This describes how the platform works today. It will be finalised with legal counsel, including obligations under Ghana's Data Protection Act, 2012 (Act 843), before the platform opens to customers. Last updated 24 October 2026.
In short: your organisation owns its audit work and can take it with it at any time; you pay for the plan you choose, in cedis; use the platform fairly; and remember it supports your professional judgement rather than replacing it.
1. This agreement
These terms are an agreement between you and Ebanta Africa (Accra, Ghana), which provides Ebanta Comply. [Registered name, company number and registered office to be added once registration is complete.] By creating an account or using the platform, you accept them.
If you use the platform for an organisation, such as an audit firm or a regulated institution, you confirm you're allowed to accept these terms for it, and "you" includes that organisation. A signed order form or Enterprise agreement takes priority over these terms where they differ.
2. What Ebanta Comply is, and isn't
Ebanta Comply is a workspace for running compliance audits against the Bank of Ghana Cyber and Information Security Directive 2026: scoping, assessment, evidence requests, review, findings and reports.
It's an independent product, not affiliated with or endorsed by the Bank of Ghana.
Requirement mappings, tiers and suggested evidence are indicative. Auditors and institutions remain responsible for their own professional judgement, conclusions and regulatory submissions.
It doesn't provide legal advice.
3. Accounts and access
Give accurate details, keep your sign-in private, and use two-factor sign-in where your organisation requires it.
Organisation owners and admins decide who joins and what role each person has, and are responsible for their members' use of the platform.
Accounts are for individuals; don't share one between people.
4. Trial, plans and payment
New organisations start with a 14-day free trial. No payment details are needed for it.
Prices are in Ghana cedis and exclude VAT and levies, which are added as the law requires. Current prices are on the pricing page.
Institutions subscribe yearly, paid upfront or quarterly. Audit firms pay per engagement. Payment is by invoice or through Paystack.
If a trial ends or a payment isn't made, your work stays safe and can still be viewed and exported, but new work can't be added until a plan is active.
Fees already paid aren't refundable, except where the law requires or we agree otherwise in writing. [Refund terms to be confirmed before launch.]
We'll give at least 30 days' notice of a price change, and it applies from your next renewal. Billing questions: billing@ebantaafrica.com.
5. Your content
Everything your organisation puts into the platform, including assessments, evidence, comments, findings and reports, belongs to your organisation. You allow us to store, process and back it up only to provide the service to you.
Only upload content you're allowed to share, and only the personal data the audit needs.
We handle personal data in your content as your data processor, as set out in our privacy notice. Enterprise customers can sign a data processing agreement with us.
You can export your organisation's data at any time, and delete it.
6. Acceptable use
Don't use the platform to:
break the law, or upload malware or content you have no right to share;
try to reach another organisation's data, get around security or plan limits, or disrupt the service;
copy or resell the platform, or access it by automated means except through features we provide.
If you find a security weakness, please report it privately to security@ebantaafrica.com and give us time to fix it. We won't take action against good-faith research that respects other customers' data.
7. Availability and security
We aim to keep the platform available at all times, monitor it around the clock and back it up daily, but we can't promise it will never be interrupted. We'll try to give notice of planned maintenance.
We protect your data with the measures on our Security page and will tell you without undue delay if a breach affects it. We may improve or change features; if we remove something important you rely on, we'll tell you first.
8. Ending the agreement
You can cancel at any time. Your plan stays active to the end of the period you've paid for.
We may suspend or close an account that seriously breaks these terms, or after unpaid invoices and a written reminder. Where we can, we'll warn you first.
After a subscription ends, your data stays available to export for 90 days, then it's deleted. Backups are deleted 30 days after that.
9. Liability
Apart from the commitments in these terms, the platform is provided as it is. As far as the law allows, we aren't liable for indirect losses, such as lost profits or regulatory penalties arising from audit conclusions, and our total liability in any 12 months is limited to the fees you paid us in that period. [Liability cap to be confirmed with counsel.]
Nothing in these terms limits liability that can't be limited under Ghanaian law, such as for fraud.
10. Changes, law and contact
We'll post changes to these terms here with a new date, and email account holders at least 30 days before a change that matters takes effect.
These terms are governed by the laws of Ghana. We'll first try to resolve any disagreement in good faith; if that fails, the courts of Ghana decide.