Skip to content

Legal

Terms of service

These are the terms on which an accounting practice licenses Compliance Cockpit. They are written to be read by the person who will actually rely on them, and clause 2 — what the service does, and the three things it deliberately does not do — is the one that matters most.

Items in square brackets are commercial terms that belong on the order form and are completed before signature. We have left them visibly unfinished rather than filled with a plausible number — which is the same rule the product applies to the documents it generates.

Last updated: 28 July 2026

1. Who this agreement is between

Almost everything in the product belongs to a practice rather than to us, so the first question is which of us is promising what to whom.

1.1The parties

This agreement is between the accounting practice named on the order form (you, your practice) and [registered company name], a company registered in England and Wales, company number [company number], registered office [registered office address], which trades as Compliance Cockpit (we, us, our).

We contract with practices, not with consumers. If you are using the product because your accountant invited you to the Client Portal, this agreement is not yours — it is theirs, and clause 1.4 explains where you stand.

1.2What makes up the agreement

The order form, these terms, the privacy notice and the data processing terms referred to in clause 10. Together they are the whole agreement. Where they conflict, the order form comes first, then these terms, then the notices.

1.3Who may accept these terms

Whoever signs the order form or first activates the account must be authorised to bind the practice. By accepting, that person confirms they have that authority. If they do not, we may treat the agreement as ended and will not charge for the period before it was.

1.4Your staff, and your clients

Access is for your practice’s own staff, on named individual accounts — not shared logins. Your practice decides who has an account and at what role, and remains responsible for what is done through them.

People your practice invites to the Client Portal are not parties to this agreement. The client role exists only by explicit invitation from your practice, it is not a role your practice can assign to its own staff, and it carries none of the practice permissions. You decide which documents a portal user is shown, and your engagement with that client remains yours alone. We have no professional relationship with your clients.

Clause 2 — the one that matters most

Prepared by the software. Filed by your practice.

Compliance Cockpit prepares filings for you to submit. It does not file on your behalf, it does not change a statutory register without a person approving the change, and nothing it generates is legal, accounting or tax advice. That is not small print bolted onto a bigger promise — it is the promise, and the rest of this agreement is written on top of it.

2.1What we provide

A hosted software service, licensed to your practice for the term, for managing company compliance across a portfolio: client and company records, statutory registers with a dated history, corporate actions that are validated before they are applied, computed deadlines, generated minutes, resolutions and document packs, ownership reconstructed from public Companies House filings, client approvals, VAT working papers, and an audit trail across all of it.

We provide the software and the hosting. Your practice provides the records, the judgement and the decisions.

2.2It prepares Companies House filings. It does not submit them

The product prepares the filing — the form, the data, the statutory deadline, the supporting documents and a sealed, content-hashed package — and stops. There is no code path in the software that transmits a filing to Companies House: the transport client’s methods throw and open no network connection. Submission is an act performed by a person at your practice, on your practice’s own account with the registrar and under your own authentication code.

Marking work “ready to file” is an internal workflow state, not a submission. Before it can be set, the product requires the practitioner to confirm that the information has been reviewed, that this is not yet live Companies House filing, and that future live filing will be legally significant. Those confirmations are part of the product, not part of a sales pitch.

It follows that no filing deadline is ours to meet. Where a filing is late, incorrect or never made, the act — and the omission — belong to your practice.

2.3Where HMRC is different, and we will not blur it

Making Tax Digital for VAT is not the same guarantee, and we would rather say so than let the sentence above be read across to it. The product contains a real MTD submission path. Whether it can reach HMRC at all is a deployment decision: it requires HMRC production recognition, a stored OAuth grant made with your practice’s own agent credentials, and complete fraud prevention headers. Where those are not configured, the connector reports itself unavailable and no submission is possible.

Where your practice does connect its own credentials, a VAT return is transmitted only when a person at your practice instructs it, under your practice’s own HMRC authorisation, and the figures sent are the figures your practice approved. In sandbox mode nothing leaves the building and the screens say so; a sandbox receipt is not evidence of a return having been made.

2.4It is not legal, accounting or tax advice

The software applies rules taken from the Companies Act 2006 and produces drafts, computations and recommendations from the records your practice holds in it. That is not advice, and using the product creates no professional relationship between us and your practice, or between us and your clients. We are not your solicitors, your accountants or your company secretary.

