Terms & Conditions

Last updated: 24 February 2026

1. Definitions

In these Terms & Conditions (“Terms”), the following definitions apply unless the context requires otherwise:

• “Stableridge”, “we”, “us”, or “our” refers to Stableridge Systems Pty Ltd (ABN pending), its officers, employees, and authorised representatives.
• “Platform” refers to the Stableridge software-as-a-service application, including Content Authority and associated modules, accessible via web interface and API.
• “Services” refers collectively to the Platform, advisory engagements, engineering delivery services, and any related professional services provided by Stableridge.
• “Client”, “you”, or “your” refers to the individual or organisation that registers for, accesses, or uses the Services.
• “User” refers to any individual authorised by a Client to access the Platform under that Client's tenancy.
• “Tenant” refers to a logically isolated organisational unit within the Platform, associated with a Client account.
• “Content” refers to any files, documents, data, or materials uploaded, stored, shared, or processed through the Platform by a Client or User.
• “Advisory Services” refers to consulting, governance advisory, security assessment, and strategic guidance engagements delivered by Stableridge personnel.
• “Engineering Services” refers to software development, integration, deployment, and technical delivery services provided under a separate statement of work.

2. Acceptance of Terms

By accessing, registering for, or using any of the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are entering into these Terms on behalf of an organisation, you represent and warrant that you have authority to bind that organisation.

If you do not agree to these Terms, you must not access or use the Services. Continued use of the Services following any modification to these Terms constitutes acceptance of the modified Terms.

3. Services Overview

Stableridge provides the following categories of service, each subject to the applicable terms described herein:

3.1 SaaS Platform

The Platform is a multi-tenant software-as-a-service application providing content governance, digital rights management, policy enforcement, and audit trail capabilities. Access is provided on a subscription basis subject to the applicable plan.

3.2 Content Authority

Content Authority is the primary product module within the Platform. It provides controlled content sharing, persistent encryption, policy-driven access controls, watermarking, revocation capabilities, and evidence-grade audit logging.

3.3 Engineering Services

Engineering services are provided under separately executed statements of work. These may include platform integration, custom development, deployment support, and technical advisory. Engineering deliverables are governed by the applicable statement of work in addition to these Terms.

3.4 Advisory Services

Advisory services include governance consulting, security posture assessment, compliance advisory, and strategic guidance. Advisory engagements are scoped separately and may be delivered under a separate engagement letter or statement of work. Advisory output represents professional guidance based on available information and does not constitute legal, regulatory, or audit opinion.

4. Account Registration & Security

To access the Platform, you must register an account with accurate and complete information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

You must notify Stableridge promptly if you become aware of any unauthorised use of your account or any breach of security. We reserve the right to suspend or disable accounts where we reasonably believe credentials have been compromised.

Stableridge implements authentication controls including session management and role-based access. However, account security is a shared responsibility. You must ensure that Users within your Tenant comply with your organisation's access control policies.

5. Multi-Tenant Model & User Responsibility

The Platform operates a multi-tenant architecture in which each Client's data is logically isolated within a dedicated Tenant. Logical isolation includes separate data partitioning, scoped access controls, and tenant-specific policy configuration.

You are responsible for the conduct of all Users operating within your Tenant, including their compliance with these Terms and any policies you establish. Stableridge is not liable for actions taken by Users that you have authorised to access your Tenant.

Administrators within a Tenant are responsible for managing user invitations, role assignments, and content sharing permissions. Stableridge provides the controls; the Client is responsible for their configuration and use.

6. Permitted Use & Acceptable Use

You are granted a limited, non-exclusive, non-transferable right to access and use the Services in accordance with these Terms and the applicable plan. You agree not to:

1. Use the Services for any unlawful purpose or in violation of any applicable law, regulation, or industry standard.
2. Attempt to reverse engineer, decompile, disassemble, or otherwise derive the source code of the Platform or any component thereof.
3. Circumvent, disable, or interfere with any security, access control, or usage-limiting feature of the Platform.
4. Use automated systems, bots, or scripts to access the Platform in a manner that exceeds reasonable use or places disproportionate load on infrastructure.
5. Share, distribute, or sublicense your account credentials or access rights to any third party without prior written consent.
6. Upload or distribute Content that infringes the intellectual property rights, privacy rights, or other legal rights of any third party.
7. Impersonate any person, misrepresent your identity, or falsely claim affiliation with any entity through the Platform's identity or sharing features.
8. Use share links, viewer access, or content distribution features to bypass intended access controls or to distribute Content to unauthorised recipients.
9. Use the Platform to store, transmit, or process Content that is harmful, defamatory, obscene, or otherwise objectionable.

