Terms and conditions

You agree to these terms, the Privacy policy, and the Policies when you create a workspace, submit a plan request, or pay for a subscription. Together with an order we have accepted, they are the agreement.

The how-to guide at /guide is instructional only. It does not amend these terms. If the guide and these terms differ, these terms prevail.

Customer. The company that opens a workspace. “You” and “your” mean the Customer.

Authorised User. A person you permit to use the service under your account. The roles the service provides are administrator, procurement, reviewer, and read-only.

Customer Data. Supplier records, verification data, evidence files, and other content that you or your suppliers submit to the service. Account and billing data that we control is not Customer Data.

Service. The SupplierDesk workspace made available at https://supplierdesk.si, including any module enabled for your workspace.

Subscription. The annual Starter or Business plan you order, and dedicated storage if you order it, for the paid term of that purchase.

Order. A plan request we accept, or a Stripe checkout we confirm, for a subscription.

SupplierDesk is a hosted workspace for supplier records and verification data. Supplier lists, supplies, and due diligence are modules. A module is available only when it is enabled for your workspace. The application runs on our servers. We do not deliver the software for installation on your servers.

Evidence files the service accepts are PDF, JPG, PNG, or WebP, up to 10 MB each. Files may be kept on storage included with the plan, on dedicated storage, or in a bucket you provide.

A supplier who submits a form to your company does not become a SupplierDesk customer by doing so. Your company decides whether a supplier or a supply meets your requirements. The service keeps a record of that work.

A workspace is open when its status is Active and an activation date has been set. The subscription end date is shown in the workspace. Passing that date does not, by itself, lock the workspace.

Subject to these terms and to payment of the fees, we grant you a non-exclusive, non-transferable, non-sublicensable right to access and use the service during the subscription term, for your own internal business, within the user and supplier allowances of your plan.

You will not copy, modify, or create derivative works of the software; resell or rent access; share an account between people; circumvent a usage limit, tenant boundary, or access control; or use the service to build a competing product. You will not probe or interfere with the service, except for a good-faith security report sent to legal@supplierdesk.si, or where the law of the United Arab Emirates does not allow this restriction.

The person who creates the workspace confirms that they can bind the Customer. That person is the first administrator. Authorised Users act for you. You are responsible for their use of the service, for the role each of them holds, and for keeping their access current.

Keep credentials confidential. Tell us at legal@supplierdesk.si if you believe an account is used without authority. We may suspend an Authorised User or a workspace under clause 17.

You will give us accurate company and billing details, and you will keep them up to date. You will ensure that Authorised Users comply with these terms and the Policies.

You are responsible for having a lawful basis to collect the personal data in Customer Data, including identity documents and bank details, and for telling the supplier that your company is asking for them. The company details shown on a form you send are yours. The notice for suppliers is in the Policies.

You are responsible for the accuracy of what your team enters and for your decisions on a record. You will keep any copy that the Federal Tax Authority or another law requires you to retain. The service is not a substitute for that obligation.

Business is AED 2,000 a year and includes 10 users and 250 suppliers. The supplier allowance is also the limit for questionnaires and, where due diligence is enabled for the workspace, for due diligence records. A custom package is agreed separately after the company sends the request form. Fees are in AED, are payable in advance for one year, and are the amounts stated on the order.

Dedicated storage is AED 600 a year, in addition to the plan fee. Fees are exclusive of tax. Any tax we are required to charge is added and stated on the invoice.

A coupon reduces the fee for the order to which it is applied. A workspace may use a given coupon once. A coupon applies only if it is active, within its dates, and applicable to the plan on the order.

Business is bought by card through Stripe checkout. The subscription starts when Stripe confirms the payment. Stripe collects the card. We do not store the full card number. A custom package is not charged on that checkout. A plan request that is sent only because card checkout is unavailable becomes a subscription when we accept it. A rejected request that has not been paid creates no fee.

You may renew by a further subscription or, where the subscription is billed through Stripe, by Stripe renewal for a further year. You may cancel by written notice to legal@supplierdesk.si. Cancellation takes effect at the end of the current paid term. The service has no self-serve cancellation. That notice is also an instruction not to renew a Stripe subscription. If you do not renew, we may close the workspace after the paid term. The end date shown in the workspace does not itself lock it.

Prepaid annual fees are non-refundable, except where the law requires a refund. If we terminate for convenience, or if we fail to provide the service for a material period and that failure is caused by us, we will refund a pro-rata portion of the prepaid fees for the unused remainder of the then-current term.

You own Customer Data. You grant us a limited licence to host, process, back up, and display Customer Data only so that we can provide and secure the service, and meet the legal duties described in the Privacy policy.