Everything the product generates — minutes, written resolutions, document packs, health-check reports — is a draft for a qualified person at your practice to complete, check and sign. Where a legal fact cannot be proved from the records held, the document prints a bracketed instruction to complete the point before signing, and says why: it does not hold the company’s articles, so it cannot confirm that a pre-emption right was complied with or waived; it does not hold the accounts, so it cannot confirm that distributable profits cover a dividend. Resolving those brackets is your practice’s work, and no document should be signed with any of them left in.

2.5Your statutory obligations remain yours

Nothing in this agreement moves a statutory or professional obligation from your practice to us. The accuracy of the register, what is filed and when, the content of anything signed, your anti-money-laundering duties and your professional body’s requirements all stay where they were. The product is a tool your practice uses in discharging them.

A deadline shown on screen is computed from the records held in the product. If those records are incomplete or out of date, the deadline will be too, and it remains your practice’s responsibility to know the real one.

3. Your practice’s responsibilities

Short list, and none of it is unusual. It is written out because the boundary in clause 2 only works if both halves of it are performed.

3.1The accuracy of what you put in

You are responsible for the client, company and personal data your practice enters or uploads, for its accuracy, and for having a lawful basis to hold it. The product checks arithmetic and internal consistency — an over-allocated share class, a statement of capital that omits the shares being allotted, a PSC band that does not match the reconstructed holding — and it flags a conflict rather than resolving it. It cannot check whether a record is true.

Where the reconstruction and the filings disagree, the product stops and asks. The decision is your practice’s to make and to record.

3.2Credentials, access and leavers

Keep passwords, multi-factor devices and recovery codes safe, and do not share accounts. Time-based multi-factor authentication is available and your practice can require it of everyone; we recommend that you do. Tell us promptly if you suspect an account has been compromised, and disable the accounts of staff who leave — an administrator can revoke every session for a user at once.

Company authentication codes are the most sensitive thing the product holds. Only an owner or administrator may add, replace or remove one, and your practice is responsible for who it gives those roles to.

3.3Checking generated documents before they are signed

Before any document produced by the product is signed, sent to a client or relied on, a qualified person at your practice must read it in full, complete every bracketed item and satisfy themselves that it is correct. That check is the point at which responsibility for the document rests with your practice, and it is not a formality: a generated minute states what the records support, and only your practice knows what happened in the room.

3.4Approvals are acts of your staff

Approving a corporate action, applying an ownership proposal to a live register and marking work ready to file are decisions taken by named people at your practice, recorded against the user who took them. The audit trail is only worth what the identity behind it is worth, which is the practical reason not to share a login.

3.5Your side of the connection

You are responsible for your own internet access, devices and up-to-date browsers, and for keeping them secure enough for the data you put into the product.

4. Acceptable use

Use it for your practice’s own professional work, for your practice’s own clients. The rest of this clause is what that rules out.

  • Do not give access to anyone outside your practice, other than the client-portal users your practice invites. Re-supplying the service to another practice, as a bureau or under your own branding, needs our written agreement: [whether re-supply to other firms is permitted — to be set in the order form].
  • Do not attempt to reach another practice’s data, probe or scan the service, circumvent rate limits, or defeat the client-visibility restrictions your own practice has configured.
  • Do not load-test, penetration-test or run automated crawlers against the service without our prior written permission. If you find a security flaw, tell us privately before you tell anyone else. We will not pursue good-faith research reported that way.
  • Do not upload malicious code, or material your practice has no right to hold. Uploaded evidence is scanned, but a scanner is a control, not a warranty.
  • Do not copy, modify, reverse engineer or decompile the software, except to the extent that cannot lawfully be restricted — including the decompilation and interoperability rights under sections 50B and 50BA of the Copyright, Designs and Patents Act 1988.
  • Do not use the service unlawfully, or to hold personal data for which your practice has no lawful basis.
  • Do not present the product as your own software to your clients. Reports and documents go to them as your practice’s work — which is the point — but the software behind them is ours.

4.1Suspension

We may suspend access, in whole or in part, where use of the service threatens its security, integrity or availability for others, where the law requires it, or where fees are overdue under clause 5.5. We will give notice beforehand wherever it is practicable to do so, suspend no more than is needed, and restore access as soon as the cause is resolved. Suspension is not termination and does not end your practice’s rights to its own data.

5. Fees and payment

The product is priced per practice by portfolio size rather than per seat, so the whole team can work in one place. The figures themselves belong on the order form and are not published here.