Stableridge reserves the right to investigate and take appropriate action, including suspension or termination, in response to violations of this section.

7. DRM & Share Controls

7.1 Runtime Enforcement

The Platform provides digital rights management controls including persistent encryption, policy-driven access revocation, watermarking, and viewer-level enforcement. These controls are applied at runtime and are designed to restrict unauthorised access and distribution of Content within the scope of the Platform's technical capabilities.

7.2 Limitations of DRM Controls

No digital rights management system can prevent all forms of unauthorised reproduction. Specifically, Stableridge does not guarantee protection against screen capture, photography of displayed content, manual transcription, or any other method of reproduction that operates outside the Platform's runtime environment. DRM controls reduce the surface area for unauthorised distribution but do not eliminate all risk.

7.3 Share Link Responsibility

Content shared via share links or viewer access is subject to the policies configured by the sharing Tenant administrator. You are responsible for the distribution of share links and for ensuring that recipients are authorised to access the shared Content. Misuse of share links, including forwarding to unauthorised parties or using links to circumvent policy controls, constitutes a violation of these Terms.

8. Billing, Plans & Enforcement

Access to the Platform is provided under subscription plans with defined entitlements including user seat limits, storage quotas, feature access, and usage thresholds. Plan details and pricing are published on the Stableridge website and may be updated from time to time.

8.1 Billing Cycle & Payment

Subscriptions are billed in advance on a recurring basis (monthly or annually as selected). Payment is due at the commencement of each billing cycle. All fees are denominated in Australian Dollars (AUD) unless otherwise agreed in writing. Converted currency amounts displayed for convenience are approximate and do not constitute the billing amount.

8.2 Enforcement Modes

The Platform supports two enforcement modes for plan limits and billing status:

• Observe mode: The Platform logs usage that exceeds plan entitlements and surfaces advisory notifications without restricting access. This mode is intended for grace periods and onboarding transitions.
• Enforce mode: The Platform actively restricts access to features or resources that exceed plan entitlements. API requests that exceed limits may receive HTTP 402 (Payment Required) responses. Continued non-payment may result in progressive access restriction.

8.3 Subscription Termination for Non-Payment

If payment remains outstanding for more than thirty (30) days beyond the due date, Stableridge may suspend access to the Platform. If payment is not received within sixty (60) days, Stableridge may terminate the subscription and schedule Content for deletion in accordance with data retention policies. We will provide reasonable notice before termination and offer an opportunity to export Content where practicable.

9. Intellectual Property

9.1 Platform Intellectual Property

The Platform, including its source code, architecture, design, documentation, APIs, user interface, and all associated intellectual property, is and remains the exclusive property of Stableridge Systems Pty Ltd. Nothing in these Terms transfers ownership of any Platform intellectual property to you.

9.2 Client Content Ownership

You retain all ownership rights in Content that you upload, store, or process through the Platform. Stableridge does not claim ownership of your Content. By using the Services, you grant Stableridge a limited, non-exclusive licence to host, process, transmit, and display your Content solely for the purpose of providing the Services.

9.3 Limited Licence

Subject to your compliance with these Terms, Stableridge grants you a limited, non-exclusive, non-transferable, revocable licence to access and use the Platform for your internal business purposes during the subscription term. This licence does not include the right to sublicense, modify, adapt, or create derivative works based on the Platform.

9.4 Feedback

If you provide suggestions, ideas, or feedback regarding the Services, you grant Stableridge an unrestricted, irrevocable, perpetual licence to use such feedback for any purpose without obligation or compensation.

10. Confidentiality

Each party agrees to treat confidential information received from the other party with the same degree of care it applies to its own confidential information, and in no event less than reasonable care. Confidential information includes business plans, pricing, technical specifications, Client data, and any information designated as confidential.

This obligation does not apply to information that: (a) is or becomes publicly available through no fault of the receiving party; (b) was known to the receiving party prior to disclosure; (c) is independently developed by the receiving party without reference to the disclosing party's confidential information; or (d) is required to be disclosed by law, regulation, or court order, provided that the receiving party gives reasonable notice where permitted.

11. Data Protection & Privacy

Stableridge collects, processes, and stores personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). Our handling of personal information is described in our Privacy Policy.

Client data is processed within Australian jurisdiction unless otherwise agreed in writing. Where third-party infrastructure providers are used, Stableridge selects providers that offer Australian region hosting and contractual commitments to data sovereignty. Stableridge does not sell, rent, or share Client data with third parties for marketing purposes.

