Terms of Service

By accessing or using Policytab, you agree to be bound by these Terms of Service. If you are using the service on behalf of an organization, you represent that you have the authority to bind that organization to these terms.

If you do not agree to these terms, you must not access or use the service. Your continued use of Policytab after any modifications to these terms constitutes acceptance of the revised terms.

Policytab provides a SaaS platform for managed service providers and internal IT teams to monitor, audit, and manage Microsoft Entra Conditional Access policies across connected tenants. The service includes drift detection, impact analysis, and audit logging.

Policytab reads Conditional Access policies, authentication method registrations, and related configuration from the Microsoft Graph API using application permissions you grant with admin consent. The service stores snapshots of this configuration in per-tenant isolated database schemas, compares them against each tenant's assigned comparison baseline (imported snapshot or workspace baseline), and surfaces drift, gaps, and staleness through a web dashboard.

Policytab does not modify your Microsoft Entra configuration unless you explicitly initiate a write operation through the platform (for example, deploying a baseline policy). Read-only sync operations are clearly distinguished from write operations in the user interface.

You are responsible for maintaining the security of your Policytab account credentials (email and password) and for all activity that occurs under your account. You must notify us immediately of any unauthorized access.

You are responsible for ensuring that the Microsoft Entra application permissions you grant to Policytab for each connected tenant are appropriate for your organization's security policies. You must promptly revoke access if you suspect a compromise, and notify us at support@policytab.com so we can take immediate protective action on our side.

If you are an MSP managing customer tenants, you represent that you have obtained proper authorization from each customer to connect their tenant to Policytab and to read their Conditional Access configuration.

You agree not to misuse the service, including but not limited to: attempting to gain unauthorized access to other tenants, reverse-engineering the platform, or using the service for any unlawful purpose.

You further agree not to: (a) attempt to probe, scan, or test the vulnerability of the service or breach any security or authentication measures; (b) use the service to store or transmit malware; (c) interfere with or disrupt the integrity or performance of the service; (d) use automated means (scrapers, bots) to access the service outside of our published APIs; (e) sublicense, resell, or redistribute access to the service except as part of your managed services offering to your own customers.

We reserve the right to suspend your access immediately if we reasonably believe you are in violation of this section, with notice provided as soon as practicable.

Policytab offers paid subscription plans (Pro and Enterprise). New workspaces start with a 14-day Pro trial. Paid plans are billed monthly or annually in advance. All fees are non-refundable except where required by applicable law or as expressly stated in your subscription agreement.

We may change pricing with at least 30 days' notice. Price changes take effect at the start of your next billing cycle. If you do not agree to a price change, you may cancel your subscription before the new pricing takes effect.

Policytab and its licensors retain all right, title, and interest in the service, including all software, documentation, import templates, and branding. These terms do not grant you any right to use our trademarks or brand features without prior written consent.

You retain all rights to your data. By using the service, you grant Policytab a limited, non-exclusive licence to process your data solely for the purpose of providing the service to you.

We strive for high availability but do not guarantee uninterrupted service. Planned maintenance windows will be communicated in advance. The service is provided "as is" without warranty of any kind beyond what is expressly stated in your subscription agreement.

TO THE FULLEST EXTENT PERMITTED BY LAW, POLICYTAB DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. We do not warrant that the service will meet your specific requirements, that results obtained from the service will be accurate or reliable, or that defects will be corrected within any particular timeframe.

Policytab provides security posture information and recommendations as decision-support tooling. It is not a substitute for professional security advice, penetration testing, or compliance auditing. You remain solely responsible for your organization's security decisions.

To the maximum extent permitted by law, Policytab shall not be liable for any indirect, incidental, or consequential damages arising from your use of the service, including but not limited to loss of data, revenue, or business opportunity.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, POLICYTAB'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE TOTAL FEES YOU PAID TO POLICYTAB FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. This limitation applies in the aggregate across all claims and regardless of the theory of liability (contract, tort, strict liability, or otherwise) and even if a remedy fails of its essential purpose.

Some jurisdictions do not allow the exclusion or limitation of incidental or consequential damages, so the above limitations may not apply to you in full.

You agree to indemnify and hold harmless Policytab and its officers, directors, employees, and agents from any claims, damages, losses, or expenses (including reasonable legal fees) arising from: (a) your use of the service; (b) your violation of these terms; or (c) your violation of any third-party right, including any intellectual property or privacy right.

Either party may terminate the agreement at any time. Upon termination, your access to the service will cease and your data will be handled in accordance with our Privacy Policy.

You may cancel your subscription at any time through the account settings page. Your access will continue until the end of the current billing period. We may terminate or suspend your access immediately, without prior notice, if you breach these terms. Upon termination, we will make your data available for export for 30 days, after which it will be permanently deleted.

These terms are governed by and construed in accordance with the laws of England and Wales, without regard to conflict-of-law principles. Any dispute arising out of or relating to these terms shall be resolved in the courts of England and Wales. If you are a consumer in the EU, you retain any mandatory protections provided by the law of your country of residence.

We may update these terms from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect.

If we make material changes, we will provide prominent notice (for example, an in-app banner or an email to the address associated with your account). Your continued use of the service after the effective date of revised terms constitutes acceptance.

If any provision of these terms is found to be unenforceable, the remaining provisions will continue in full force and effect. Our failure to enforce any right or provision does not constitute a waiver of that right. These terms constitute the entire agreement between you and Policytab regarding the service and supersede all prior agreements.

For questions about these terms, reach us at support@policytab.com.