Terms of Service

Acceptance of Terms

By accessing or using Do GRC, you agree to be bound by these Terms of Service and all applicable laws and regulations. If you do not agree with any part of these terms, you should not use the platform.

Eligibility

You must be at least 16 years of age to use Do GRC. By using the platform, you represent that you meet this age requirement and have the legal capacity to enter into these terms.

Accounts and Access

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to:

• Provide accurate and complete registration information.
• Notify us immediately of any unauthorised use of your account.
• Not share your account credentials with third parties.
• Not create multiple accounts for the purpose of abusing the platform.

Plans and Subscriptions

Do GRC offers a free tier and a paid Pro membership. The free tier provides access to beginner and intermediate learning paths, limited AI checks, limited text-to-speech characters, and a limited number of answer reveals. The Pro membership unlocks advanced learning paths, scenario submissions, case studies, the GRC Coach, GRC Tools (integrated governance, risk, and compliance modules), Interview Prep, Exam Prep (when available), the Resume Point Generator, additional AI checks, text-to-speech characters, and unlimited answer reveals.

Paid subscriptions are billed weekly or monthly via Stripe (PayPal billed monthly only). By subscribing, you authorise recurring charges to your selected payment method. You may cancel your subscription at any time through the billing portal; access to paid features will continue until the end of the current billing period.

No discounts. No refunds. Do GRC subscriptions are sold at the listed price only. We do not issue discount codes, promo codes, coupons, or refunds — including partial refunds for unused time, accidental renewals, or cancelled subscriptions. See the Refund Policy for details.

We reserve the right to modify pricing, features, or usage limits at any time. Material changes will be communicated in advance through the platform or via email.

Usage Limits

Both free and paid plans include usage limits for certain features, including AI checks, text-to-speech characters, scenario submissions, answer reveals, GRC Coach messages and journey generations, GRC tool record counts per module, and interview prep grading submissions. These limits reset at the start of each billing cycle (paid) or daily/monthly as applicable. Attempting to circumvent usage limits through multiple accounts or automated tools is a violation of these terms.

Acceptable Use

You agree not to:

• Use the platform for any unlawful purpose or in violation of any applicable laws.
• Attempt to gain unauthorised access to any part of the platform or its systems.
• Interfere with or disrupt the platform's infrastructure or other users' access.
• Scrape, copy, or redistribute platform content without written permission.
• Use automated tools to access the platform in a manner that exceeds reasonable use.
• Share, resell, or transfer your subscription or account access to others.

AI-Powered Features

Do GRC uses AI services to power features including the GRC Coach, scenario and interview prep grading, and GRC tool data population. AI-generated output — including coaching advice, feedback, scores, model answers, and populated data — is provided for educational and practice purposes only.

AI output may be inaccurate, incomplete, or out of date. It does not constitute professional advice and should not be relied on as a substitute for qualified legal, compliance, audit, or risk management guidance. You are solely responsible for how you use AI-generated content from the platform.

Usage of AI features is subject to the daily and monthly quotas described in the Usage Limits section. We reserve the right to modify, suspend, or discontinue any AI-powered feature at any time.

GRC Tools Data

The GRC Tools allow you to create, store, and manage governance, risk, and compliance records within the platform. This data is stored in your account and is subject to per-module record limits. GRC tool data you create is treated as User Submissions and is governed by the User Submissions section below.

GRC tool data is intended for learning and practice purposes. It is not a substitute for a production GRC system. We do not guarantee data availability, backup, or recovery beyond our standard platform operations. You may export or delete your GRC data at any time through the platform.

Intellectual Property

All content on Do GRC — including learning paths, modules, scenarios, case studies, GRC tool templates, interview prep questions, exam prep materials, AI Coach prompts, graphics, and trademarks — is owned by or licensed to Do GRC. You may not reproduce, distribute, or create derivative works from platform content without prior written consent.

Free vs Paid Content Licence

Do GRC grants you a limited, personal, non-exclusive, non-transferable, revocable licence to access and use platform content strictly for your own individual learning. The scope of that licence depends on your plan:

• Free tier. You may access the free learning paths, tasks, and any material explicitly marked as free. Free material may be viewed and worked through for personal, non-commercial learning only. You may not copy, republish, redistribute, or use free material to train any machine-learning or generative-AI model, and you may not use it to build a competing product or service.
• Paid tier. A paid subscription additionally unlocks advanced learning paths, scenario submissions, case studies, AI marking, the GRC Coach, GRC Tools, Interview Prep, Exam Prep (when available), the Resume Point Generator, and other premium features. Paid content is licensed to you for the duration of your active subscription only. The licence to paid content automatically terminates when your subscription ends, lapses, or is cancelled, and you must stop accessing and using paid material at that point. Any certificates you have already earned remain valid as a record of completion.
• Nothing on the platform — free or paid — may be scraped, mirrored, bulk-downloaded, resold, sublicensed, or shared with third parties. Screenshots and short quotations for legitimate personal study, review, or commentary are permitted provided Do GRC is credited and the material is not republished in a way that substitutes for a licence.

