Terms of Service
These Terms of Service ("Terms") are a binding agreement between TurboClientSystems, Inc. ("TurboClientSystems," "we," "us," or "our") and the person or organization that accesses RunDEETS (the "Service"). By accessing or using the Service, you agree to these Terms and to the Privacy Policy, which is incorporated into them by reference. If you do not agree, do not use the Service.Effective August 21, 2026.
These terms are in force and govern your use of RunDEETS today. They were drafted in-house against how the software actually works rather than copied from a template, and they have not yet been reviewed by outside counsel — we will revise them before RunDEETS is generally available, and we would rather say so plainly than let you assume a review happened that has not. Nothing on this page is legal advice to you, and nothing on it overrides a separate signed agreement between your organization and TurboClientSystems, Inc.
1. Agreement to These Terms
By creating an account, signing in, or otherwise accessing or using the Service, you confirm that you have read, understood, and agree to be bound by these Terms and by our Privacy Policy. Almost everyone who uses the Service does so on behalf of an employer or client: if you are one of them, you represent that you have authority to bind that organization, and "you" in these Terms means both you individually and that organization, which is jointly responsible for use of the Service under its account. If your organization has signed a separate written agreement with TurboClientSystems covering the Service, that agreement controls wherever it conflicts with these Terms.
2. Pre-Release Software — Closed Alpha
RunDEETS is pre-release software in closed alpha, made available to a limited set of organizations for evaluation and feedback. It is not generally available, is not a finished product, and is provided free of charge during this period. Expect it to change, break, lose features, or be discontinued in whole or in part without notice; expect errors, incomplete functionality, and content that has not finished review; and expect no uptime, availability, support-response, backup, or data-durability commitment of any kind, because none is given. You must not use the Service as your organization’s sole or system-of-record means of establishing, demonstrating, or maintaining compliance with any obligation during this period, and you are responsible for maintaining your own independent records. We may contact you for feedback about your experience. Continued use of the Service constitutes agreement to these pre-release conditions in addition to the rest of these Terms. We will replace this section when RunDEETS reaches a later release stage; until then, "closed alpha" is the honest description, and no marketing statement, roadmap entry, or conversation implying otherwise modifies it.
3. What the Service Is, and How It Works
RunDEETS is a governance, risk, and compliance ("GRC") tool that maps regulatory and internal requirements to controls, tracks compliance activities, and helps you generate and organize evidence of that work. Its architecture is unusual and worth stating precisely, because much of what follows depends on it. The application is delivered to your browser as a web application, and all access to your organization’s data happens in that browser, using your own signed-in Microsoft Entra ID credentials and your own delegated permissions. Your compliance data is written to and read from a dedicated SharePoint site inside your organization’s own Microsoft 365 tenant. TurboClientSystems operates no application server, database, or file store that holds a copy of your organization’s compliance data, holds no service account or standing credential in your tenant, and cannot read your data on its own initiative. What does run on our side is the delivery of the application itself: the site is served by a third-party hosting provider, and a small amount of per-request code runs at that provider’s edge to set security headers and handle the Microsoft sign-in redirect. That code never receives, stores, or forwards your compliance data or your Microsoft access token. Features, integrations, and functionality may be added, changed, or removed at any time, particularly during closed alpha.
4. Not Legal, Regulatory, or Compliance Advice
The Service — including every statute, regulation, standard, mandate, control, exam, template, document, role, and crosswalk mapping it presents — is provided for informational and organizational purposes only. It is not legal advice, is not regulatory or audit advice, does not create an attorney-client or other professional relationship, does not guarantee or certify compliance with any law, regulation, standard, framework, contract, or customer requirement, and is not a substitute for review by qualified counsel or a subject-matter expert. No representation is made that the reference content is current, complete, correct, or applicable to your organization, that a mapping between two frameworks is authoritative, or that satisfying an item shown in the Service satisfies any real-world obligation. Your organization remains solely responsible for determining what obligations apply to it, for how it interprets and satisfies them, and for the accuracy, completeness, and legal sufficiency of every determination, submission, attestation, and piece of evidence it records using the Service.
