Terms of Service

These Terms of Service ("Terms") govern your use of the Stabilise platform, including the marketing website at stabilise.io, the Stabilise dashboard at app.stabilise.io, the Stabilise desktop application, and the Stabilise Node device agent (together, the "Service"). The Service is provided by Stabilise Ltd, a company registered in England and Wales ("Stabilise", "we", "us", "our").

1. Acceptance of Terms

By accessing or using the Service, you agree to be bound by these Terms and by our Privacy Policy. If you are using the Service on behalf of an organisation, you confirm that you have authority to bind that organisation, and "you" refers to both you and the organisation. If you do not agree to these Terms, you may not use the Service.

2. Eligibility and Authority

To use the Service, you must be at least 18 years old and legally capable of entering into a binding contract under the laws of England and Wales. If you are accepting these Terms on behalf of an organisation, you represent that you are authorised to do so and that the organisation is duly formed and in good standing in its jurisdiction.

3. Description of Service

Stabilise provides a managed IT services platform built around a three-tier hierarchy of MSPs, resellers, and end clients. The Service enables technology teams to consolidate their estate management, billing, and compliance posture in a single workspace.

The Service includes:

System integrations. Read-only connections to identity providers (Google Workspace, Microsoft Entra ID, Okta), SaaS platforms, network devices, and other technology systems your organisation operates.
Identity provider synchronisation. Periodic read-only sync of directory users, status, and licence assignments so your view of identity reflects reality.
Compliance tracking. Continuous checks against configurable baselines, with evidence collection for frameworks including Cyber Essentials Plus and ISO 27001.
Billing and reseller hierarchy. Per-licence billing reconciliation, with delegated invoicing for resellers and their clients.
Service catalogue. A curated list of services and packages that resellers can offer to their clients through the platform.
Stabilise Node device agent (optional). A small agent that runs on enrolled devices to collect device posture telemetry such as patch status and disk encryption state. Installation is at your organisation's discretion.
Stabilise desktop application (optional). A macOS application that allows end users to access Stabilise features without a browser. Installation is at your organisation's discretion.

All system integrations operate in read-only mode by default. Stabilise does not create, modify, or delete records in your connected systems unless a written change of scope is signed.

4. User Accounts

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must use strong passwords, enable multi-factor authentication where available, and notify us immediately at support@stabilise.io of any unauthorised use of your account or any other suspected security incident.

You may not share account credentials with anyone outside your organisation. Each named user must have their own account. Service accounts used for automation must be clearly identified and restricted to the minimum scope required.

5. Subscription, Billing, and Renewals

The Service is provided on a subscription basis. Pricing is per licensed user or per managed device, as set out in your order form or on the published pricing page. All amounts are exclusive of VAT and any other applicable taxes, which will be added where required.

Payments are processed by Stripe. By providing payment details, you authorise Stabilise to charge the subscription fee on the agreed billing cycle. Stabilise does not store full card details; Stripe processes payment information directly under its own terms.

Billing cycle. Subscriptions renew automatically each month or year, as selected at signup, until cancelled. You may change tier or licence count at any time. Changes apply at the start of the next billing cycle unless your contract specifies otherwise.

Proration on flex contracts. Where your contract permits mid-cycle changes, additional licences are prorated on a fixed daily rate calculated as the monthly fee divided by 30 and multiplied by the number of days remaining in the cycle. Licence reductions take effect at the next renewal unless otherwise agreed.

Reseller and client hierarchy. Where Stabilise is sold by a reseller, the reseller is the contracting party for billing purposes with respect to their clients. Stabilise invoices the reseller, the reseller invoices the client. Reseller margins and client pricing are set by the reseller. Stabilise does not disclose reseller pricing to clients except where required by law.

Non-payment. If an invoice is not paid by its due date, we may suspend access to the Service after at least seven days' notice. Continued non-payment for more than 30 days may result in account termination and deletion of customer data in accordance with our retention policy. You remain liable for unpaid amounts plus reasonable recovery costs and statutory interest under the Late Payment of Commercial Debts (Interest) Act 1998.

6. Free Trials and Cancellation

Stabilise may offer free trials of the Service. Free trials are provided for evaluation only, may be subject to feature or volume limits, and may be modified or withdrawn at any time. At the end of a free trial, your account will convert to a paid subscription at the published rate unless you cancel before the trial ends.

