Trust CenterThe agreement between your organisation and OnyxOne

Terms of Service

These Terms of Service (the “Terms”) are the agreement between your organisation and OnyxOne. They govern access to and use of this website and of the OnyxOne governance, risk and compliance (GRC) software supplied under subscription (together, the “Service”). They apply when your organisation signs an order for the Service, and to anyone who uses this website.

Last updated · 1 October 2026

Who we are

This website and the OnyxOne service are operated by ONYXONE TECHNOLOGIES LTD, a private limited company registered in England and Wales under company number 17352132, whose registered office is at 3 Mantua Street, London, England, SW11 2NE. In this document, “OnyxOne”, “we”, “us” and “our” mean ONYXONE TECHNOLOGIES LTD.

  • Legal name: ONYXONE TECHNOLOGIES LTD
  • Company number: 17352132
  • Registered in: England and Wales
  • Registered office: 3 Mantua Street, London, England, SW11 2NE
  • Governing law: the laws of England & Wales (United Kingdom)
  • Contact: hello@onyxone.uk

1. Definitions

OnyxOne
ONYXONE TECHNOLOGIES LTD, the company identified above, and “we”, “us” and “our” mean the same.
Customer
The organisation that signs an Order for the Service. The Service is supplied to organisations only.
Authorised User
An individual the Customer permits to use the Service, such as an employee, contractor or auditor acting for the Customer.
Order
The written order form, accepted proposal, statement of work or contract signed by the Customer and OnyxOne, setting out the modules licensed, the number of Authorised Users, the term and the fees.
Subscription
The right to use the Service on the scope and for the term set out in the Order.
Customer Data
Data the Customer or its Authorised Users submit to, or generate in, the Service, including records about the Customer’s own customers, counterparties and third parties.
Documentation
The materials OnyxOne makes available describing the Service and its configuration.
Agreement
These Terms, the Order, the Acceptable Use Policy and the Data Processing Agreement, read together.

2. What OnyxOne is

OnyxOne is an enterprise governance, risk and compliance (GRC) operating system: software that helps regulated and compliance-sensitive organisations manage risk registers, internal controls, policies, regulatory obligations, audits, evidence, compliance cases, third-party risk and regulatory reporting, and govern their customer due-diligence lifecycle. OnyxOne is not a real-time transaction-monitoring or payment-decisioning system; where such detection is required, OnyxOne integrates with the engines and providers that perform it.

OnyxOne is a technology vendor. It is not a bank, payment service provider, electronic money institution, payment institution, crypto-asset service provider or other regulated financial institution; it does not provide regulated financial services, hold or transmit client money, or act as an obliged entity under anti-money-laundering law; and it does not provide legal, regulatory or compliance advice. Responsibility for the Customer’s regulatory obligations, and for decisions the Customer makes using the Service, remains with the Customer.

3. Business customers only

The Service is enterprise software licensed to organisations for their own business purposes. It is not offered to consumers, and OnyxOne does not contract with individuals acting outside a business or profession. By signing an Order, the Customer confirms that it is acting in the course of its business and that the individual signing has authority to bind it.

Because the Customer is not a consumer, consumer-protection rules do not apply to the Agreement, including statutory distance-selling and cooling-off cancellation rights. Payment, term, renewal and cancellation are governed by sections 9 and 10 below.

4. How the Service is bought

The Service is sold through a direct, contracted sales process, not through an online checkout. The usual sequence is a demonstration and scoping conversation, a written proposal, an Order signed by both parties, provisioning of the Customer’s workspace, and invoicing.

This website does not sell subscriptions, take payments or collect payment-card details. The forms on it are used to request a demonstration or to contact us, and no part of this website completes a purchase.

The Agreement is formed when the Order is signed by both parties. Where an Order and these Terms conflict, the Order prevails on the commercial matters it covers, and these Terms, the Acceptable Use Policy and the Data Processing Agreement govern the rest. A Customer’s own purchase-order conditions or supplier-portal terms do not apply unless OnyxOne accepts them in writing.

5. Subscription & licence

Subject to the Agreement and payment of the fees, OnyxOne grants the Customer a non-exclusive, non-transferable, non-sublicensable right for its Authorised Users to access and use the Service during the Subscription term, for the Customer’s internal business use and within the scope set out in the Order.

Accounts are issued to named individuals and must not be shared. The Customer is responsible for its Authorised Users’ compliance with the Agreement, for keeping credentials secure, and for removing access when a person no longer needs it.

The Customer must not exceed the number of Authorised Users or the usage limits in the Order. Where it needs more, the parties agree an additional Order.

6. Acceptable use

The Customer must use the Service lawfully and in accordance with our Acceptable Use Policy, which forms part of the Agreement. The Customer must not resell or commercially redistribute the Service, reverse-engineer it, use it to build a competing product, or use it outside the scope of its Subscription.

