Terms of Service & Privacy Policy

COLZ is a SOX compliance platform operated by Brandalese & Co. (“COLZ,” “we,” “us”). By creating an account or using any COLZ tool, you (“you,” “the User”) agree to these Terms. If you are using COLZ on behalf of a company, you confirm you have authority to bind that company to these Terms.

COLZ provides a guided, self-serve platform for building and documenting an Internal Control over Financial Reporting (ICFR) program under Section 404 of the Sarbanes-Oxley Act. Tools include, but are not limited to: materiality calculators, scoping assessments, risk and control matrices, sampling methodology, testing workpapers, and a memoranda library.

Everything on COLZ — including the platform design, tool structure, template content, methodology framework, memoranda, and written materials — is owned by Brandalese & Co. and protected by copyright, trademark, and other applicable intellectual property laws.

Your licence to use COLZ is:

• Personal and non-transferable — your account is for your use only
• Non-exclusive — we grant the same access to all subscribers
• Revocable — we may suspend access if these Terms are breached

You may not: copy, reproduce, resell, sublicense, or create derivative works from any COLZ content or tool — in whole or in part — for any commercial purpose without our prior written consent. This includes rebuilding or repackaging the COLZ methodology as a competing product or service.

Outputs you generate using COLZ — such as completed RCMs, workpapers, and memos — belong to you and your organisation. We claim no ownership over the specific data and content you input.

You may use COLZ to:

• Build and document your organisation’s internal SOX/ICFR compliance program
• Export and share outputs with your auditors, board, and advisors
• Use COLZ outputs as the basis for your organisation’s annual management assessment under Section 404(a)

If you are a consultant or advisor using COLZ to assist a client, you must hold an active Practitioner Licence. Contact us at hello@colz.ai for details.

You may not use COLZ to:

• Reverse-engineer, decompile, or extract the platform’s underlying structure or content for any competing purpose
• Share login credentials or provide access to unauthorised users
• Represent COLZ outputs as having been prepared by a licensed CPA, auditor, or legal professional
• Use the platform for any unlawful purpose

To the fullest extent permitted by law, COLZ and Brandalese & Co. are not liable for any financial loss, regulatory finding, audit failure, or other consequence arising from your use of — or reliance on — COLZ outputs. You use this platform at your own professional judgment and risk.

Our total liability to you for any claim arising out of these Terms shall not exceed the fees you paid to COLZ in the 12 months preceding the claim.

We may update these Terms from time to time. If we make material changes, we will notify you by email or in-platform notification at least 14 days before the changes take effect. Continued use of COLZ after that date constitutes acceptance of the revised Terms.

These Terms are governed by the laws of the State of [State — to be confirmed with counsel], without regard to conflict of law principles. Any disputes shall be resolved in the courts of [State — to be confirmed with counsel].

When you use COLZ, we may collect:

• Account information: name, email address, company name, job title
• Usage data: which tools you use, how often, and export activity — used to improve the platform
• Content you input: company-specific data entered into COLZ tools (e.g. financial figures, control descriptions). This data is yours and is not used by us for any purpose other than delivering the service to you.
• Payment information: processed securely by our payment provider (e.g. Stripe). We do not store card details.
• Technical data: browser type, IP address, and session data — collected automatically for security and performance purposes
• Profile responses: your answers to the tailoring questionnaire (your segment, challenge, and focus areas) — used to tailor recommendations and occasional relevant outreach

We will never:

• Sell your data to third parties
• Use the content of your ICFR program or financial data for advertising or analytics purposes
• Share your information with any party other than as described in this policy

We use your data solely to:

• Provide and operate the COLZ platform
• Send you essential service communications (account confirmations, updates, security notices)
• Improve platform features based on aggregated, anonymised usage patterns
• Comply with legal obligations

Your data is stored on secure, encrypted servers. We apply industry-standard security measures including encryption in transit (TLS) and at rest. Access to user data is restricted to authorised personnel only.

COLZ tools that run locally in your browser (using localStorage) store data on your own device — not on our servers. That data is under your control and is cleared when you clear your browser storage.

We retain your account data for as long as your account is active. If you close your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or compliance purposes.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to any legal retention requirements)
• Export your data in a portable format

To exercise any of these rights, contact us at privacy@colz.ai.

COLZ uses essential cookies only — those necessary to keep you logged in and the platform functioning. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.

For any questions about these Terms or this Privacy Policy:

Brandalese & Co. — COLZ
legal@colz.ai · privacy@colz.ai · colz.ai