Platform Terms of Service & EULA

Legal liability disclaimers, IP protection, and data governance guidelines for the Epicpaths Compliance Engine.

Effective Date: August 21, 2026 | Document Version: 1.0.0

1. Scope of Agreement

This End User License Agreement (EULA) and Data Governance Agreement governs the use of the Epic Compliance Engine SaaS. These terms apply to all active subscribers, evaluators, agency co-admins, and testers, and specifically govern all Auditor, Enterprise Junior, Enterprise Editor, Enterprise Admin, and Enterprise Owner accounts.

2. The "Tool vs. Practitioner" Liability Boundary

The Epic Compliance Engine provides automated Web Content Accessibility Guidelines (WCAG) 2.2 Level AA/AAA testing ingestion, structural DOM mapping, and Voluntary Product Accessibility Template (VPAT/ACR) formatting. By utilizing the platform, you explicitly agree to the following statutory boundary:

"The Epic Compliance Engine is exclusively a diagnostic, organizational, and reporting workflow utility, and does not constitute a legal certification authority or statutory compliance guarantee. While the platform enforces structured Web Content Accessibility Guidelines (WCAG) 2.2 matrices and Section 508 / EN 301 549 reporting standards, the accuracy, completeness, and legal defensibility of the underlying audit data remain the sole legal responsibility of the evaluating practitioner or subscribing entity. Epic Compliance Engine bears zero liability for third-party litigation, regulatory fines, or statutory non-conformance claims arising from audits executed via the software."

3. Client Intellectual Property & Soft-Delete Archival

All target platform URLs, DOM selectors, accessibility issue descriptions, and remediation guidance entered into the workspace remain the exclusive intellectual property and confidential data of the subscribing organization.

"Users acknowledge that deleting an audit project or finding row initiates a thirty (30) day 'Pending Archival' soft-delete state. During this window, data is hidden from active workspaces but recoverable upon administrative request. At the conclusion of the 30-day window, system cron schedulers execute an irreversible physical purge. Epic Compliance Engine is not liable for data unrecovered after this 30-day pending window expires."

4. Organizational Continuity & "Break-Glass" Authority

For multi-seat Enterprise subscriptions, the contracting agency or corporate entity—not the individual email address of the initial registrant—is recognized as the primary legal account holder.

"In the event of primary owner incapacitation, employee termination, abandonment, or internal ownership dispute, Epic Compliance Engine reserves the legal right to execute an administrative 'Break-Glass' override. Upon receipt of verified corporate, legal, or judicial authority, system administrators may programmatically transfer primary tenant ownership, billing linkage, and child seat mappings to an authorized co-admin or corporate officer without prior consent of the unreachable or disputing primary user."

5. Right to be Forgotten & Hard Purge Verification

Epicpaths operates in strict compliance with global privacy frameworks, including the European Union General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

"Subscribers may submit a formal Data Destruction Request upon account termination. Within fourteen (14) business days of verification, system administrators will execute an irreversible physical SQL deletion across all active tables, staging environments, and database archives, bypassing the standard 30-day soft-delete window. The engine will generate an automated, timestamped Data Destruction Certificate as permanent legal verification of complete data eradication."