This section sets the outer boundary of what you are entitled to do with our content. Any use that falls outside the scope of the licence granted here is an infringement of our intellectual property rights and a breach of these terms.

User Submissions

Parts of Do GRC let you submit your own content — including scenario responses, case study answers, written tasks, GRC tool records (risks, incidents, policies, vendors, and other data you create in the GRC Tools), GRC Coach conversations, interview prep answers, feedback, and any other material you voluntarily upload, type, or otherwise provide through the platform (collectively, “User Submissions”). This section governs everything you submit.

Your ownership

You retain all ownership and intellectual property rights in your User Submissions. Submitting content to Do GRC does not transfer ownership of that content to us.

Licence you grant to Do GRC

By submitting content to the platform, you grant Do GRC a worldwide, non-exclusive, royalty-free, sublicensable (to our hosting, AI, and infrastructure providers only) licence to host, store, reproduce, transmit, display, and process your User Submissions for the following purposes:

• Operating the platform and delivering the features you use (e.g. saving your progress and showing your submissions back to you).
• Running automated and AI-assisted marking, feedback, and grading on your submissions.
• Generating certificates, progress records, and analytics tied to your account.
• Monitoring for abuse, enforcing these Terms, and complying with legal obligations.
• Improving our services — including debugging, quality assurance, training internal classifiers, and evaluating the performance of our AI marking. Where your submissions are used for service improvement beyond your own account, we will either aggregate or de-identify them so that they are not linked to you.

This licence lasts for as long as we need it to provide and improve the services, and survives termination of your account only to the extent necessary to maintain backups, comply with law, and keep de-identified or aggregated learning signals. You can delete your account at any time; when you do, we will remove your identifiable User Submissions from active systems in accordance with our Privacy Policy.

Your warranties

By submitting content, you represent and warrant that:

• You own your User Submissions or otherwise have all rights, licences, consents, and permissions necessary to grant the licence above.
• Your submissions do not infringe any third party's copyright, trade mark, trade secret, privacy, publicity, or other intellectual property or proprietary right.
• Your submissions do not contain confidential information belonging to your employer, client, or any other party that you are not authorised to share.
• Your submissions do not contain personal data of other individuals unless you have a lawful basis to share it.
• Your submissions do not contain malware, exploit code targeted at real systems, unlawful content, harassment, or material that is defamatory, obscene, or otherwise objectionable.

Prohibited submissions

You must not upload, paste, or otherwise submit any material that you do not have the right to share. In particular, you must not submit:

• Copyrighted text, code, images, or media belonging to someone else, except for short quotations used for legitimate commentary with attribution.
• Policies, control frameworks, audit working papers, or other documents belonging to an employer, client, or third party without their written permission.
• Content from other training platforms, textbooks, or certification materials that is protected by copyright or by the terms of a separate licence.
• Output from another service where that service's terms prohibit reuse of the output on platforms like ours.
• Real personal data, credentials, secrets, or sensitive security findings about live systems.

You are solely responsible for your User Submissions. Do GRC does not pre-screen submissions and does not endorse them. If you believe content on the platform infringes your rights, please contact hello@dogrc.com with a description of the work, the location of the allegedly infringing material, and a statement of your good-faith belief that the use is unauthorised.

Takedown, Suspension, and Termination

We take intellectual property, privacy, and platform integrity seriously. Do GRC reserves the right, at its sole discretion and without prior notice where necessary, to:

• Remove, redact, or disable access to any User Submission we reasonably believe infringes a third party's rights, violates these Terms, or is otherwise harmful.
• Suspend or restrict access to your account while we investigate a suspected breach.
• Terminate your account and end your subscription where you have materially or repeatedly breached these Terms, including by submitting infringing or prohibited content.
• Preserve relevant records — including submission content, timestamps, IP addresses, and account metadata — for evidential purposes in connection with a suspected breach or a legal claim.
• Cooperate with rights holders, regulators, and law enforcement where we are legally required to do so or where cooperation is reasonably necessary to protect our users or the platform.

Termination of your account ends your licence to access paid content with immediate effect. Termination does not refund any fees already paid (see the Refund Policy) and does not waive any claim Do GRC may have against you for the underlying breach. Sections of these Terms that by their nature should survive termination — including the licences you grant us, your warranties, the prohibited submissions clause, indemnities, and the limitation of liability — will continue to apply after your account ends.

Nothing in this section limits any other right or remedy available to Do GRC at law or in equity, including the right to seek injunctive relief and damages against any person who infringes our content licence or uploads infringing material to the platform.

Limitation of Liability

Do GRC is provided "as is" without warranties of any kind. To the fullest extent permitted by law, we shall not be liable for any indirect, incidental, or consequential damages arising from your use of the platform.

Changes to Terms

We reserve the right to update these Terms of Service at any time. Material changes will be communicated through the platform or via email. Continued use of Do GRC after changes constitutes acceptance of the revised terms.

Non-Affiliation Notice

Do GRC is an independent project and is not affiliated with, endorsed by, or sponsored by TryHackMe or Hack The Box.

Contact

If you have questions about these terms, please contact us at hello@dogrc.com.