---

Owner Insights

CFO-level thinking, CEO and COO perspective, straight talk. A partner in your corner.
What's the one question you need a second opinion on?
Free 20-min call.

• Advisor Review

“CorpDoc found $400k annual waste our old firm missed for 3 years."
– Sarah H (8-figure ecomm brand)

What Our Clients Say

Real results from founders who trust our expertise.

"I was struggling with financial clarity, across multiple companies. CorpDoc brought a fresh perspective and organization I could actually rely on."
– CorpDoc Client (Bookkeeping, Cross-border Advisory)"We needed more than due diligence; we needed a partner to tell us if the business we were buying was the right one as the numbers were not adding up. CorpDoc navigated us through the initial complex negotiations."
– CorpDoc Client (Due Diligence, Acquisitions, Valuations, Deal Structuring)"As a high-growth AI company, navigating our foundational setup was critical. Darren guided us through the entire journey with a sharp focus on protecting our IP and building robust financial models that gave us the confidence to grow."
– CorpDoc Client (Strategic Advisory)

We Don't Just Count Numbers

PRICING

Built for owners From Founders to global SMEs

“After a bad deal put our profitable business at risk, CorpDoc stepped in to restructure. We achieved 80% EBITDA growth in 3 months with CorpDoc – a significant milestone we couldn't have achieved without them.”
Florian K, Owner, sports company (CorpDoc Advisory, Turnaround)

---

CorpDoc Ventures

For Accounting Firm Owners. Looking For Your Next Chapter?

You've spent years building something of value. Now let's talk about what's next. Whether you are ready to exit, transition, double down on growth, we're fellow practitioners who understand your world.

• Learn More

How We Work

A business that works for you. Built on accurate data, trusted advisors, and a strategy that scales.

• Ready to start?

“They cut our manual reporting by 80% in 2 weeks.
I finally have time to grow.”
– Mike R., CEO, manufacturing (Bookkeeping, Business Health Check)

---

YOUR NEXT DEAL

A big win or a costly mistake? Whether it's your first deal or your fifth, the stakes are high.

Overpaying, missing hidden liabilities, or failing to integrate properly can destroy value faster than you can create it. In today's market "hidden liabilities" includes more that just debt: Operational fragility, talent flight risk and compliance exposure.We help founders evaluate, structure, and integrate acquisitions with Board‑Level Advisory and no‑nonsense financial certainty, including a full risk picture, financial and operational.

• Book a review. Protect your future.

• LinkedIn
• Email

© CorpDoc. All rights reserved. | Clear Numbers. Confident Decisions.Privacy Policy | Terms

• Home

• Talk to Founders

• Top

CorpDoc Ventures Limited
Privacy Policy
Version: 1.1
Effective Date: September 2026
Last Updated: September 2026PROFESSIONAL SERVICES CLIENTS: This Privacy Policy governs data collected through the CorpDoc website (corpdoc.io) and free online tools. If you are a business client engaging CorpDoc for professional services (bookkeeping, payroll, tax compliance, or advisory), your data processing rights and obligations are additionally governed by the Data Processing Addendum (Schedule 7 to the CorpDoc Terms and Conditions Version 1.3), available on request from [email protected].1. Who We Are
CorpDoc Ventures Limited, a company incorporated in New Zealand, and its subsidiaries and affiliated companies (together, "CorpDoc", "we", "us", or "our") operate the website at corpdoc.io and the free tools available on it. CorpDoc also provides bookkeeping, payroll, tax compliance, and advisory services through its licensed group entities.
Contact: [email protected]2. What Data We Collect (Website and Free Tools)
2.1 Account sign-up
When you create an account or sign up for updates, you provide your name and email address. We do not collect any other personal data at sign-up.2.2 Free online tools and calculators
Our free calculators and tools run entirely in your browser. We do not collect, store, or see any values you enter into them.2.3 Contact form
When you submit an enquiry, you may provide your name, email address, an optional phone number, and a message. We use this solely to respond to your enquiry.2.4 Website session data
Our hosting provider (Carrd) logs IP addresses for security and operational purposes. We use no tracking or advertising cookies. We use only strictly necessary session cookies.3. How We Use Your DataPurpose Data Legal Basis
Provide access to free tools and account features Name, email Performance of contract
Respond to your contact form enquiry Name, email, phone, message Legitimate interest
Send service-related communications Name, email Performance of contract
Send marketing communications (opt-in only) Name, email Consent — withdraw any time
Website security and fraud prevention IP address Legitimate interest
Comply with legal obligations As required Legal obligation4. Who We Share Data With
We share your data only as strictly necessary:
• HubSpot — our CRM and email platform, used to manage contact records and send communications (acts as processor under a Data Processing Agreement)
• Carrd — our website host, which receives IP address logs for operational purposes
• Professional advisers, insurers, and auditors — under confidentiality obligations
• Regulatory authorities — where required by law, court order, or subpoena (we notify you in advance where permitted)
• A purchaser of CorpDoc's business — subject to equivalent privacy protections
We do not sell, rent, or trade personal data.5. International Transfers
Your data may be transferred to and processed in countries outside your own (including the United States, where HubSpot is hosted). We ensure appropriate safeguards are in place, including Standard Contractual Clauses or equivalent mechanisms required by your applicable data protection law.6. Data RetentionData Retention Period
Account / sign-up data Until account deletion or opt-out, then 6 months
Contact form enquiries 12 months from last communication
Marketing preferences Until you withdraw consent7. Your Rights
Your rights depend on where you are located. To exercise any right, contact [email protected]. We respond within the timeframe required by your applicable law.Jurisdiction Rights Supervisory Authority
New Zealand Access and correction (Privacy Act 2020) Privacy Commissioner — privacy.org.nz
Australia Access and correction (Privacy Act 1988, APPs 12–13) OAIC — oaic.gov.au
United Kingdom Access, rectification, erasure, restriction, portability, objection (UK GDPR Arts 15–22). Response within 1 month. ICO — ico.org.uk
United States (California) Know, delete, correct, opt-out of sale (CCPA/CPRA). Response within 45 days. California AG — oag.ca.gov
United States (other states) Rights under VCDPA, CPA, CTDPA, TDPSA as applicable State Attorney General8. Security
We implement industry-standard technical and organisational measures to protect your personal data, including encrypted transmission (TLS 1.2+), access controls, and staff training. For professional services clients, full details of our security measures are set out in Annex 2 to the Data Processing Addendum (Schedule 7).9. Children
Our website and services are not directed to individuals under 16 (or under 13 in the United States). We do not knowingly collect data from children. Contact [email protected] if you believe we have done so and we will delete it promptly.10. Changes to This Policy
We may update this Policy from time to time. Material changes will be notified by email and posted at corpdoc.io/legal/privacy-policy with an updated effective date. Continued use of our website or services after the effective date constitutes acceptance, subject to your statutory rights.11. Contact and Complaints
Email: [email protected]
Website: corpdoc.io/legal/privacy-policy
If you are not satisfied with our response, you may contact the supervisory authority for your jurisdiction as identified in Section 7 above, or as set out in your applicable Country Schedule to the CorpDoc Terms and Conditions.© CorpDoc Ventures Limited

CorpDoc Ventures Limited
Terms and Conditions
Version: 1.1
Effective Date: September 2026
Last Updated: September 2026These Terms and Conditions (the "Terms"), together with any statement of work, service order, work order, or engagement schedule issued by CorpDoc that specifies the Services to be performed and the commercial terms applicable to those Services (a "Statement of Work"), any engagement letter issued by CorpDoc Ventures Limited (an "Engagement Letter"), any applicable schedule or addendum, and any document expressly incorporated by reference (together, the "Agreement"), constitute a legally binding agreement between you ("Client", "you", or "your") and CorpDoc Ventures Limited, a company incorporated in New Zealand, and its subsidiaries and affiliated companies from time to time (together, "CorpDoc", "we", "us", or "our"). Where a service is regulated in a particular jurisdiction, that service is delivered by the relevant licensed entity within the CorpDoc group, governing your access to and use of the corpdoc.io website (the "Site"), the purchase and use of any services (the "Services"), and any free tools, calculators, templates, or content made available by us.IMPORTANT (CONSUMERS): If you are a Consumer (as defined in Section 1.4), certain provisions of these Terms apply differently to protect your statutory rights. Your applicable Country Schedule sets out the specific statutory rights and local law provisions for your jurisdiction. Nothing in these Terms excludes or limits any mandatory statutory rights you may have under applicable law.1. Introduction1.1 Contracting Entity. The Site is operated under the brand name "CorpDoc". CorpDoc Ventures Limited is incorporated in New Zealand. The Client's sole contractual counterparty for all Services, invoices, rights, remedies, obligations, disclaimers, exclusions, limitations, and indemnities under this Agreement is CorpDoc Ventures Limited.
1.2 Order of Precedence. In the event of any conflict or inconsistency between the documents forming this Agreement, the following order of precedence applies: (a) any separate written agreement between the parties expressly stated to govern specific services, in respect of those services only; (b) any signed written amendment expressly stated to override this Agreement; (c) any applicable Country Schedule issued by CorpDoc for the Client's jurisdiction; (d) the Data Processing Addendum (Schedule 7) in respect of all matters relating to personal data processing; (e) the Engagement Letter; (f) the Statement of Work; (g) these Terms; (h) the Privacy Policy solely in relation to personal data processing; and (i) Site content.
1.3 No Client Terms. Any terms contained in any purchase order, vendor onboarding form, procurement portal, or other document issued by the Client are expressly excluded and shall have no effect unless CorpDoc Ventures Limited expressly agrees to them in a document signed by CorpDoc Ventures Limited.
1.4 Client Categories. For the purposes of this Agreement: (a) "Business Client" means a Client that enters into this Agreement in the course of a trade, business, or profession; and (b) "Consumer" means a Client that enters into this Agreement otherwise than wholly or mainly in the course of a trade, business, or profession. A sole trader may be a Consumer. Where a Country Schedule applies to the Client's jurisdiction, the definition of Consumer in that Schedule shall prevail.
1.5 Client Declaration. By completing checkout or signing an Engagement Letter, the Client confirms its status as either a Business Client or a Consumer. Certain provisions of this Agreement apply differently to Consumers, as noted throughout. If uncertain of your status, please contact [email protected] before entering into this Agreement.
By using our Site, purchasing a Service, or using any free tools, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you do not agree, please do not use our Site or Services.
These Terms incorporate by reference the CorpDoc Privacy Policy, accessible at corpdoc.io/legal/privacy-policy (the "Privacy Policy"), as it relates to the processing of your personal data.
2. Services
2.1 Service Description
The specific services to be provided to the Client, the applicable fees, any minimum commitment period, payment schedule, and other commercial terms are set out in the applicable Engagement Letter and/or Statement of Work issued by CorpDoc. Each Statement of Work forms part of this Agreement and is subject to these Terms.
2.2 Free Tools and Content
CorpDoc may make diagnostic tools, calculators, templates, or other content available free of charge via the Site. Such tools are provided for informational and educational purposes only and do not constitute professional advice. CorpDoc accepts no liability for decisions made in reliance on free tools or content.
2.3 Professional Services Disclaimer
Where a service is regulated in the Client's jurisdiction, it is delivered through the relevant licensed entity within the CorpDoc group as described in the applicable Country Schedule. Services do not include regulated financial advice, investment advice, or audit and assurance services except where expressly agreed in writing and delivered through a licensed CorpDoc group entity.
3. Fees and Payment
3.1 Fees
All fees, rates, pricing tiers, minimum commitments, and other commercial terms applicable to the Services are set out in the applicable Statement of Work or Engagement Letter. All fees are exclusive of applicable taxes unless stated otherwise.
3.2 Invoicing and Due Date
CorpDoc shall invoice the Client in accordance with the payment schedule in the applicable Statement of Work or Engagement Letter. Unless stated otherwise, each invoice is due in full within seven (7) calendar days of the invoice date.
3.3 Payment in Full Without Set-Off
All amounts payable by the Client shall be paid in full, in cleared funds, in the currency stated in the applicable invoice, without set-off, counterclaim, deduction, withholding, abatement, or reduction of any kind, except to the extent required by applicable law.
3.4 Gross-Up for Withholding Taxes
If any deduction or withholding is required by law from any payment under this Agreement, the Client shall pay such additional amount as is necessary to ensure that CorpDoc receives the full amount it would have received had no deduction or withholding been required. The Client shall promptly provide valid evidence of any such deduction and payment to the applicable authority.
3.5 Taxes
All fees are exclusive of sales tax, VAT, GST, withholding tax, use tax, or similar levies, all of which are borne by the Client, except taxes imposed on CorpDoc's net income. Where CorpDoc is registered for GST or VAT in the Client's jurisdiction, such tax will be added to fees and stated separately on each invoice. Jurisdiction-specific tax treatment is set out in the applicable Country Schedule.
3.6 Invoice Disputes
The Client must notify CorpDoc in writing of any genuine invoice dispute within five (5) calendar days after the invoice date, specifying the nature and amount disputed. Failing such notice, the invoice is deemed accepted and final. A dispute does not entitle the Client to withhold or delay payment of any undisputed amount.
3.7 Chargebacks and Failed Payments
If any payment is reversed, charged back, dishonoured, or declined, CorpDoc may: (a) treat the amount as overdue from the original due date; (b) re-present the payment instruction; (c) suspend the Services in accordance with Section 6; and (d) recover from the Client all bank, card network, merchant acquirer, and administrative fees incurred in connection with the failed payment.
3.8 Late Charges
Any overdue amount shall accrue a late charge from the due date at 1.5% per month, or the maximum rate permitted by applicable law if lower.
3.9 Collection Costs
The Client shall reimburse CorpDoc on demand for all reasonable costs of collecting or attempting to collect any overdue amount, including legal fees, debt collection agency fees, court fees, and enforcement costs.
3.10 Currency
Fees are invoiced in the currency stated in the applicable Statement of Work or Engagement Letter. Where no currency is specified, fees are invoiced in United States Dollars (USD). Clients bear all currency conversion risks and any associated bank fees.
3.11 CorpDoc Records
CorpDoc's billing systems, usage records, and transaction counts shall be prima facie evidence of amounts due, absent manifest error.
3.12 Renewal Pricing
Where an applicable Statement of Work provides for auto-renewal and is silent on the pricing applicable upon renewal, the Services will renew automatically at the fees in effect immediately prior to renewal unless either party gives the other at least thirty (30) calendar days’ prior written notice of cancellation or a proposed fee change before the renewal date. Any proposed fee change notified by CorpDoc under this clause is subject to the price-change limitations in clause 15 (if applicable).
4. Service Delivery
4.1 Delivery Standards
CorpDoc will perform the Services with reasonable care and skill in accordance with the timeframes and standards set out in the applicable Statement of Work or Engagement Letter. Delivery timeframes are conditional on timely receipt of complete and accurate information from the Client.
4.2 Force Majeure and Platform Outages
In the event of a force majeure event, third-party platform outage, or other circumstance beyond CorpDoc's reasonable control, any agreed delivery timeframe shall be extended by a reasonable period. CorpDoc will notify the Client promptly of any material delay and will use reasonable endeavours to minimise its impact.
4.3 Remedy for Late Delivery
Where a Statement of Work specifies a remedy for late delivery, that remedy is the Client's sole remedy for failure to meet the stated delivery timeframe, provided the delay is not caused by the Client's failure to provide required information.
4.4 Change Control
Any request to change the scope of Services, add new services, or undertake work outside the agreed scope must be made in writing. CorpDoc will confirm the proposed change, any additional fees, and the revised delivery timeframe in writing within five (5) Business Days of the request. No out-of-scope work shall commence until the Client has approved the change in writing. CorpDoc is not obliged to accept any change request and may decline for any lawful reason. Approved changes form part of the Agreement and are subject to these Terms.
5. Client Obligations
5.1 Information and Cooperation
The Client shall provide all information, records, access, and approvals reasonably required by CorpDoc to perform the Services, within the timeframes specified in the applicable Statement of Work or Engagement Letter or, where no timeframe is specified, within five (5) Business Days of any written request. CorpDoc's delivery obligations are conditional on timely receipt of complete and accurate information from the Client.
5.2 Accuracy of Information
The Client warrants that all information provided to CorpDoc is accurate, complete, and not misleading. CorpDoc is entitled to rely on information provided by the Client without independent verification, unless expressly agreed otherwise in the Statement of Work.
5.3 Onboarding
Where a Statement of Work specifies onboarding requirements, commencement of the Services is conditional on the Client satisfying those requirements within the timeframe specified. If the Client fails to complete onboarding within fourteen (14) calendar days of the agreed start date (or such other period as stated in the Statement of Work), CorpDoc may terminate the Statement of Work with no refund of any fees paid.
5.4 Decline of Service
CorpDoc reserves the right to decline to commence or continue any service for any lawful reason, including due diligence, compliance, conflict of interest, or legal prohibition.
5.5 Acceptable Use
The Client must not use the CorpDoc website, free tools, or Services for any unlawful purpose, to infringe any third party’s rights, to transmit malicious code, or in any way that disrupts or damages CorpDoc’s systems or reputation. Any such misuse is a material breach of these Terms.
6. Suspension and Termination6.1 Suspension Rights
CorpDoc may suspend, withhold, or disable all or any part of the Services, any Deliverables in progress, and any access to any Licensed Product immediately on written notice to the Client if: (a) any amount due under this Agreement remains unpaid for more than ten (10) calendar days after its due date; (b) any payment is reversed, charged back, or CorpDoc reasonably believes payment is at risk; (c) the Client breaches any material provision of this Agreement; (d) the Client fails to provide required information, records, access, or cooperation in a timely manner; (e) CorpDoc reasonably suspects unauthorised access, misuse, fraud, unlawful conduct, sanctions risk, anti-money laundering risk, or other compliance concern; or (f) the Client enters insolvency, liquidation, administration, receivership, or any analogous process.
6.2 Effect of Suspension
During any period of suspension: (a) CorpDoc has no obligation to continue performing Services or meeting any delivery timetable; (b) all delivery dates are extended by the duration of the suspension plus a reasonable remobilisation period; (c) the Client's payment obligations continue in full; and (d) CorpDoc may withhold Deliverables, disable access credentials, and suspend use of any platform provided under a licence held by CorpDoc.
6.3 Termination for Cause by CorpDoc
CorpDoc may terminate this Agreement immediately on written notice if: (a) any amount due remains unpaid for more than thirty (30) calendar days after its due date; (b) the Client initiates or permits a chargeback or payment recall and does not procure full reinstatement within five (5) calendar days; (c) the Client commits a material breach incapable of remedy; (d) the Client commits a remediable material breach and fails to remedy it within seven (7) calendar days after written notice; or (e) any circumstance in Section 6.1(e) or 6.1(f) arises.
6.4 Termination for Cause by Either Party
Either party may terminate this Agreement on written notice if the other party commits a material breach incapable of remedy, or commits a remediable material breach and fails to remedy it within seven (7) calendar days after written notice.
6.5 Software and Data on Suspension or Termination
Where CorpDoc holds the licence to any software or platform used for the Services, CorpDoc may revoke or restrict the Client's access on suspension or termination. CorpDoc may retain administrative access solely for legal compliance, record retention, dispute resolution, and fee recovery purposes. Any data export is subject to the Client first paying all outstanding amounts in full and making a written request within thirty (30) calendar days after the effective termination date.
6.6 Accrued Rights
Suspension or termination is without prejudice to any accrued rights, amounts due, or right to recover losses arising from the Client's breach.
6.7 Work in Progress on Termination
On expiry or termination of this Agreement or any Statement of Work for any reason: (a) CorpDoc will, on written request from the Client, deliver all completed portions of any Deliverables within thirty (30) calendar days of the termination date, subject to payment of all fees due for work completed to that date; (b) the Client shall pay CorpDoc for all work completed up to and including the termination date, calculated on a pro-rata basis by reference to the fees in the applicable Statement of Work or Engagement Letter; (c) where the Client has prepaid fees for services not yet commenced at the termination date, CorpDoc shall refund the prepaid amount attributable to uncommenced work within thirty (30) calendar days of the termination date, provided no amounts remain outstanding under this Agreement; and (d) this clause does not affect any obligation to pay early termination or minimum commitment amounts specified in the applicable Statement of Work.