You are responsible for ensuring that your use of the Services complies with applicable privacy and data protection laws in your jurisdiction, including obtaining any necessary consents from individuals whose personal information may be processed through the Platform.

12. Security & Availability Disclaimer

Stableridge implements security controls aligned to recognised Australian governance frameworks including the Information Security Manual (ISM) principles and Essential Eight maturity model guidelines. Our security posture is designed to support regulated operations and government procurement requirements.

However, no system can guarantee absolute security. Stableridge does not warrant that the Platform will be uninterrupted, error-free, or immune to unauthorised access. We implement commercially reasonable measures to protect the confidentiality, integrity, and availability of the Platform and Client data, but we do not make representations regarding specific certification status unless explicitly documented in our published compliance materials.

Stableridge may perform scheduled maintenance that temporarily affects availability. We will provide reasonable advance notice of planned maintenance where practicable. Unplanned outages may occur due to circumstances beyond our reasonable control.

13. Limitation of Liability

To the maximum extent permitted by law, the total aggregate liability of Stableridge arising out of or in connection with these Terms, the Services, or any related engagement shall not exceed the total fees paid by you to Stableridge in the twelve (12) months immediately preceding the event giving rise to the claim.

To the maximum extent permitted by law, Stableridge shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, loss of data, loss of business opportunity, or reputational damage, whether arising in contract, tort, negligence, or otherwise.

Nothing in these Terms excludes, restricts, or modifies any consumer guarantee, right, or remedy conferred by the Competition and Consumer Act 2010 (Cth), including the Australian Consumer Law (Schedule 2), or any other applicable law that cannot be excluded, restricted, or modified by agreement. To the extent that Stableridge is entitled to limit its liability under such legislation, our liability is limited at our option to: (a) the supply of the services again; or (b) the payment of the cost of having the services supplied again.

14. Indemnity

You agree to indemnify and hold harmless Stableridge, its officers, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or in connection with: (a) your use of the Services; (b) your breach of these Terms; (c) your violation of any applicable law or regulation; or (d) Content uploaded or processed through the Platform by you or your Users.

This indemnity is subject to: (i) Stableridge providing prompt notice of any claim; (ii) you being given reasonable control of the defence and settlement of such claim; and (iii) Stableridge providing reasonable cooperation at your expense. This indemnity does not extend to claims arising solely from Stableridge's gross negligence or wilful misconduct.

15. Suspension & Termination

Stableridge may suspend your access to the Services immediately and without prior notice if we reasonably believe that: (a) your use poses a security risk to the Platform or other Clients; (b) your account is being used for fraudulent or unlawful activity; (c) you are in material breach of these Terms; or (d) suspension is required by law or regulatory authority.

Either party may terminate the subscription by providing thirty (30) days' written notice to the other party. Stableridge may terminate immediately for material breach that remains uncured after fifteen (15) days' written notice.

Upon termination: (a) your right to access the Platform ceases immediately; (b) Stableridge will provide a reasonable period (not less than thirty days) for you to export your Content, unless termination results from unlawful activity; and (c) Stableridge may delete your Content after the export period in accordance with our data retention policies. Termination does not relieve you of any obligations to pay fees incurred prior to termination.

16. Modifications to Services or Terms

Stableridge reserves the right to modify, update, or discontinue any aspect of the Services at any time. For material changes to these Terms, we will provide at least thirty (30) days' notice via email to the address associated with your account or via prominent notice on the Platform.

If you do not agree to modified Terms, you may terminate your subscription before the effective date of the modifications. Continued use of the Services after the effective date constitutes acceptance of the modified Terms.

Non-material changes (such as corrections, formatting updates, or clarifications that do not affect your rights or obligations) may be made without prior notice.

17. Force Majeure

Neither party shall be liable for any failure or delay in performing its obligations under these Terms to the extent that such failure or delay results from circumstances beyond the affected party's reasonable control, including but not limited to: natural disasters, acts of government, pandemic, epidemic, war, terrorism, civil unrest, power failure, internet or telecommunications failure, cyberattack, or failure of third-party infrastructure providers.

The affected party must provide prompt notice of the force majeure event and take commercially reasonable steps to mitigate its impact. If a force majeure event continues for more than ninety (90) days, either party may terminate the affected engagement by providing written notice.

18. Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of New South Wales, Australia. Each party irrevocably submits to the exclusive jurisdiction of the courts of New South Wales and any courts of appeal therefrom.

Where a separate engagement letter or statement of work specifies a different governing jurisdiction, the terms of that engagement letter or statement of work shall prevail to the extent of any inconsistency with this clause.

19. Contact Details

For questions regarding these Terms, or to report a concern relating to the Services: