Plain-language summary: By using Diliventa, you agree to use it lawfully and for its intended purpose (vendor security due diligence). We own the platform; you own your data. We offer a 7-day free trial. Subscriptions renew monthly unless cancelled. We are not liable for decisions made based on platform outputs — your qualified reviewers make final calls.
These Terms of Service ("Terms") constitute a legally binding agreement between you and Dr. Nolyn Johnson LLC ("Company," "we," "us," or "our") governing your access to and use of the Diliventa™ platform, including the website at diliventa.io, the application at app.diliventa.io, and any related services (collectively, the "Service").
By creating an account or accessing the Service, you confirm that you are authorized to bind your organization to these Terms and that your organization agrees to comply with them. If you do not agree, do not use the Service.
Diliventa™ is a vendor security assurance and GRC SaaS platform that provides:
Important — No Legal or Professional Advice: Diliventa is a decision-support tool. Platform outputs (scores, verdicts, AI analysis, risk ratings) are informational aids for qualified security professionals. They do not constitute legal advice, regulatory compliance certification, or a guarantee of a vendor's security posture. Your organization's qualified reviewers retain sole responsibility for all vendor decisions.
You must create an account through our secure authentication portal using a valid organizational identity. You are responsible for maintaining the confidentiality of your credentials and for all activities that occur under your account.
Each subscription plan includes a fixed number of user seats (2 for Starter, 5 for Professional, 15 for Enterprise). You may not exceed the seat count for your plan. You are responsible for ensuring that all users in your organization comply with these Terms.
You must notify us immediately at security@diliventa.io if you suspect unauthorized access to your account. We are not liable for losses resulting from unauthorized account use where you failed to notify us promptly.
Diliventa is offered on the following monthly subscription plans:
Annual billing with a 20% discount is also available. vCISO retainer packages are governed by a separate Master Service Agreement (MSA) and Statement of Work (SOW).
New organizations may access a 7-day free trial with no credit card required. At the end of the trial period, access is suspended until a paid subscription is activated. Trial data is retained for 30 days after trial expiration, then deleted.
Subscriptions are billed monthly in advance via Stripe. Subscriptions automatically renew each month unless cancelled before the renewal date. Prices are displayed in USD. We reserve the right to change pricing with 30 days' written notice to existing subscribers.
You may cancel your subscription at any time through the Stripe Customer Portal (accessible from the Billing page in the app). Cancellation takes effect at the end of the current billing period — you retain access through the period you paid for. We do not provide prorated refunds for partial billing periods except where required by applicable law.
If a payment fails, we will attempt to charge the payment method on file up to three times over seven days. If payment cannot be collected, your account will be suspended. Data is retained for 30 days after suspension before deletion.
You agree to use the Service only for lawful purposes and in accordance with these Terms. You must not:
We reserve the right to suspend or terminate accounts that violate this Acceptable Use policy without notice where the violation poses a security risk, and with reasonable notice otherwise.
The Diliventa platform, including its code, design, scoring methodology, deny trigger logic, AI prompts, GRC framework mappings, and all associated intellectual property, is owned exclusively by Dr. Nolyn Johnson LLC. "Diliventa™" is a trademark of Dr. Nolyn Johnson LLC. These Terms do not grant you any ownership rights in the platform.
You retain full ownership of all data you input into the platform, including vendor assessment content, uploaded documents, and GRC records ("Customer Data"). You grant us a limited, non-exclusive license to process Customer Data solely as necessary to provide the Service. We do not claim ownership of your Customer Data and do not use it for any purpose beyond operating your account.
If you submit suggestions, feature requests, or other feedback about the Service, you grant us the right to use that feedback without restriction or compensation to you.
The AI analysis feature sends documents you upload to Anthropic's API for processing. By using this feature:
We are not liable for errors in AI-generated analysis outputs or for vendor decisions made in reliance on those outputs without human review.
Our collection and use of personal information is governed by our Privacy Policy, which is incorporated into these Terms by reference. By using the Service, you consent to the data practices described in the Privacy Policy.
If your organization is subject to HIPAA, GDPR, or other regulatory frameworks requiring a data processing agreement with service providers, please contact legal@diliventa.io before uploading regulated data.
We strive to maintain high availability of the Service. However, we do not guarantee specific uptime percentages on Starter or Professional plans. Enterprise subscribers receive a priority support SLA with a 4-hour response time for critical issues.
Scheduled maintenance will be communicated with reasonable advance notice. We are not liable for downtime caused by third-party infrastructure providers or circumstances beyond our reasonable control.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DR. NOLYN JOHNSON LLC DISCLAIMS ALL WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
We do not warrant that: (a) the Service will be uninterrupted or error-free; (b) AI analysis outputs will be accurate, complete, or fit for any particular regulatory or compliance purpose; (c) the Service will meet every specific compliance requirement of your industry or jurisdiction.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DR. NOLYN JOHNSON LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFITS, DATA LOSS, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE.
OUR TOTAL LIABILITY TO YOU FOR ANY CLAIMS ARISING UNDER THESE TERMS SHALL NOT EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO US IN THE 12 MONTHS PRECEDING THE CLAIM OR (B) $100 USD.
These limitations apply even if we have been advised of the possibility of such damages and regardless of the theory of liability (contract, tort, strict liability, or otherwise).
You agree to indemnify, defend, and hold harmless Dr. Nolyn Johnson LLC and its officers, directors, employees, and agents from any claims, damages, losses, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Service in violation of these Terms; (b) your Customer Data, including any claim that it infringes a third party's rights; (c) any vendor decision made using platform outputs; or (d) your violation of any applicable law or regulation.
These Terms remain in effect while you have an active account. Either party may terminate the agreement:
Upon termination, your access to the Service ends. Your Customer Data is retained for 30 days after termination and then permanently deleted. You may export your assessment data in JSON format from within the platform before termination.
These Terms are governed by the laws of the State of Tennessee, United States, without regard to its conflict-of-law principles. Any dispute arising from these Terms shall be resolved first by good-faith negotiation between the parties. If unresolved within 30 days, disputes shall be submitted to binding arbitration under the rules of the American Arbitration Association (AAA), conducted in Tennessee, except that either party may seek injunctive relief in a court of competent jurisdiction to protect intellectual property or confidential information.
You waive any right to participate in a class action lawsuit or class-wide arbitration against Dr. Nolyn Johnson LLC.
We may update these Terms from time to time. When we make material changes, we will notify active subscribers by email at least 14 days before the changes take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. If you do not agree to the updated Terms, you must cancel your subscription before the effective date.
For questions about these Terms: