RiskRoster SaaS terms
Version 19 October 2026 · Cross Compliance Training Limited
1. Service and agreement
These terms apply to business use of RiskRoster, supplied by Cross Compliance Training Limited (we/us), and are separate from our training booking terms. By subscribing, the organisation identified at checkout (you/customer) agrees to these terms and the linked data processing agreement. You must have authority to bind that organisation. Existing customers will be notified before changes are applied to their agreement.
2. Subscription and payment
The selected plan covers the displayed number of active employees and contractors. Archived people do not count. All standard plans include the same platform features and guided self-service setup. Bespoke migration work requires a separate written agreement. Stripe collects the amount and billing frequency shown at checkout, including any applicable tax. There is no automatic free trial; only a valid offer expressly shown at checkout changes the initial charge.
Subscriptions renew for the selected monthly or annual period until cancelled through Manage subscription. Cancellation stops the next renewal; access continues for the paid period unless ended for breach. Deleting a workspace does not cancel billing. No automatic pro-rata refund applies to unused periods, without affecting remedies required by law. We will notify you of price changes before renewal; you may cancel before the new charge.
3. Your responsibilities
You control your training requirements, renewal rules, evidence accuracy, authorised team members and lawful basis for employee data. Keep account access secure and remove leavers promptly. Do not upload unlawful content, malicious files, unnecessary sensitive records or data you are not entitled to process. Do not attempt unauthorised access or interfere with other customers. Tell us promptly about suspected account compromise.
4. Records and compliance decisions
You retain ownership of your uploaded records and permit us to process them only to supply the service under the data processing agreement. RiskRoster supports administration; it does not certify competence, verify awarding-body records or replace risk assessment and employer authorisation. Check important dates and delivery of alerts independently. Keep suitable copies of records and certificates.
5. Support and availability
UK-based telephone and email support is available using the details below. No 24-hour support, fixed response time, uptime percentage or recovery-time guarantee is included. Maintenance, provider outages and changes may affect availability. We will provide the service with reasonable care and skill and take reasonable steps to address reported faults.
6. Data protection and leaving
Our data processing agreement governs workforce data. Our privacy notice covers account and business contact information. Export your records and download certificates before access ends. Request return or deletion through support if needed; statutory data protection obligations continue after termination.
7. Suspension, termination and changes
We may restrict access where reasonably necessary to address non-payment, unlawful use or a security risk, with notice and an opportunity to resolve the issue where practicable. Either party may terminate for a material breach not remedied within 30 days of written notice. We may end service for other reasons on at least 30 days’ notice and refund prepaid fees for any period we do not provide. Material changes to these terms will be notified before they take effect; they do not retrospectively alter an agreed paid period.
8. Liability and governing law
Neither party excludes liability that cannot lawfully be excluded, including fraud or death or personal injury caused by negligence. Subject to that, we are responsible for foreseeable direct loss caused by our breach but not indirect or consequential loss. These terms do not limit individuals’ statutory data protection rights or regulatory powers. English law governs this business agreement and the courts of England and Wales have jurisdiction. Contact us first so we can try to resolve a dispute.
Registered in England and Wales, number 12076785. Registered office: 82 Pascal Close, Corby, Northamptonshire, NN17 4AG.