5. Governance Content and How It Was Authored
The governance library in the Service consists of our own summaries, descriptions, and cross-references — it is not a reproduction of any statute, regulation, or published standard, and it is not a substitute for reading the authoritative source. Where an item refers to a third-party standard or framework (for example those published by NIST, ISO/IEC, ANSI, the AICPA, the CMMI Institute, the U.S. Department of Defense, or any government body), the underlying standard remains the property of its publisher and is subject to that publisher’s own licensing and copyright terms; obtaining any license you need to the authoritative text is your responsibility, not ours. You should also know that the governance content in the Service today was authored with AI assistance and has not yet been checked line by line against original source material by a human subject-matter expert. That review is planned and in progress. Until it is complete, treat every item in the library as a starting point to verify, not as an authority to rely on — which is exactly why Section 4 above is written as broadly as it is.
6. Intellectual Property and License
The Service, including its software, interface, design, documentation, and the governance library described above (excluding third-party standards themselves, and excluding Your Data as defined in Section 9), is owned by TurboClientSystems and its licensors and is protected by intellectual property law. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service for your organization’s own internal compliance purposes during the period we make it available to you. No other rights are granted, expressly or by implication, and all rights not expressly granted are reserved. Nothing in these Terms transfers ownership of the Service to you, and nothing in them transfers ownership of Your Data to us.
7. Eligibility and Your Account
The Service is intended for use by working professionals, aged 18 or older, acting on behalf of an organization, using a Microsoft work or school account issued by that organization. You may not use the Service if we have previously terminated your access. You are responsible for maintaining the confidentiality of your credentials, for keeping your account secure, and for all activity that occurs under your account or through your organization’s tenant. You must not share credentials or allow anyone else to sign in as you. Notify us promptly through our contact form at rundeets.com/contact if you believe your account or your organization’s RunDEETS storage has been accessed without authorization — though because your data sits in your own Microsoft 365 tenant, your own administrator, not us, holds the controls that actually stop it.
8. Tenant Setup, Administrative Consent, and Elevated Access
Before your organization can use the Service, a tenant administrator must set it up. That setup grants the Service delegated Microsoft Graph permissions in Microsoft Entra ID and provisions a dedicated SharePoint site and supporting lists inside your organization’s own Microsoft 365 tenant. It can be done either by running scripts the Service generates, using the administrator’s own credentials, or through an assisted in-browser flow in which the administrator signs in and the setup steps run under a temporary, elevated token in that administrator’s own browser tab. That elevated token is short-lived, is scoped to your tenant, is held only in the browser tab performing the setup, is visibly flagged in the interface while it is live, and is discarded when the administrator ends the session or closes the tab; it is never transmitted to or retained by TurboClientSystems. After setup, the Service holds no elevated permission, no service account, and no standing credential in your tenant. An administrator may revoke the Service’s access, disable its sign-in, and remove anything setup created, at any time, using scripts the Service also provides; you do not need our cooperation to do it. Separately, granting an individual person access to the resulting SharePoint site — and therefore to the data in it — is a manual step your administrator performs in SharePoint. The Service cannot grant or revoke that access on your administrator’s behalf, cannot see the site’s real membership, and any access or role information the Service displays is a record of intent that someone entered, not verified ground truth. Keeping that access correct is your administrator’s responsibility.