7. Refund and Cancellation Policy
7.1 General. All fees payable under this Agreement are non-refundable once the relevant Services have commenced, except as expressly set out in this Section 7 or as required by applicable consumer protection legislation.
7.2 Prepaid Uncommenced Work. Where the Client has prepaid fees for services that have not yet commenced at the date of termination, CorpDoc will refund the prepaid amount attributable to uncommenced work within thirty (30) calendar days of the termination date, provided no amounts remain outstanding under this Agreement. This clause is subject to clause 6.7 (Work in Progress on Termination).
7.3 CorpDoc Decline Before Commencement. If CorpDoc declines to commence a service before any work has started, due to conflict of interest or legal prohibition, any fees prepaid for that service will be refunded in full within fourteen (14) calendar days.
7.4 No Refund on Compliance Termination. Where CorpDoc suspends or terminates under Section 11 (Compliance: AML, Sanctions and KYC), no refund of any fees paid shall be due in any circumstances, as set out in clause 11.4.
7.5 Free Tools. No payment is taken for free tools or content; no refund applies.
CONSUMER RIGHTS (COOLING-OFF): If you are a Consumer (as defined in Section 1.4) and applicable law grants you a statutory right to cancel, that right applies notwithstanding the above. Please notify us at [email protected] within the applicable period if you wish to exercise this right. Once a service has commenced with your agreement before the cooling-off period expires, your right to cancel without charge may be reduced or lost.
8. Free Digital Tools and Calculators: Disclaimer of Warranties and Limitation of Liability
Any free diagnostic tools, calculators, templates, or other electronic resources are provided "AS IS" and "AS AVAILABLE" for informational purposes only. They do not constitute financial, accounting, legal, or other professional advice.
8.1 No Professional Advice
These tools are not a substitute for advice from a certified professional who is fully informed of your specific circumstances. Any reliance you place on such information is strictly at your own risk.
8.2 Not Certified for Compliance
These tools are not certified for regulatory compliance (including tax, audit, or financial reporting purposes). You may not rely on them for any such compliance obligations.
8.3 Data Collection and Opt-Out
To access the free digital tools, we collect your name and email address solely to provide access to the tools and for limited marketing communications. You may opt out of marketing emails at any time by clicking the "unsubscribe" link or by contacting [email protected]. We do not retain any input values you enter into the calculators. For full details, please refer to the Privacy Policy.
8.4 No Warranties
To the fullest extent permitted by law, CorpDoc Ventures Limited make no representations or warranties of any kind regarding the accuracy, reliability, completeness, or suitability of the tools or calculations. All implied warranties are expressly disclaimed.
8.5 Limitation of Liability
In no event shall CorpDoc Ventures Limited be liable for any direct, indirect, incidental, special, consequential, or punitive damages arising out of your use of these free tools. Your sole remedy for dissatisfaction is to discontinue use. Nothing in this clause limits any rights you may have under applicable consumer protection laws.
8.6 Prohibition on Redistribution
You may not redistribute, resell, sublicense, or otherwise make the free tools available to any third party for commercial purposes.
9. Warranty and Limitation of Liability for Paid Services
9.1 Limited Warranty. CorpDoc warrants that it will perform all paid Services using reasonable care and skill consistent with generally accepted professional standards applicable to the services being performed.
9.2 No Wider Assurance. Unless expressly stated in an Engagement Letter, CorpDoc does not undertake any audit, assurance engagement, fraud detection review, legal review, tax advice, valuation exercise, insolvency advice, regulated financial advice, or verification of the Client's internal controls. CorpDoc is entitled to rely on all information, records, explanations, instructions, and data provided by or on behalf of the Client without independent verification.
9.3 Deemed Acceptance. The Client shall review each Deliverable promptly on receipt. Unless the Client gives CorpDoc written notice within ten (10) Business Days after delivery specifying in reasonable detail any material non-conformity with the express warranty in clause 9.1, that Deliverable shall be deemed accepted.
9.4 Exclusions from Warranty. CorpDoc shall have no responsibility for any error, delay, or non-conformity to the extent arising from: (a) inaccurate, incomplete, late, or misleading information supplied by or on behalf of the Client; (b) any act or omission of the Client or any third party; (c) any third-party software, platform, or data source; (d) any modification to a Deliverable by any person other than CorpDoc; or (e) any use of a Deliverable outside the agreed scope or intended audience.
9.5 Exclusive Remedy. If the Client establishes a breach of the express warranty in clause 9.1, CorpDoc's sole obligation, and the Client's sole and exclusive remedy, shall be, at CorpDoc's option, to re-perform or correct the affected Service within a reasonable period after receiving a valid notice under clause 9.3.
9.6 Exclusion of Other Warranties. Except as expressly set out in this Agreement, all representations, warranties, conditions, and terms, whether express, implied, statutory, or otherwise, are excluded to the fullest extent permitted by law.
9.7 Contractual Time Bar. No claim arising out of or in connection with any paid Service or Deliverable may be brought by the Client unless written notice of the claim is given within twelve (12) months after the date on which the relevant Deliverable was supplied or, if no Deliverable was supplied, within twelve (12) months after the relevant act or omission occurred.
Nothing in this Section 9 excludes or limits any rights a Consumer may have under applicable mandatory consumer protection legislation, including any rights set out in the applicable Country Schedule.
9.8 Limitation of Liability
To the fullest extent permitted by law, the total aggregate liability of CorpDoc Ventures Limited for any claim arising out of or relating to these Terms, the paid Services, or any Licensed Product shall not exceed the total amount of fees paid by the Client to CorpDoc in the twelve (12) months preceding the claim. This single cap applies to all claims under the Agreement.
9.9 No Consequential Damages
Under no circumstances shall CorpDoc Ventures Limited be liable for any indirect, incidental, special, consequential, or punitive damages (including lost profits, lost revenue, loss of data, or third-party claims), even if advised of the possibility of such damages. Nothing in this clause limits liability for fraud, death, or personal injury caused by negligence, or any other liability that cannot be excluded by applicable law.
9.10 Data Breach: Client's Obligation to Notify and Indemnify
If the Client's failure to secure its own login credentials, systems, or data leads to a data breach affecting CorpDoc's platform or any third-party software accessed by CorpDoc, the Client shall: (i) notify CorpDoc in writing within seventy-two (72) hours of discovering such breach; and (ii) indemnify CorpDoc against any resulting fines, penalties, claims, or expenses. The liability cap in this Section 9 does not apply to the Client's indemnity obligation under this paragraph.
9.11 Regulatory Fines
Each party shall bear its own regulatory fines arising from its own breach of applicable data protection laws, save that this does not limit the Client's indemnity obligations where CorpDoc incurs liability caused by the Client's breach, systems failure, or unlawful instructions. Nothing in these Terms excludes or limits liability for fraud, death, or personal injury caused by negligence.
10. Use of Technology and AI-Assisted Tools
CorpDoc may use technology-assisted tools, including artificial intelligence and machine learning platforms, in the delivery of its services. The following principles apply:
• Human review: all AI-generated outputs are reviewed by a qualified member of CorpDoc's professional team before delivery. No AI-generated output is provided as standalone professional advice.
• AI sub-processors: Where CorpDoc uses AI processing tools hosted within a third-party cloud environment, CorpDoc will provide at least fourteen (14) calendar days' written notice before adding or replacing any such tool. The Client may object on reasonable data protection grounds in accordance with the Data Processing Addendum. AI tools hosted within CorpDoc's own internal infrastructure are operated by CorpDoc itself and do not involve any third-party data transfer.
• Accuracy: AI-assisted tools may produce outputs requiring correction or interpretation. CorpDoc's warranty in Section 9 encompasses the appropriate use and review of any AI-assisted outputs.
• Updates: CorpDoc will notify Clients of any material change to its AI use that affects the nature or delivery of their services with not less than thirty (30) calendar days' notice.AI TRANSPARENCY: CorpDoc is committed to responsible and transparent use of AI. If you have concerns about how AI tools are used in the delivery of your services, please contact us at [email protected].11. Compliance: AML, Sanctions and KYC
11.1 Client Representations. The Client represents and warrants that: (a) it is not subject to any sanctions administered by the United Nations, the European Union, the United Kingdom, the United States, New Zealand, or any other applicable sanctions authority; (b) it is not owned or controlled by any sanctioned person or entity; (c) no funds used to pay CorpDoc's fees are derived from unlawful activity; and (d) it will comply with all applicable anti-money laundering, counter-terrorist financing, anti-bribery, anti-corruption, and sanctions laws.
11.2 KYC and Due Diligence. The Client shall promptly provide all information and documentation reasonably requested by CorpDoc for client identification, sanctions screening, beneficial ownership verification, source-of-funds checks, and ongoing compliance monitoring. Failure to provide such information within the timeframe specified by CorpDoc shall be treated as a material breach.
11.3 Compliance Suspension and Termination. CorpDoc may suspend or terminate the Services immediately, without liability and without refund of any fees paid, if: (a) continuation would expose CorpDoc to legal, regulatory, sanctions, anti-money laundering, fraud, anti-bribery, reputational, or ethical risk; (b) the Client fails to provide KYC or due diligence information promptly on request; or (c) CorpDoc reasonably suspects unlawful conduct by or in connection with the Client.
11.4 No Liability for Compliance Termination. CorpDoc shall have no liability to the Client for any loss arising from any suspension or termination under this Section 11. Any fees already paid are non-refundable in such circumstances.
12. Indemnity
The Client agrees to indemnify, defend, and hold harmless CorpDoc Ventures Limited and its respective directors, employees, and agents from any and all claims, losses, damages, liabilities, costs, or expenses (including reasonable legal fees and regulatory fines) arising out of or relating to:
• the Client's breach of these Terms;
• any inaccurate, incomplete, or misleading information or data provided by the Client to CorpDoc;
• the Client's violation of any applicable law, including tax and data protection laws;
• any dispute between the Client and a third party arising from the Client's use of the services or tools;
• any misuse of the Services or website by the Client;
• any claim brought by the Client's own employees or any third party arising from the Client's misuse of the Deliverables or failure to comply with these Terms; and
• any third-party claim arising from the Client's unauthorised sharing of, or failure to restrict reliance on, any Deliverable in breach of Section 19.8.
This indemnity shall survive termination of these Terms.
13. Force Majeure
Neither party shall be liable for any delay or failure in performance resulting from causes beyond its reasonable control, including but not limited to acts of God, war, terrorism, riot, embargoes, acts of civil or military authorities, fire, floods, accidents, pandemics, strikes, or shortages of transportation facilities, fuel, energy, labour, or materials. The affected party shall: (i) notify the other party promptly of the event and its expected duration; and (ii) use reasonable endeavours to resume performance as soon as practicable. If a force majeure event continues for more than ninety (90) calendar days, either party may terminate the affected services on written notice without penalty, subject to payment of all fees for work completed prior to the force majeure event.
14. Governing Law and Dispute Resolution
14.1 Governing Law
Governing law, jurisdiction, and dispute resolution are set out in the applicable Country Schedule attached to the Client's Engagement Letter or Statement of Work. Where no Country Schedule has been issued for the Client's jurisdiction, Part 1 of the New Zealand Schedule applies. Part 2 of the New Zealand Schedule applies only where the Client is located in New Zealand.
14.2 Carve-Outs: Urgent and Debt Recovery Proceedings
Notwithstanding the dispute resolution process below, either party may at any time, without prior notice or compliance with the negotiation or mediation steps, commence court proceedings to: (a) recover any overdue fees or other amounts due under this Agreement; (b) seek emergency or interim injunctive or other equitable relief to protect its intellectual property, confidential information, or other rights; or (c) enforce any restrictive-use, no-reliance, or indemnity provision of this Agreement. Nothing in this Section limits CorpDoc's right to pursue summary judgment or default judgment in respect of undisputed debts.
14.3 Good Faith Negotiation
For all other disputes, the parties shall first attempt to resolve the matter by good faith negotiation for a period of not less than twenty-one (21) calendar days from written notice of the dispute before resorting to mediation or litigation.
14.4 Mediation
If the dispute is not resolved through negotiation, either party may refer it to mediation administered by the body specified in the applicable Country Schedule, or as otherwise agreed in writing. Unless otherwise directed by the mediator, the costs of mediation shall be shared equally. If the dispute is not resolved within thirty (30) calendar days of the commencement of mediation, either party may refer it to the courts specified in the applicable Country Schedule.
14.5 Jurisdiction
If the dispute is not resolved through negotiation or mediation, it shall be submitted to the exclusive jurisdiction of the courts specified in the applicable Country Schedule.NOTE (CONSUMER JURISDICTION): Consumers (as defined in Section 1.4) may have the right to bring proceedings in the courts of their country or territory of residence under applicable mandatory consumer protection legislation, notwithstanding the governing law and jurisdiction provisions of the applicable Country Schedule.

