Terms of Service

Effective date: September 14, 2026  ·  Last updated: October 5, 2026  ·  Interim version

1. Who These Terms Are Between

These terms are an agreement between Stratum Audit LLC ("Stratum Audit", "Stratum", "we", "us") and the organization that subscribes to the service ("Customer", "your organization"). Stratum is invite-only and business-to-business: there is no open registration, and every account belongs to an organization.

If you are using Stratum because your employer gave you an account, your employer is the Customer and these terms bind them. The parts that apply to you personally are §4 (your account) and §9 (acceptable use). Your employer, not Stratum, decides what records are kept about you and who at your organization may see them — see the Privacy Policy, which forms part of these terms.

2. Definitions

• Service — the Stratum web dashboard, the installable field web app, and supporting APIs. Stratum is delivered entirely through the browser; there is no separate native application to install from an app store.
• Authorized User — a person your organization's administrator has invited to the Service.
• Customer Data — everything your organization puts into the Service or generates through it: inspections, findings, photos, forms, training and certification records, incident records, environmental readings, chemical and SDS records, and the personal data of your Authorized Users and workers.
• Documentation — the in-product guidance and the pages published at the Service's own domains.

3. The Service

Subject to these terms and to payment of the applicable fees, we grant your organization a non-exclusive, non-transferable right to access and use the Service during the subscription term, for your organization's own internal business purposes.

We may change, add to, or remove features. Where a change removes a capability your organization relies on, or materially reduces the Service, we will give reasonable notice by in-app notification or email before it takes effect.

4. Accounts, Roles and Administrators

Accounts are created by your organization's administrator, who assigns each user a role. Roles are not cosmetic — they determine what a user can see and do, including access to health-related and personnel records, as described in §3d of the Privacy Policy. Assigning roles correctly is your organization's responsibility, and granting someone an administrator or manager role gives them access to those records.

You are responsible for keeping your sign-in credentials secure and for activity under your account. Tell us promptly at support@stratumaudit.com if you believe an account has been compromised.

Your organization's administrators can deactivate a user's access at any time. What happens to that person's records when they do is described in §8 of the Privacy Policy.

5. What Stratum Is Not

• Stratum does not make you compliant. Responsibility for compliance with the Federal Mine Safety and Health Act of 1977, 30 CFR, and every other legal obligation that applies to your operation rests with your organization as the operator. The Service helps you record, schedule and find things. It does not perform your examinations, and its output is not a defence.
• Stratum does not file anything with MSHA. The Service tracks statutory deadlines, including the 15-minute notification under 30 CFR §50.10 and the 10-working-day Form 7000-1 under §50.20, and it will tell you when a clock is running. Making the call and filing the form are yours to do. A countdown shown or missed in the Service changes nothing about your obligations.
• Regulatory content may be out of date or wrong. References to 30 CFR standards, exposure limits, retention periods and deadline calculations are our reading of the regulations and are reproduced for convenience. Regulations change, and some — the respirable silica standard among them — have been subject to litigation and revision. Verify against the current authority before relying on any of it.
• Strat's answers are advisory. See §6.
• Nothing in the Service is legal or medical advice. That includes anything the Strat assistant says.

6. AI Features

One feature uses Anthropic's Claude: Strat, the compliance assistant on Stratum+. Inspection photographs are never sent to Anthropic or to any other third party. A photo or file reaches Strat only when an administrator or manager takes or adds it in a Strat conversation. §5 of the Privacy Policy sets out exactly what Strat is sent and what is withheld from it.

Terms specific to Strat:

• Strat's answers are advisory and can be wrong, including about your own records. Check anything you intend to act on against the record or regulation it cites; that is what the citations are for.
• Strat drafts; people decide. Forms, task trainings, toolbox talks and form answers it prepares stay drafts until a person reviews them and publishes or submits them.
• What Strat says about a photo is an opinion for a competent person to check, never a finding, and never an examination.
• You must not use AI features to make decisions about an individual's employment, discipline, or fitness for work. The Service is not designed, tested, or intended for that, and the data it withholds from the assistant is withheld precisely so that it cannot be.

7. Customer Data

Your organization owns its Customer Data. We claim no ownership of it. You grant us the limited right to host, process, transmit and display it as needed to provide the Service, to keep backups, and to fix problems you report.

We do not sell Customer Data, we do not share or disclose it to third parties except the subprocessors listed in §6 of the Privacy Policy, and we do not use it to train AI models. Our subprocessors are contractually bound not to train on it either.

Your organization is responsible for the accuracy and lawfulness of the Customer Data it enters, for having a lawful basis to process the personal data of its workers, and for giving those workers whatever notice the law where you operate requires — including, where applicable, notice of electronic monitoring and of the collection of health-related records. We provide the Privacy Policy to help you do that; we cannot give that notice on your behalf.

You can export your complete data set at any time from the Reports page in PDF, CSV and JSON.

8. Data Protection

For personal data in the Customer Data, your organization is the controller and Stratum is the processor. We process it only on your documented instructions, which these terms and your configuration of the Service constitute.

To be completed: customers with statutory obligations requiring an executed data processing addendum — including anything covered by the GDPR or UK GDPR, and most enterprise procurement — should request one at support@stratumaudit.com. This section is not a DPA and does not attempt to be one.

9. Acceptable Use

You and your Authorized Users must not:

• access the Service other than through the interfaces we provide, or attempt to reach another organization's data;
• probe, scan or test the security of the Service without our written permission, or circumvent access controls — including the role-based restrictions on health-related and personnel records;
• use the Service to store data unrelated to workplace safety and compliance, or personal data you have no lawful basis to hold;
• resell, sublicense or provide the Service to anyone outside your organization;
• upload malicious code, or use the Service in a way that degrades it for others.