5.1What you pay

The subscription fee, the portfolio band it is based on, the currency and the billing period are set out in the order form: [subscription fee, portfolio band and billing period — to be set in the order form]. Fees are exclusive of VAT, which is added at the prevailing rate.

5.2When you pay

Invoices are payable [payment terms — to be set] from the date of invoice, by the method stated on the order form. Fees are payable for the whole of the term and, except where these terms say otherwise, are not refundable in part when an account is closed early.

5.3Pilot and evaluation accounts

Where your practice is taking part in a pilot or evaluation, the fee — which may be nil — the duration and any support arrangements are those given to you in writing for that pilot: [pilot commercial terms — to be set in the pilot agreement]. Clause 8.2 applies to every pilot account and qualifies the warranties in this agreement.

5.4Changing the fee

We may change our fees for a renewal term on [notice period for a price change — to be set] written notice, taking effect from the start of the next renewal term rather than during a term you have already paid for. If a practice does not accept the new fee it may decline to renew under clause 6.1, and nothing is owed beyond the current term.

5.5Late payment

Interest on overdue sums runs at [late payment interest rate — statutory rate under the Late Payment of Commercial Debts (Interest) Act 1998 unless the order form states otherwise]. We will not suspend an account for non-payment without first giving [notice before suspension for non-payment — to be set] written notice and a chance to put it right, because an account that goes dark mid-deadline is a problem for your clients rather than for you.

6. Term, termination and your data on exit

The part of a software contract that is only ever read once, at the worst possible moment. It is written to be readable then.

6.1Term and renewal

The agreement starts on the date in the order form and runs for [initial term — to be set in the order form], then renews automatically for successive periods of [renewal period — to be set] unless either party gives [notice to prevent renewal — to be set] written notice before the end of the current term.

6.2Ending it

For convenience. Either party may end this agreement by giving [notice period for termination for convenience — to be set] written notice.

For cause. Either party may end it immediately on written notice if the other commits a material breach that is capable of remedy and does not remedy it within [cure period — to be set] of being asked to, commits a material breach that cannot be remedied, or becomes insolvent.

6.3Getting your data out

While the account is live, you do not have to ask us. The product exports the client list and the workflow as CSV, produces compliance-report exports, and generates document packs, minutes, resolutions and VAT returns as PDFs on demand. A practice that wants a running copy of its own records can take one at any time, without our involvement and without a support ticket.

On termination. On written request made within [post-termination export window — to be set]of the end of the term, we will provide an export of your practice’s data in a structured, commonly used, machine-readable format. After that we return or delete it within [return-or-delete period — to be set in the contract], in line with our obligations as your processor.

Deletion is subject to two honest exceptions: copies held in routine backups are removed as those backups age out of their ordinary cycle rather than being reached into individually, and we keep anything the law requires us to keep, for no longer than it requires. Your data is never held back as leverage over an unpaid invoice.

6.4What ends, and what survives

Access to the service ends at the end of the term, and fees accrued up to that point remain payable. Clauses 2.5, 7, 9, 10 and 11, and any other clause that by its nature is meant to continue, survive the end of this agreement.

7. Intellectual property

We own the software. Your practice owns its records and everything the software produces from them. Neither of those changes because the other one exists.

7.1Ours

The software, its interfaces, the rule sets behind the corporate actions and filing preparation, the canonical ownership engine, the document templates and the documentation are ours or our licensors’. Your practice receives a non-exclusive, non-transferable, revocable right to use them during the term for its own professional work. Nothing else is granted, by implication or otherwise.

7.2Yours

Your practice’s client and company records, uploaded documents, notes and working papers remain yours throughout. You grant us only the licence we need to host, process, transmit, back up and display that material in order to provide the service, and to act on your instructions as your processor. We do not use it for our own purposes, we do not pool it with another practice’s, and we do not train any model on it.

7.3What the product generates for you

Minutes, resolutions, document packs, filing packages and health-check reports generated from your records are yours to use with your clients, without further fee and without any obligation to credit us. We claim no rights in the output, which would otherwise make the product useless for the purpose it was built for.

7.4Feedback

If you tell us what is broken or what ought to exist, we may act on it freely and without obligation, and any improvement we make remains ours. This covers the suggestion, never the data behind it.

7.5Public register data

Company profiles, filing history, officers and PSC data come from the Companies House public register and remain subject to the registrar’s own terms of use. Ownership figures reconstructed from those filings are our software’s reading of public documents, presented with the filing behind each figure precisely so that your practice can check them rather than take them on trust.