15. Amendments and NotificationCorpDoc may amend these Terms only for a valid reason (for example, to comply with new law, regulation or regulatory guidance, to address a security, fraud or operational risk, or to reflect a change in the scope of services requested). If CorpDoc makes material changes, it will: (a) post the updated Terms on the Site; and (b) send an email notification to the address provided by the Client. No amendment shall reduce the Client's accrued rights at the date of the amendment.
Notwithstanding the above, no amendment to pricing, transaction tiers, service scope, or the payment terms in Section 3 shall take effect in respect of a Business Client who is within an Initial Commitment Period (being the minimum service commitment period specified in the applicable Statement of Work, commencing on the service commencement date) until the expiry of that period, unless the Client expressly agrees to the amendment in writing.
Consumer protection (all jurisdictions):
(a) Savings. Nothing in this clause limits or excludes any right or remedy a Consumer may have under applicable unfair contract terms legislation, including (without limitation) the Fair Trading Act 1986 (NZ), the Australian Consumer Law (Schedule 2 to the Competition and Consumer Act 2010 (Cth)), the Consumer Rights Act 2015 (UK), and applicable US state unfair or deceptive acts or practices statutes. Where a Country Schedule applies, the specific legislation is identified in that Schedule. If a court or regulator declares any part of this clause unfair under applicable law, that part is void to the extent required and the remainder continues.
(b) Materially detrimental changes. For any amendment that is materially detrimental to a Consumer (for example, a fee increase or a reduction in service scope), CorpDoc will give at least 30 days' prior written notice explaining the change and its effect. Such an amendment will take effect only after that notice period.
(c) Right to exit. If an amendment is materially detrimental to a Consumer, that Consumer may terminate the engagement without penalty before the amendment takes effect, and CorpDoc will refund any prepaid fees for services not yet performed. Continued use of the Services after the amendment takes effect constitutes acceptance of the amended Terms.
(d) Non-material and beneficial changes. Changes that are (i) purely administrative, (ii) required by law, or (iii) exclusively to the Client's benefit take effect immediately and without an exit right.
16. ConfidentialityCorpDoc will maintain in strict confidence all non-public information the Client provides in connection with the Services. This obligation does not apply to information that: (i) is independently developed by CorpDoc without reference to the Client's confidential information; (ii) becomes publicly known through no fault of CorpDoc; (iii) is required to be disclosed by law, regulation, or court order (in which case CorpDoc will give the Client reasonable advance notice where permitted); or (iv) is disclosed to CorpDoc's professional advisers, insurers, subcontractors, subprocessors, or prospective purchasers of CorpDoc's business, in each case under obligations of confidentiality no less protective than those in this Section.
The Client agrees to keep confidential any non-public information about CorpDoc's pricing, methodologies, or tools that is not publicly available.
This obligation of confidentiality shall survive termination of these Terms for a period of five (5) years.
Sub-contractors. CorpDoc may engage vetted sub-contractors and sub-processors to assist in the delivery of the Services. Any such engagement is subject to confidentiality and data protection obligations no less protective than those in this Agreement. CorpDoc remains responsible for the acts and omissions of its sub-contractors as if they were CorpDoc's own.
17. Non-Solicitation and Placement Fee17.1 Non-Solicitation
During the term of this Agreement and for a period of twelve (12) months following its expiry or termination, neither party shall directly or indirectly solicit, induce, recruit, or encourage any employee, contractor, or consultant of the other party who was directly involved in the performance or receipt of the Services to terminate their engagement with that party or to accept employment or engagement with the other party or any of its affiliates.
17.2 Placement Fee
CorpDoc invests in recruiting, training, and developing its personnel. Where, within twelve (12) months of a CorpDoc employee, contractor, or consultant ceasing their engagement with CorpDoc, the Client directly or indirectly employs, engages, or retains that individual, the Client shall pay CorpDoc a placement fee equal to twenty-five percent (25%) of the individual’s total first-year remuneration package, including base salary, superannuation or pension contributions, bonuses, commissions, allowances, and the value of any non-cash benefits (the “Placement Fee”). The parties acknowledge that: (a) this fee reflects the standard market rate charged by professional recruitment consultants for placing candidates of comparable seniority in the professional services sector, which is typically 15–25% of first-year base salary; (b) the Client is in the same commercial position as a party that engaged CorpDoc to source and place the individual; and (c) the Placement Fee is a primary commercial obligation and not a penalty or secondary obligation triggered by breach. For the avoidance of doubt, this clause does not restrict the individual’s freedom to seek or accept engagement with the Client.
17.3 Payment of Placement Fee
The Client shall notify CorpDoc in writing within fourteen (14) calendar days of commencing any employment or engagement described in clause 17.2. CorpDoc shall invoice the Client for the Placement Fee within thirty (30) calendar days of becoming aware of the engagement, and the invoice shall be due and payable within fourteen (14) calendar days of the invoice date. Late payment shall attract interest under clause 3.8.
18. Data Protection and Privacy18.1 Controller and Processor
For the purposes of applicable data protection legislation (including GDPR, UK GDPR, the Privacy Act 2020 (New Zealand), and any other applicable data protection law), CorpDoc Ventures Limited acts as the data controller in respect of personal data collected directly from the Client. Where CorpDoc processes personal data on the Client's behalf as part of the Services, CorpDoc acts as a data processor and the Client acts as the data controller in respect of that data.
18.2 Lawful Basis
CorpDoc processes personal data on the following lawful bases:
• Performance of contract: to provide the services the Client has purchased or requested.
• Legitimate interests: to maintain and improve our services, and for security and fraud prevention purposes.
• Consent: for marketing communications, where the Client has opted in (and may withdraw consent at any time).
• Legal obligation: where processing is required by applicable law or regulation.
18.3 What We Collect and How We Use It
CorpDoc collects and processes the Client's name and email address to: provide access to the free digital tools; provide the paid services; send service-related communications; and send marketing communications (from which the Client may opt out at any time by clicking the "unsubscribe" link or contacting [email protected]). We do not retain any input values entered into free calculators.
18.4 Data Subject Rights
Depending on applicable law, the Client (and individuals whose data the Client provides to CorpDoc) may have rights including: the right to access, rectify, or erase personal data; the right to restrict or object to processing; the right to data portability; and the right to withdraw consent. To exercise any of these rights, please contact [email protected]. CorpDoc will respond within the timeframe required by applicable law (generally within thirty (30) calendar days).
18.5 Data Retention
CorpDoc retains personal data for as long as necessary to fulfil the purposes described in these Terms and the Privacy Policy, and in any event for the minimum periods required by applicable law and professional standards. Working papers and financial records are retained for a minimum of ten (10) years as required by professional accounting standards.
18.6 International Transfers
Where personal data is transferred outside the jurisdiction in which it was collected, CorpDoc will ensure that appropriate safeguards are in place in accordance with applicable data protection law (e.g., standard contractual clauses or equivalent mechanisms).
Data Processing Addendum. Where CorpDoc processes personal data on the Client's behalf as a data processor, the Data Processing Addendum (Schedule 7) to these Terms applies. Schedule 7 sets out the universal processor obligations, technical and organisational security measures (TOMs), approved sub-processors, and processing details. Jurisdiction-specific data protection obligations are set out in the applicable Country Schedule. A countersigned copy of Schedule 7 is available on written request to [email protected].
Privacy Breach Notification. In the event of a privacy breach affecting Client personal data held by CorpDoc, CorpDoc will notify the affected Client and, where required, the applicable supervisory authority or privacy commissioner, in accordance with applicable data protection law and the timeframes set out in the applicable Country Schedule and Schedule 7. CorpDoc will cooperate with the Client in any required remediation steps.
For full details of how CorpDoc processes personal data, please refer to the Privacy Policy at: corpdoc.io/legal/privacy-policy

