← AuditSchedule

Terms of Service

Effective date: 2 July 2026  ·  Node Logic, trading as AuditSchedule

1. Parties and Definitions

These Terms of Service ("Terms") form a binding agreement between:

Additional defined terms:

2. Service Description

AuditSchedule is a cloud-based SaaS platform for internal audit engagement scheduling, capacity planning, conflict detection, events, leave, travel, capabilities, certifications, and team management. Access is provided over the internet; no software installation is required.

3. Account Registration and Acceptance

To access the Services you must register with a valid email address using email/password authentication, Google OAuth, or another sign-in method we make available. By creating an account, creating a workspace, starting a trial, or starting a paid subscription, you accept these Terms and acknowledge our Privacy Policy.

You are responsible for:

4. Subscription and Payment

4.1 Fees

Current pricing is displayed on auditschedule.com. Subscriptions are billed monthly or annually as selected at checkout. Prices are stated in euros (EUR) and are exclusive of VAT where applicable.

4.2 Billing

Payments are processed by Stripe. By subscribing, you authorise us and Stripe to charge the payment method on file, or to issue invoices, for each billing period until you cancel.

4.3 Free trial

New workspaces receive a 14-day free trial. No payment is required during the trial. At the end of the trial, a Subscription begins automatically only if you have added a payment method or started invoice billing; otherwise access may be suspended.

4.4 Cancellation and refunds

You may cancel at any time. Access continues until the end of the current billing period. We do not offer refunds for partial periods or unused time on annual plans, except: (a) where required by applicable law; or (b) where you terminate under Section 6.6 following an unresolved sub-processor objection, in which case a pro-rata refund for the unused prepaid period applies.

4.5 Price changes

We will give at least 30 days' notice of any price increase. Continued use of the Services after the effective date constitutes acceptance of the new pricing.

5. Acceptable Use

You agree not to:

6. Data Processing (GDPR Art. 28)

6.1 Controller and processor roles

The Customer is the data controller of personal data entered into a workspace. Node Logic acts as data processor for Customer Data, processing such data only on the Customer's behalf and in accordance with these Terms and documented Customer instructions.

The subject matter of the processing is the provision, security, maintenance, support, and billing of the Services for the duration of the Subscription and any agreed export period. The nature of processing includes hosting, storage, retrieval, transmission, access control, backup, deletion, support, AI-assisted in-product help, and generation of workspace views and exports.

Personal data processed may include names, email addresses, team and role assignments, city/location data, project assignments, leave and travel records, event participation, skills, capabilities, certifications, permissions, billing contact details, and workspace audit-log entries. Data subjects may include the Customer's employees, contractors, applicants, suppliers, and other personnel whose data is entered into the workspace.

Where a User chooses to use the optional in-product help assistant, the text of their messages is processed by an AI sub-processor listed in the Privacy Policy solely to generate a reply. No stored Customer Data is sent to that sub-processor, and under its terms the messages are not used to train AI models and are deleted within 30 days by default.

6.2 Processing instructions

Node Logic processes Customer Data only on documented instructions of the Customer, including these Terms, the Privacy Policy, configuration choices made in the Services, and written support instructions. Node Logic will promptly inform the Customer if, in its opinion, an instruction infringes applicable data protection law.

6.3 Confidentiality and personnel

Node Logic ensures that persons authorised to process Customer Data are bound by appropriate confidentiality obligations and access Customer Data only where necessary to provide, secure, maintain, or support the Services.

6.4 Security measures

Node Logic implements appropriate technical and organisational measures to protect Customer Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. Measures include tenant-based access controls, authentication, role-based permissions, transport encryption, database row-level security, service-role separation, rate limiting where configured, audit logging, backup and recovery processes, and restricted administrative access.

6.5 Assistance, sensitive data, and DPIAs

AuditSchedule is not intended to require special categories of personal data under GDPR Art. 9. The Customer remains responsible for deciding what data to enter into free-text fields, leave records, travel records, notes, and other workspace records, and for ensuring a lawful basis and suitable safeguards if special-category data is entered.

Taking into account the nature of processing and information available to us, Node Logic will provide reasonable assistance to the Customer with data subject requests, security obligations, personal data breach assessments, data protection impact assessments, and consultations with supervisory authorities where required by GDPR Arts. 32-36. Assistance may include supplying product information, export functionality, audit-log information, sub-processor details, security summaries, and reasonable responses to security or DPIA questionnaires.

