Home / Legal / EULA

SoxDesk End-User License Agreement

Last updated: July 21, 2026

This agreement is between you (the organization or person installing SoxDesk — "you", "your team") and the developer of SoxDesk ("we", "us"). It covers the SoxDesk software, its documentation, and any updates we provide.

Purchases are processed by Lemon Squeezy as merchant of record — they are the seller on your invoice and handle payment and sales tax. The license itself is granted by us under this agreement.

Plain-English summaries appear in italics before some sections. The full text controls if they ever differ, but we have tried hard to make them say the same thing.

1. What you're licensed to do

Summary: one purchase covers one installation (one shared data store) and the whole audit team working in it. The builds your license covers are yours to run forever.

When you purchase a SoxDesk team license and enter a valid license key, we grant you a license to install and use SoxDesk for your organization's internal business purposes, subject to this agreement, as follows:

2. Evaluation (free trial)

Summary: 60 days, full product, no strings. After that it goes read-only — your data is never held hostage.

You may evaluate SoxDesk free of charge for 60 days from first run, with all features enabled, under the same terms as this agreement except the payment-related parts. When the evaluation period ends without a license key, the software reverts to read-only mode: you can no longer create or modify audit data, but you can continue to view and export everything indefinitely. Your data is stored in open formats (SQLite plus ordinary files) on your own storage and is never locked away, licensed or not.

3. What you may not do

Summary: don't resell it, don't share the key outside your team, don't strip our name off it.

You may not:

Honest expectations both ways: we keep licensing simple and offline because we trust audit teams to license what they use. Please extend the same good faith.

4. Your data is yours — and we never see it

Summary: there is no clause about how we process your data, because we don't. Ever.

SoxDesk runs entirely on your own machines and stores all data — the audit database, evidence files, and backups — in a folder you choose on your own infrastructure. We never receive, access, host, or process your data in any form. There is no cloud component, no vendor-side storage, and no support mechanism that transmits your data to us. For that reason this agreement contains no data-processing terms: there is no processing to govern. All audit data, evidence, and work product you create with SoxDesk belongs to you.

If you choose to email us data (for example, a screenshot in a support request), that is covered by our privacy policy, not by any processing relationship.

5. No telemetry, no phone-home

The software makes no outbound network connections except email sent through an SMTP server that you configure and control. There is no telemetry, no analytics, no usage tracking, no crash reporting, no automatic update checks, and no license activation server: license keys are verified locally against a digital signature. This is a design commitment of the product, and this agreement does not grant us any right to add data collection to builds covered by your license.

6. Updates and support

7. Ownership

SoxDesk is licensed, not sold. We (and our licensors, for any third-party components) retain all intellectual property rights in the software and documentation. This agreement gives you the usage rights described above and nothing more. Third-party open-source components included in SoxDesk are governed by their own licenses, which are included with the software where required.

8. Warranty disclaimer

Summary: we build it carefully and test it hard, but legally it's provided as-is.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SOFTWARE WILL BE ERROR-FREE OR UNINTERRUPTED. SoxDesk is a workflow tool; it is not professional advice, and using it does not by itself make any audit compliant with any law, standard, or framework. You remain responsible for your audit methodology, your conclusions, and for backing up your own data (the software's automatic local backups are a convenience, not a guarantee).

Some jurisdictions do not allow certain warranty exclusions, so parts of this section may not apply to you.

9. Limitation of liability

Summary: our total liability is capped at what you paid us.

TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST DATA, OR BUSINESS INTERRUPTION, EVEN IF ADVISED OF THE POSSIBILITY; AND (b) OUR TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SOFTWARE OR THIS AGREEMENT IS LIMITED TO THE FEES YOU ACTUALLY PAID FOR THE LICENSE IN THE 12 MONTHS BEFORE THE CLAIM AROSE. Nothing in this agreement limits liability that cannot be limited under applicable law.

10. Refunds

Purchases carry a 60-day, no-questions-asked refund, processed through Lemon Squeezy. See the separate refund policy. If you receive a refund, your license ends and you must stop using your license key (the software then behaves as an expired evaluation: read-only, data fully accessible).

11. Termination

This agreement remains in effect until terminated. We may terminate it if you materially breach it and do not cure the breach within 30 days of written notice. On termination, your license ends and you must stop using your license key and destroy copies of the software — but you always retain access to your own data, which lives on your own storage in open formats, and you may keep an unlicensed copy in read-only mode for the sole purpose of viewing and exporting that data. Sections 4, 5, 7, 8, 9, and 12 survive termination.

12. General