Terms and Conditions

The agreement between you and Deploy Safe AI for use of the platform.

Deploy Safe AI · Version 1.0 · Last updated: Thursday 3rd September 2026

Jump to Schedule 1: Data Processing Terms

1. Who we are and what this covers

These terms govern your use of the Deploy Safe AI platform at deploysafe.ai and its subdomains (the "Service"). Deploy Safe AI is owned and operated by The SaaSy People Ltd, registered in England and Wales (company number 12341379), registered office 47 Cannon Street, Arca Building, Birmingham, B2 5EF ("we", "us", "our"). Our VAT registration number is 360 1161 44.

By creating an account or using the Service you agree to these terms on behalf of yourself and, where applicable, the organisation you represent. If you do not agree, do not use the Service.

2. The Service

The Service provides self-service AI questionnaires and assessments, including our AI Readiness Assessment, together with AI-assisted analysis of your answers and an indicative, high-level result. Based on that result, we may recommend relevant services from The SaaSy People.

The Service is an informational tool. It is not a compliance management system, an assurance service, or a substitute for professional advice.

3. Important: not legal advice

The Service provides information, analysis and general guidance to help you understand your position against selected laws, regulations and standards. It is not legal advice, it does not create an adviser-client relationship, and it does not guarantee that your organisation is or will be compliant with any law. Regulatory interpretation depends on facts we cannot verify and can change.

You remain solely responsible for your organisation's compliance and should take advice from a qualified professional before acting on any result. Results reflect the answers you provide, so inaccurate or incomplete answers will produce inaccurate results. AI-assisted analysis can contain errors.

4. Fees

The Service is currently provided free of charge. We may introduce paid features in future. If we do, the price and whether it includes or excludes VAT will be stated clearly at the point of purchase, and separate purchase terms may apply. You will never be charged for the Service without first agreeing to a price.

5. Accounts and invited users

  • You must provide accurate information and keep your credentials secure. You are responsible for activity under your account.
  • Company administrators may invite team members. Administrators are responsible for ensuring they are entitled to share company information with the people they invite. Invited members receive access limited to their role.
  • You must be at least 18 and using the Service for business purposes.
  • You must not share your account with anyone else or allow anyone else to use it.

6. Changes to the Service, and beta features

We may change, add to or withdraw parts of the Service. Where a change materially reduces the Service, we will give you reasonable notice.

Features identified as beta or early access are provided for evaluation, may change or be withdrawn at any time, and are provided without warranties or service commitments beyond those required by law.

7. Your data and our content

  • You own your assessment answers, uploads and company data. You grant us a non-exclusive, worldwide, royalty-free licence to host, store, copy and process that content for as long as we provide the Service to you, solely in order to provide the Service, including AI-assisted analysis, and as described in our Privacy Policy.
  • We may use aggregated, de-identified data to improve the Service. Aggregated data does not identify you, your organisation or any individual.
  • Our platform, question banks, rule libraries, scoring, results, reports and branding are our intellectual property or that of our licensors. Nothing in these terms transfers any of it to you.
  • Your result is for your organisation's internal use and may be shared with your professional advisers. It may not be resold or republished commercially without our written consent.

8. Data protection

Each party will comply with applicable data protection law. Where we process personal data as a controller, we do so as described in our Privacy Policy. Where we process personal data contained in your content on your behalf, we do so as your processor, and the Data Processing Terms in Schedule 1 apply and form part of these terms.

9. Confidentiality

Each party may receive information from the other that is marked confidential or that a reasonable person would treat as confidential. Each party will keep the other's confidential information secret, use it only in connection with the Service, and disclose it only to those of its staff and advisers who need it and are under equivalent obligations.

These obligations do not apply to information that is or becomes public through no fault of the receiving party, was already lawfully known to it, or is required to be disclosed by law or a regulator, provided that where lawful the disclosing party is told first. These obligations continue for three years after your account closes.

10. Service recommendations and marketing

As set out in the Privacy Policy, we may use your assessment results to recommend relevant services from The SaaSy People. Recommendations shown in your result are tied to your answers. Marketing communications always carry an opt-out, and opting out does not affect your use of the Service.