19. Intellectual Property and Deliverables19.1 Work Product and Deliverables
Subject to full payment of all fees due under this Agreement, CorpDoc assigns to the Client ownership of all final deliverables produced specifically for the Client under any consulting or bookkeeping Engagement, including but not limited to:
• reports and other work product as detailed in the applicable Statement of Work;
• management accounts and financial summaries; and
• any other bespoke written output produced solely for the Client's use under a consulting or bookkeeping Engagement.
(collectively, the "Consulting Deliverables"). Ownership of the Consulting Deliverables vests in the Client only upon receipt of full payment. Prior to that point, CorpDoc retains full ownership of all work product. The Client's right to use and share Consulting Deliverables is at all times subject to the third-party reliance restrictions in Section 19.8.
19.2 Use of Deliverables
The Client may use all reports, working papers, and other deliverables produced by CorpDoc under the Engagement solely for the Client's own internal business purposes. No ownership of CorpDoc's underlying methodologies, templates, or tools passes to the Client.
19.3 CorpDoc's Retained Rights in Deliverables
Notwithstanding Section 19.1, the Client grants CorpDoc a perpetual, irrevocable, royalty-free licence to: (a) retain copies of all Deliverables, working papers, and underlying data for a minimum of ten (10) years; (b) use retained copies for professional compliance, regulatory obligations, quality assurance, dispute resolution, and internal audit; and (c) reference the existence of the Engagement (but not its confidential contents) for accreditation, regulatory filings, or insurance requirements. CorpDoc is not a data backup service and the Client remains solely responsible for maintaining its own copies of data.
19.4 CorpDoc Proprietary Materials: Retained Ownership
The Client acknowledges that CorpDoc retains full and exclusive ownership of all Proprietary Methodology, Templates, Software, and Know-How (collectively, the "CorpDoc IP"). Nothing in this Agreement transfers ownership of any CorpDoc IP to the Client, whether expressly or by implication.
19.5 Licence Grant to Client for CorpDoc IP
CorpDoc grants the Client a limited, non-exclusive, non-transferable, revocable licence to use the CorpDoc IP solely to the extent necessary to receive, interpret, and apply the Deliverables for the Client's internal business purposes and to use any reports or deliverables produced under the Engagement for internal business purposes. This licence does not permit reproduction, adaptation, distribution, reverse engineering, or sublicensing of any CorpDoc IP. This licence terminates automatically upon expiry or termination of this Agreement or upon any material breach by the Client.
19.6 Software and Platform Access
Where CorpDoc provides the Client with access to third-party accounting software under a licence held by CorpDoc: (a) such access is granted solely for the duration of this Agreement; (b) the Client's access is subject to the relevant third-party provider's terms; (c) upon termination or expiry, CorpDoc reserves the right to revoke the Client's access; and (d) the Client accepts sole responsibility for ensuring it holds its own independent software licence if it wishes to retain access following termination.
19.7 Client-Supplied Materials
The Client warrants that any data, documents, records, or materials provided to CorpDoc: (a) are owned by the Client or the Client has full authority to provide them; (b) do not infringe the intellectual property rights of any third party; and (c) may be used by CorpDoc solely for the purposes of delivering the services. CorpDoc shall not acquire any ownership rights over Client Materials.
19.8 No Third-Party Reliance
19.8.1 Reports and Deliverables Prepared for Client Only
All Deliverables are prepared solely for the benefit of the Client and exclusively for the purposes agreed at the commencement of the Engagement. They may not be relied upon by any third party for any purpose whatsoever.
19.8.2 Absolute Prohibition on Third-Party Reliance Without Consent
No third party including any lender, bank, investor, acquirer, shareholder, regulator, auditor, insurer, counterparty, or adviser may place any reliance on any Deliverable unless CorpDoc Ventures Limited has given its prior written consent by way of a signed reliance letter or consent notice addressed specifically to that third party (a "Reliance Consent"). In the absence of a Reliance Consent: (a) CorpDoc Ventures Limited owes no duty of care to any third party in respect of any Deliverable; (b) CorpDoc Ventures Limited accepts no liability whatsoever for any loss suffered by any third party arising from reliance on any Deliverable; and (c) any third party who obtains access to a Deliverable does so entirely at their own risk.
19.8.3 Client's Obligation to Notify and Restrict
The Client shall: (a) not share any Deliverable with any third party without first obtaining a Reliance Consent or without expressly notifying the third party in writing that the Deliverable may not be relied upon; (b) include on any copy shared with a third party the following legend: "This document has been prepared by CorpDoc Ventures Limited solely for the use and benefit of [Client name]. No reliance may be placed upon it by any third party. CorpDoc Ventures Limited accepts no liability to any third party in respect of this document."; and (c) promptly notify CorpDoc if the Client becomes aware that any third party has obtained access to, or is placing reliance on, any Deliverable without a Reliance Consent.
19.8.4 Consent Process for Third-Party Reliance
Where the Client wishes to share a Deliverable with a third party who will or may place reliance on it, the Client must submit a written request to [email protected] setting out: (i) the identity of the proposed recipient; (ii) the purpose for which the Deliverable is to be shared; and (iii) the nature of the reliance to be placed upon it. CorpDoc reserves the absolute right to grant or withhold Reliance Consent at its sole discretion, and may make consent conditional upon: (a) the third party executing a reliance letter in a form approved by CorpDoc; (b) the payment of an additional fee; or (c) any other condition CorpDoc deems appropriate.
19.8.5 Indemnity for Unauthorised Third-Party Sharing
The Client shall indemnify, defend, and hold harmless CorpDoc Ventures Limited and its respective directors, officers, employees, and agents against any and all claims, losses, liabilities, damages, costs, and expenses (including reasonable legal fees) arising from or in connection with: (a) any third party's reliance on a Deliverable shared by the Client without a valid Reliance Consent; (b) the Client's failure to include the required legend; or (c) any misrepresentation made by the Client to a third party regarding the scope, purpose, or authority of any Deliverable. This indemnity shall survive termination of this Agreement.IMPORTANT (NO THIRD-PARTY RELIANCE): This clause constitutes a complete carve-out of third-party reliance. CorpDoc Ventures Limited will not be liable to any third party under any legal theory for any Deliverable produced under this Agreement unless a Reliance Consent has been granted in writing. Clients who anticipate sharing reports with banks, investors, or acquirers should contact [email protected] before doing so.19.9 Aggregated and Anonymised Data
The Client acknowledges that CorpDoc may use anonymised, aggregated, and non-identifiable data derived from the Engagement for benchmarking, industry research, and improvement of CorpDoc's methodology and services. No personally identifiable information or Client-specific data shall be disclosed in any manner that would identify the Client without the Client's prior written consent.
20. International Clients and Local Law Compliance
Privacy Policy
Country Schedules are appended to these Terms as Schedule 3 (New Zealand) , Schedule 4 (Australia) , Schedule 5 (United Kingdom) , and Schedule 6 (United States) , with further schedules added as CorpDoc expands into additional markets. Each Country Schedule contains jurisdiction-specific definitions, governing law, courts, dispute resolution, consumer rights, data protection, and tax provisions that supplement or override the corresponding clauses in these Terms. The applicable Country Schedule is determined automatically by the Client's registered business address or residential address as declared at checkout or in the Engagement Letter. Where the Client's address is in a country for which a Country Schedule exists, that Schedule applies in full. Where the Client's address is in a country for which no Country Schedule exists: (a) Part 1 of the New Zealand Schedule (Schedule 3) applies as the governing law default; and (b) Part 2 of the New Zealand Schedule applies only where the Client is located in New Zealand. In all cases the Client remains solely responsible for complying with any local laws, regulations, and tax obligations applicable to its use of CorpDoc's services that are not addressed in an applicable Country Schedule.21. General Provisions21.1 Entire Agreement
These Terms (including any applicable Country Schedule (Schedules 3–6), the Data Processing Addendum (Schedule 7), and the Privacy Policy incorporated by reference) constitute the entire agreement between the Client and CorpDoc Ventures Limited regarding the subject matter hereof and supersede all prior discussions, representations, and agreements.
21.2 Survival
The following provisions shall survive expiry or termination of this Agreement for any reason: Section 9 (Warranty and Limitation of Liability), Section 11 (Compliance), Section 12 (Indemnity), Section 14 (Governing Law and Dispute Resolution), Section 16 (Confidentiality), Section 17 (Non-Solicitation and Placement Fee), Section 18 (Data Protection), Section 19 (Intellectual Property and Deliverables), and any other provision expressed or by its nature intended to survive.
21.3 Severability
If any provision of these Terms is found to be unenforceable or invalid, that provision shall be severed or modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall remain in full force and effect.
21.4 No Waiver
CorpDoc's failure to enforce any right or provision of these Terms on any occasion will not be considered a waiver of that right or provision on any future occasion.
21.5 Relationship of the Parties
Nothing in these Terms creates a partnership, joint venture, agency, franchise, or employment relationship between the parties. CorpDoc is an independent contractor.
21.6 Assignment
The Client may not assign, transfer, or novate its rights or obligations under these Terms to any third party without CorpDoc's prior written consent. CorpDoc may assign its rights and obligations to any affiliate or successor entity on thirty (30) calendar days' written notice to the Client.
21.7 Notices
All formal notices under these Terms shall be in writing and delivered by email to [email protected] (for CorpDoc) or to the email address registered by the Client. Notices shall be deemed received on the next Business Day after sending, provided no delivery failure notification is received. For debt recovery, injunctive relief, or formal legal service, CorpDoc reserves the right to use additional notice channels including registered post.
21.8 Cooling-Off Period
To the extent any applicable law provides for a mandatory cooling-off period for Consumers (as defined in Section 1.4), such period shall apply as required by law. Please contact [email protected] to exercise any such right.
Electronic Signatures. These Terms may be accepted and this Agreement formed by electronic means, including by online checkout, click-through acceptance, or electronic signature. Electronic signatures are valid and binding to the extent permitted by applicable law in the relevant jurisdiction. An Agreement formed electronically has the same legal effect as one signed in writing.
21.9 Contact Information
For any questions about these Terms, please contact: [email protected]
Complaints. CorpDoc is committed to resolving client concerns promptly. If you have a complaint about any Service or Deliverable, please contact us in the first instance at [email protected] with details of your concern. CorpDoc will acknowledge your complaint within five (5) Business Days and aim to resolve it within twenty-one (21) calendar days. If your complaint is not resolved to your satisfaction, you may refer the matter to the dispute resolution process in Section 14.

