Last updated July 8, 2026
These Terms of Service (the “Terms”) are a binding agreement between ⟦ENTITY⟧ (“Credplot,” “we,” “us”) and the company or person that creates an account or uses Credplot (the “Customer,” “you”). By creating an account or using the Service, you agree to these Terms. If you are agreeing on behalf of a company, you represent that you are authorized to bind it. Our Privacy Policy and Data Processing Addendum are part of these Terms.
These headline terms control; the sections below add detail.
You are responsible for your account, for the accuracy of the data you enter, for maintaining the confidentiality of your credentials, and for the activity of your users. You must have the right and authority to upload the credentials and personal information you add on behalf of your employees and contractors.
You agree not to use the Service to:
You retain ownership of the data you submit (“Customer Data”). You grant us the limited, non-exclusive license needed to operate the Service — to host, process, extract from, screen, and share Customer Data at your direction — and to create de-identified, aggregated data to operate and improve the Service. We process Customer Data in accordance with our Privacy Policy and DPA. As between the parties, we own the Service and all related intellectual property.
Credplot lets you screen your workforce against publicly available government exclusion lists (such as the OIG LEIE and SAM.gov). Credplot is a software tool, not a consumer reporting agency, and the screening results are not consumer reports prepared by Credplot. You are the end user of that public-record information and are solely responsible for your compliance with the Fair Credit Reporting Act and analogous state laws — including providing any required disclosures, obtaining written authorization, and following adverse-action procedures. The Service records the consent you capture and will not run a screen for an individual without it.
The Service is designed for workforce and employment records. You agree not to upload patient records, treatment information, or other protected health information governed by HIPAA as a covered entity or its business associate. Employment records an employer holds about its own workforce are outside that scope. Credplot is not a HIPAA business associate and does not enter into business associate agreements.
Credplot organizes credentials and performs automated checks against available sources. Its output — including compliance scorecards, screening results, and generated packets — is an aid, not a primary-source verification certificate or a legal or compliance determination. You remain responsible for your own compliance decisions.
We use commercially reasonable efforts to keep the Service available, but at the current tier we do not commit to a formal uptime service-level agreement, and the Service may be unavailable for maintenance, updates, or reasons outside our control. We provide support through the channels described in the Service. We may modify, add, or discontinue features over time; if we make a material adverse change to a core feature you rely on, we will use reasonable efforts to give notice. We are not liable for any modification, suspension, or discontinuation of the Service except as expressly stated in these Terms.
Paid plans are billed in advance for the subscription term stated at purchase and renew for successive equal terms unless cancelled before the renewal date. Fees are non-refundable except as required by law or expressly stated. We may change fees for a renewal term with reasonable notice. You are responsible for any taxes other than taxes on our income. Overdue amounts may accrue interest and, after reasonable notice, may result in suspension.
We may offer free trials, demos, or beta features. These are provided “as is,” may change or be withdrawn at any time, and may have lower or no availability, support, or warranty commitments. Any data you place in a trial or demo environment may be deleted when it ends. To the extent permitted by law, our liability for trial, demo, and beta features is excluded.
Each party may receive non-public information of the other that is marked or reasonably understood to be confidential (“Confidential Information”). The receiving party will use Confidential Information only to perform under these Terms, protect it with at least reasonable care, and disclose it only to its personnel and advisors who need it and are bound by similar obligations. These obligations do not apply to information that is public through no fault of the receiving party, independently developed, or rightfully received from another source, and do not prevent a disclosure required by law if the receiving party gives reasonable notice where allowed. Customer Data is the Customer’s Confidential Information and is also governed by our Privacy Policy and DPA.
Each party warrants it has the authority to enter into these Terms. Except as expressly stated, the Service is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted or error-free, or that screening or extraction results will be complete or accurate.
To the maximum extent permitted by law, neither party is liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data. Each party’s aggregate liability arising out of or related to these Terms is limited to the fees paid or payable by the Customer in the twelve months before the event giving rise to the claim. These limits do not apply to a party’s indemnification obligations, breach of confidentiality, or misuse of the other party’s intellectual property.
You will defend and indemnify us against third-party claims, and pay resulting damages and reasonable costs finally awarded or agreed in settlement, to the extent arising from: your Customer Data; your use of the Service in violation of these Terms or applicable law; your lack of authority or legal basis to upload the personal information you submit; or your obligations under the Fair Credit Reporting Act and employment or screening laws (including disclosure, authorization, and adverse-action requirements).
We will defend and indemnify you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes that third party’s intellectual property rights, and pay resulting damages and reasonable costs finally awarded or agreed in settlement. This does not apply to claims arising from Customer Data, your modifications, or your combination of the Service with things we did not provide.
The indemnified party will promptly notify the other of the claim, allow the indemnifying party to control the defense (with counsel of its choice), and reasonably cooperate. The indemnifying party may not settle a claim in a way that imposes a non-monetary obligation on the other party without consent. These indemnities are each party’s exclusive remedy for the claims they cover.
These Terms apply while you use the Service. You may stop using the Service and request deletion at any time. Either party may terminate for material breach that stays uncured for 30 days after notice. We may suspend access to address a security risk, non-payment, or a violation of these Terms. On termination, your right to use the Service ends and, on request, we will delete or return Customer Data as described in the DPA, subject to any legal hold. Sections that by their nature should survive — including ownership, confidentiality, disclaimers, limitation of liability, indemnification, and the general terms — survive termination.
These Terms are governed by the laws of the State of ⟦STATE⟧, USA, excluding its conflict-of-laws rules. Before filing a claim, the parties will try in good faith to resolve any dispute informally by giving written notice and conferring for at least thirty days. Any unresolved dispute will be brought exclusively in the state or federal courts located in ⟦STATE⟧, and each party consents to their jurisdiction; each party waives any right to a jury trial. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.
Entire agreement. These Terms, with the Privacy Policy and DPA, are the entire agreement between the parties and supersede prior agreements on this subject. We may update these Terms and will post the updated version with a new “Last updated” date; material changes take effect on notice or continued use.
Notices. We may give notice by email to your account address or through the Service; you may give notice to [email protected]. Notice is effective when sent.
Assignment. Neither party may assign these Terms without the other’s consent, except in connection with a merger, acquisition, or sale of substantially all assets, on notice to the other party.
Force majeure. Neither party is liable for a delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control, such as natural disasters, outages of third-party infrastructure, or governmental action.
Export and sanctions. You will comply with US export control and sanctions laws and represent that you are not located in an embargoed region or on a restricted-party list, and will not use the Service in violation of those laws.
Publicity. Neither party will use the other’s name or logo publicly without prior consent, except that a party may identify the other privately to its advisors as needed.
Independent contractors; severability; waiver. The parties are independent contractors. If a provision is unenforceable, the rest remains in effect and the provision is limited to the minimum extent necessary. Failure to enforce a provision is not a waiver.
Portions of these Terms are adapted from the Common Paper Cloud Service Agreement (Version 2.1), used under CC BY 4.0.
Questions about these Terms: [email protected], ⟦ENTITY⟧, ⟦ADDRESS⟧.