7. Customer Data & data protection

As between the parties, the Customer owns its Customer Data. The Customer grants OnyxOne the rights needed to host and process Customer Data in order to provide the Service. Where OnyxOne processes personal data on the Customer’s behalf, it does so as a processor under our Data Processing Agreement, which governs that processing and forms part of the Agreement.

The Customer is responsible for having a lawful basis to submit Customer Data to the Service, for the accuracy of that data, and for the decisions it records in the Service.

8. Confidentiality

Each party may receive the other’s confidential information, including commercial terms, security information and product plans, and, in OnyxOne’s case, Customer Data. Each party will keep the other’s confidential information confidential, use it only to perform the Agreement, and disclose it only to personnel and professional advisers who need it and are bound by equivalent duties.

These duties do not apply to information that is public without breach of the Agreement, was already lawfully known, is independently developed, or must be disclosed by law, a court or a regulator; where disclosure is compelled, the disclosing party gives notice if it is lawfully able to. The duties continue for three years after the Agreement ends, and for as long as the law allows in the case of Customer Data and trade secrets.

9. Fees, invoicing & payment

The fees, the currency, the billing frequency and any usage limits are set out in the Order. Unless the Order says otherwise, fees are invoiced in advance for each term.

Unless the Order states a different period, invoices are payable within 30 days of the invoice date, by bank transfer to the account shown on the invoice, in full and without set-off or deduction.

Fees are exclusive of value added tax and of any other tax, duty or withholding, which the Customer pays in addition where it applies by law.

Where an invoice is overdue, OnyxOne may charge interest at the statutory rate under the Late Payment of Commercial Debts (Interest) Act 1998 and, after written notice and a reasonable further period to pay, may suspend the Service until the account is current. The Customer may withhold an amount it disputes in good faith if it notifies OnyxOne of the dispute in writing before the due date and pays the rest; the parties then resolve the dispute promptly.

Fees can change for a future term only. Any change is set out in the proposal or Order for that term, so the Customer knows the price before it commits. Fees for a term already agreed do not change during that term.

10. Term, renewal & cancellation

The Subscription begins and runs for the term stated in the Order.

A Subscription does not renew automatically unless its Order expressly says so. Where the Order is silent, the Subscription expires at the end of its term, nothing further is invoiced or charged, and a further term is taken by agreeing a new Order. Where an Order does provide for renewal, it states the renewal term and the notice period for declining it.

Because terms are invoiced in advance, stopping use part-way through a term does not end the obligation to pay the fees for that term, and OnyxOne does not pro-rate or refund the unused part of a term the Customer chooses to stop using. The Customer keeps access until the term expires.

OnyxOne corrects billing errors. Where the Customer is invoiced or charged more than once for the same term, or in an amount other than the Order states, OnyxOne credits or repays the difference. Where OnyxOne cannot provision the Service at all, or terminates the Agreement for its own convenience, it refunds the fees for the unused part of the term. Fees are otherwise non-refundable.

There is no consumer cooling-off period, because the Service is not supplied to consumers.

11. Support & availability

OnyxOne provides support to the Customer’s administrators by email at hello@onyxone.uk during United Kingdom business hours. Where an Order sets out defined service levels, target availability, response times or service credits, those apply in place of this section. OnyxOne does not offer service levels that an Order does not state.

OnyxOne maintains and updates the Service. It uses reasonable efforts to schedule disruptive maintenance outside United Kingdom business hours and to give the Customer advance notice, and publishes current platform status on our Status page.

12. Intellectual property

The OnyxOne name, brand, software, Documentation and the look and feel of the Service are owned by OnyxOne or its licensors and are protected by law. Except for the rights expressly granted, nothing in the Agreement transfers any intellectual-property right to the Customer. Configurations, templates and frameworks the Customer builds in the Service remain the Customer’s, as part of its Customer Data.

Where the Customer provides feedback or suggestions, OnyxOne may use them to improve the Service without restriction or obligation.

13. Third-party services

The Service integrates with third-party providers: including hosting, database and screening or data providers configured for the Customer’s deployment. OnyxOne is not responsible for the availability or acts of third-party services outside its control, and the Customer’s use of them may also be subject to those providers’ own terms. Providers that process personal data are handled as sub-processors under the Data Processing Agreement.

14. Compliance with laws, sanctions & anti-bribery

Each party complies with the laws that apply to it in performing the Agreement, including anti-bribery and anti-corruption law, applicable sanctions and export-control regimes, and modern-slavery law, and neither party will act in a way that puts the other in breach of them.

OnyxOne does not supply the Service to a person or organisation that is the target of applicable sanctions. The Customer confirms that it is not such a person and that it will not give access to the Service to one.

