Terms of service

Who these terms are with

Vorda Labs provides the Vorda application. These terms apply to your use of the application. By using the application, you agree to these terms. If you use it for an organisation, you must have authority to act for that organisation. Contact us at [email protected].

What an assessment covers

Vorda assesses permissions and sharing on the SharePoint sites your organisation authorises and selects. The permissions assessment reads metadata, including file and folder names, access grants, sharing links and relevant group membership. It does not read file contents or change permissions.

An assessment reflects the information available during collection and the scope recorded in the report. Access can change afterwards. A report can help you decide what to review, but it is not a guarantee that every risk has been found or that your organisation meets a legal or security standard. Your organisation decides and carries out any changes to access.

Your authority and responsibilities

• Only connect a Microsoft 365 tenant and select sites that you are authorised to have assessed. An authorised tenant administrator must approve the required access.
• Tell people in your organisation how their information will be used where required, and make sure you have a lawful basis to provide it.
• Protect your sign in account and only share reports with people authorised to receive them.
• Do not use Vorda to access another organisation without permission, bypass access controls, disrupt the service or break the law.

Your data and reports

Your organisation retains its rights in the information it provides. You authorise us to process that information to deliver and support the agreed assessment. Our privacy statement explains the information involved, access to it, retention and your choices. Reports may identify people and sensitive resources. Handle them accordingly.

Trials, availability and charges

Development and trial access may be limited, interrupted or withdrawn. Available features depend on the assessment or plan agreed with your organisation. We do not promise uninterrupted access or a completion time unless we have agreed one with you.

Any price, payment schedule, renewal and cancellation terms must be presented and agreed before you buy a paid service. Granting Microsoft consent does not itself place an order. A separate written agreement with your organisation takes priority if it conflicts with these terms.

Stopping access

Your administrator can revoke the application permissions in Microsoft 365. You can also contact us to disconnect your tenant or request deletion. Revoking access stops future authorised collection; it does not by itself delete information already collected. The privacy statement explains retention and backups. We may suspend access to investigate misuse, protect data or meet a legal obligation.

Rights and disputes

Nothing in these terms limits rights or remedies that cannot lawfully be excluded. New Zealand law applies. If you have a concern about the service, contact [email protected] so we can work with you to resolve it.

Changes to these terms

We will publish changes here and update the date above. We will tell affected account holders about material changes before they apply. A new purpose for processing tenant data or a wider assessment scope requires the relevant authorisation.