You may cancel a paid subscription at any time through the dashboard or by emailing support@stabilise.io. Cancellation takes effect at the end of the current billing cycle, at which point access ends and customer data is handled in accordance with the retention rules described in our Privacy Policy. Fees paid are non-refundable, except where required by law.

7. Acceptable Use

You agree not to misuse the Service. In particular, you must not:

Attempt to gain unauthorised access to any part of the Service, other customer environments, or supporting infrastructure
Probe, scan, or test the vulnerability of the Service except under a written security testing authorisation from Stabilise
Interfere with the operation of the Service, including by sending excessive traffic, abusing APIs, or attempting to evade rate limits
Use the Service to violate any applicable law, infringe intellectual property rights, or transmit malware
Reverse engineer, decompile, or disassemble any part of the Service, except to the extent permitted by mandatory law
Use the Service to develop a competing product or service
Submit personal data to the Service in violation of applicable data protection law, or in excess of what is necessary for the Service to function

8. Customer Data and Ownership

You retain ownership of all data your organisation submits to the Service or generates through your use of the Service ("Customer Data"). Stabilise does not claim any rights in Customer Data beyond the limited licence described below.

You grant Stabilise a worldwide, non-exclusive, royalty-free licence to host, copy, transmit, process, display, and analyse Customer Data solely as necessary to provide, maintain, secure, and improve the Service for your organisation, and to comply with applicable law.

We may use de-identified, aggregated information derived from Customer Data for benchmarking, statistical analysis, and product improvement. We will not publish or share aggregated information in any form that identifies you or your users.

9. Third-Party Integrations

The Service connects to a range of third-party systems including identity providers, SaaS platforms (such as Google Workspace and Microsoft 365), network devices, and other technology systems your organisation operates. By connecting these systems, you authorise Stabilise to access them within the scope you have granted.

All third-party integrations operate in read-only mode by default. Stabilise does not create, modify, or delete customer data in connected third-party systems unless a separate written change of scope is signed by both parties. Where read-only mode is technically equivalent to a higher OAuth scope (for example, where Google has not granted a finer-grained alternative), Stabilise self-enforces read-only behaviour in its code.

Where Stabilise receives information from Google APIs, our use is subject to the Google API Services User Data Policy, including the Limited Use requirements. Full details are set out in our Privacy Policy.

Third-party services have their own terms and privacy policies. Stabilise is not responsible for the availability, accuracy, or content of third-party services, or for any losses arising from their failure.

10. Data Protection

Stabilise processes personal data in accordance with the UK GDPR and the Data Protection Act 2018. Full information about the data we collect, how we use it, the lawful bases we rely on, our sub-processors, retention periods, and your rights is set out in our Privacy Policy.

Where Stabilise processes personal data on your behalf as a processor (in particular, directory data and device telemetry from your connected systems), the parties' obligations are governed by a Data Processing Addendum (DPA) which forms part of these Terms when signed. The current DPA is available on request from privacy@stabilise.io.

11. Confidentiality

Each party may receive information from the other that is confidential ("Confidential Information"), including technical, commercial, financial, and operational information. Each party agrees to:

Use Confidential Information only to exercise rights and perform obligations under these Terms
Protect Confidential Information using the same care it uses for its own confidential information of similar importance, and at least a reasonable standard
Disclose Confidential Information only to its personnel, advisers, and sub-processors who need to know and who are under equivalent confidentiality obligations

Confidential Information does not include information that is publicly known through no breach of these Terms, was rightfully known before disclosure, was independently developed without use of the Confidential Information, or is required to be disclosed by law (provided that the disclosing party gives reasonable notice where lawful to do so).

12. Intellectual Property

Stabilise retains all right, title, and interest in and to the Service, including all software, designs, documentation, trade marks, and other intellectual property. Nothing in these Terms transfers ownership of any Stabilise intellectual property to you.

Stabilise grants you a limited, non-exclusive, non-transferable, non-sublicensable licence to access and use the Service during the term of your subscription, solely for your organisation's internal business purposes and in accordance with these Terms.

You may provide feedback, suggestions, or ideas to Stabilise about the Service. Stabilise may use any such feedback without obligation to you, and you assign any rights in such feedback to Stabilise to the extent transferable.

13. Service Availability

We aim to provide a highly available Service with a target of 99.9% uptime measured monthly, excluding scheduled maintenance and events outside our reasonable control. Service credits, where applicable, are set out in your order form or in a separate service level agreement.