9. Your Data and Who Controls It
As between you and TurboClientSystems, your organization retains all right, title, and interest in the compliance data, configuration, evidence files, documents, exam submissions, comments, role assignments, and audit records it creates through the Service ("Your Data"). Your Data resides in your organization’s own SharePoint site, inside your organization’s own Microsoft 365 tenant, on infrastructure we neither own nor operate, and remains subject to your organization’s own agreements with Microsoft and its own administrative, security, backup, retention, and legal-hold decisions. We do not hold a copy, do not use Your Data to develop or train anything, do not sell it, and do not disclose it — we are not in a position to, because we cannot read it. The practical consequences run both ways and you should plan for both: nothing about the Service is a backup, we cannot restore data you delete or lose, we cannot recover access if your administrator revokes it, and we cannot produce Your Data in response to a legal request directed at us, because we do not have it. Requests of that kind must go to your organization or to Microsoft.
10. Your Responsibilities
You are responsible for the accuracy, quality, legality, and appropriateness of everything you put into the Service, and for the consequences of relying on it. You are responsible for confirming that the data your organization stores through the Service is data your organization is permitted to store in its own Microsoft 365 tenant, under whatever contractual, regulatory, or classification rules apply to it. You are responsible for who inside your organization has access, for keeping that access current as people join and leave, and for configuring your own tenant’s security and retention appropriately. You are responsible for obtaining any consents and providing any notices your own employees or other individuals are owed for information you record about them through the Service — including exam submissions, role assignments, comments, and audit entries, each of which is attributed to a named person. And you are responsible for independently verifying any compliance determination before you act on it or represent it to a regulator, auditor, customer, or contracting officer.
11. Acceptable Use and Restrictions
You agree to use the Service only for lawful purposes, in compliance with your organization’s own policies, and in a way that does not infringe anyone’s rights or interfere with anyone else’s use of the Service. You must not: copy, scrape, bulk-export, republish, resell, sublicense, or commercially exploit the governance library or any other part of the Service, or use it to build or train a competing product or dataset; reverse engineer, decompile, or disassemble the Service, or attempt to derive its source beyond what the browser necessarily discloses in order to run it; probe, scan, or test the security of the Service or of any Microsoft or hosting infrastructure it depends on, or attempt to circumvent any access control, rate limit, or security measure, except under a written authorization from us; use the Service to access any Microsoft 365 tenant, SharePoint site, or directory you are not authorized to access; upload malware or anything designed to disrupt the Service or another user; misrepresent your identity or your authority to act for an organization; or use the Service in a way that violates export control, sanctions, or other applicable law. We may investigate and take appropriate action, including suspending or terminating access, for any violation of this section.
12. Confidentiality
Each party may receive non-public information from the other in connection with the Service. Each agrees to protect the other’s confidential information with at least reasonable care, to use it only for purposes of the Service, and not to disclose it except to its own personnel and advisors who need it and are bound by comparable obligations, or as required by law with prompt notice where legally permitted. This obligation does not apply to information that is or becomes public without breach, was already known without a duty of confidence, is independently developed, or is rightfully received from a third party. In practice, our exposure to your confidential information is limited by architecture rather than by promise: as described in Section 9, we do not receive or hold Your Data.
13. Feedback
If you send us feedback, bug reports, feature requests, or suggestions about the Service, you grant us a perpetual, irrevocable, worldwide, royalty-free, sublicensable license to use, modify, and incorporate them into our products and services for any purpose, without restriction, attribution, compensation, or any other obligation to you. Please do not send us feedback containing your organization’s confidential information or personal information about anyone — we do not want it, and Section 9’s architecture is the reason we normally do not have it.
14. Fees
The Service is provided free of charge during closed alpha. No fee is currently due and no payment information is collected. We expect to introduce paid plans in the future; if we do, we will give notice, and continued use of any paid feature will require agreeing to the pricing and payment terms in effect at that time. Nothing in these Terms obligates you to purchase anything, and nothing in them obligates us to keep offering the Service free of charge. Note that the Service depends on your organization’s own Microsoft 365 subscription and SharePoint storage; those are your costs, billed by Microsoft, regardless of what we charge.
