Legal

Terms of service

The terms under which businesses use Permenta: the service, accounts, plans and payment, cancellation, your data, liability and governing law. Last updated 24 September 2026.

1. Who we are and what these terms cover

Permenta (“the Service”) is operated by Patchgate, LLC, a Delaware limited liability company, doing business as Permenta (“Permenta”, “we”, “us”). These terms govern the use of the website at permenta.com, early-access participation and the Service itself, including every plan, the API and the command-line tool. By creating a workspace or using the Service you accept them on behalf of the business you represent (“you”, “Customer”). The Service is offered to businesses and professionals; if you are a consumer, the mandatory consumer-protection rules of your country apply in addition to these terms and prevail where they conflict.

2. What the Service is, and what it is not

The Service is a compliance workspace for makers of products with digital elements subject to Regulation (EU) 2024/2847 (the Cyber Resilience Act): a product registry with scope guidance, SBOM and vulnerability operations, an Article 14 reporting desk, technical-file and declaration drafting, CSAF advisories, an evidence ledger and public trust pages. The Service provides tooling, templates and evidence management. It does not provide legal advice, does not certify or attest conformity, and does not submit reports to authorities on your behalf. Whether a product meets the Act’s requirements, and what you report to whom, remains your assessment and your responsibility. Generated documents are drafts until you have reviewed them.

3. Accounts, workspaces and members

You must give accurate information when creating an account and keep it current. A workspace belongs to the Customer; the owner may invite members and assign roles, and is responsible for the members’ use of the Service. Keep credentials confidential, enable two-factor authentication where offered, and tell us at once at security@permenta.com if you suspect unauthorised use.

4. Acceptable use

You may not use the Service to break the law, infringe others’ rights, distribute malware, or probe, overload or interfere with the Service or other customers; you may not resell it or use it to build a competing product; you may not upload content you have no right to upload. API and upload limits published for your plan apply. We may suspend access that threatens the Service or other customers, and will tell you why.

5. Plans, fees and payment

The free plan is free for one product. Paid plans (Starter, Growth, Scale) are priced per workspace per month or per year in euro or US dollars as shown at permenta.com/#pricing; prices exclude VAT and other taxes, which are added where the law requires. Paid plans begin with a 14-day trial once per workspace; a valid payment method is required to start it and the first charge is made when the trial ends unless you cancel before. Subscriptions renew automatically for successive periods of the same length until cancelled. Payment is by card through our payment processor, Stripe; invoices are issued electronically and are available in the workspace. If a payment fails we retry, notify you and, after a grace period, restrict the workspace to the free plan until payment succeeds. We may change prices with at least 30 days’ notice; a change applies from the next renewal after the notice period, and you may cancel before then. Fees paid for a billing period are not refunded for unused time, except where the law requires a refund or as stated in the cancellation and refund policy.

6. Cancellation, downgrade and termination

You may cancel a paid plan at any time from the workspace’s billing settings or by writing to hello@permenta.com. Cancellation takes effect at the end of the current billing period; the workspace then continues on the free plan with its records intact, subject to the free plan’s limits. You may delete a workspace at any time; deletion removes its data after a retention notice period. We may terminate for material breach that is not cured within 14 days of notice, or immediately for conduct that endangers the Service or others.

7. Your content and your data

You own the content you upload and the records the Service creates from it. You grant us the licence needed to host, process and display it to operate the Service. We process personal data as described in the privacy policy; where we process personal data on your behalf inside a workspace, our data processing agreement applies. You may export your data at any time in machine-readable formats.

8. Public trust pages and share links

Trust pages and share links publish only what you choose to publish. You are responsible for the accuracy of what you publish, and for the recipients you give share links to. We may remove a public page that is unlawful or abusive.

9. Intellectual property

The Service, its software, design, documentation and content catalogues are ours or our licensors’ and remain so. You receive a non-exclusive, non-transferable right to use the Service during your subscription. Feedback you give us may be used without obligation to you. Names of regulations and standards are used for identification; the regulation texts quoted in the Service are the public texts of the European Union.

10. Confidentiality

Each party keeps the other’s non-public information confidential and uses it only to perform under these terms, except where disclosure is required by law, in which case the disclosing party gives notice where lawful.

11. Warranties and disclaimers

We will provide the Service with reasonable skill and care and keep it available except for maintenance and events outside our control. Otherwise, to the extent the law allows, the Service is provided as is, without warranties of merchantability, fitness for a particular purpose or non-infringement, and without any warranty that the use of the Service will result in compliance with any law.

12. Liability

To the extent the law allows, neither party is liable for indirect, consequential or special damages, or for loss of profit, revenue or data, and our total liability under these terms in any twelve-month period is limited to the fees you paid for the Service in that period. Nothing limits liability for wilful misconduct, gross negligence, death or personal injury, or any liability that cannot be limited by law.

13. Changes to these terms

We may update these terms. Material changes are announced at least 30 days before they take effect, by email to workspace owners and on this page. If you do not accept a change you may cancel before it takes effect.

14. Governing law and general provisions

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-law rules, and the state and federal courts located in Delaware have jurisdiction, except that mandatory consumer law of your country of residence prevails where it applies. If a provision is unenforceable the rest remains in force. Neither party may assign these terms without the other’s consent, except to an affiliate or a successor to its business. These terms, together with the privacy policy, the cancellation and refund policy and, where applicable, the data processing agreement, are the entire agreement between us about the Service.

15. Contact

Patchgate, LLC, doing business as Permenta, 651 N Broad St, Suite 201, Middletown, DE 19709, United States. hello@permenta.com