7.6Our name

You may say that your practice uses Compliance Cockpit. Any other use of our name, logo or marks needs our written permission, and we will not unreasonably withhold it.

8. Warranties, and their limits

The honest version. What is warranted is short; what is not is longer, and is the same list our security page publishes rather than a quieter one written for a contract.

8.1What we do warrant

That we will provide the service with reasonable skill and care; that we have the right to grant the licence in clause 7.1; and that we will not knowingly introduce malicious code into the service. Terms implied by statute that cannot lawfully be excluded apply in addition to these.

8.2Pre-general-availability software

This is pre-1.0 software, currently supplied to a controlled pilot. Only the deployed pilot build is supported and it carries no security-update guarantee. Pilot environments hold synthetic data and pilot practices are asked not to upload real client documents. Where your practice is on a pilot, this clause qualifies everything else in this section, and we would rather you read it twice than discover it later.

8.3What we do not warrant

That the service will be uninterrupted or free of error. No availability commitment is given unless a service level is agreed in writing: [service level and availability commitment — to be agreed if required].

That any reconstructed ownership position, computed deadline, validation result or generated document is correct. Each is derived from records and public filings that may themselves be incomplete, contradictory or out of date — which is exactly why the product shows its reasoning, grades its confidence and stops at a conflict instead of asserting an answer. The review it asks for is not decorative.

We hold no SOC 2 report and no ISO 27001 certificate, and no third-party penetration test has been performed. Neither is claimed anywhere on this site, and nothing in this agreement should be read as implying one.

8.4Things outside our control

Companies House, HMRC and the public registers we read from are independent of us, and we do not warrant their availability, accuracy or completeness. Optional third-party features — optical character recognition for scanned filings, the AI assistant, transactional email — are off unless your practice enables them with its own credentials. Enabling one is your practice’s decision, that provider’s terms then apply to what is sent, and the privacy notice sets out what leaves the system in each case.

8.5And, once more, not advice

No warranty in this agreement, and nothing the product produces, is legal, accounting or tax advice, or a substitute for the professional judgement of a qualified person at your practice.

9. Limitation of liability

This clause allocates risk in line with clause 2: your practice performs the submission, checks the document and signs it, and the liability follows the person doing those things.

9.1What is never limited

Nothing in this agreement limits or excludes either party’s liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, for breach of the terms implied by section 12 of the Sale of Goods Act 1979 or section 2 of the Supply of Goods and Services Act 1982, or for anything else that cannot lawfully be limited — including by section 2(1) of the Unfair Contract Terms Act 1977. Your obligation to pay fees properly due is also outside every limit below.

9.2What neither of us is liable for

Indirect or consequential loss, and loss of profit, revenue, business, goodwill, reputation or anticipated savings, however arising.

And, as the counterpart of clause 2: penalties, interest, professional-body sanction or loss arising from a filing that was made late, made incorrectly or not made at all, where the act of filing and the content filed were your practice’s. We do not perform the submission, we do not sign the document, and we do not price this agreement as though we did.

9.3The cap

Subject to clause 9.1, our total liability arising out of or in connection with this agreement in any twelve-month period — whether in contract, tort including negligence, breach of statutory duty or otherwise — is limited to [liability cap — to be set: commonly the fees paid in the twelve months before the claim, or a stated sum].

The fee reflects this allocation of risk. Each party is expected to carry its own insurance for the risks it keeps: [professional indemnity insurance requirement, if any — to be set].

9.4Bringing a claim

A claim must be notified in writing, with reasonable detail, within [period for notifying a claim — to be set] of the party bringing it becoming aware of the circumstances giving rise to it.

10. Data protection

Set out in full in the privacy notice, which forms part of this agreement. The clauses below are the parts that are contractual rather than informative.

10.1Which of us is which

For your practice’s client records, your practice is the controller and we are the processor. You decide which clients, companies, officers and documents go into the system and what happens to them. We process that data only on your documented instructions.

For your practice’s own account, we are the controller. That covers staff logins, security and audit records about use of the software, support correspondence, demo requests and billing.

10.2Our obligations as your processor

The Article 28 terms are agreed with the order form: [data processing agreement — to be executed with the order form]. They commit us to processing only on your instructions, to confidentiality obligations binding on our staff, to appropriate technical and organisational measures, to assisting you with data subject requests and impact assessments, to notifying you of a personal data breach without undue delay, to giving notice of any change of sub-processor with a right to object, and to deleting or returning the data at the end under clause 6.3.

