Terms of Service

Last updated 11 October 2026

Original: Español · This translation is provided for convenience. In case of any discrepancy, the Spanish version prevails.

The service

Agreedum is a requirements, review-and-approval, and change-control tool. It lets your organization catalog requirements, produce versioned functional requirement documents, route them for review, record decisions, freeze baselines, and track change requests and their evidence against those baselines.

Accounts and seats

Using the product as a member of your organization requires an account and a seat on a paid or free plan. You are responsible for activity under your account and for keeping your own sign-in access to yourself.

External reviewers

People outside your organization whom you invite to review or approve something use a one-time magic link and a one-time passcode (OTP) sent to their email address. They never create an account and never need a seat.

An approval recorded in Agreedum is an application approval record, not a qualified electronic signature. It reflects that a specific person, verified by control of a specific email address and a one-time code, took a specific action on a specific version of a document at a specific time, recorded in our hash-chained audit log. It is not a substitute for a signature format that the law requires for your particular transaction.

Acceptable use

You agree not to use Agreedum to store or transmit content you do not have the right to store, to attempt to bypass rate limits or access controls, to interfere with the service's operation, or to use a magic link to reach anyone other than the reviewer you intended to invite.

How we process your clients’ data

When you put your clients’ data into Agreedum, we process it for you and only on your instructions. This section lists what we do with it, who helps us, how we help you answer your clients’ requests, and what happens to it when you leave — including what your clients keep.

This section is the data processing agreement between you and us under Article 28 of the GDPR. It covers the personal data of your clients and your staff that you put into Agreedum: the names and e-mail addresses of contacts and reviewers, the job titles of contacts, the documents you write, and the decisions, comments and evidence (IP address and browser) recorded when they review them. We process it so you can write, send, review, approve and track your documents, for as long as your organization exists and then as described under deletion below.

You give us your instructions through what you and your team do in Agreedum — adding a contact, sending a document for review, recording a decision, deleting the organization. We process this data for no other purpose unless European Union or Member State law requires us to; in that case we tell you first, unless that law forbids it. If we think one of your instructions infringes the GDPR, we tell you.

Inside the application, Agreedum staff cannot see your clients’ data: the staff console shows only account facts (for example the organization’s name, its status, the sign-up date, the plan, billing, the owner’s e-mail address and the number of projects, documents and members). Everyone at Agreedum who can reach the database is bound to confidentiality.

We protect it with database rules that keep each organization’s data apart, encrypted (HTTPS) connections between your browser and Agreedum, encrypted (TLS) connections between Agreedum and our database, on which we check the server’s certificate against our database provider’s certificate authority, one-time sign-in codes and a tamper-evident audit log. Our database and file storage are in the EU; our Privacy Policy lists which providers process data outside it.

You authorise the subprocessors listed in our Privacy Policy. We bind each to data protection obligations at least as strict as these. We will publish any new subprocessor in the Privacy Policy at least 30 days before it starts processing data; if you object through the contact form and we cannot resolve it, you can end your plan and delete your organization before the change.

If one of your clients’ people asks to see, correct or delete their data, you can handle it yourself with what Agreedum offers: edit or archive a contact, delete a client that has no projects, download a document as a PDF or Word file, or download all data. If Agreedum’s own tools are not enough to answer a request — for example, reviewers’ decisions and comments cannot be erased in the app, and archiving a contact keeps its data — write to us through the contact form and we will help you. If that person writes to us instead, we pass the request to you and do not answer it ourselves. For our part of the processing, we also help you with security, breach notifications and impact assessments.

If we become aware of a personal data breach affecting your data, we tell you without undue delay, with what you need to notify your supervisory authority within 72 hours and, where needed, the people affected.

Your organization’s owner or an admin can download all its data before you delete it and also while the deletion is scheduled. When you delete it, we erase your clients’ data once the 28-day period to undo it has passed, except the documents you sent to clients who have an Agreedum account, with what is needed to show them and the decisions those clients recorded on them; our Privacy Policy describes that erasure, including backups. Sending a document to a client discloses it to them, so by sending it you instruct us to keep their copy in their Shared with you area after you leave. Clients without an account are e-mailed on your behalf when you schedule the deletion, and can create a free account before the deletion date to keep their copies.

Once one of your clients has their own Agreedum account, Agreedum is the controller of that account; the documents you sent stay exactly as you sent them.

You can ask us for the information needed to show that we meet these obligations, and we answer within one month. Inspections by you or an auditor you appoint can be agreed in a custom agreement.

Billing

Freelance and Agency are self-serve plans billed through Stripe. Freelance is billed at a flat monthly or yearly price; Agency is billed monthly or yearly for two included seats plus a price per extra seat. Every price is shown excluding VAT. You can start a self-serve plan through Checkout in the product; plan and seat changes take effect as set out in the confirmation step on the Billing page, and cancellations as set out in the billing portal. Custom plans are billed by invoice under separately agreed terms. Every plan includes unlimited clients and projects; paid plans differ in seats and export features. On the Free plan, exported documents carry a short "Made with Agreedum" footer.

Termination and deletion

You may stop using the service at any time. An organization’s owner can delete it in Settings and anyone can delete their account on their Account page; both can be undone for 28 days, after which the data is erased as our Privacy Policy describes. We may suspend or terminate an account that breaches these terms or that we reasonably believe puts the service or other customers at risk, and we will make reasonable efforts to notify you first except where that would be unsafe or unlawful.

Availability & liability

We work to keep Agreedum available and your data intact, but the service is provided without a guarantee that it will be uninterrupted or error-free, and on self-serve plans it is provided "as is." Neither party is liable to the other for indirect or consequential losses, and our total liability for any claim is limited to the amount you paid us for the service in the twelve months before the claim arose. Enterprise agreements may set out different or additional terms. Deleting a client is permanent; Agreedum cannot recover deleted data and is not responsible for its loss.

Governing law

The governing law and venue for any dispute under these terms are the ones stated in your order form or enterprise agreement; where none is stated, we will agree on a jurisdiction with you in good faith before pursuing formal proceedings.

This translation is provided for convenience. In case of any discrepancy, the Spanish version prevails.