15. Third-Party Services and Microsoft Dependency
The Service is built on top of Microsoft 365, Microsoft Entra ID, Microsoft Graph, and SharePoint, and is delivered through a third-party web hosting provider. Your use of those services is governed by your own agreements with their providers, not by these Terms. We do not control them, do not warrant them, and are not responsible for their availability, performance, security, or pricing, or for changes they make that affect the Service — including a change that breaks the Service entirely or makes a permission we rely on unavailable. If your organization’s agreement with Microsoft ends or its tenant is deprovisioned, your ability to use the Service ends with it, and your data goes wherever your Microsoft agreement says it goes.
16. Disclaimer of Warranties
THE SERVICE, INCLUDING ALL GOVERNANCE CONTENT, MAPPINGS, TEMPLATES, AND GENERATED DOCUMENTS, IS PROVIDED "AS IS" AND "AS AVAILABLE," WITH ALL FAULTS AND WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, TURBOCLIENTSYSTEMS AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT, ACCURACY, AND NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. WITHOUT LIMITING THE FOREGOING, WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, SECURE, TIMELY, OR ERROR-FREE; THAT DEFECTS WILL BE CORRECTED; THAT ANY CONTENT IS ACCURATE, CURRENT, OR COMPLETE; OR THAT USE OF THE SERVICE WILL RESULT IN, DEMONSTRATE, OR PRESERVE COMPLIANCE WITH ANY LAW, REGULATION, STANDARD, FRAMEWORK, CONTRACT, OR CERTIFICATION. THIS IS PRE-RELEASE SOFTWARE, AND THE RISK OF USING IT RESTS WITH YOU. Some jurisdictions do not allow the exclusion of certain warranties, so parts of this section may not apply to you.
17. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, TURBOCLIENTSYSTEMS AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, AFFILIATES, AND SUPPLIERS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS OPPORTUNITY, DATA, OR COMPLIANCE OR CERTIFICATION STANDING, OR FOR ANY FINE, PENALTY, ASSESSMENT, DISALLOWED COST, CONTRACT LOSS, DEBARMENT, OR SUSPENSION IMPOSED ON YOU BY ANY REGULATOR, AUDITOR, CUSTOMER, OR CONTRACTING AUTHORITY, ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS, UNDER ANY THEORY OF LIABILITY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE TOTAL AMOUNTS YOU ACTUALLY PAID US FOR THE SERVICE IN THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM AND (B) ONE HUNDRED U.S. DOLLARS (US$100). BECAUSE THE SERVICE IS CURRENTLY PROVIDED FREE OF CHARGE, YOU SHOULD ASSUME THAT CAP IS US$100. These limits apply in the aggregate across all claims, are an essential basis of the bargain, and apply even if a limited remedy fails of its essential purpose. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud, willful misconduct, or death or personal injury caused by negligence; some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.
18. Indemnification
You will defend, indemnify, and hold harmless TurboClientSystems and its officers, directors, employees, agents, and affiliates from and against any third-party claim, demand, proceeding, loss, liability, damage, fine, penalty, cost, or expense (including reasonable attorneys’ fees) arising out of or related to: Your Data or anything you store, upload, generate, or transmit through the Service; your use of the Service in violation of these Terms or applicable law; any compliance determination, attestation, representation, or certification your organization makes in reliance on the Service; any claim by an employee or other individual regarding information you recorded about them through the Service; or your organization’s configuration or administration of its own Microsoft 365 tenant. We will notify you of any such claim, give you control of the defense (except that you may not settle in a way that admits our liability or imposes obligations on us without our written consent), and cooperate reasonably at your expense.
