Acceptable Use Policy

Pion Global Private Limited (“Pion Global”, “we”, “us”, or “our”) respects your use of our digital platforms and is committed to providing secure, reliable, and compliant services.

This Acceptable Use Policy (“AUP”) governs the use of the GRCNest product and PIEDAP platform and its other associated products (PIEStrat, NexGenQE, EvalTiq), services, applications, APIs, and related systems (collectively, the “Platform”) operated by Pion Global Private Limited. (“GRCNest”, “PIEDAP”, “Pion Global”, “we”, “us”, or “our”).

This AUP applies to all users, including customers, authorized users, administrators, employees, contractors, partners, and any third parties accessing or using the Platform (“Users”).

By accessing or using the GRCNest or PIEDAP website or services, you agree to comply with and be legally bound by these Terms. If you do not agree to these Terms, please refrain from using our website or platform.

These Acceptable Use Policy (“Terms”) govern your access to and use of the GRCNest product, website, and related services (collectively, the “Services”) when you access or use the GRCNest product (https://www.grcnest.ai or https://www.grcnest.com) which is powered by our PIEDAP platform (https://www.grcnest.ai) or visit our company website https://www.pionglobal.com and other Pion Global websites.

By accessing or using the Platform, you agree to comply with this Acceptable Use Policy.

If you violate this AUP, GRCNest may deny access, suspend, or terminate your use of the Software and Services (or any part thereof). GRCNest’s right to suspend or terminate your use of the Software or Services applies even if a breach is committed unintentionally or without your authorization if GRCNest believes that suspension or termination is necessary to ensure compliance with laws or to protect the rights, safety, privacy, security or property of GRCNest, its customers or third parties.

GRCNest reserves the right to modify this AUP at any time by posting a revised version on its webpage. By using the Products and Services, you agree to the latest version of this policy.

GRCNest is an AI-powered Governance, Risk, and Compliance (GRC) product solution built on the PIEDAP (Pion Intelligent Enterprise Digital Assurance Platform) platform, designed to enable organizations to automate compliance, manage risks, and achieve continuous assurance. As part of the broader PIEDAP platform, GRCNest integrates with enterprise systems, cloud environments, and compliance frameworks to provide real-time control monitoring, evidence validation, and AI-driven risk intelligence. The PIEDAP platform serves as a unified, scalable foundation supporting multiple enterprise applications, ensuring seamless orchestration of governance, quality, and compliance processes across the organization.

The product is designed for business professionals and enterprise clients, and its access may be limited based on licensing and contractual agreements.

This Acceptable Use Policy (“AUP”) defines the permitted and prohibited uses of the GRCNest.ai platform and related services (“Services”) provided by Pion Global Private Limited (“Pion Global”, “we”, “us”, or “our”). This AUP is designed to ensure secure, lawful, and compliant use of the platform in alignment with enterprise security standards and regulatory requirements.

By accessing, registering for, or using the GRCNest.ai product and related services, you acknowledge that you are at-least 18 years of age, you have read, understood, and agree to be bound by these Terms of Use, as well as any applicable policies referenced herein, including the Privacy Policy. You also confirm that you have the authority to accept these terms on behalf of yourself or your organization. If you are using the Services on behalf of an organization, you represent and warrant that you have the legal authority to bind such organization to these Terms. Continued use of the Services constitutes your acceptance of any updates or modifications to these Terms.

Pion Global Private Limited (“Pion Global”, “we”, “us”, or “our”) reserves the right to modify or update these Terms of Use at any time, at its sole discretion, to reflect changes in our services, legal requirements, or business practices. Any such changes will be effective upon posting the updated Terms on the GRCNest.ai platform or website, with the revised “Last Updated” date indicated accordingly. We encourage users to review the Terms periodically, and continued access to or use of the Services after such updates constitutes your acceptance of the revised Terms.

Users may access and use the Services solely for legitimate business purposes, including governance, risk management, compliance monitoring, control validation, and related activities, in accordance with applicable laws, contractual obligations, and these Terms of Use.

