01 · Acceptance.
By creating an account or using IQS Flow, the organization on whose behalf the account is created agrees to these terms. If you are an individual using the product as part of an enterprise account, your use is governed by the master services agreement signed by your organization and, secondarily, by these terms to the extent the two do not conflict.
02 · Access and accounts.
An IQS Flow account is provisioned by IQS Flow in one of three role types: Customer, Vendor, or Inspector. Each user is accountable for the accuracy of their own credentials and for notifying us promptly of suspected compromise. Passwords must meet minimum NIST 800-63B complexity requirements; multi-factor authentication is available for all accounts and required for Inspector and Admin roles.
03 · The three roles.
IQS Flow is not a neutral multi-tenant SaaS product; it is a system that produces a scored record that three commercial parties agree to treat as independent. Access is scoped accordingly:
- Customers may read scored records for their portfolio, configure rubrics, and export evidence.
- Vendors may read scored records for work performed under their contract, submit corrective actions, and attach context to findings; they may not alter, delete, or re-score completed inspections.
- Inspectors may record inspections, attach evidence, and submit scores. Once signed, inspection records become immutable.
These restrictions are load-bearing. The product’s usefulness to all three parties depends on them being enforced technically, and we will not grant exceptions except via contract amendment.
04 · Data ownership.
The customer owns the operational data produced under its contract. IQS Flow is the processor. We do not sell, license, or share customer operational data outside the scoped role-based sharing that is the product itself. We retain an aggregated, de-identified right to use operational data for methodology research (e.g., the VAS corpus) and for product improvement. That aggregated use never includes customer-identifiable data in external publications.
05 · Fees and billing.
Fees are as set forth in the applicable order form or self-service plan. Self-service plans are billed monthly in advance; enterprise plans are billed per the order form. All fees are in US dollars unless otherwise stated. Failure to pay within 30 days of invoice may result in suspension of the account, with 14 days of written notice.
06 · Term and termination.
Self-service subscriptions renew monthly until canceled. Enterprise subscriptions run for the term set in the order form. Either party may terminate for material breach on 30 days’ written notice, provided the breaching party has not cured the breach within that window. On termination, the customer may export all data for a period of 90 days; after that, data is retained per the Privacy Policy.
07 · Availability.
We commit to 99.9% monthly uptime on the core application surface (authentication, inspection capture, evidence upload, score read). Planned maintenance windows are published at least 72 hours in advance and do not count against uptime. Service credits for missed SLA are detailed in the enterprise order form.
08 · Liability.
Each party’s aggregate liability for claims arising from these terms is limited to the fees paid by the customer to IQS Flow in the 12 months preceding the claim. Neither party is liable for indirect, consequential, or lost-profit damages. Nothing in this section limits liability for willful misconduct, breach of confidentiality, or indemnification obligations.
09 · Governing law.
These terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws principles. Disputes arising under these terms shall be resolved by binding arbitration in Wilmington, Delaware, in accordance with the Commercial Arbitration Rules of the American Arbitration Association.
Contact for contract questions: legal@iqsflow.com.