Built for B2B adoption
This framework supplements the public Terms of Service for organisation customers. A signed order form, enterprise agreement or procurement contract may add customer-specific pricing, service levels, retention rules, implementation scope or security schedules.
1. Customer responsibilities
- Maintain accurate organisation and site details.
- Authorise only appropriate staff and assign least-privilege roles.
- Remove or suspend staff access promptly when roles change.
- Use GateCode in accordance with safeguarding, release, access-control and sector procedures applicable to the customer.
- Ensure a lawful basis and appropriate transparency for personal data the customer controls.
2. GateCode responsibilities
- Operate the hosted GateCode service and core temporary-authorisation workflow.
- Apply security controls designed to protect customer and account data.
- Maintain organisation-scoped access and auditable administrative controls.
- Provide retention, privacy, incident and processor documentation.
- Provide support under the published support framework or any agreed enterprise SLA.
3. Authorised users and roles
Organisation access may include Owner, Admin, Staff and View-only roles, plus enterprise or multi-site administration where enabled. The customer controls which people receive these roles and remains responsible for their authorised use of the service.
4. Operational verification
GateCode provides the live technical authorisation state associated with the code and receiving organisation. The customer remains responsible for the real-world handover decision and any additional ID, safeguarding, site-security or release process its policies require.
5. Data protection
Where GateCode processes personal data on the customer's behalf, the Data Processing Addendum applies. The customer is responsible for controller decisions such as the purpose of processing and lawful basis, while GateCode implements the platform's technical and organisational measures and agreed processor duties.
6. Security and incidents
Customers must notify GateCode promptly of suspected compromised accounts or misuse. GateCode maintains an Incident Response Framework and may take protective action such as session revocation, access suspension or platform controls when necessary to protect customers and the service.
7. Service levels and support
The public Support Framework describes standard priorities and response targets. Enterprise customers may agree enhanced service levels, named contacts, coverage windows and escalation procedures in their order or service agreement.
8. Records, reporting and retention
GateCode provides operational histories and reporting features appropriate to enabled modules. Detailed temporary-authorisation data is subject to the Data Retention Standard, while aggregate reporting can continue after personal operational detail is minimised.
9. Commercial terms
Pricing, billing cycle, plan entitlements, implementation services and any agreed usage limits are set out before purchase in the applicable order, checkout or enterprise agreement. Where a customer-specific contract conflicts with this public framework, the signed customer-specific terms take priority for that conflict.
10. Procurement contact
Procurement, legal and data-protection enquiries may be sent to support@gatecode.co.uk or support@gatecode.co.uk.