Legal & Disclaimers — VeriFyve GCO

1. Scope of the platform

VeriFyve GCO (“GCO,” “we,” “us”) is a software-as-a-service platform for community banks, credit unions, and other financial institutions. GCO helps institutional customers manage policies, employee training, recurring controls, and consumer complaint intake in one system of record.

GCO is an administrative and record-keeping tool. It does not constitute legal, regulatory, examination, audit, tax, actuarial, or accounting advice, and it is not a substitute for the professional judgment of your compliance officer, internal auditor, counsel, or examiner. Institutional customers remain solely responsible for the adequacy of their policies, controls, training, complaint handling, and regulatory reporting.

2. Use is governed by your written agreement

Access to GCO is licensed to institutional customers under a separately executed Master Services Agreement, Order Form, or Data Processing Addendum (collectively, the “Agreement”). To the extent of any conflict between these disclaimers and the Agreement, the Agreement controls for the customer that signed it. If no Agreement is in place, use of GCO is subject to these terms and to any evaluation, pilot, or beta terms communicated at sign-up.

3. Authorized users; institution responsibility

Institutional customers are responsible for the acts and omissions of their authorized users (employees, contractors, board members, and other invited individuals), for provisioning and de-provisioning access promptly, for enforcing appropriate role-based permissions, and for ensuring that only individuals with a legitimate business need access confidential material (policies, controls, employee training records, complaint records, examination workpapers).

4. No warranty; “as is”

GCO is provided “as is” and “as available,” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, accuracy, completeness, or uninterrupted operation. Reminders, escalations, exportable reports, dashboards, and AI-generated summaries are advisory. Institutional customers are responsible for verifying content and for meeting all regulatory deadlines.

5. Limitation of liability

To the maximum extent permitted by law and subject to any different terms in the Agreement, GCO’s aggregate liability for any claim arising out of or related to the platform shall not exceed the fees paid by the institutional customer to GCO for the twelve (12) months preceding the claim. GCO shall not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, data, or goodwill.

6. Not a regulator; not an examiner

VeriFyve GCO is not a bank regulator, examiner, law-enforcement agency, or government service. References in the platform to the Federal Deposit Insurance Corporation (FDIC), Office of the Comptroller of the Currency (OCC), Board of Governors of the Federal Reserve System (FRB), National Credit Union Administration (NCUA), Consumer Financial Protection Bureau (CFPB), Financial Crimes Enforcement Network (FinCEN), Federal Financial Institutions Examination Council (FFIEC), state banking or credit union departments, or private standards bodies (NIST, PCI SSC, ISO) are for citation and educational purposes only and do not imply affiliation, endorsement, sponsorship, or accreditation.

7. Trademarks & non-affiliation

All third-party trademarks, service marks, trade names, and logos are the property of their respective owners and are used for identification, education, or comparison under nominative fair use. VeriFyve GCO is an independent product and is not affiliated with, endorsed by, sponsored by, or connected to any regulator, agency, or private mark holder unless explicitly stated in writing.

8. AI-generated content

Certain GCO features use large language models and other AI systems to summarize policies, draft training material, categorize complaints, or suggest control language. Outputs may be incomplete or incorrect and must be reviewed and approved by a qualified human before being adopted as policy, filed with a regulator, or communicated to a consumer.

9. Data handling; examiner access

GCO stores institution-uploaded records (policies, training attestations, control evidence, complaint files, audit trails) to provide the service. Access, retention, deletion, sub-processors, encryption, and examiner-access accommodations are described in the VeriFyve GCO Privacy Policy and, where applicable, in the customer’s Data Processing Addendum.

10. Acceptable use

Institutional customers and their authorized users agree not to (a) upload unlawful content, malware, or personal data of consumers without a lawful basis; (b) reverse-engineer, scrape at scale, or probe the platform’s security outside of a coordinated program; (c) use GCO to defame, harass, or discriminate against employees, customers, or complainants; or (d) share credentials across individuals. Violations may result in suspension pending investigation.

11. Indemnification

Except as otherwise provided in the Agreement, the institutional customer agrees to indemnify and hold harmless VeriFyve GCO from third-party claims arising out of (a) content the customer or its users upload; (b) the customer’s regulatory decisions, filings, or communications; or (c) the customer’s violation of these terms or applicable law.

12. Governing law

Unless the Agreement provides otherwise, these terms are governed by the laws of the State of Delaware, U.S.A., without regard to its conflict-of-laws principles. Disputes shall be resolved in the state or federal courts located in Delaware.

13. Changes

We may update these disclaimers from time to time. Material changes will be communicated to institutional administrators through the platform or by email. Continued use after the effective date constitutes acceptance.

14. Contact

Legal notices and DMCA/trademark inquiries: legal@verifyvegco.com. Sales and pilots: sales@verifyvegco.com.