Terms of Service

By accessing or using Riskly ("the Service"), you agree to these Terms of Service. The Service is provided by Riskly Limited, a New Zealand company. If you use Riskly on behalf of an organisation, you confirm you are authorised to bind that organisation to these terms.

Riskly is software for New Zealand SMEs to help manage operational risk, health and safety records, and related day-to-day compliance work. Depending on your plan, features may include:

• Home, including welcome stamps, My List, My view, Organisation oversight, and I want to… shortcuts
• Global search across registers (for example Ctrl+K)
• Risks & Controls: risk and control registers, tailored suggestions from your Business Profile, documents, and linking of controls to risks
• Health & Safety: hazards, incidents and near misses, Engagement records, H&S documents, and Governance tools where enabled
• Licences, certificates, and training records with expiry tracking, and optional sites or locations for filtering records
• Calendar, actions, and due dates
• Reports (including PDF export), activity log, data export, and document storage
• Business Profile and organisation chart
• Settings, Users & Access, billing, email reminders, in-app notifications, and organisation SSO sign-in when configured
• Integrations (optional): subscribe to organisation or personal calendar feeds in Outlook, Google Calendar, or Apple Calendar; post new hazards and incidents to Slack or Microsoft Teams via webhooks you configure
• On Riskly Pro: high-complexity ratings, Control Testing schedules and evidence, Assurance (activities, audit reports, findings register, remediation, validation, and linked follow-up actions), and Legislation (watchlist, Monitoring work queue, act checks, What You Must Do, and Review Records)
• Organisation Reporting: a public link or code so people can submit hazards or incidents without signing in

The list above is illustrative. Your plan, our pricing page, and in-product plan descriptions show what is included today. We may add, change, or remove features, move features between Riskly Basic and Riskly Pro, or change plan limits (such as seats or storage) from time to time.

Riskly is a software tool only. It does not provide legal advice, health and safety advisory services, medical advice, financial advice, or other professional services. Outputs, suggestions, alerts, and registers are for your internal use and may be incomplete or incorrect. You remain responsible for decisions made using the Service and for meeting your own legal and regulatory obligations.

You must provide accurate account information and keep login credentials secure. Each organisation account may have multiple users with roles such as owner, admin, member, director, or viewer, and optional per-tab permissions. A user may belong to more than one organisation. Organisation owners and admins control invitations, seats, billing, and access.

Members may enable multi-factor authentication (MFA) on their sign-in account. Organisations may configure single sign-on (SSO) for members whose email domain matches the organisation. Owners and admins can require MFA for members where supported.

From Settings you can leave an organisation, delete an organisation you own (after cancelling any paid subscription), or delete your sign-in account when you no longer own any organisation. If you previously used a free trial on your email address and later create a new organisation, that new organisation starts on Riskly Basic without a second trial unless we agree otherwise in writing.

You are responsible for activity under your organisation's account, including content uploaded or entered by members and information submitted through Organisation Reporting (for example reporter names and contact details). You must only enter personal information you are entitled to collect and use under the Privacy Act 2020 and any other applicable law.

Riskly offers a free trial (currently 4 weeks with Pro-level features and no credit card required at signup), Riskly Basic, and Riskly Pro. Plans are priced per organisation per month (not per user). Current prices, feature lists, seat limits, and document storage limits are shown on our pricing page and may change from time to time. One free trial is available per email address. When the trial ends, access is paused until you choose a paid plan; your organisation data remains available to subscribe or export.

Paid plans are billed via Stripe. Unless we tell you otherwise, you are charged at the price shown when you subscribe or change plan for the current billing period. Price or limit changes for existing subscribers generally take effect from your next billing period after we give reasonable notice (for example by email or in-app notice). If you do not agree to a price change, you may cancel before the new price applies. Fees are non-refundable except where required by New Zealand consumer law. You may cancel at any time; paid access continues until the end of the current billing period.

If a renewal payment fails, Stripe may mark the subscription as past due and retry the charge. While Stripe is retrying, you generally keep full access and should update your payment method in Settings → Billing or the Stripe customer portal. If the subscription is cancelled after failed payment, the retention rules below apply from the cancel date.