15. Warranties & disclaimers

Each party warrants that it has the authority to enter into the Agreement. OnyxOne warrants that it will provide the Service with reasonable skill and care, and that the Service will perform materially as described in the Documentation.

Except for those warranties, the Service is provided “as is” and “as available”. To the fullest extent permitted by law, OnyxOne disclaims all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. OnyxOne does not warrant that the Service will be uninterrupted or error-free, does not warrant that use of the Service will result in compliance with any law or regulatory expectation, and the Service is not legal, regulatory or compliance advice.

16. Limitation of liability

To the fullest extent permitted by law, neither party is liable for any indirect, incidental, special, consequential or punitive loss, or for loss of profits, revenue, goodwill or anticipated savings. Each party’s total aggregate liability arising out of or related to the Agreement is limited to the fees paid or payable for the Service in the twelve months before the event giving rise to the claim.

Nothing in the Agreement excludes or limits liability that cannot be excluded or limited under English law, including liability for death or personal injury caused by negligence and for fraud or fraudulent misrepresentation. The limits above do not apply to the Customer’s obligation to pay fees properly due.

17. Indemnity

The Customer indemnifies OnyxOne against reasonable losses arising from its breach of the Agreement, its misuse of the Service, or its Customer Data infringing the rights of a third party or breaching applicable law.

18. Suspension & termination

Either party may terminate the Agreement on written notice for a material breach that is not remedied within 30 days of notice of it, or immediately if the other becomes insolvent, enters an insolvency process or ceases to carry on business.

OnyxOne may suspend access, in whole or in part, where the law or a regulator requires it, where suspension is necessary to prevent harm to the Service or to another customer, where the Acceptable Use Policy has been breached, or where fees remain overdue after notice. Suspension is limited to what is necessary, and access is restored once the cause is resolved.

On expiry or termination, the Customer’s right to use the Service ends, and Customer Data is returned or deleted as set out in the Data Processing Agreement. For 30 days after the Agreement ends, OnyxOne will on request give the Customer a reasonable opportunity to export its Customer Data.

The provisions intended to survive do so, including confidentiality, intellectual property, fees already due, limitation of liability, indemnity, and governing law and disputes.

19. Publicity

Neither party will use the other’s name or logo publicly, or describe the relationship in marketing, without the other’s prior written consent. OnyxOne does not publish customer names, logos, metrics or case studies without written consent.

20. Force majeure

Neither party is liable for a failure or delay caused by an event beyond its reasonable control, including natural events, war, terrorism, civil disorder, industrial action outside its own workforce, failure of utilities, or failure of a telecommunications or hosting provider, or government action. The affected party notifies the other and uses reasonable efforts to mitigate. Either party may terminate the Agreement if the event continues for more than 60 days. This section does not excuse payment for Service already provided.

21. Assignment & subcontracting

Neither party may assign or transfer the Agreement without the other’s written consent, except that either party may assign it to a successor of its business or relevant assets on written notice. OnyxOne may use subcontractors to deliver the Service, remains responsible for their performance, and handles those that process personal data as sub-processors under the Data Processing Agreement.

22. Notices

Notices under the Agreement are given in writing. Notices to OnyxOne are sent to hello@onyxone.uk and, for formal legal notices, also by post to the registered office stated above. Notices to the Customer are sent to the contact named in its Order. An email notice takes effect on the next business day; a posted notice takes effect two business days after posting.

23. General

Entire agreement
The Agreement is the entire agreement between the parties on its subject matter and replaces earlier discussions, proposals and representations, except that nothing limits liability for fraud.
Variation
A variation of an Order must be in writing and agreed by both parties. OnyxOne may update these Terms as set out in the next section.
Severability
If a provision is held unenforceable, the rest continues in force and the provision is applied so far as it lawfully can be.
No waiver
A failure or delay in enforcing a right is not a waiver of it.
No partnership
The Agreement does not create a partnership, joint venture, agency or employment relationship, and neither party may bind the other.
No third-party rights
Only the parties may enforce the Agreement. No one else acquires rights under the Contracts (Rights of Third Parties) Act 1999.

24. Changes to these Terms

OnyxOne may update these Terms as the Service evolves. Material changes are dated and published here. Where an Order is in force, a change applies to that Customer from the start of its next term, unless the change is required for legal, regulatory or security reasons, in which case OnyxOne notifies the Customer and the change applies from the date stated in the notice. Continued use of the website is acceptance of the current Terms.

25. Governing law & disputes

The Agreement and any non-contractual obligations arising from it are governed by the laws of England & Wales. The parties submit to the exclusive jurisdiction of the courts of England & Wales.

Before starting proceedings, each party will raise the dispute with the other’s senior contact and try in good faith to resolve it within 30 days. This does not prevent either party from seeking urgent injunctive relief at any time.

26. Contact

Questions about these Terms: hello@onyxone.uk.