CorpDoc Ventures Limited
Jurisdiction Schedule — United StatesVersion: 1.0
Last Updated: September 2026
Applies to: Clients located in the United States of America
Master Agreement: CorpDoc Terms and Conditions Version 1.3IMPORTANT: This document is Schedule 6 to the CorpDoc Terms and Conditions Version 1.3. It prevails over those Terms to the extent of any inconsistency. US consumer protection law varies significantly by state. This Schedule sets out the framework applicable to all US Clients and identifies key state-specific provisions. CorpDoc recommends US Clients seek independent legal advice regarding their specific state rights.Part 1 — Definitions
For the purposes of this Schedule and the Agreement as it applies to US Clients:
"CCPA/CPRA" means the California Consumer Privacy Act of 2018 as amended by the California Privacy Rights Act of 2020 (Cal. Civil Code § 1798.100 et seq.).
"Consumer" means an individual who purchases services primarily for personal, family, or household purposes. The threshold for consumer protection under US law varies by state; this Schedule addresses the most commonly applicable provisions.
"FTC Act" means the Federal Trade Commission Act (15 U.S.C. § 45 et seq.).
"Governing State" means the State of New York, unless a different state is specified in the Engagement Letter or Product Order Form.
"US CPI" means the Consumer Price Index for All Urban Consumers (CPI-U) published by the US Bureau of Labor Statistics.NOTE ON STATE LAW: The United States has no single federal consumer protection statute equivalent to the Australian Consumer Law or the UK Consumer Rights Act. Consumer rights are primarily regulated at the state level and vary significantly. This Schedule establishes a New York law default and addresses California-specific provisions separately. Clients in other states should seek local legal advice.Part 2 — Governing Law and Dispute Resolution
2.1 Governing Law
This Schedule and the Agreement as it applies to US Clients shall be governed by and construed in accordance with the laws of the Governing State, without regard to its conflict of laws principles. Where a specific state is identified in the Engagement Letter or Product Order Form, that state's law applies.2.2 Jurisdiction
Subject to the dispute resolution process in clause 2.4, all disputes shall be subject to the exclusive jurisdiction of the federal and state courts located in New York County, New York (or the courts of the Governing State where different). Each party waives any objection to personal jurisdiction or venue in such courts.2.3 Class Action and Jury Trial Waiver
(a) Waiver of class proceedings. To the fullest extent permitted by applicable law, you and we each waive any right to participate in or bring any class, collective, or representative action against the other in any court or tribunal, whether as a named plaintiff, class member, or private attorney general. Any dispute arising out of or relating to these terms or the services shall be litigated on an individual basis only.
(b) Jury trial waiver. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND WE EACH WAIVE ANY RIGHT TO A TRIAL BY JURY IN ANY PROCEEDING ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICES.
(c) Carve-outs. This waiver does not apply to the extent prohibited by applicable law, including (without limitation) any claim that must, by law, be adjudicated on a class, collective, or representative basis (for example, certain representative actions under California's Private Attorneys General Act (PAGA) or other state laws that do not permit waiver of representative enforcement). If a court finds this waiver unenforceable as to a particular claim, that claim may proceed on a class/collective/representative basis only to the extent required by law, and the remainder of this waiver shall remain in effect.
(d) Governing law; forum. This waiver is governed by the laws of the State of New York, without regard to conflict-of-laws rules that would apply another state's law to invalidate this waiver, except that nothing herein waives any non-waivable right under the law of the state where you reside.2.4 Dispute Resolution
Carve-Outs
Either party may at any time seek emergency or interim injunctive relief from a court of competent jurisdiction, or commence proceedings to recover overdue fees, without prior notice or compliance with the negotiation or mediation steps below.Good Faith Negotiation
For all other disputes, the parties shall first attempt to resolve the matter by good faith negotiation for not less than twenty-one (21) calendar days from written notice of the dispute.Mediation
If not resolved through negotiation, either party may refer the dispute to mediation administered by JAMS (Judicial Arbitration and Mediation Services) or the American Arbitration Association (AAA) under their then-current commercial mediation rules. Costs of mediation shall be shared equally. If not resolved within thirty (30) calendar days of commencing mediation, either party may refer the matter to the courts in clause 2.2.Part 3 — Consumer Protection (Federal)
3.1 FTC Act Compliance
CorpDoc will not engage in unfair or deceptive acts or practices in commerce within the meaning of Section 5 of the FTC Act. This includes: (a) not making false or misleading representations about the Services; (b) not omitting material information that a consumer would need to make an informed purchasing decision; and (c) honouring all representations made in advertising, on the Site, or in pre-contractual communications.3.2 No Implied Warranty Disclaimer (Consumer Context)
The disclaimer of implied warranties in the master Terms and Conditions applies to the fullest extent permitted by applicable law. In states that do not allow the exclusion of implied warranties for consumer transactions (including implied warranties of merchantability or fitness for a particular purpose), such warranties are not excluded to the extent that exclusion is prohibited. CorpDoc's liability in such states is limited to the maximum extent permitted by law.3.3 Limitation of Liability — State Law
Some states do not allow the limitation of consequential or incidental damages in consumer transactions. In those states, the limitation of liability in the master Terms and Conditions applies only to the extent permitted by applicable state law.3.4 Cooling-Off Rights
There is no general federal cooling-off right for professional services purchased online in the United States. Cooling-off rights under US law apply only in limited circumstances:
(a) FTC Cooling-Off Rule (door-to-door sales). The FTC's Cooling-Off Rule (16 C.F.R. Part 429) provides a three (3) business day right to cancel contracts of $25 or more entered into at the Consumer's home, workplace, or a seller's temporary location (e.g. a trade fair). This rule does not apply to services purchased online or by telephone.
(b) State law. Some states provide additional cooling-off rights for specific categories of services or consumer transactions. Where applicable state law provides a cooling-off right that applies to CorpDoc's services, CorpDoc will honour that right. Clients who believe a state law cooling-off right applies to their engagement should contact [email protected] promptly.
(c) No general online right. Unless a specific federal or state statute applies, there is no cooling-off or cancellation right for services contracted online in the United States. Cancellation rights are governed by the termination provisions of the master Terms and Conditions and the applicable Statement of Work.Part 4 — Data Protection and Privacy
4.1 Federal Framework
CorpDoc will handle personal information of US Clients in accordance with applicable federal privacy law, including the FTC Act's requirements regarding deceptive and unfair privacy practices, and CorpDoc's Privacy Policy accessible at corpdoc.io/legal/privacy-policy. CorpDoc does not sell personal information to third parties.4.2 California Residents — CCPA/CPRA
California residents have the following rights under the CCPA/CPRA:
Right to know: the categories and specific pieces of personal information CorpDoc has collected, the sources of collection, the purposes for which it is used, and the categories of third parties with whom it is shared.
Right to delete: personal information CorpDoc has collected, subject to certain exceptions (e.g., where retention is necessary to complete the transaction or comply with a legal obligation).
Right to correct: inaccurate personal information that CorpDoc holds.
Right to opt-out of sale or sharing: CorpDoc does not sell or share personal information for cross-context behavioural advertising.
Right to limit use of sensitive personal information: CorpDoc limits its use of sensitive personal information to the purposes specified in the CCPA/CPRA.
Right to non-discrimination: CorpDoc will not discriminate against California residents for exercising their CCPA/CPRA rights.
To exercise any CCPA/CPRA right, contact [email protected]. CorpDoc will respond within forty-five (45) calendar days, with one permitted extension of a further forty-five (45) days where reasonably necessary.4.3 Other State Privacy Laws
CorpDoc will comply with applicable state privacy laws in force from time to time, including (without limitation) the Virginia Consumer Data Protection Act (VCDPA), the Colorado Privacy Act (CPA), the Connecticut Data Privacy Act (CTDPA), and the Texas Data Privacy and Security Act (TDPSA), to the extent those laws apply to CorpDoc's processing of personal information relating to residents of those states. Clients resident in those states who wish to exercise applicable rights should contact [email protected].4.4 Data Breach Notification
In the event of a security breach involving personal information of US Clients, CorpDoc will provide notification to affected individuals and relevant state authorities in accordance with applicable state data breach notification laws. Notification will be provided in the timeframe and manner required by the law of the affected Client's state of residence.Part 5 — Tax
5.1 No Federal GST or VAT
The United States does not impose a federal goods and services tax or value added tax. CorpDoc's fees to US Clients do not include US federal sales tax.5.2 State and Local Sales Tax
Sales tax treatment of CorpDoc's services varies by state and locality. Where CorpDoc is required by applicable state or local law to collect and remit sales tax on services provided to US Clients, such tax will be added to the applicable invoice and stated separately. US Clients are responsible for determining and remitting any use tax or other state or local tax obligations that may arise in connection with their use of the Services.5.3 Withholding Tax
US Clients that are required by US law to withhold tax on payments to foreign persons under FATCA, Chapter 3 of the Internal Revenue Code, or applicable state law must notify CorpDoc promptly. The gross-up obligation in the master Terms and Conditions applies. CorpDoc will provide IRS Form W-8BEN-E or other required documentation upon request.5.4 Renewal Price Cap — CPI Reference
The renewal price cap in the master Terms and Conditions shall be calculated by reference to the US CPI (CPI-U, All Items, Not Seasonally Adjusted) published by the Bureau of Labor Statistics for the preceding twelve (12) months.Part 6 — Professional Services
6.1 Scope of Services
CorpDoc provides bookkeeping, payroll, tax compliance, and advisory services to US Clients through the relevant licensed entities within the CorpDoc group. Where a service is regulated in the United States, it is delivered by the CorpDoc entity registered or authorised for that purpose, including (where applicable) entities employing Certified Public Accountants (CPAs) licensed in the relevant state, enrolled agents authorised to practice before the Internal Revenue Service under Circular 230, or investment advisers registered with the SEC or applicable state securities regulator under the Investment Advisers Act of 1940.6.2 Scope Limitations
CorpDoc does not provide services outside the licensed scope of the relevant delivering entity. In particular: (a) investment advice within the meaning of the Investment Advisers Act of 1940 is provided only through CorpDoc entities registered as investment advisers with the SEC or the applicable state regulator; (b) tax preparation, tax advice, and representation before the IRS or state tax authorities are provided only through CorpDoc entities or practitioners authorised for that purpose under Circular 230 or applicable state law; and (c) audit and assurance services are not provided by the CorpDoc group.Part 7 — Regulatory Contacts
US Clients who wish to escalate unresolved complaints may contact the following bodies:
Federal Trade Commission (FTC): for consumer protection and privacy complaints — ftc.gov/complaint
California Attorney General (California residents): for CCPA complaints — oag.ca.gov/privacy/ccpa
State Attorney General: for consumer protection complaints — contact the AG office in the Client's state of residenceLast Updated: September 2026 | © CorpDoc Ventures Limited | Version 1.0

CorpDoc Ventures Limited
Jurisdiction Schedule — United Kingdom
Version: 1.0
Last Updated: September 2026
Applies to: Clients located in England, Wales, Scotland, or Northern Ireland
Master Agreement: CorpDoc Terms and Conditions Version 1.3IMPORTANT: This document is Schedule 5 to the CorpDoc Terms and Conditions Version 1.3. It prevails over those Terms to the extent of any inconsistency. This Schedule applies where the Client is located in the United Kingdom.Part 1 — Definitions
For the purposes of this Schedule and the Agreement as it applies to UK Clients:
"CRA 2015" means the Consumer Rights Act 2015 (UK).
"Consumer" has the meaning given in section 2 of the CRA 2015: an individual acting for purposes that are wholly or mainly outside that individual's trade, business, craft, or profession.
"DPA 2018" means the Data Protection Act 2018 (UK).
"FCA" means the Financial Conduct Authority.
"ICO" means the Information Commissioner's Office.
"UK CPI" means the Consumer Prices Index including owner occupiers' housing costs (CPIH) published by the Office for National Statistics (ONS).
"UK GDPR" means the UK General Data Protection Regulation, being the retained EU GDPR as it forms part of UK law by virtue of section 3 of the European Union (Withdrawal) Act 2018, as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019.
"VAT" means Value Added Tax as imposed under the Value Added Tax Act 1994 (UK), currently at a standard rate of 20%.Part 2 — Governing Law and Dispute Resolution
2.1 Governing Law
This Schedule and the Agreement as it applies to UK Clients shall be governed by and construed in accordance with the laws of England and Wales, without regard to conflict of laws principles.2.2 Scotland and Northern Ireland Savings
(a) CRA 2015 applies UK-wide. These terms are subject to the Consumer Rights Act 2015, which applies in England and Wales, Scotland and Northern Ireland. Nothing in these terms excludes or restricts your statutory rights under the CRA 2015 (including the right to performance with reasonable care and skill and the remedies of repeat performance and price reduction).
(b) Jurisdiction. If you are a consumer resident in Scotland or Northern Ireland, you may bring proceedings in the courts of Scotland or Northern Ireland respectively. Any term that would prevent you from doing so is not binding on you to the extent it conflicts with your statutory rights.
(c) Governing law savings. These terms are governed by the law of England and Wales, but this does not deprive you of the protection of any mandatory provisions of the law of the part of the UK where you reside.2.3 Jurisdiction
Subject to the dispute resolution process in clause 2.5, all disputes shall be submitted to the non-exclusive jurisdiction of the courts of England and Wales. Consumer clients resident in Scotland or Northern Ireland may bring proceedings in their home courts as set out in clause 2.2(b).2.4 Consumer Jurisdiction
Consumers may have the right to bring proceedings in the courts of their country or territory of residence under applicable mandatory consumer protection legislation, notwithstanding clause 2.3.2.5 Dispute Resolution
Carve-Outs
Either party may at any time commence court proceedings to: (a) recover overdue fees; (b) seek emergency or interim injunctive relief; or (c) enforce any restrictive-use, no-reliance, or indemnity provision.Good Faith Negotiation
For all other disputes, the parties shall first attempt to resolve the matter by good faith negotiation for not less than twenty-one (21) calendar days from written notice of the dispute.Mediation
If not resolved through negotiation, either party may refer the dispute to mediation administered by the Centre for Effective Dispute Resolution (CEDR) or such other body as the parties agree in writing. Costs of mediation shall be shared equally unless otherwise directed by the mediator. If not resolved within thirty (30) calendar days of commencing mediation, either party may refer the matter to the courts in clause 2.3.Part 3 — Consumer Rights (Consumer Rights Act 2015)
3.1 Statutory Rights for Services
Nothing in the master Terms and Conditions excludes or limits any rights a Consumer may have under the CRA 2015. In particular, the following statutory rights apply to services supplied to Consumers:
(a) Reasonable care and skill. Services must be performed with reasonable care and skill (CRA 2015, s 49).
(b) Information binding. Anything said or written to the Consumer about CorpDoc or the services (by CorpDoc or on its behalf) before the contract is entered into is binding if the Consumer takes it into account (CRA 2015, s 50).
(c) Reasonable price. Where the price is not agreed before the services are provided, the Consumer must pay only a reasonable price (CRA 2015, s 51).
(d) Reasonable time. Where no time is agreed, services must be performed within a reasonable time (CRA 2015, s 52).3.2 Remedies for Failure
Right to repeat performance: Where a service does not conform to the contract, the Consumer may require CorpDoc to perform the service again to the extent necessary to make it conform (CRA 2015, s 55). CorpDoc must do so within a reasonable time, without significant inconvenience to the Consumer, and at CorpDoc's own cost.
Right to a price reduction: Where repeat performance is impossible or CorpDoc has failed to perform within a reasonable time, the Consumer is entitled to a reduction in price up to the full price paid (CRA 2015, s 56).3.3 Unfair Contract Terms
The unfair terms provisions of the CRA 2015 (Part 2) apply to standard term consumer contracts. A term is unfair if, contrary to the requirement of good faith, it causes a significant imbalance in the parties' rights and obligations under the contract to the detriment of the Consumer. An unfair term is not binding on the Consumer. CorpDoc does not seek to rely on any term that is unfair within the meaning of Part 2 of the CRA 2015.3.4 Assignment — Consumer Protection
Notwithstanding the assignment provision in the master Terms and Conditions, CorpDoc will not assign this Agreement to a counterparty where that assignment would materially worsen the Consumer's position (including by reducing the quality or availability of the services, or by transferring the Agreement to an entity with materially fewer resources or regulatory protections) without first obtaining the Consumer's written consent. A Consumer who does not consent is entitled to terminate the Agreement with immediate effect and receive a pro-rata refund of any prepaid fees for undelivered services.3.5 Cooling-Off Rights — Distance and Off-Premises Contracts
Where this Agreement constitutes a distance contract or off-premises contract within the meaning of the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013 (SI 2013/3134) (the "CCR 2013"), the Consumer has the right to cancel this Agreement within fourteen (14) calendar days of the date the Agreement is entered into (the "Cancellation Period"), without giving any reason and without incurring any liability, except as set out below.
(a) Commencement before end of Cancellation Period. Where the Consumer requests that CorpDoc begin performing the services before the end of the Cancellation Period, the Consumer acknowledges that: (i) if the services are fully performed before the end of the Cancellation Period, the right to cancel is lost once performance is complete; and (ii) if the Consumer exercises the right to cancel after services have commenced but before they are complete, the Consumer is liable to pay CorpDoc for the services actually supplied up to the date of cancellation, in proportion to the total price agreed.
(b) How to cancel. To exercise the right to cancel, the Consumer must notify CorpDoc by clear written statement (including by email to [email protected]) before the end of the Cancellation Period.
(c) Refunds. Where a refund is due following cancellation, CorpDoc will process it within fourteen (14) calendar days of receipt of the cancellation notice, using the same payment method as the original transaction unless otherwise agreed.NOTE (UK CONSUMERS): Your consumer rights under the Consumer Rights Act 2015 cannot be excluded or restricted. You have the right to repeat performance or a price reduction where CorpDoc fails to perform services with reasonable care and skill. Where your contract was entered into at a distance (e.g. online), you may also have a 14-day right to cancel under the Consumer Contracts Regulations 2013. For independent advice, contact Citizens Advice at citizensadvice.org.uk.Part 4 — Data Protection (UK GDPR and DPA 2018)
4.1 Controller and Processor
For the purposes of the UK GDPR and the DPA 2018, CorpDoc Ventures Limited acts as a data controller in respect of personal data collected directly from UK Clients, and as a data processor where it processes personal data on the Client's behalf as part of the Services.4.2 Lawful Basis
CorpDoc processes personal data of UK Clients on the following lawful bases under Article 6 UK GDPR: (a) performance of contract (Article 6(1)(b)); (b) legitimate interests (Article 6(1)(f)) — for service improvement, security, and fraud prevention; (c) consent (Article 6(1)(a)) — for marketing communications; and (d) legal obligation (Article 6(1)(c)) — where required by applicable law.4.3 Data Subject Rights
UK Clients and individuals whose personal data CorpDoc holds have the following rights under the UK GDPR: right of access (Article 15); right to rectification (Article 16); right to erasure (Article 17); right to restriction of processing (Article 18); right to data portability (Article 20); right to object (Article 21); and rights in relation to automated decision-making (Article 22). To exercise any right, contact [email protected]. CorpDoc will respond within one (1) calendar month as required by Article 12 UK GDPR.4.4 International Transfers
Where CorpDoc transfers personal data of UK Clients outside the United Kingdom, CorpDoc will ensure that appropriate safeguards are in place in accordance with Chapter V of the UK GDPR and the DPA 2018 (including UK Standard Contractual Clauses, adequacy regulations, or equivalent mechanisms approved by the UK Secretary of State).4.5 Data Breach Notification
In the event of a personal data breach, CorpDoc will notify the ICO without undue delay and, where feasible, within seventy-two (72) hours of becoming aware of the breach, where the breach is likely to result in a risk to the rights and freedoms of individuals (UK GDPR, Article 33). Where the breach is likely to result in a high risk, CorpDoc will also notify the affected individuals without undue delay (Article 34).4.6 ICO Complaints
UK Clients who are not satisfied with CorpDoc's handling of a data protection matter may lodge a complaint with the Information Commissioner's Office at ico.org.uk.Part 5 — Value Added Tax
5.1 VAT Treatment
Where CorpDoc Ventures Limited is registered for VAT in the United Kingdom or is required to account for VAT on its supplies to UK Clients: (a) VAT at the then-current standard rate will be added to taxable supplies and stated separately on each invoice; (b) all fees quoted are exclusive of VAT unless stated otherwise; and (c) CorpDoc will issue valid VAT invoices as required under the Value Added Tax Act 1994 and HMRC requirements.5.2 Reverse Charge
Where the reverse charge mechanism applies to supplies of services to UK Clients who are VAT-registered businesses, the Client is responsible for accounting for VAT under the reverse charge procedure. CorpDoc will indicate on the invoice where the reverse charge applies.5.3 Renewal Price Cap — CPI Reference
The renewal price cap in the master Terms and Conditions shall be calculated by reference to the UK CPI (CPIH) published by the Office for National Statistics for the preceding twelve (12) months.Part 6 — Professional Services
6.1 Scope of Services
CorpDoc provides bookkeeping, payroll, tax compliance, and advisory services to UK Clients through the relevant licensed entities within the CorpDoc group. Where a service is regulated in the United Kingdom, it is delivered by the CorpDoc entity registered or authorised for that purpose, including (where applicable) entities registered with HMRC as tax agents, or authorised by the Financial Conduct Authority (FCA) under the Financial Services and Markets Act 2000 (FSMA 2000).6.2 Scope Limitations
CorpDoc does not provide services outside the licensed scope of the relevant delivering entity. In particular: (a) regulated activities and financial promotions within the meaning of FSMA 2000 are provided only through CorpDoc entities authorised by the FCA; (b) tax agent services and representation before HMRC are provided only through CorpDoc entities registered with HMRC for that purpose; and (c) audit and assurance services are not provided by the CorpDoc group.Part 7 — Regulatory Contacts
UK Clients who wish to escalate unresolved complaints may contact the following bodies:
Information Commissioner's Office (ICO): for data protection complaints — ico.org.uk
Competition and Markets Authority (CMA): for consumer protection and unfair terms complaints — gov.uk/cma
Citizens Advice: for consumer rights information — citizensadvice.org.ukLast Updated: September 2026 | © CorpDoc Ventures Limited | Version 1.0