Users shall not engage in any activity that:

• Attempt to gain unauthorized access to systems, networks, or data
• Bypass or circumvent authentication or security controls
• Probe, scan, or test vulnerabilities without authorization

• Interfere with or disrupt platform integrity, performance, or availability
• Introduce malware, viruses, or harmful code
• Perform excessive automated requests (DoS/DDoS-like behaviour)

• Upload, process, or share data without proper authorization
• Use the platform to store or transmit unlawful, sensitive, or regulated data without compliance
• Violate privacy, confidentiality, or intellectual property rights

• Use AI features to generate harmful, misleading, or unlawful outputs
• Attempt to manipulate, reverse engineer, or exploit AI models
• Rely solely on AI-generated outputs for legal, financial, or regulatory decisions without validation

• Use the Services in violation of applicable laws or regulations
• Engage in fraudulent, deceptive, or unethical activities
• Facilitate unauthorized surveillance or data collection

• Connect third-party systems without proper authorization
• Misuse API access or integration capabilities

Customers and Users are responsible for violations of this policy, whether by (i) yourself, (ii) anyone using the Software and Services with your permission, or (iii) using your account on an unauthorized basis. Your use of the Software and Services to assist another person in an activity that would violate this AUP if that activity, when performed by you, is a violation of this AUP. This AUP applies to anyone accessing or using the PIEDAP Software and associated Services.

When using the PIEDAP Software and associated Services, it is your responsibility to comply with the AUP and to ensure that you adhere to all applicable laws, rules, regulations, and commonly accepted practices of the Internet community. The prohibited uses described herein are intended as guidelines regarding improper and inappropriate conduct and should not be interpreted as an exhaustive list Maintaining the confidentiality of account credentials. The responsibilities of users include Ensuring all activities under their accounts comply with this AUP and Complying with internal organizational policies and applicable regulations

Pion Global reserves the right to monitor the use of the GRCNest.ai product and services for purposes of ensuring security, integrity, performance, and compliance with applicable laws, these Terms of Use, and the Acceptable Use Policy. Such monitoring may include analysis of system logs, access patterns, audit trails, and automated alerts to detect suspicious or unauthorized activities. In the event of any actual or suspected violation, security incident, or misuse of the Services, Pion Global may investigate the matter and take appropriate action, including restricting or suspending access, removing content, or terminating accounts, with or without prior notice where necessary to protect the platform or its users. Pion Global may also cooperate with law enforcement or regulatory authorities as required, and all monitoring and enforcement activities shall be conducted in accordance with applicable data protection and privacy laws.

Any violation of this Acceptable Use Policy or the Terms of Use may result in loss of data or content associated with prohibited use and hence immediate and appropriate action by Pion Global Private Limited would be taken to protect the security, integrity, and lawful operation of the GRCNest.ai platform. Such actions may include, without limitation, temporary or permanent suspension of user access, termination of subscription or services, restriction of specific functionalities, removal of offending content, or termination of the account, with or without prior notice depending on the severity of the violation. In cases involving unlawful activity, security breaches, or regulatory non-compliance, Pion Global reserves the right to initiate legal proceedings and/or report the matter to relevant law enforcement or regulatory authorities. Users shall be responsible for any damages, losses, or liabilities arising from their violation, and may be required to indemnify Pion Global against any resulting claims or costs.

Users are encouraged and expected to promptly report any suspected or actual violations of this Acceptable Use Policy, including unauthorized access, misuse of the platform, security vulnerabilities, or any activity that may compromise the confidentiality, integrity, or availability of the GRCNest.ai Services. Reports may be submitted to [email protected] or through designated support channels and should include sufficient details to enable investigation. Pion Global Private Limited will review all reports in a timely and confidential manner and may take appropriate action based on the nature and severity of the issue. Users are expected to act in good faith when reporting concerns and must not exploit or publicly disclose vulnerabilities without prior authorization.

The GRCNest.ai platform and its Acceptable Use Policy are designed to align with globally recognized security, privacy, and compliance frameworks, including ISO/IEC 27001, SOC 2 Trust Services Criteria, the General Data Protection Regulation (GDPR), and the Digital Personal Data Protection Act, 2023 (India). Pion Global Private Limited (“Pion Global”, “we”, “us”, or “our”) implements appropriate technical, administrative, and organizational controls to ensure that platform usage adheres to these standards, supporting secure access, data protection, auditability, and regulatory compliance. Users are expected to operate within these aligned practices, ensuring that their use of the Services does not violate applicable compliance obligations or compromise the platform’s governance and security posture.

This Acceptable Use Policy forms part of and should be read together with:

• Terms of Service
• Privacy Policy
• Security & Data Protection policies

In case of conflict, the applicable agreement or Terms of Service will prevail.

GRCNest may update this Acceptable Use Policy from time to time. The updated version will be posted on the website with a revised “Last Updated” date. Continued use of the Platform after changes constitutes acceptance of the updated policy.