Vigil28

Terms of service

Last updated: September 2026. These terms govern the use of Vigil28. Please read them carefully — by creating an account you accept them.

1. About these terms

These terms of service ("Terms") form a binding agreement between you ("Customer") and Vigil28 Oy ("Vigil28", "we", "us"), a Finnish limited company, for the use of the Vigil28 service at vigil28.eu and its associated APIs and tools (the "Service"). If you accept these Terms on behalf of a company, you confirm you are authorized to do so.

2. The service

Vigil28 is a monitoring service for GDPR Article 28 compliance. It tracks publicly available sub-processor and vendor list pages of companies designated by the Customer, detects changes, and sends alerts about those changes. The Service is an informational tool: it does not constitute legal advice, and it does not make the Customer compliant with the GDPR or any other law. The Customer remains solely responsible for its own compliance decisions and for its relationships with its processors.

Our monitoring bot is described at the bot information page.

3. Accounts and eligibility

You must be at least 18 years old and capable of forming a binding contract. You are responsible for the accuracy of the information you provide at signup, for safeguarding your account credentials, and for all activity under your account. Notify us immediately at hello@vigil28.eu if you suspect unauthorized use.

4. Acceptable use

You agree not to:

  • use the Service for any unlawful purpose or to infringe the rights of any third party;
  • attempt to gain unauthorized access to the Service, other customers' data, or our infrastructure;
  • interfere with or disrupt the Service, including circumventing rate limits or scraping our user interface;
  • resell, sublicense, or provide the Service to third parties as your own offering without a written agreement with us.

5. Subscriptions and billing

The Service is offered on subscription plans as published on our pricing page. A free tier may be available with limited features.

  • Paid plans are billed annually in advance, by card, iDEAL, SEPA bank transfer or invoice.
  • Online payments are processed on our behalf by Mollie Payments B.V. (Netherlands). Your payment details are shared with Mollie solely to complete the transaction, are subject to strong customer authentication under PSD2, and are never stored on our servers.
  • Fees are stated exclusive of VAT. Invoiced amounts are payable within 14 days of the invoice date.
  • You may upgrade to a higher plan at any time in the Service. The new plan starts immediately for a new 12-month period; the unused part of your current paid period is credited pro rata against its price, so you pay only the difference. Plans cannot be downgraded.
  • You may cancel your subscription by email to hello@vigil28.eu. It then ends at the end of the current paid period, which is not refunded, except as required by mandatory consumer protection law.
  • We may change prices with 30 days' notice; changes never apply retroactively to a paid period.

6. Customer data and data processing

The details of how we process personal data are set out in our privacy policy. Where we process personal data on your behalf, the parties' obligations are defined in a separate data processing agreement in accordance with Article 28 GDPR, concluded at signup or upon request ("DPA"). The DPA prevails over these Terms on matters of personal data processing.

You retain all rights to the data you submit to the Service. We use it only to provide the Service to you and as described in the privacy policy and DPA.

7. Intellectual property

We own the Service, including its software, design, and brand. These Terms grant you a limited, non-exclusive, non-transferable right to use the Service for your internal business purposes. You may not copy, modify, or create derivative works from the Service except as permitted by law.

8. Availability and support

We aim for high availability but do not guarantee uninterrupted service. We may perform maintenance, which we will announce in advance whenever practicable, preferably during low-traffic hours. Scheduled maintenance is not counted as downtime.

Support is available in English and Finnish by email at hello@vigil28.eu during Finnish business hours. We will respond to requests as promptly as reasonably possible.

9. Limitation of liability

To the extent permitted by law, our aggregate liability arising from or related to the Service is limited to the fees you paid us in the twelve months preceding the event giving rise to the claim. Neither party is liable for indirect or consequential damages, such as loss of profits, data, or goodwill, except where Finnish law does not allow such limitation. Nothing in these Terms limits liability for intent, gross negligence, personal injury, or violations of mandatory consumer law.

10. Term and termination

You may terminate your subscription at any time as described in section 5. We may suspend or terminate access if you materially breach these Terms and do not remedy the breach within 14 days of notice.

Upon termination, you may export your data for 30 days, after which we delete it in accordance with the privacy policy and DPA. Sections that should by their nature survive termination (e.g. liability, governing law) survive.

11. Changes to the terms

We may update these Terms to reflect new features or legal requirements. Material changes will be announced in the Service or by email at least 30 days in advance. Continued use after the effective date constitutes acceptance of the updated Terms.

12. Governing law and disputes

These Terms are governed by Finnish law, excluding its conflict-of-laws rules. Disputes will first be addressed through good-faith negotiation. If unresolved, they shall be settled in the District Court of Helsinki, unless mandatory consumer protection law grants you the right to bring proceedings in your own place of residence.

13. Contact

Questions about these Terms: hello@vigil28.eu.