Where a person whose data your practice holds comes to us directly, we do not answer for you and we do not ignore them: we pass the request to your practice, tell them we have done so, and help you respond.

10.3Your obligations as controller

Having a lawful basis for the personal data you put into the product, giving your own clients your own privacy notice, uploading only what your due-diligence procedures actually require — identity documents are not a general filing cabinet — and keeping the personal data you enter accurate. Your instructions to us must themselves be lawful; if one is not, we will say so rather than carry it out.

10.4Location, sub-processors and transfers

Practice data is held in the United Kingdom or the European Economic Area. The optional features described in clause 8.4 are the only ones that can send data further, they are off unless your practice turns them on, and any transfer outside the UK is made under the UK International Data Transfer Agreement or the UK Addendum to the standard contractual clauses. The current named sub-processor list, and the notice we give before changing it, are in the privacy notice.

10.5Security

The technical and organisational measures we apply — tenant isolation enforced in every query, the client-visibility wall, encryption at rest for identifiers and tokens, hashed passwords and session tokens, private document storage and malware scanning — are described, with their limits, on our security page. We will not weaken them during the term.

11. Changes, governing law and general terms

11.1Changes to these terms

We update these terms when the service or the law changes. The date at the top always reflects the current version. Where a change materially affects your practice’s rights or obligations we will tell affected practices directly, at least [notice period for a material change to these terms — to be set] before it takes effect, rather than relying on anyone noticing a new date. A practice that does not accept a material change may end the agreement before the change applies, and we will refund fees covering any period after that.

One change we will never make quietly: if the software ever gains the ability to transmit a filing to a registrar, that will be an announced change your practice opts into, not a clause edited into this page.

11.2Notices

Notices under this agreement are in writing, to the contacts named on the order form, and to us at [address and email for legal notices — to be set]. Notice by email is effective when it is acknowledged or on the next working day, whichever is earlier. Routine operational messages in the product are not notices under this clause.

11.3Confidentiality

Each party keeps the other’s confidential information confidential, uses it only for this agreement, and discloses it only to people who need it and are under equivalent obligations. This does not cover information that is already public through no fault of the receiving party, or that the law or a regulator requires to be disclosed. It continues after the agreement ends.

11.4Assignment and subcontracting

Your practice may not assign or transfer this agreement without our written consent, which we will not unreasonably withhold — a merger of practices being the ordinary case where it should be given. We may assign to a successor to the business on written notice, and may use sub-processors as described in clause 10.4, remaining responsible for them.

11.5Third party rights

Nobody other than the parties has any right to enforce this agreement under the Contracts (Rights of Third Parties) Act 1999. That includes your clients and your portal users, whose rights sit with your practice under clause 1.4.

11.6Entire agreement

The documents listed in clause 1.2 are the whole of what is agreed, and replace anything said beforehand. Neither party has relied on any statement not set out in them — but nothing here limits liability for fraudulent misrepresentation.

11.7Waiver, severance, and no partnership

A failure to enforce a term is not a waiver of it. If a provision is held to be unenforceable, it is modified to the least extent needed to make it enforceable, or struck out, and the rest stands. Nothing in this agreement creates a partnership, joint venture or employment relationship, and neither party may bind the other.

11.8Events outside reasonable control

Neither party is in breach for a failure caused by something genuinely outside its reasonable control, provided it tells the other promptly and works to resume. If such an event continues for more than [force majeure termination threshold — to be set], either party may end the agreement without liability for the failure itself. Non-payment is not such an event.

11.9If something goes wrong between us

Before starting proceedings, both parties will try to resolve the dispute by escalating it to a senior person on each side and meeting within a reasonable period: [escalation contacts and dispute resolution route — to be set]. This does not stop either party seeking an injunction where one is genuinely needed.

11.10Governing law and jurisdiction

This agreement, and any dispute or claim arising out of or in connection with it or its subject matter — including a non-contractual one — is governed by and construed in accordance with the law of England and Wales.

The courts of England and Wales have exclusive jurisdiction, sitting at [venue — to be set, for example the courts of England and Wales sitting in London].

11.11Questions about these terms

Ask before you sign rather than afterwards. Our contact page reaches us, and we would far rather explain a clause than argue about it later.

Last updated: 28 July 2026.