6.6 Sub-processors

Node Logic may engage sub-processors as listed in the Privacy Policy. We will provide reasonable notice of material changes to that list. The Customer may object to a new sub-processor on reasonable data-protection grounds within 14 days; if no agreement is reached, either party may terminate the affected Subscription with a pro-rata refund as described in Section 4.4(b). Node Logic will impose data-protection obligations on sub-processors that are materially equivalent to those in this Section 6 and remains responsible for their performance.

6.7 Data subject requests

If Node Logic receives a data subject request that relates to Customer Data, we will promptly forward it to the Customer where legally permitted. The Customer is responsible for responding as controller, and Node Logic will provide reasonable assistance using the tools and information available in the Services.

6.8 Data return and deletion

Upon termination, Node Logic will make Customer Data available for export for 30 days, after which it will be securely deleted from production systems within a further 30 days, unless retention is required by law or needed to resolve disputes. Backup deletion follows normal backup rotation and will occur within a reasonable period.

6.9 Audit information

Node Logic will make available information reasonably necessary to demonstrate compliance with this Section 6, such as sub-processor lists, security summaries, and responses to reasonable audit or security questionnaires. On-site audits are subject to reasonable prior notice, confidentiality, security restrictions, and may be limited where equivalent written evidence is sufficient.

6.10 Data breach notification

Node Logic will notify the Customer without undue delay, and in any event within 48 hours, upon becoming aware of a personal data breach affecting Customer Data. The notification will describe, to the extent then known: the nature of the breach; the categories and approximate number of data subjects and records affected; the likely consequences; and the measures taken or proposed to address the breach. This enables the Customer to fulfil its own notification obligations to the competent supervisory authority under GDPR Art. 33.

7. Intellectual Property

7.1 Platform

AuditSchedule, its source code, design, trademarks, and documentation remain the exclusive property of Node Logic. These Terms do not transfer any intellectual property rights to the Customer.

7.2 Customer Data

The Customer retains full ownership of all data it inputs into the Services. Node Logic claims no ownership over Customer Data and will not use it for any purpose other than providing, securing, and supporting the Services as permitted by these Terms. Any product improvement analysis uses aggregated or anonymised information that does not identify Customer Data or individual Users.

7.3 Feedback

If you provide feedback or suggestions about the Services, you grant us a perpetual, royalty-free licence to use them to improve the Services, without any obligation to you.

8. Confidentiality

Each party agrees to keep the other's non-public business information strictly confidential and not to disclose it to any third party except: (a) to employees, contractors, advisors, or providers who need to know it to fulfil obligations under these Terms and who are bound by equivalent confidentiality obligations; or (b) as required by applicable law, provided the disclosing party gives reasonable prior notice where permitted.

9. Limitation of Liability

9.1 Liability cap

Our total liability to you for any and all claims arising out of or relating to these Terms shall not exceed the total fees you paid to us in the 12 months immediately preceding the event giving rise to the claim.

9.2 Excluded damages

Neither party shall be liable to the other for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, loss of data, or business interruption, even if advised of the possibility of such damages.

9.3 Essential basis

The limitations in this section reflect an agreed allocation of risk and are an essential element of the basis of the bargain between the parties. They apply to the fullest extent permitted by applicable law.

10. Termination

10.1 By either party

Either party may terminate the Subscription with 30 days' written notice.

10.2 By Node Logic for cause

We may suspend or terminate your access immediately upon written notice if you materially breach these Terms, including non-payment of fees that is not cured within 10 days of notice.

10.3 Effect of termination

Upon termination, your right to access the Services ceases. We will make Customer Data available for export for 30 days, then delete it as described in Section 6.8. Sections 6.8, 6.10, 7, 8, 9, 11, and 12 survive termination.

11. Governing Law and Jurisdiction

These Terms are governed by the laws of the Netherlands, excluding its conflict of law rules. Any dispute arising out of or in connection with these Terms shall be submitted to the exclusive jurisdiction of the competent courts of Amsterdam, the Netherlands. This does not affect any mandatory consumer protection rights you may have under applicable local law.

12. Amendments

We may update these Terms from time to time. We will give at least 14 days' notice of material changes by email or in-app notification. Your continued use of the Services after the effective date of the updated Terms constitutes your acceptance of those changes. If you do not agree to the updated Terms, you may terminate your Subscription before the effective date.

13. Contact

Node Logic, trading as AuditSchedule
Keurenplein 41, Box C3118, 1069 CD Amsterdam, the Netherlands
KVK: 42046427
Email: support@auditschedule.com

Privacy Policy · Cookie Policy ·