Last updated: 18 October 2026
The agreement
Enterprise subscriptions use the Common Paper Cloud Service Agreement Standard Terms, version 2.1 (CC BY 4.0) as the master agreement. We do not use a separate bespoke MSA.
What makes up a signed agreement
- The signed order form (the Cover Page: plan, term, systems, fees and key terms).
- The Common Paper Cloud Service Agreement Standard Terms, version 2.1.
- The Data Processing Agreement and the security page as the Security Policy.
If documents conflict, the order form wins, then the DPA, then the Standard Terms.
What we supply
A hosted software subscription: release gates, evidence records and signed evidence packs, with onboarding assistance. Outputs are evidence and readiness aids. Devernance is not legal advice, not a notified body, and does not certify compliance; the customer decides whether a system ships.
Self-serve plans
Free, Team and Business plans are covered by the Terms of Service, which use the same Standard Terms by reference.