19. Term, Suspension, and Termination
These Terms apply for as long as you use the Service. You may stop at any time, and your organization’s administrator may revoke the Service’s access to your Microsoft 365 tenant at any time using the scripts the Service provides — which prevents the Service from reading or writing any further data and requires no action or permission from us. We may suspend or terminate access, in whole or in part, at any time and without liability, including for conduct that violates these Terms, for a security or legal risk, or because we are discontinuing the Service or part of it. Because we hold no copy of Your Data, termination on either side requires no data return, deletion, or migration step from us: Your Data stays exactly where it already is, in your own tenant, under your own control, in standard SharePoint lists and libraries you can read, export, or keep using without the Service. Sections 4, 5, 6, 9, 10, 12, 13, and 16 through 23 survive termination.
20. Export Control, Government Use, and Regulated Data
The Service can be configured for the Microsoft commercial cloud, Government Community Cloud High (GCC High), or the DoD cloud, matching your organization’s own Microsoft 365 environment. That configuration determines which Microsoft endpoints the Service talks to; it is not a certification, accreditation, or authorization of the Service itself. TurboClientSystems makes no representation that the Service is FedRAMP-authorized, StateRAMP-authorized, CMMC-certified, or assessed under any government security program, and holding a socioeconomic certification such as SDVOSB status is not a security authorization. You are solely responsible for determining whether your intended use — including any handling of Controlled Unclassified Information, Federal Contract Information, export-controlled technical data, protected health information, or any other regulated category — is permitted under your own contracts, your own authorization boundary, and applicable law, and for confirming that your own Microsoft 365 environment is appropriate for it. You agree to comply with all applicable export control and sanctions laws and not to use or make the Service available in violation of them. If you are a U.S. Government entity, the Service is "commercial computer software" under FAR 12.212 and DFARS 227.7202, licensed with only the rights granted in these Terms.
21. Changes to the Service and to These Terms
We may modify the Service at any time, as Section 2 describes. We may also update these Terms from time to time. When we do, we will change the effective date shown at the top of this page, and for material changes we will make reasonable efforts to give additional notice through the Service. Changes apply prospectively. Continued use of the Service after a change takes effect constitutes acceptance of the revised Terms; if you do not accept them, stop using the Service and have your administrator revoke its access. You should review this page periodically.
22. Governing Law and Dispute Resolution
These Terms, and any dispute arising out of or related to them or the Service, are governed by the laws of the State of Florida, excluding its conflict-of-laws rules and excluding the United Nations Convention on Contracts for the International Sale of Goods. The parties agree to the exclusive jurisdiction and venue of the state and federal courts located in that state, and each waives any objection to that venue. Before filing anything, the parties will attempt in good faith to resolve the dispute informally, by written notice to the other — to us through our contact form at rundeets.com/contact — followed by at least thirty days of conferring. Each party waives any right to a jury trial and to participate in a class, collective, or representative action, to the extent permitted by law. Any claim must be brought within one year after it arises, or it is permanently barred. Nothing in this section prevents either party from seeking injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.
23. General
These Terms, together with the Privacy Policy, are the entire agreement between you and TurboClientSystems about the Service and supersede any prior or contemporaneous understanding on that subject, other than a separate signed agreement as described in Section 1. If any provision is held unenforceable, it will be limited or severed to the minimum extent necessary and the rest remains in effect. Our failure to enforce a provision is not a waiver of it. You may not assign these Terms without our prior written consent; we may assign them in connection with a merger, acquisition, or sale of assets. Nothing here creates a partnership, joint venture, agency, employment, or fiduciary relationship, and there are no third-party beneficiaries. Neither party is liable for a failure to perform caused by events beyond its reasonable control. Notices to you may be given through the Service or to the email address associated with your account; notices to us must be submitted through our contact form at rundeets.com/contact, which is our designated channel for legal notice and is monitored for that purpose. Section headings are for convenience only.
24. Contact
RunDEETS is a product of TurboClientSystems, Inc., a Florida corporation. Questions about these Terms, and any legal notice under them, should be submitted through our contact form at rundeets.com/contact. We do not publish a support or legal email address; the form is our channel of record, and using it is what makes a notice under Section 23 effective.