Terms, privacy and
content disclaimer.

Terms of Service

1. Acceptance

By creating an account or using GRC Pro Lab© ("the Platform"), you agree to be bound by these Terms. If you do not agree, do not use the Platform.

2. Description of Service

GRC Pro Lab is an online training platform providing scenario-based learning content, audit simulations, and professional development resources for governance, risk, and compliance practitioners. Access is provided via subscription (Monthly or Annual).

3. Eligibility

You must be at least 18 years old to create an account. By registering, you confirm that the information you provide is accurate and that you are authorised to enter into this agreement.

4. Account Responsibilities

• You are responsible for maintaining the confidentiality of your login credentials.
• You must not share your account with others or allow multiple users to access a single account simultaneously.
• You must notify us immediately at info@grcprolab.com if you suspect unauthorised access to your account.

5. Subscriptions & Payments

Paid plans are billed via Stripe (global) or Paystack (Africa region). Monthly and Annual plans are non-renewing: your access runs for the duration of your billing period and then expires automatically. You will not be charged again unless you choose to renew. You agree to the charge shown at checkout before your plan activates.

All prices are displayed inclusive of applicable taxes where required. GRC Pro Lab reserves the right to update pricing with 30 days' notice.

6. Refund Policy

Due to the digital nature of the Platform, all purchases are final. Refunds are considered on a case-by-case basis for technical failures attributable to GRC Pro Lab. To request a review, contact us within 7 days of purchase.

7. Intellectual Property

All content on the Platform: including course materials, scenario datasets, audit simulations, finding templates, and certificates: is the intellectual property of GRC Pro Lab©. You may not reproduce, redistribute, or commercialise any content without prior written consent.

8. Acceptable Use

You agree not to:

• Attempt to reverse-engineer, scrape, or extract Platform content at scale
• Use the Platform for any unlawful purpose
• Impersonate another user or misrepresent your identity
• Interfere with the security or integrity of the Platform

9. Termination

We reserve the right to suspend or terminate accounts that violate these Terms. Upon termination, access to the Platform and associated content is revoked immediately.

10. Limitation of Liability

GRC Pro Lab provides educational content for training purposes only. Nothing on the Platform constitutes professional legal, compliance, or audit advice. To the maximum extent permitted by applicable law, GRC Pro Lab shall not be liable for indirect, incidental, or consequential damages arising from use of the Platform.

11. Governing Law

These Terms are governed by the laws of the Republic of Ireland. Any disputes shall be subject to the exclusive jurisdiction of the Irish courts.

12. Changes to Terms

We may update these Terms from time to time. Continued use of the Platform after changes are posted constitutes acceptance of the updated Terms. We will notify active users of material changes via email.

13. Contact

For questions about these Terms, contact us at info@grcprolab.com.

Privacy Policy

1. Who We Are

GRC Pro Lab ("we", "us", "our") operates the training platform at grcprolab.com. We are committed to protecting your personal data and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

2. Data We Collect

• Account data: name, username, email address, hashed password
• Payment data: billing details processed securely by Stripe or Paystack: we do not store card numbers
• Usage data: progress tracking, sections completed, scores, session timestamps
• Technical data: IP address, browser type, device type (collected automatically)

3. How We Use Your Data

• To provide and maintain your account and access to the Platform
• To process payments and manage your subscription
• To send account-related communications (verification codes, receipts, important notices)
• To track and display your learning progress and leaderboard position
• To improve Platform content and performance

4. Legal Basis for Processing

We process your data on the following legal bases: (a) performance of a contract: to deliver the service you signed up for; (b) legitimate interests: to operate, secure, and improve the Platform; (c) legal obligation: where required by applicable law.

5. Data Storage & Security

Your data is stored securely using Supabase (hosted on AWS infrastructure in the EU). We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, and session token authentication. We do not sell your data to third parties.

