Terms of Service

By using Nordvakt's services you agree to these terms. If you are using the service on behalf of an organization, you confirm you have authority to bind that organization.

Nordvakt provides simulated phishing campaigns and supporting training content to participating organizations and their staff. The service is intended for legitimate, consent-based security training only.

Fees and billing cadence are set out in your order form. Subscriptions auto-renew unless cancelled before the renewal date.

For customers, our DPA forms part of these Terms and governs Nordvakt's processing of personal data on your behalf. Key commitments include EU/EEA-only data residency, named subprocessors, breach notification within 72 hours, and assistance with data subject requests.

Each party will protect the other's confidential information using at least the same degree of care it uses for its own confidential information of like importance, and no less than reasonable care.

Target availability and support response times are documented in the SLA accompanying your order form.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, or consequential damages. Each party's aggregate liability under these terms is capped at the fees paid in the preceding 12 months, except for breaches of confidentiality, IP infringement, and gross negligence.

Either party may terminate for material breach not cured within 30 days of notice. Upon termination, we will return or delete customer data in accordance with the DPA.

These terms are governed by the laws of the EU member state where Nordvakt is registered, without regard to conflict of laws principles.

Legal notices: hello@nordvakt.co.