Scheduled maintenance will be communicated in advance where possible. Emergency maintenance may be carried out without notice where necessary to protect the security or integrity of the Service.

14. Limitation of Liability

Nothing in these Terms limits or excludes either party's liability for: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; or any other liability which cannot be limited or excluded by applicable law.

Subject to the paragraph above, to the maximum extent permitted by law:

Neither party will be liable for any indirect, incidental, consequential, special, or punitive damages, including loss of profit, loss of revenue, loss of business, loss of goodwill, or loss of anticipated savings
Each party's total aggregate liability arising out of or in connection with these Terms in any 12-month period is limited to the fees paid or payable by you to Stabilise in that 12-month period

15. Indemnification

By Stabilise. Stabilise will defend, indemnify, and hold harmless you and your authorised users against any third-party claim alleging that the Service, when used in accordance with these Terms, infringes that third party's intellectual property rights, and will pay damages and costs finally awarded against you by a court of competent jurisdiction, provided you notify us promptly, allow us to control the defence, and provide reasonable cooperation.

By you. You will defend, indemnify, and hold harmless Stabilise against any third-party claim arising from (a) your or your users' breach of these Terms, (b) your use of the Service in violation of applicable law, or (c) Customer Data that you submit to the Service in violation of any third-party right.

Cap. Each party's indemnification obligation is subject to the same liability cap set out in the Limitation of Liability section above.

16. Suspension and Termination

We may suspend or terminate your access to the Service immediately on written notice if you materially breach these Terms, if your account is more than 30 days overdue on payment, or if your continued use poses a security, legal, or reputational risk. Where practical, we will provide notice and an opportunity to cure.

Either party may terminate these Terms for convenience by giving at least 30 days' written notice ending at the end of the current billing cycle, unless your order form sets a different notice period.

On termination: your access to the Service ends, all rights granted under these Terms cease, and Customer Data is handled in accordance with the retention rules in our Privacy Policy. You may export Customer Data from the dashboard up to the effective date of termination, and on written request for up to 30 days after.

17. Export Controls and Sanctions

You agree to comply with all applicable export control and sanctions laws, including those of the United Kingdom, the European Union, and the United States. You confirm that you are not located in, ordinarily resident in, or organised under the laws of any country or region subject to comprehensive UK, EU, or US sanctions, and that you are not on any UK, EU, US, or UN sanctions or restricted parties list.

18. Force Majeure

Neither party will be liable for any failure or delay in performance to the extent caused by an event outside its reasonable control, including acts of God, war, terrorism, cyberattack by a sophisticated third party, civil unrest, government action, epidemic, fire, flood, telecommunications failure, or failure of upstream cloud infrastructure. The affected party will use reasonable efforts to mitigate the impact and to resume performance as soon as practicable.

19. Changes to Terms

We may update these Terms from time to time. Material changes will be notified by email to the account administrator or shown in the dashboard at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the updated Terms. The version in force is always the one published at stabilise.io/terms.

20. Notices

Legal notices to Stabilise must be sent by email to support@stabilise.io with a copy to privacy@stabilise.io, and are deemed received on the next business day. Notices to you will be sent to the email address registered against your account and are deemed received on the day of sending. It is your responsibility to keep that email address current.

21. Governing Law and Jurisdiction

These Terms and any dispute arising out of or in connection with them (including non-contractual disputes) are governed by the laws of England and Wales. The parties submit to the exclusive jurisdiction of the courts of England and Wales, save that Stabilise may bring proceedings to enforce its intellectual property rights in any court of competent jurisdiction.

22. Entire Agreement, Severability, and Assignment

These Terms, together with our Privacy Policy, any order form, and any signed Data Processing Addendum, constitute the entire agreement between you and Stabilise and supersede any prior or contemporaneous understanding on the same subject. No oral representation or course of dealing varies these Terms.

If any provision of these Terms is held to be unenforceable, the remaining provisions will continue in full force, and the unenforceable provision will be replaced by an enforceable provision that most closely reflects the original intent.

You may not assign or transfer your rights or obligations under these Terms without our prior written consent, except to a successor in interest in a merger, acquisition, or sale of all or substantially all of your assets. Stabilise may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of its assets on written notice to you.

23. Contact

Stabilise Ltd, 6-7 St Cross Street, London, EC1N 8UB, United Kingdom. Registered in England and Wales. VAT GB 494692535.

Support: support@stabilise.io
Privacy: privacy@stabilise.io

Last updated: May 2026.