6. Third-Party Services

• Stripe / Paystack: payment processing (subject to their own Privacy Policies)
• Supabase: database and authentication infrastructure
• Resend: transactional email delivery
• Vercel: serverless hosting and deployment
• Google: optional sign-in with a Google account, where we receive your name and email address
• ipapi.co: approximate country lookup from your IP address, used to show the correct regional price

7. Your Rights (GDPR)

If you are in the EEA or UK, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Object to or restrict certain processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, contact us at info@grcprolab.com.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

9. Cookies

GRC Pro Lab uses one strictly necessary session cookie, together with your browser's local storage, to keep you signed in. We do not use third-party tracking cookies or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Platform.

11. Contact

For privacy-related queries, contact us at info@grcprolab.com.

Content Disclaimer & Fictitious Data Notice

1. Purpose of This Disclaimer

GRC Pro Lab is a professional training platform designed to simulate real-world audit and compliance environments for educational purposes. This disclaimer clarifies the nature of all content, data and scenarios available on the platform, and protects both users and third parties from any misunderstanding regarding the origin or authenticity of such content.

2. Nature of All Platform Content

2.1 Fictitious Companies and Organisations
All company names appearing on GRC Pro Lab: including but not limited to Meridian Financial Services Inc., HealthBridge Corp., Coastal BCP Ltd., NexaBank, GPL and all other named entities: are entirely fictional. These names have been created by GRC Pro Lab for training simulation purposes only and bear no connection to any real company or organisation.

2.2 Fictitious Evidence Records and Data
The 800+ evidence records, policy documents, audit workpapers, risk registers, control matrices, exception logs and all other datasets available on GRC Pro Lab are synthetically generated or creatively constructed by our team for instructional purposes. No actual client data or confidential business information has been used at any time.

2.3 Fictitious Individuals
Any individual names, employee records, user accounts or personnel data appearing within training scenarios are entirely fictitious. They do not correspond to real individuals, living or deceased.

2.4 Fictitious Financial Data
All financial figures, transaction records, budgets, revenue data, account balances and financial statements used in training scenarios are fabricated for educational illustration only.

3. Use of the Word "Real" in Marketing Materials

GRC Pro Lab uses the term "real" in its marketing communications solely to describe the nature and structure of its training methodology, not the origin of any underlying data. "Real audit scenarios" means scenarios structured to mirror actual audit engagements in format, process, and complexity. In no instance does "real" refer to actual data sourced from any client, employer, organisation or third party.

4. No Confidential Information

GRC Pro Lab affirms that: (a) no confidential information obtained through professional engagements has been used in the development of any platform content; (b) no client data, internal documents, or proprietary methodologies belonging to any past or present employer or client has been reproduced or adapted; (c) all training content has been independently created by GRC Pro Lab for the sole purpose of professional education and skills development.

5. Intellectual Property

All content on GRC Pro Lab: including scenarios, evidence records, policy documents, finding templates, AI features and course materials: is the original intellectual property of GRC Pro Lab© and is protected under applicable copyright law. Users may not reproduce, distribute, sell or adapt any platform content without the prior written consent of GRC Pro Lab.

6. Framework and Regulatory References

GRC Pro Lab references internationally recognised frameworks and regulatory standards including ISO 27001, SOX, NDPA, CBN Guidelines, ECOWAS directives, COBIT and others. These references are made for educational purposes only, under fair use principles, and do not imply endorsement by or affiliation with the respective standards bodies or regulatory authorities.

7. Limitation of Liability

GRC Pro Lab, its founders, directors, employees and affiliates shall not be held liable for any claim, loss or damage arising from: (a) any perceived similarity between platform content and real companies, organisations or individuals; (b) any reliance placed on platform content for actual audit, legal, compliance or business decisions; (c) any misinterpretation of the term "real" as used in GRC Pro Lab's marketing materials.

8. Contact

For questions regarding this disclaimer, contact us at info@grcprolab.com · grcprolab.com

GRC Pro Lab©: We Build Practitioners  ·  © 2026 GRC Pro Lab. All rights reserved.