11. Acceptable use

You must not misuse the Service. In particular, you must not:

  • attempt to access another customer's data
  • probe, scan or circumvent security or access controls
  • submit unlawful content, or content that infringes anyone else's rights
  • submit special category personal data, or personal data about children
  • use the Service to build or train a competing product
  • scrape or extract our rule library or question banks, whether manually or by automated means
  • introduce malicious code, or place unreasonable load on the Service

We may suspend an account that puts the Service or other customers at risk. We will act reasonably and tell you why.

12. Availability, support and warranties

We aim to keep the Service available but do not guarantee uninterrupted or error-free operation. Planned maintenance will be scheduled sensibly. Support is provided via hello@thesaasypeople.com on UK business days.

Except as expressly set out in these terms, and to the fullest extent permitted by law, the Service is provided "as is" and we exclude all implied warranties, conditions and other terms, including as to satisfactory quality, fitness for a particular purpose, accuracy and completeness of results.

13. Liability

Nothing in these terms limits liability that cannot be limited by law, including liability for death or personal injury caused by negligence, or for fraud or fraudulent misrepresentation.

Subject to that:

  • we are not liable for indirect or consequential loss, loss of profits, loss of business, loss of anticipated savings, loss of goodwill, loss or corruption of data, or regulatory fines or penalties incurred by your organisation
  • our total liability arising out of or in connection with the Service in any 12-month period is limited to the fees you paid us for the Service in that period, and where the Service was provided to you free of charge we have no liability to you

You acknowledge that the Service is an informational tool and that compliance decisions remain yours, as set out in section 3.

14. Force majeure

Neither party is liable for a failure or delay in performing its obligations caused by an event beyond its reasonable control, including act of God, flood, fire, epidemic, war, civil unrest, terrorism, industrial action, failure of a utility or telecommunications network, or the failure of a third-party hosting or infrastructure provider. The affected party will tell the other as soon as reasonably practicable. If the event continues for more than 30 days, either party may terminate on written notice.

15. Suspension and termination

You may close your account at any time. We may suspend or terminate your access:

  • for material breach of these terms, giving notice and, where the breach can be remedied, a reasonable opportunity to remedy it
  • immediately, where required by law or where continued access presents a security or legal risk
  • on 30 days' written notice, if we discontinue the Service

On closure, your access ends and your data is handled in line with the retention terms in our Privacy Policy. If you need a copy of your data, ask us before you close your account.

16. Assignment and subcontracting

You may not assign or transfer these terms without our written consent. We may assign or transfer these terms to a group company, or in connection with a merger, acquisition or sale of assets, provided your rights under these terms are not reduced. We may use subcontractors and service providers to deliver the Service, and we remain responsible for their performance.

17. Third party rights

These terms do not give rise to any rights under the Contracts (Rights of Third Parties) Act 1999 for anyone who is not a party to them.

18. Notices

We will give you notice by email to the address registered on your account, or by a notice in the platform. You should give us notice by email to hello@thesaasypeople.com, or by post to The SaaSy People Ltd, 47 Cannon Street, Arca Building, Birmingham, B2 5EF. Email notices are treated as received on the next business day after sending.

19. Entire agreement and order of precedence

These terms, Schedule 1, and our Privacy Policy are the entire agreement between us in relation to the Service, and replace any earlier discussions or representations. Nothing in this section limits liability for fraud or fraudulent misrepresentation.

If there is a conflict, the order of precedence is: (1) Schedule 1 (Data Processing Terms), (2) these terms, (3) the Privacy Policy.

20. Survival

Sections that by their nature survive closure of your account continue to apply, including sections 3 (not legal advice), 4 (fees, in respect of any amounts owed), 7 (your data and our content), 9 (confidentiality), 13 (liability), 17 (third party rights), 19 (entire agreement), 21 (governing law) and Schedule 1.

21. Governing law and jurisdiction

These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction. If any provision is found to be unenforceable, the rest remain in force.