CorpDoc Ventures Limited
Jurisdiction Schedule — AustraliaVersion: 1.0
Last Updated: September 2026
Applies to: Clients located in Australia
Master Agreement: CorpDoc Terms and Conditions Version 1.3IMPORTANT: This document is Schedule 4 to the CorpDoc Terms and Conditions Version 1.3. It prevails over those Terms to the extent of any inconsistency. This Schedule applies where the Client is located in Australia.Part 1 — Definitions
For the purposes of this Schedule and the Agreement as it applies to Australian Clients:
"ACL" means the Australian Consumer Law, being Schedule 2 to the Competition and Consumer Act 2010 (Cth).
"AFCA" means the Australian Financial Complaints Authority.
"APPs" means the Australian Privacy Principles set out in Schedule 1 to the Privacy Act 1988 (Cth).
"AU CPI" means the Consumer Price Index published by the Australian Bureau of Statistics.
"Consumer" has the meaning given in section 3 of the ACL: a person who acquires goods or services at a price not exceeding AUD $100,000 (or such other threshold as may be prescribed), or that are of a kind ordinarily acquired for personal, domestic, or household use. A sole trader may be a Consumer under the ACL.
"GST" means Goods and Services Tax as imposed under the A New Tax System (Goods and Services Tax) Act 1999 (Cth), currently at a rate of 10%.
"NDB Scheme" means the Notifiable Data Breaches scheme under Part IIIC of the Privacy Act 1988 (Cth).
"OAIC" means the Office of the Australian Information Commissioner.Part 2 — Governing Law and Dispute Resolution
2.1 Governing Law
This Schedule and the Agreement as it applies to Australian Clients shall be governed by and construed in accordance with the laws of the State of New South Wales, Australia, without regard to its conflict of laws principles.2.2 Jurisdiction
Subject to the dispute resolution process in clause 2.4, all disputes shall be submitted to the exclusive jurisdiction of the courts of New South Wales, Australia, and the federal courts of Australia exercising jurisdiction therein.2.3 Consumer Jurisdiction
Australian Consumers may have the right to bring proceedings in the courts of their State or Territory of residence under applicable consumer protection legislation, notwithstanding clause 2.2.2.4 Dispute Resolution
Carve-Outs
Either party may at any time commence court proceedings to: (a) recover overdue fees; (b) seek emergency or interim injunctive relief; or (c) enforce any restrictive-use, no-reliance, or indemnity provision.Good Faith Negotiation
For all other disputes, the parties shall first attempt to resolve the matter by good faith negotiation for not less than twenty-one (21) calendar days from written notice of the dispute.Mediation
If not resolved through negotiation, either party may refer the dispute to mediation administered by the Australian Commercial Disputes Centre (ACDC) or such other body as the parties agree in writing. Costs of mediation shall be shared equally unless otherwise directed by the mediator. If not resolved within thirty (30) calendar days of commencing mediation, either party may refer the matter to the courts in clause 2.2.Part 3 — Consumer Rights (Australian Consumer Law)
3.1 Consumer Guarantees
Nothing in the master Terms and Conditions excludes or limits any rights a Consumer may have under the ACL. In particular, the following statutory guarantees apply:
(a) Due care and skill. Services will be supplied with due care and skill (ACL s 60).
(b) Fitness for purpose. Where CorpDoc is made aware of a particular purpose for which the services are required, the services will be reasonably fit for that purpose (ACL s 61).
(c) Reasonable time. Where no time is agreed, services will be supplied within a reasonable time (ACL s 62).3.2 Remedies for Failure to Meet Consumer Guarantee
Minor failure: CorpDoc may choose to remedy the failure by resupplying the services or refunding an amount equal to the reduction in value of the services below the price paid.
Major failure: A Consumer is entitled to: (a) cancel the Agreement and receive a refund of any amounts paid for services not yet supplied; or (b) keep the Agreement and receive compensation for any reduction in value of the services below the price paid. A failure is a major failure where a reasonable Consumer would not have acquired the services had they been aware of the nature and extent of the failure.3.3 Unfair Contract Terms
The unfair contract terms provisions of the ACL (Part 2-3) apply to standard form consumer contracts and small business contracts. Any term of the master Terms and Conditions that constitutes an unfair contract term under the ACL is void to the extent of its unfairness. CorpDoc does not seek to rely on any such term.3.4 No Exclusion of ACL Rights
To the extent that any provision of the master Terms and Conditions purports to exclude, restrict, or modify the application of any provision of the ACL, or CorpDoc's liability for failure to comply with a consumer guarantee, such provision is of no effect. CorpDoc's liability for a failure to comply with a consumer guarantee in respect of services that are not ordinarily acquired for personal, domestic, or household use is limited to: (a) the resupply of the services; or (b) the payment of the cost of having the services resupplied.3.5 Cooling-Off Rights
There is no general statutory cooling-off period for professional services contracts entered into online under the Australian Consumer Law. Cooling-off rights under the ACL apply only to certain unsolicited consumer agreements (e.g. door-to-door sales) for a period of 10 business days (Australian Consumer Law, s 82). Where CorpDoc's services are supplied through an unsolicited consumer agreement as defined in Part 3-2 of the ACL, CorpDoc will honour the applicable 10-business-day cooling-off right. For all other online or distance agreements, ACL consumer guarantee remedies (including cancellation for major failure under s 267) apply in place of any cooling-off right.NOTE (AUSTRALIAN CONSUMERS): Our services come with guarantees that cannot be excluded under the Australian Consumer Law. For major failures with the service, you are entitled to cancel your service contract with us, and to a refund for the unused portion, or to compensation for its reduced value. You are also entitled to be compensated for any other reasonably foreseeable loss or damage. For minor failures with the service, we are entitled to choose between providing you with a free fix, or a replacement service of equal or greater value.Part 4 — Data Protection
4.1 Australian Privacy Principles
CorpDoc will handle personal data relating to Australian Clients in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). In particular:
APP 1 (Open and transparent management): CorpDoc will manage personal information in an open and transparent way, including by maintaining and making available a clearly expressed privacy policy.
APP 5 (Notification of collection): CorpDoc will take reasonable steps to notify Clients of the matters set out in APP 5 at or before the time of collection, or as soon as practicable thereafter.
APP 6 (Use and disclosure): CorpDoc will not use or disclose personal information for a purpose other than the primary purpose of collection except as permitted under the APPs.
APP 11 (Security of personal information): CorpDoc will take reasonable steps to protect personal information from misuse, interference, loss, and from unauthorised access, modification, or disclosure.4.2 Notifiable Data Breaches
Where CorpDoc becomes aware of a data breach that is likely to result in serious harm to one or more individuals whose personal information is involved, CorpDoc will, as required by the NDB Scheme: (a) assess the breach as soon as practicable; (b) notify the affected individuals and the OAIC as soon as practicable after becoming aware that a notifiable data breach has occurred; and (c) cooperate with the Client in any required remediation steps. Notification will be provided in the form required by Part IIIC of the Privacy Act 1988 (Cth).4.3 Access and Correction
Australian Clients (and individuals whose personal information CorpDoc holds) may request access to, or correction of, their personal information by contacting [email protected]. CorpDoc will respond within thirty (30) calendar days. Requests may be refused only on grounds permitted under the APPs, and CorpDoc will provide written reasons for any refusal.4.4 Complaints to OAIC
If a Client is not satisfied with CorpDoc's handling of a privacy complaint, the Client may lodge a complaint with the Office of the Australian Information Commissioner at oaic.gov.au.Part 5 — Goods and Services Tax
5.1 GST Treatment
Where CorpDoc Ventures Limited is registered for GST in Australia or is required to collect GST on its supplies to Australian Clients: (a) GST at the then-current rate will be added to taxable supplies and stated separately on each invoice; (b) all fees quoted are exclusive of GST unless stated otherwise; and (c) CorpDoc will issue valid tax invoices as required under the GST Act.5.2 Withholding and Other Taxes
Australian Clients are responsible for any withholding tax obligations that may arise under Australian law in connection with payments to CorpDoc. Where withholding is required, the gross-up obligation in the master Terms and Conditions applies. CorpDoc will provide documentation reasonably required to support any withholding tax claim.5.3 Renewal Price Cap — CPI Reference
The renewal price cap in the master Terms and Conditions shall be calculated by reference to the AU CPI (All Groups, weighted average of eight capital cities) published by the Australian Bureau of Statistics for the preceding twelve (12) months.Part 6 — Professional Services
6.1 Scope of Services
CorpDoc provides bookkeeping, payroll, tax compliance, and advisory services to Australian Clients through the relevant licensed entities within the CorpDoc group. Where a service is regulated in Australia, it is delivered by the CorpDoc entity registered or authorised for that purpose, including (where applicable) entities registered with the Tax Practitioners Board (TPB) as tax agents under the Tax Agent Services Act 2009 (Cth), or holding an Australian Financial Services Licence (AFSL) under the Corporations Act 2001 (Cth).6.2 Scope Limitations
CorpDoc does not provide services outside the licensed scope of the relevant delivering entity. In particular: (a) financial product advice within the meaning of the Corporations Act 2001 (Cth) is provided only through CorpDoc entities holding an AFSL; (b) tax agent services within the meaning of the Tax Agent Services Act 2009 (Cth) are provided only through CorpDoc entities registered with the TPB for that purpose; and (c) audit and assurance services are not provided by the CorpDoc group.Part 7 — Regulatory Contacts
Australian Clients who wish to escalate unresolved complaints may contact the following regulatory bodies:
Australian Competition and Consumer Commission (ACCC): for complaints regarding misleading conduct or unfair contract terms — accc.gov.au
Office of the Australian Information Commissioner (OAIC): for privacy complaints — oaic.gov.au
Australian Financial Complaints Authority (AFCA): for financial services complaints (where applicable) — afca.org.auLast Updated: September 2026 | © CorpDoc Ventures Limited | Version 1.0