If you find a security vulnerability, report it to support@stratumaudit.com. We will not pursue good-faith researchers who report promptly and do not access other organizations' data.

10. Fees, Billing and Renewal

Subscriptions are billed through Stripe, on the plan and billing period selected at checkout. Some customers are invoiced on net-30 terms by arrangement.

Setup. Setting up your own organization in the Service is included in the subscription. If you ask us to set it up for you, remote setup is a one-time fee per organization at the price published on our website when you ask, and on-site setup is quoted for your location. Either is agreed with you before the work is scheduled, invoiced once, and is not part of the subscription.

• Subscriptions renew automatically for successive periods unless cancelled before the period ends.
• Administrators can view invoices, change payment method, and cancel through the billing portal in the dashboard.
• Fees are exclusive of taxes, which are your responsibility where applicable.
• If payment fails, the subscription enters a past-due state and the Service continues for a period so that a card expiry or an invoice sitting in accounts payable does not interrupt safety recordkeeping. Continued non-payment leads to suspension under §11.
• Fees already paid are non-refundable except where required by law, or where we terminate for convenience under §11, in which case we refund the unused portion of the period.

We may change prices for a future renewal period with at least 30 days' notice before that period begins.

11. Term, Suspension and Termination

These terms run for as long as your organization has an active subscription.

You may cancel at any time; cancellation takes effect at the end of the current billing period.

We may suspend access where an account is being used in breach of §9, where continued use threatens the security or integrity of the Service, or for sustained non-payment. Except where the risk requires immediate action, we will give notice and an opportunity to fix the problem first.

We may terminate for material breach that is not remedied within 30 days of notice, or for convenience on 60 days' notice with a pro-rata refund.

After termination, your organization's data is retained for a 90-day grace period so it can be exported, and is then deleted. Export it before that window closes. Records you are required to retain under 30 CFR or any other law remain your obligation to retain — we do not hold them for you after deletion, and a terminated subscription does not suspend a recordkeeping duty.

12. Availability and Support

We aim to keep the Service available continuously and to give reasonable notice of planned maintenance, but we do not currently offer a contractual uptime commitment or service credits. Saying otherwise would be a promise we have not built the measurement to keep. Customers who need a service level agreement should ask at support@stratumaudit.com.

The field app is designed to work offline. Records captured without connectivity are held in your browser's storage for the Stratum origin and upload when connectivity returns. Two consequences are your organization's to manage: a record that never syncs is not in the Service, so allow devices to reconnect before they are wiped, handed on or taken out of service; and browsers may discard origin storage under storage pressure unless the app has been added to the home screen, which is why the install prompt exists. See §7 of the Privacy Policy for what queued data is and is not protected by.

Support is by email at support@stratumaudit.com.

13. Third-Party Services

The Service depends on the third parties listed in §6 of the Privacy Policy. Their availability and their terms are outside our control, and an outage at one of them may interrupt the Service. We remain responsible for our subprocessors' handling of Customer Data as described in §7.

14. Warranties and Disclaimer

We warrant that we will provide the Service with reasonable skill and care, and that we will not materially reduce its security during a paid term.

Otherwise, and to the fullest extent permitted by law, the Service is provided "as is", without warranties of merchantability, fitness for a particular purpose, or non-infringement. In particular we do not warrant that the Service will be uninterrupted or error-free, that AI output will be accurate or complete, or that use of the Service will result in compliance with any law or regulation.

Nothing in these terms excludes liability that cannot lawfully be excluded, including liability for death or personal injury caused by negligence, or for fraud.

15. Limitation of Liability

Subject to §14, and to the fullest extent permitted by law, neither party is liable for indirect, incidental, special or consequential loss, or for lost profits, revenue or goodwill.

To be completed: the aggregate liability cap has deliberately been left blank rather than filled with a number we have not taken advice on. Until it is agreed in writing, each party's liability is limited as far as applicable law allows, and customers who need a stated cap should request executed terms before relying on this section.

16. Indemnity

Your organization will indemnify us against third-party claims arising from Customer Data you had no right to process, from your use of the Service in breach of §9, or from your organization's own regulatory non-compliance.

We will indemnify your organization against third-party claims that the Service as provided by us infringes their intellectual property rights.

17. Confidentiality

Each party will protect the other's confidential information with at least the care it uses for its own, and will use it only to perform these terms. Customer Data is your organization's confidential information. This survives termination.

18. Changes to These Terms

We may update these terms. Material changes will be notified by in-app notification or email at least 30 days before they take effect, and the "Last updated" date above will change. Continuing to use the Service after that date means the revised terms apply. If you do not accept a material change, you may cancel under §11 and we will refund the unused portion of the current period.

Because this is an interim version, we expect the replacement to be a substantive rewrite rather than an amendment, and we will notify it as a material change.

19. Governing Law and Disputes

To be completed. Governing law and the forum for disputes are not stated here because naming a jurisdiction we have not taken advice on would be worse than leaving it open. Until this section is completed, nothing in these terms waives either party's right to bring a claim in a court that would otherwise have jurisdiction, and neither party is required to arbitrate.

20. General

If a provision is found unenforceable, the rest stays in force. A failure to enforce a provision is not a waiver of it. You may not assign these terms without our consent; we may assign them to a successor in a merger or sale of substantially all our assets, on notice to you. These terms, together with the Privacy Policy, are the entire agreement between us on their subject matter, and replace any prior understanding.

21. Contact

Stratum Audit LLC
support@stratumaudit.com