You are the controller of supplier records and verification data. We are the processor of that Customer Data and process it on your instructions, which are these terms. We are the controller of account and billing data. The short processor terms are in the Policies.

You will use the service only for your company’s supplier and verification work, and only in line with the law. The Acceptable use policy is part of these terms and is incorporated by reference.

We and our licensors own the service, the software, and the SupplierDesk name and marks. These terms do not transfer any intellectual property to you, other than the limited right of use in clause 4. Customer Data remains yours, as clause 8 states.

If you send us a suggestion about the service, we may use it without obligation to you, and without taking ownership of your Customer Data.

Each party will protect the other party’s non-public information and use it only to perform this agreement. Customer Data is your confidential information. Non-public information about how the service is built is ours.

A party may disclose confidential information if the law, a court, or a competent authority requires it, and will give the other party notice when the law allows that notice.

We use other providers to run the service. Stripe collects card payments when checkout is used, and Stripe’s own terms apply to that payment. A transactional email provider delivers messages about the service.

Files are stored on storage included with the plan, on dedicated storage we operate for your company, or in an S3 or S3-compatible bucket you provide. If you provide a bucket, you are responsible for its access rules and retention. We store the keys for that bucket in encrypted form and use them only to read and write your files. A failure of Stripe, the email provider, or a bucket you provide can interrupt the affected part of the service, as clause 13 describes.

We will use reasonable care and skill to make the service available. We do not promise a particular availability percentage. Maintenance, and a failure of an email provider, a payment provider, or a bucket you connect, may interrupt the service. We will tell you about planned maintenance when we reasonably can.

The service is a record-keeping workspace. It is not tax advice or legal advice. You are responsible for your own compliance with FTA Decision No. 13 of 2026, and for any other law that applies to your suppliers and supplies. A decision of the Federal Tax Authority about a supplier or a supply, and any tax you expected to recover, remains with you.

Except for the express commitments in these terms, the service is provided as available. To the extent the law of the United Arab Emirates allows, we disclaim implied warranties, including fitness for a particular purpose.

Our total liability to you for claims arising out of the service is limited to the fees you paid for that workspace in the 12 months before the claim. The cap covers plan fees and dedicated storage fees.

Subject to the next paragraph, we are not liable for indirect or consequential loss, including lost profit, or for a Federal Tax Authority decision about a supplier or a supply.

Nothing in these terms limits liability for fraud, or any liability that the law of the United Arab Emirates does not allow a contract to exclude or limit.

You will indemnify SupplierDesk and its personnel against third-party claims, losses, and reasonable costs arising out of Customer Data, out of unlawful collection of personal data you or your suppliers submit, or out of misuse of the service by you or an Authorised User. This indemnity does not apply to the extent the claim is caused by our breach of these terms.

We may suspend the service, or an Authorised User, if you breach these terms, if fees are overdue, if the law requires it, or if the use puts the service or another customer at risk. Where the cause can be remedied, we will lift the suspension when it is remedied.

You may end the subscription by the written notice in clause 7, effective at the end of the current paid term. We may terminate for your material breach if you do not remedy it within a reasonable time after notice, or immediately where the breach cannot be remedied or puts others at risk. We may terminate for convenience, in which case the pro-rata refund in clause 7 applies. We may close a workspace after the paid term if it is not renewed.

When access ends, your right to use the service ends. Customer Data is then handled as the Privacy policy and the data-processing policy describe. Clauses that by their nature should survive, including fees already due, intellectual property, confidentiality, liability, indemnity, and governing law, stay in force.

We may update these terms, the Privacy policy, or the Policies. The date at the top of the page changes when we do. If a change materially affects fees or the way we use Customer Data, we will also email the administrator. If you object, write to legal@supplierdesk.si before the next renewal and we will close the workspace at the end of the paid term. Continuing to use the service after the updated date is acceptance of the updated terms, except where the law requires a different process.

Entire agreement. These terms, the Privacy policy, the Policies, and the order are the entire agreement about the service. They replace prior discussions about the same subject. The guide at /guide is not part of the agreement and does not amend it.

Assignment. You may not assign this agreement without our prior written consent. We may assign it to a successor of the business that provides the service.

Severability. If a provision is held unenforceable, the rest of the agreement remains in force.

Waiver. A failure or delay in enforcing a right is not a waiver of that right.

Force majeure. Neither party is liable for a delay or failure caused by an event beyond its reasonable control, provided it gives notice when it reasonably can and takes reasonable steps to limit the effect. This does not excuse fees already due.

Notices. Notices to us go to legal@supplierdesk.si. Notices to you go to the administrator’s email on the workspace. Privacy requests go to privacy@supplierdesk.si.

These terms are governed by the laws of the United Arab Emirates. The courts of Sharjah have jurisdiction over a dispute about them.