CorpDoc Ventures Limited
Jurisdiction Schedule — New Zealand
Version: 1.0
Last Updated: September 2026
Applies to: Clients located in New Zealand (Part 2) and all Clients where no other Country Schedule applies (Part 1)
Master Agreement: CorpDoc Terms and Conditions Version 1.3IMPORTANT: This document is Schedule 3 to the CorpDoc Terms and Conditions Version 1.3. It prevails over those Terms to the extent of any inconsistency. Part 1 applies as the default governing framework for all Clients where no Country Schedule exists for their jurisdiction. Part 2 applies only where the Client is located in New Zealand.Part 1 — Default Provisions
Part 1 applies to all Clients where no Country Schedule has been issued for the Client's jurisdiction. These provisions establish the governing framework of last resort.1.1 Governing Law
These Terms and the Client's use of the Site and Services shall be governed by and construed in accordance with the laws of New Zealand, without regard to its conflict of laws principles.1.2 Jurisdiction
Subject to the dispute resolution process in 1.4, all disputes shall be submitted to the exclusive jurisdiction of the courts of New Zealand.1.3 Consumer Jurisdiction
Consumers may have the right to bring proceedings in the courts of their country or territory of residence under applicable mandatory consumer protection legislation, notwithstanding the governing law and jurisdiction provisions in 1.1 and 1.2.1.4 Dispute Resolution
Carve-Outs: Urgent and Debt Recovery Proceedings
Notwithstanding the dispute resolution process below, either party may at any time commence court proceedings to: (a) recover any overdue fees or other amounts due under the Agreement; (b) seek emergency or interim injunctive or other equitable relief to protect its intellectual property, confidential information, or other rights; or (c) enforce any restrictive-use, no-reliance, or indemnity provision of the Agreement.Good Faith Negotiation
For all other disputes, the parties shall first attempt to resolve the matter by good faith negotiation for a period of not less than twenty-one (21) calendar days from written notice of the dispute.Mediation
If the dispute is not resolved through negotiation, either party may refer it to mediation administered by the New Zealand Dispute Resolution Centre (NZDRC). Unless otherwise directed by the mediator, costs of mediation shall be shared equally. If not resolved within thirty (30) calendar days of commencing mediation, either party may refer the matter to the courts of New Zealand.1.5 Data Protection — Notifiable Privacy Breaches (Privacy Act 2020)
(a) Definition. A "notifiable privacy breach" means a privacy breach that it is reasonable to believe has caused, or is likely to cause, serious harm to an affected individual, as defined in sections 112–113 of the Privacy Act 2020.
(b) Obligation to notify. If CorpDoc becomes aware of a notifiable privacy breach involving Client personal information, CorpDoc will: (i) notify the Privacy Commissioner as soon as practicable (and in any event within 72 hours where reasonably possible), per section 114 of the Privacy Act 2020; and (ii) notify affected individuals as soon as practicable, per section 115, unless an exception in section 116 applies.
(c) Content of notice. Each notice will comply with section 117 and include: a description of the breach; the categories of personal information involved; steps CorpDoc has taken or will take in response; and steps affected individuals can take to mitigate harm.
(d) Processor cooperation. Where CorpDoc processes personal information on the Client's behalf, CorpDoc will promptly inform the Client of any eligible breach so the Client can meet its own obligations under the Privacy Act 2020.Part 2 — New Zealand Client Provisions
Part 2 applies only where the Client is located in New Zealand. These provisions supplement the master Terms and Conditions and Part 1 of this Schedule.2.1 Definitions
For the purposes of this Schedule and the Agreement as it applies to New Zealand Clients:
"Consumer" means a Client that acquires services otherwise than wholly or mainly in the course of a trade, business, or profession, as construed under the Consumer Guarantees Act 1993 (New Zealand). A sole trader may be a Consumer.
"CGA" means the Consumer Guarantees Act 1993 (New Zealand).
"FTA" means the Fair Trading Act 1986 (New Zealand).
"GST" means Goods and Services Tax as imposed under the Goods and Services Tax Act 1985 (New Zealand), currently at a rate of 15%.
"NZ CPI" means the New Zealand Consumers Price Index published by Statistics New Zealand.
"Privacy Commissioner" means the Privacy Commissioner appointed under the Privacy Act 2020 (New Zealand).2.2 Consumer Rights — Consumer Guarantees Act 1993
Nothing in the master Terms and Conditions excludes or limits any rights a Consumer may have under the Consumer Guarantees Act 1993 (New Zealand). In particular:
(a) Guarantee of acceptable quality. Services supplied by CorpDoc carry the guarantee that they will be carried out with reasonable care and skill, will be fit for any particular purpose made known to CorpDoc, and will be completed within a reasonable time where no time is specified.
(b) Remedy for failure. Where CorpDoc fails to comply with a guarantee under the CGA, a Consumer may require CorpDoc to remedy the failure within a reasonable time. If CorpDoc fails to remedy within a reasonable time, the Consumer may have the services remedied by a third party at CorpDoc's expense, obtain a reduction in price, or (where the failure is substantial) cancel the Agreement.
(c) Substantial failure. A failure is substantial if a reasonable Consumer, fully acquainted with the failure and its consequences, would not have entered into the Agreement.
(d) No contracting out. The provisions of the CGA cannot be excluded by agreement where the client is a Consumer. Any term of the Agreement that purports to exclude or limit CGA rights is of no effect to that extent.2.3 Fair Trading Act 1986
CorpDoc will not engage in conduct that is misleading or deceptive, or likely to mislead or deceive, in trade. The unfair contract terms provisions of the Fair Trading Act 1986 (New Zealand) apply to standard form consumer contracts and cannot be excluded. Any provision of the master Terms and Conditions that constitutes an unfair contract term under the FTA is unenforceable to the extent of its unfairness.2.4 Goods and Services Tax
Where CorpDoc Ventures Limited is registered for Goods and Services Tax (GST) in New Zealand, GST at the then-current rate will be added to fees charged to New Zealand Clients and stated separately on each invoice. The renewal price cap in the master Terms and Conditions shall be calculated by reference to the NZ CPI for the preceding twelve (12) months, as published by Statistics New Zealand.2.5 Electronic Signatures
In New Zealand, electronic signatures are governed by the Contract and Commercial Law Act 2017 (New Zealand) (CCLA 2017). An Agreement formed electronically, including by online checkout, click-through acceptance, or electronic signature, has the same legal effect as one signed in writing. CorpDoc may rely on any electronic acceptance as binding on the Client.2.6 Cooling-Off Rights
There is no general statutory cooling-off period for professional services contracts under New Zealand law. Consumer rights under the Consumer Guarantees Act 1993 (including the right to cancel for substantial failure) apply in place of any cooling-off right. Where a specific statutory cooling-off right applies to a particular service (for example, under the Credit Contracts and Consumer Finance Act 2003 for consumer credit), CorpDoc will honour that right and notify the Client accordingly.2.7 Dispute Resolution — New Zealand Clients
In addition to the dispute resolution process in Part 1, New Zealand Consumers may refer unresolved complaints to the following bodies where applicable:
Commerce Commission: for complaints regarding misleading conduct or unfair contract terms under the FTA — comcom.govt.nz
Privacy Commissioner: for complaints regarding handling of personal information under the Privacy Act 2020 — privacy.org.nzNOTE (NEW ZEALAND CLIENTS): These Terms do not exclude or limit any rights you may have under the Consumer Guarantees Act 1993, the Fair Trading Act 1986, or any other applicable New Zealand consumer protection legislation. CorpDoc does not exclude or limit any such mandatory statutory rights.Part 3 — Professional Services
6.1 Scope of Services
CorpDoc provides bookkeeping, payroll, tax compliance, and advisory services to New Zealand Clients through the relevant licensed entities within the CorpDoc group. Where a service is regulated in New Zealand, it is delivered by the CorpDoc entity registered or authorised for that purpose, including (where applicable) entities registered with Inland Revenue as tax agents under the Tax Administration Act 1994, or licensed as Financial Advice Providers under the Financial Markets Conduct Act 2013.6.2 Scope Limitations
CorpDoc does not provide services outside the licensed scope of the relevant delivering entity. In particular: (a) regulated financial advice within the meaning of the Financial Markets Conduct Act 2013 is provided only through CorpDoc entities licensed as Financial Advice Providers; (b) tax agent services are provided only through CorpDoc entities registered with Inland Revenue for that purpose; and (c) audit and assurance services are not provided by the CorpDoc group.Part 4 — Regulatory Contacts
New Zealand Clients who wish to escalate unresolved complaints may contact the following bodies:
Commerce Commission: for complaints regarding misleading conduct or unfair contract terms under the FTA — comcom.govt.nz
Privacy Commissioner: for complaints regarding handling of personal information under the Privacy Act 2020 — privacy.org.nz
Financial Markets Authority (FMA): for complaints regarding financial services conduct — fma.govt.nz
Inland Revenue (IRD): for tax-related matters — ird.govt.nzLast Updated: September 2026 | © CorpDoc Ventures Limited | Version 1.0

