Service terms
Terms of Service
These terms describe the rules for using Oredra.
The service
Oredra helps customers organize customer-approved security information, create documentation based on supplied information, identify gaps, distribute policies, and prepare draft responses to security questionnaires. Features may include artificial-intelligence-assisted extraction and drafting.
Customer accounts and authority
Customers are responsible for safeguarding account credentials, limiting administrator access, maintaining accurate account information, and ensuring that users and uploaded materials are authorized. Actions taken through a customer account may be treated as authorized by that customer.
Customer review and responsibility
Customers must review, correct, and approve information before relying on or sharing it. Customers remain responsible for the accuracy, completeness, currency, legal sufficiency, and suitability of their security statements, policies, questionnaire responses, and supporting materials.
No certification, audit, or legal advice
Oredra is not an auditor, certification body, law firm, managed security provider, or penetration-testing service. Oredra does not certify or independently verify customers. Use of the service does not establish SOC 2, HIPAA, ISO 27001, or other compliance, certification, audit readiness, or successful operation of any control.
Artificial intelligence limitations
AI-generated or AI-assisted outputs may be incomplete or incorrect. Oredra is designed to avoid unsupported claims, but customers must independently review every output. Customers must not treat an AI-generated draft as verified evidence, tested control performance, legal advice, or an independent conclusion.
Customer content
Customers retain their rights in content they submit. Customers grant Oredra and its service providers the limited rights necessary to host, process, transmit, reproduce, and analyze that content solely to operate, secure, support, and improve the service, subject to applicable agreements and law.
Confidential and sensitive information
Customers should upload only information reasonably necessary to use the service and should avoid regulated, highly sensitive, or third-party-restricted information unless they have confirmed that its use is authorized and appropriate. Customers remain responsible for their disclosure obligations and contractual restrictions.
Acceptable use
Users may not attempt unauthorized access, interfere with operation, introduce malicious code, use the service unlawfully, infringe rights, probe other customers' data, or knowingly create false or misleading security, evidence, testing, audit, or certification claims.
Subscriptions, billing, and cancellation
Oredra's published standard plans are monthly only: Starter at $249/month, Business at $399/month, and Business Plus at $899/month. Oredra does not offer an annual-payment option. For published plan limits, active pricing headcount includes employees, contractors, Owners, and Administrators; the same person counts once. Offboarded People records and suspended workspace users are excluded. Custom pricing may apply when usage exceeds the published plan limits or another custom need applies. Current included usage, renewal terms, taxes, cancellation rights, and refund rules will be presented at purchase. Unless otherwise stated in an order or required by law, paid subscriptions renew monthly until canceled and fees already paid are nonrefundable.
Availability, changes, and suspension
Oredra may modify features and may suspend access to protect the service, address security or legal concerns, prevent misuse, or respond to nonpayment. Planned maintenance, third-party provider events, and circumstances outside Oredra's reasonable control may affect availability.
Disclaimers
To the maximum extent permitted by law, the service and outputs are provided on an 'as is' and 'as available' basis without warranties of accuracy, completeness, noninfringement, merchantability, fitness for a particular purpose, uninterrupted availability, or achievement of a compliance or commercial outcome.
Limitation of liability
To the maximum extent permitted by law, Oredra will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, lost profits, lost revenue, loss of goodwill, or loss of data.
Termination and data handling
Customers may stop using the service subject to applicable subscription terms. For customer-requested paid cancellations, Oredra provides a 10-day read-only download window after paid access ends. After that window, normal workspace access is locked and Oredra initiates removal of active workspace records and app user accounts. Infrastructure-provider recovery or storage retention may continue after active removal, including up to 30 days for deleted custom-table records. Oredra does not represent permanent deletion as complete unless the provider-side state can be verified. Oredra may separately terminate or suspend accounts for material breach, unlawful use, security risk, or nonpayment.
Contact
Questions about these terms can be sent through the Oredra contact page.
Last updated: August 15, 2026