22. Changes to these terms

We may update these terms. Material changes will be notified in advance by email or in the platform, and your continued use of the Service after they take effect constitutes acceptance. If you do not accept a change, you may close your account. Previous versions are available on request.


Schedule 1: Data Processing Terms

These terms apply where we process personal data on your behalf as your processor.

1. Roles and scope

This Schedule applies where personal data contained in your content is processed by us on your behalf. For that processing you are the controller and we are the processor. Where we process personal data as a controller in our own right, this Schedule does not apply and our Privacy Policy governs instead. "Personal data", "processing", "controller", "processor" and "data subject" have the meanings given in UK GDPR.

2. Subject matter, duration, nature and purpose

  • Subject matter: processing of personal data contained in the content you submit to the Service.
  • Duration: for as long as we provide the Service to you, plus the retention period set out in our Privacy Policy.
  • Nature: hosting, storage, transmission, AI-assisted analysis, generation of assessment results, and deletion.
  • Purpose: providing the Service to you in accordance with these terms and your instructions.

3. Types of personal data and categories of data subject

  • Types of personal data: names, work contact details, job roles, and any other personal data you choose to include in assessment answers or uploaded evidence.
  • Categories of data subject: your personnel, contractors and, where you include them, your own customers or suppliers.

You must not submit special category personal data, criminal offence data, or personal data about children to the Service. The Service is not designed for it and we do not accept it as an instruction to process it.

4. Our obligations

We will:

  • process personal data only on your documented instructions, which include these terms and your use of the Service, unless required otherwise by law, in which case we will tell you first unless prohibited from doing so
  • ensure that our staff with access to personal data are subject to a duty of confidentiality and receive appropriate training
  • implement and maintain appropriate technical and organisational measures, as described in section 13 of our Privacy Policy and evidenced by our ISO/IEC 27001:2022 certification
  • assist you, at your cost where the work is material, in responding to data subject requests, and pass on without undue delay any request we receive directly
  • assist you, so far as reasonable, with data protection impact assessments and consultations with the Information Commissioner's Office
  • notify you without undue delay, and in any event within 48 hours, on becoming aware of a personal data breach affecting your personal data, and provide the information you reasonably need in order to meet your own notification obligations
  • make available the information you reasonably need to demonstrate our compliance with this Schedule

5. Your obligations

You will ensure that you have a lawful basis for the personal data you submit, that the individuals concerned have been given the information required by UK GDPR, and that your instructions to us do not put us in breach of data protection law.

6. Sub-processors

You give us general authorisation to appoint the sub-processors listed in section 7 of our Privacy Policy. We will impose data protection obligations on each sub-processor that are no less protective than those in this Schedule, and we remain responsible for their performance.

We will give you at least 30 days' notice before adding or replacing a sub-processor, by updating that section and notifying you by email or in the platform. If you reasonably object on data protection grounds, tell us within that period and we will work with you in good faith to find a solution. If we cannot, you may close your account without penalty.

7. International transfers

Where we transfer personal data outside the UK, we will do so only where a UK adequacy decision applies, or under the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment. Current transfers and safeguards are listed in sections 7 and 8 of our Privacy Policy.

8. Audit

On reasonable written notice, and no more than once in any 12-month period unless a personal data breach or a regulator requires otherwise, we will provide the information reasonably necessary to demonstrate compliance with this Schedule. Our first response will be our ISO/IEC 27001:2022 certification and the documentation available at security.thesaasypeople.com. Where that is genuinely insufficient, we will discuss a proportionate audit in good faith, on terms that protect the confidentiality and security of other customers' data, and at your cost.

9. Deletion and return

On termination or expiry, we will delete or return the personal data we process on your behalf in line with the retention periods in section 9 of our Privacy Policy, unless we are required by law to retain it. Deletion from our 90-day rolling backups takes effect within that cycle.

10. Liability

Our liability under this Schedule is subject to the limitations and exclusions in section 13 of these terms.

11. Contact

We have appointed a Data Protection Officer. All notices and requests under this Schedule should be sent to security@thesaasypeople.com, which reaches them directly.