When a paid subscription ends, you keep Basic access for 30 days so you can export data or resubscribe. After that grace period the account is locked (export and resubscribe only). We retain organisation data for 90 days from the cancel date, then permanently delete it (including uploaded files), unless you resubscribe or we are required to retain records longer by law. You may delete an organisation sooner from Settings, or contact contact@riskly.co.nz if you need help.

Organisation owners and admins may upgrade, downgrade, or switch between Riskly Basic and Riskly Pro from Settings, subject to the options shown in the product. Upgrades generally take effect straight away and may be prorated through Stripe. Downgrades generally take effect at the end of your current billing period.

If you downgrade from Pro to Basic, Pro-only features may become unavailable when the downgrade takes effect. You may need to reduce seats, storage use, or reliance on Pro-only registers (including assurance, legislation, and control testing) to fit Basic limits. Your organisation content is retained subject to the retention rules in these terms, but some data may no longer be editable or visible in the product until you upgrade again or export it.

We may retire or replace a plan name or packaging, but we will not remove your ability to export your organisation data while your account remains active or within the retention periods described above.

You must not:

• Misuse the Service or attempt to access other customers' data
• Reverse engineer the platform except as permitted by law
• Use Riskly in a way that violates applicable law
• Use Organisation Reporting or other features to submit unlawful, harmful, or misleading content
• Circumvent seat, storage, or rate limits, or disrupt the Service

Your organisation is responsible for content entered by members and for information submitted through Organisation Reporting (including reporter details and photos). Riskly provides software tooling; we may act on platform-level abuse (for example spam on public forms or terms breaches) and may suspend or terminate accounts that breach these terms.

To report harmful or illegal content hosted on Riskly, use our content complaints process or email contact@riskly.co.nz.

You retain ownership of content you upload or create in the Service (including Risks & Controls, Health & Safety records (including governance reviews), licences, certificates, and training records, Calendar items, documents, reports, Pro assurance activities and findings (including uploaded reports and validation evidence), and Pro legislation content). You grant us a limited licence to host, process, transmit, and display that content as needed to operate and improve the Service. Our Privacy Policy explains how we handle personal information.

Riskly Limited owns the Service software, branding, templates, and related intellectual property. We do not claim ownership of your organisation content.

The Service relies on third-party providers (for example hosting, authentication, payments, and email). Availability of Pro features such as the NZ Legislation API may depend on those providers and on configuration for your account. We are not responsible for third-party outages or changes outside our reasonable control.

Optional integrations you enable may send data outside Riskly:

• Calendar feeds: read-only subscription links you add to Outlook, Google Calendar, Apple Calendar, or similar apps. Anyone with the link can view due dates included in that feed until you rotate or disable the link.
• Slack or Microsoft Teams: when configured, Riskly posts a short message (for example hazard or incident title, site, and a link back to Riskly) to the webhook URL you provide. You are responsible for securing that channel and webhook.
• SAML SSO: when enabled, your identity provider authenticates members and may pass identity attributes to Riskly for sign-in.

You choose whether to turn integrations on, and you must have authority to connect your organisation's calendar or chat tools.

The Service is provided "as is". To the maximum extent permitted by law, Riskly Limited is not liable for indirect or consequential loss, or for decisions made based on Risks & Controls, Health & Safety records, Calendar, Control Testing, assurance findings or validation records, legislation alerts, What You Must Do, reports, or other outputs. Nothing in these terms limits rights you have under the Consumer Guarantees Act 1993 where they cannot be excluded.

We may update these terms, our pricing, plan packaging, or the Service from time to time. We will post the updated terms on this page with a revised "Last updated" date. For material changes, we will also give reasonable notice (for example by email or in-app notice) before they take effect where practicable.

When we update these terms, you may need to accept the new version before continuing to use the Service. If you do not agree to an update, you may cancel your subscription and export your data within the periods described above.

Questions: contact@riskly.co.nz