CorpDoc Ventures Limited
Data Processing AddendumVersion: 1.0
Last Updated: September 2026
Incorporated into: CorpDoc Terms and Conditions Version 1.3 (Section 18)IMPORTANT: This document is Schedule 7 to the CorpDoc Terms and Conditions Version 1.3. It forms part of the Agreement between CorpDoc Ventures Limited and its subsidiaries and affiliated companies (together, "CorpDoc") and the Client and is incorporated by reference under Section 18 of those Terms. In the event of any conflict between this Schedule and the master Terms and Conditions on matters relating to personal data processing, this Schedule prevails.HOW THIS DPA WORKS: This Data Processing Addendum (DPA) applies where CorpDoc (being CorpDoc Ventures Limited and its subsidiaries and affiliated companies) processes personal data on the Client's behalf as a data processor. The DPA body contains universal obligations. The applicable Jurisdiction Annex (A–D) is determined by the Client's location, consistent with the Country Schedule mechanism in the master Terms and Conditions. Where multiple jurisdictions apply, each relevant Annex applies.1. Definitions
In this DPA:
"Controller" means the Client, who determines the purposes and means of processing Personal Data.
"Data Breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, Personal Data.
"Data Protection Law" means all applicable laws and regulations relating to the processing of Personal Data and privacy, including without limitation those identified in the applicable Jurisdiction Annex.
"Data Subject" means an identified or identifiable natural person whose Personal Data is processed under this DPA.
"Personal Data" means any information relating to a Data Subject processed by CorpDoc on the Controller's behalf under the Agreement.
"Processing" means any operation or set of operations performed on Personal Data, including collection, recording, storage, adaptation, retrieval, use, disclosure, or deletion.
"Processor" means CorpDoc Ventures Limited and its subsidiaries and affiliated companies (together, "CorpDoc"), which processes Personal Data on behalf of the Controller.
"Sub-processor" means any third party engaged by CorpDoc to process Personal Data on behalf of the Controller.
"TOMs" means the technical and organisational security measures described in Annex 2 to this DPA.2. Subject Matter and Scope
2.1 Subject matter. CorpDoc processes Personal Data on behalf of the Controller solely for the purpose of delivering the Services under the Agreement, as further described in Annex 1 (Processing Details).
2.2 Duration. CorpDoc processes Personal Data for the duration of the Agreement and, thereafter, only for the period required by applicable law or as necessary to fulfil its obligations under this DPA.
2.3 Nature and purpose. The nature and purpose of processing, the types of Personal Data, and the categories of Data Subjects are set out in Annex 1.
2.4 Instructions. CorpDoc processes Personal Data only on documented instructions from the Controller, including as set out in the Agreement and this DPA, unless required to do otherwise by applicable law. Where CorpDoc is required by law to process Personal Data for a purpose other than the Controller's instructions, CorpDoc will notify the Controller before such processing unless prohibited by law.3. Processor Obligations
3.1 Confidentiality
CorpDoc ensures that all personnel authorised to process Personal Data are bound by obligations of confidentiality, whether by contract or professional duty, and receive appropriate data protection training.3.2 Security
CorpDoc implements and maintains the TOMs set out in Annex 2 to protect Personal Data against unauthorised or unlawful processing and against accidental loss, destruction, damage, alteration, or disclosure. CorpDoc regularly reviews and updates these measures.3.3 Sub-processors
(a) Authorisation. The Controller provides general written authorisation for CorpDoc to engage the Sub-processors listed in Annex 3. CorpDoc will notify the Controller of any intended addition or replacement of Sub-processors by updating Annex 3 and providing not less than fourteen (14) calendar days' prior written notice.
(b) Objection right. The Controller may object to a new or replacement Sub-processor on reasonable data protection grounds by written notice within fourteen (14) calendar days of notification. CorpDoc will work in good faith to resolve the objection. If the parties cannot agree, either party may terminate the affected Services on thirty (30) calendar days' notice without liability.
(c) Flow-down. CorpDoc imposes data protection obligations on each Sub-processor by written agreement that are no less protective than those in this DPA. CorpDoc remains fully liable to the Controller for the performance of each Sub-processor's obligations.3.4 Data Subject Rights
CorpDoc assists the Controller, by appropriate technical and organisational measures, in fulfilling the Controller's obligation to respond to requests from Data Subjects exercising their rights under applicable Data Protection Law. Where CorpDoc receives a request directly from a Data Subject, CorpDoc will promptly forward it to the Controller without responding directly (unless required by law to do so).3.5 Data Breach Notification
CorpDoc notifies the Controller without undue delay after becoming aware of a Data Breach affecting Personal Data processed under this DPA. Notification will include, to the extent then known: (a) the nature of the Data Breach, including categories and approximate number of Data Subjects and Personal Data records affected; (b) the name and contact details of CorpDoc's data protection contact; (c) the likely consequences of the breach; and (d) the measures taken or proposed to address the breach. CorpDoc will cooperate with the Controller and provide further information as it becomes available. Jurisdiction-specific notification timeframes are set out in the applicable Jurisdiction Annex.3.6 Data Protection Impact Assessments
Where required by applicable Data Protection Law, CorpDoc provides reasonable assistance to the Controller in carrying out data protection impact assessments (DPIAs) relating to the Services, and in any required prior consultations with a supervisory authority, taking into account the nature of the processing and the information available to CorpDoc.3.7 Audit Rights
CorpDoc makes available to the Controller all information reasonably necessary to demonstrate compliance with this DPA and, subject to: (a) reasonable prior written notice of not less than thirty (30) calendar days; (b) agreement on a reasonable scope and timing; and (c) the Controller bearing the costs of any audit it commissions; allows for and contributes to audits or inspections conducted by the Controller or an independent auditor mandated by the Controller. CorpDoc may satisfy audit obligations by providing a current third-party audit report (e.g., SOC 2 or ISO 27001 certification) in lieu of a direct audit.3.8 International Transfers
Where CorpDoc transfers Personal Data outside the jurisdiction in which it was collected, CorpDoc ensures that appropriate transfer mechanisms are in place as required by applicable Data Protection Law, including those identified in the applicable Jurisdiction Annex.3.9 Return and Deletion
On termination or expiry of the Agreement, CorpDoc, at the Controller's election, returns or deletes all Personal Data processed under this DPA (including copies held by Sub-processors), except to the extent that retention is required by applicable law or CorpDoc's professional obligations (including the minimum ten (10) year retention period for working papers under applicable accounting standards). CorpDoc provides written confirmation of deletion upon request.4. Controller Obligations
4.1 Lawfulness. The Controller warrants that it has a valid lawful basis for each category of Personal Data provided to CorpDoc and that CorpDoc's processing on the Controller's instructions will not cause CorpDoc to violate applicable Data Protection Law.
4.2 Accuracy. The Controller is responsible for the accuracy, quality, and legality of the Personal Data provided to CorpDoc.
4.3 Instructions. The Controller provides documented instructions in the Agreement and this DPA. Any additional or modified instructions must be given in writing to [email protected] and CorpDoc will confirm whether it can comply.
4.4 Notifications. The Controller promptly notifies CorpDoc of any Data Subject request, supervisory authority enquiry, or regulatory investigation relating to Personal Data processed by CorpDoc under this DPA.5. Liability
Each party's liability under this DPA is subject to the limitation of liability in the master Terms and Conditions. Nothing in this DPA limits liability that cannot be excluded under applicable Data Protection Law, including liability for regulatory fines assessed against a party for its own breach. Each party indemnifies the other against regulatory fines, penalties, and third-party claims arising from that party's own breach of applicable Data Protection Law.6. General Provisions
6.1 Order of precedence. In the event of any conflict between this DPA and the master Terms and Conditions, this DPA prevails in respect of data protection matters. In the event of any conflict between the DPA body and a Jurisdiction Annex, the Jurisdiction Annex prevails for the applicable jurisdiction.
6.2 Governing law. This DPA is governed by the same governing law as the Agreement, as determined by the applicable Country Schedule.
6.3 Entire agreement. This DPA, together with the Agreement and applicable Jurisdiction Annexes, constitutes the entire agreement between the parties in respect of the processing of Personal Data under the Agreement.
6.4 Contact. All data protection queries and requests should be directed to: [email protected]Annex 1 — Processing Details
To be completed at engagement commencement. A completed copy forms part of each Engagement Letter.Subject matter of processing
Professional services as described in the Agreement and applicable Statement of Work.
Duration of processing
For the term of the Agreement and thereafter as required by applicable law or professional retention obligations.
Nature of processing
Collection, storage, organisation, reconciliation, analysis, and reporting of financial and transactional data.
Purpose of processing
Delivery of bookkeeping and financial services to the Controller as set out in the Agreement.
Types of personal data
Names; contact details (email, address, phone); financial data (bank account details, transaction records, invoices, payroll data); identification numbers; signatures.
Categories of data subjects
The Controller's directors, employees, contractors, customers, and suppliers whose personal data appears in financial records provided to CorpDoc.
Special category data
None anticipated. Controller must notify CorpDoc before providing any special category data.Annex 2 — Technical and Organisational Security Measures
CorpDoc implements the following measures as a minimum standard, reviewed and updated at least annually:Access controls: Role-based access controls; multi-factor authentication for all systems holding Personal Data; principle of least privilege applied to all staff and Sub-processors; access rights reviewed quarterly.
Encryption: Personal Data encrypted in transit (TLS 1.2 or higher) and at rest (AES-256 or equivalent) on all systems under CorpDoc's control.
Pseudonymisation: Applied where possible and proportionate to the nature of processing.
Network security: Firewalls, intrusion detection, and network segmentation applied to systems holding Personal Data.
Backup and recovery: Regular encrypted backups with tested recovery procedures; recovery time objective not to exceed twenty-four (24) hours for critical systems.
Vulnerability management: Regular security patching and vulnerability scanning; critical patches applied within seventy-two (72) hours of release.
Staff training: Annual data protection and information security training for all personnel with access to Personal Data.
Incident response: Documented incident response plan covering detection, containment, assessment, notification, and remediation.
Sub-processor assessment: Security due diligence conducted on all Sub-processors before engagement; annual review of Sub-processor compliance.
Physical security: Personal Data is not stored on physical media except where required by professional obligations; physical access to any such media is restricted.Annex 3 — Authorised Sub-processors
The following Sub-processors are authorised as at the date of this DPA. CorpDoc will notify the Controller of any changes in accordance with clause 3.3.Sub-processor
Purpose and location
Xero Limited (NZ/AU/UK/US)
Cloud accounting platform — storage and processing of financial records. Privacy policy: xero.com/privacy
Intuit Inc. / QuickBooks (US)
Cloud accounting platform — storage and processing of financial records (where applicable). Privacy policy: intuit.com/privacy
Dext / Receipt Bank (UK/AU)
Document capture and data extraction for bookkeeping inputs. Privacy policy: dext.com/privacy
Microsoft 365 / Azure (US/EU)
Email, document storage, and collaboration tools. Privacy policy: privacy.microsoft.com
Google Workspace (US)
Email and document storage (where applicable). Privacy policy: policies.google.comAI PROCESSING TOOLS: Where CorpDoc uses AI processing tools in delivering the Services that are hosted within a third-party cloud environment, those tools are subject to the Sub-processor notification and authorisation process in clause 3.3. CorpDoc will provide at least fourteen (14) calendar days' written notice before adding or replacing any cloud-hosted AI Sub-processor, and the Controller may object on reasonable data protection grounds in accordance with clause 3.3(b). AI tools that are hosted within CorpDoc's own internal infrastructure are operated by CorpDoc itself and do not constitute Sub-processor engagements for the purposes of this DPA.Jurisdiction Annex A — New Zealand
This Annex applies where the Client is located in New Zealand, or where the NZ Schedule applies as the default governing framework.Applicable law: Privacy Act 2020 (New Zealand).
Supervisory authority: New Zealand Privacy Commissioner (privacy.org.nz).
CorpDoc's role: CorpDoc acts as an "agency" under the Privacy Act 2020 in respect of Personal Data it holds. Where processing is carried out on behalf of the Controller, CorpDoc acts as an agent of the Controller for the purposes of the Privacy Act 2020.
Information Privacy Principles: CorpDoc complies with the Information Privacy Principles (IPPs) under Schedule 1 of the Privacy Act 2020 in respect of Personal Data processed under this DPA.
Breach notification: Where a notifiable privacy breach occurs (one that is likely to cause serious harm), CorpDoc notifies the Controller as soon as practicable. The Controller and CorpDoc cooperate to determine notification obligations to the Privacy Commissioner and affected individuals under Part 6 of the Privacy Act 2020. CorpDoc assists the Controller in preparing any required notification to the Privacy Commissioner within seventy-two (72) hours of the breach assessment being completed.
Cross-border transfers: Where CorpDoc transfers Personal Data of NZ Clients outside New Zealand, CorpDoc takes reasonable steps to ensure the overseas recipient does not breach the IPPs in respect of that information, consistent with Information Privacy Principle 12 and the Privacy Act 2020.

Jurisdiction Annex B — Australia
This Annex applies where the Client is located in Australia.Applicable law: Privacy Act 1988 (Cth), Australian Privacy Principles (APPs), Notifiable Data Breaches (NDB) scheme (Part IIIC of the Privacy Act 1988).
Supervisory authority: Office of the Australian Information Commissioner (oaic.gov.au).
APP compliance: CorpDoc complies with the Australian Privacy Principles in respect of Personal Data of Australian Clients processed under this DPA, including APP 11 (security) and APP 6 (use and disclosure).
Cross-border transfers (APP 8): Before disclosing Personal Data to an overseas recipient, CorpDoc takes reasonable steps to ensure the recipient does not breach the APPs. Where CorpDoc relies on a contractual mechanism, it ensures the overseas recipient is bound by obligations equivalent to the APPs.
NDB scheme — breach notification: Where a Data Breach involving Australian Personal Data is likely to result in serious harm to one or more affected individuals, CorpDoc: (a) assesses the breach as soon as practicable and in any event within thirty (30) calendar days of becoming aware; (b) notifies the OAIC and affected individuals as required by Part IIIC of the Privacy Act 1988; and (c) assists the Controller in any required notification. CorpDoc notifies the Controller without undue delay upon becoming aware of a potential notifiable data breach.Jurisdiction Annex C — United Kingdom
This Annex applies where the Client is located in the United Kingdom. It satisfies the requirements of Article 28 UK GDPR for a written contract between Controller and Processor.Applicable law: UK General Data Protection Regulation (UK GDPR); Data Protection Act 2018 (DPA 2018).
Supervisory authority: Information Commissioner's Office (ico.org.uk).
The following terms apply in addition to the DPA body and are required by Article 28(3) UK GDPR:(a) Instructions only. CorpDoc processes Personal Data only on documented instructions from the Controller (Article 28(3)(a) UK GDPR), as set out in the DPA body and Annex 1.
(b) Confidentiality. CorpDoc ensures that persons authorised to process Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality (Article 28(3)(b)).
(c) Security. CorpDoc implements the measures referred to in Article 32 UK GDPR, as described in Annex 2 (Article 28(3)(c)).
(d) Sub-processors. CorpDoc does not engage a Sub-processor without the prior written authorisation of the Controller. Sub-processors are subject to the same data protection obligations as set out in this DPA (Article 28(2), (4)).
(e) Data subject rights. CorpDoc assists the Controller in responding to requests for exercising Data Subjects' rights under Chapter III UK GDPR (Article 28(3)(e)).
(f) Compliance assistance. CorpDoc assists the Controller in ensuring compliance with Articles 32–36 UK GDPR (security, breach notification, DPIAs, prior consultation), taking into account the nature of processing and information available to CorpDoc (Article 28(3)(f)).
(g) Deletion/return. CorpDoc deletes or returns all Personal Data on termination of the Agreement, and deletes existing copies, unless applicable law requires storage (Article 28(3)(g)).
(h) Audit. CorpDoc makes available all information necessary to demonstrate compliance with Article 28 and allows for and contributes to audits and inspections (Article 28(3)(h)).Breach notification (Article 33 UK GDPR): CorpDoc notifies the Controller without undue delay after becoming aware of a Personal Data Breach affecting UK Personal Data. The Controller is responsible for notifying the ICO within seventy-two (72) hours of becoming aware where the breach is likely to result in a risk to the rights and freedoms of individuals (Article 33(1)). CorpDoc provides all information reasonably required for the Controller's notification.International transfers: Where CorpDoc transfers UK Personal Data outside the United Kingdom, CorpDoc ensures that an appropriate transfer mechanism is in place as required by Chapter V UK GDPR and the DPA 2018, including UK Standard Contractual Clauses (IDTAs), adequacy regulations made under section 17A DPA 2018, or such other mechanism as may be approved by the UK Secretary of State.Records of processing (Article 30 UK GDPR): CorpDoc maintains records of processing activities carried out on behalf of the Controller, as required by Article 30(2) UK GDPR, and makes those records available to the ICO on request.Jurisdiction Annex D — United States
This Annex applies where the Client is located in the United States. It addresses federal and key state-level data protection requirements, including CCPA/CPRA service provider obligations.Applicable law: Federal Trade Commission Act (15 U.S.C. § 45); California Consumer Privacy Act / California Privacy Rights Act (CCPA/CPRA) (Cal. Civil Code § 1798.100 et seq.) for California residents; other applicable state privacy laws.
Supervisory authority: Federal Trade Commission (ftc.gov); California Privacy Protection Agency (cppa.ca.gov) for California residents; relevant state Attorney General for other states.CCPA/CPRA Service Provider Terms
Where CorpDoc processes Personal Data of California residents on behalf of the Controller, CorpDoc acts as a "Service Provider" within the meaning of the CCPA/CPRA and agrees that:
(a) Prohibited uses. CorpDoc does not: (i) sell or share Personal Data of California residents; (ii) retain, use, or disclose Personal Data for any purpose other than performing the Services specified in the Agreement and this DPA; (iii) retain, use, or disclose Personal Data outside the direct business relationship between CorpDoc and the Controller; or (iv) combine Personal Data received from or on behalf of the Controller with Personal Data received from or on behalf of another person or collected from CorpDoc's own interaction with consumers, except as permitted by CCPA/CPRA regulations.
(b) Certification. CorpDoc certifies that it understands and will comply with the restrictions in (a) above, consistent with CCPA/CPRA Section 1798.140.
(c) Sub-service providers. CorpDoc ensures that any Sub-processor processing Personal Data of California residents is bound by CCPA/CPRA service provider obligations no less protective than those in this Annex.
(d) Consumer rights. CorpDoc assists the Controller in responding to verifiable consumer requests under CCPA/CPRA (rights to know, delete, correct, opt-out of sale/sharing, and limit use of sensitive personal information). CorpDoc notifies the Controller within five (5) Business Days of receiving any consumer request relating to the Controller's Personal Data.
(e) Deletion. On termination of the Agreement, CorpDoc deletes all Personal Data of California residents (including copies held by Sub-processors), subject to retention obligations under applicable law and CorpDoc's professional obligations.Breach notification: In the event of a Data Breach affecting Personal Data of US residents, CorpDoc notifies the Controller without undue delay. The Controller is responsible for notifying affected individuals and state regulators in accordance with applicable state breach notification laws. CorpDoc provides all information reasonably required for such notifications and cooperates with the Controller in any regulatory investigation.Other state privacy laws: CorpDoc cooperates with the Controller in fulfilling obligations under other applicable state privacy laws (including VCDPA, CPA, CTDPA, TDPSA) to the extent those laws apply to processing carried out under this DPA.