rights are transferred to the customer unless expressly agreed in writing.

16. Confidentiality

Each party may receive confidential information from the other party. Confidential information must be protected with reasonable care and may only be used for the purpose of providing or receiving the services.

Confidentiality obligations do not apply to information that is publicly available, already known without restriction, independently developed or required to be disclosed by law.

17. Third-party services

The platform may include integrations, links or references to third-party services. Arba is not responsible for third-party services, websites, content or systems unless expressly agreed in writing.

Customers are responsible for reviewing and accepting any third-party terms that apply to their use of such services.

18. Suspension and termination

Arba may suspend or terminate access to the platform if:

  • The customer fails to pay agreed fees
  • The customer materially breaches these Terms
  • Use of the platform creates a security risk
  • Arba is required to do so by law
  • The subscription expires or is terminated

Upon termination, the customer’s access to the platform will end. Data export and deletion will be handled in accordance with the applicable agreement and data processing terms.

19. Limitation of liability

To the fullest extent permitted by law, Arba is not liable for indirect losses, loss of profit, loss of revenue, loss of business, loss of goodwill, loss of data or other consequential losses.

Arba’s total liability under these Terms is limited to the fees paid by the customer for the services during the 12 months preceding the event giving rise to the claim, unless otherwise agreed in writing.

Nothing in these Terms limits liability that cannot be limited under applicable law.

20. Indemnity

The customer agrees to indemnify Arba against claims, losses, damages and expenses arising from the customer’s unlawful use of the platform, breach of these Terms or violation of third-party rights.

21. Changes to these Terms

Arba may update these Terms from time to time. The updated version will be made available on the website or through the platform.

Material changes will take effect after reasonable notice, unless immediate changes are required for legal, security or operational reasons.

Continued use of the platform after the effective date of updated Terms constitutes acceptance of the updated Terms.

22. Governing law and jurisdiction

These Terms are governed by Danish law, excluding conflict of law rules.

Any dispute arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the Danish courts, unless otherwise agreed in writing.

23. Contact

If you have questions about these Terms, please contact:

Arba Security ApS
Pustervig 3, 4th floor
1126 Copenhagen K
Denmark
Email: info@arbasecurity.com
Phone: (+45) 52 51 24 60