# Legal disclaimer

> What Checkbox's checks, findings, plans, certificates and generated text are — and are not — and how the legal catalog is maintained.

**Checkbox is compliance software, not a law firm.** Checks, findings, plans, fixes, generated disclosure and
email text, certificates and these docs are automated assessments and general information. They are not legal advice,
they do not create an attorney-client relationship, and passing them does not guarantee that your subscription program
complies with the law. Have counsel review your terms and flows.

## Who is responsible {#responsibility}

You run your subscription business, and you remain solely responsible for complying with the law. Checkbox is a tool:
it does not take on or share legal liability for your subscriptions, checkout, emails, consents or cancellation
flow. Using Checkbox, passing its checks, holding a consent receipt or a monitoring certificate does not make a program
compliant or protect it from lawsuits. The [Terms of Service](https://checkbox.site/terms) control.

## The legal catalog {#catalog}

Every verdict traces to a requirement in Checkbox's legal catalog: the jurisdiction, the citation, a link to the source,
the effective date and the conditions under which it applies. Rules drafted from the statute text and updated as new statutes come into effect. Automated checks, not legal advice.
Every rule cites its source, so you or your lawyer can check it. The catalog is versioned
(`catalog_version`) and hashed (`catalog_hash`) on every result, so any verdict can be reproduced and traced to the
exact text it applied. Laws researched but deliberately not evaluated are listed with the reason on
[Requirements and jurisdictions](https://checkbox.site/docs/concepts/requirements#laws).

## What Checkbox cannot see {#limits}

- Facts a machine cannot observe — such as the channel a New York subscriber chose for notices, or whether a price
  increase was consented to — are asked of a human. Their answers are recorded as attestations, not observations.
- "Clear and conspicuous" is partly a judgment. Checkbox measures size, contrast, placement and setting-off with
  documented thresholds, and leaves cases it cannot measure (for example Stripe-hosted pages) as `needs_review`.
- Checks run on what Checkbox observes: pages it can reach, emails it receives, settings it can read. A check never
  passes for lack of evidence.

## Certificates {#certificates}

Monitoring certificates state what was monitored and when. They are not a legal opinion and do not guarantee
compliance with any law.

## Terms {#terms}

Use of Checkbox is governed by the [Terms of Service](https://checkbox.site/terms) and the [Privacy Policy](https://checkbox.site/privacy). Subprocessors,
retention, incident response and responsible disclosure are on the [Trust center](https://checkbox.site/trust); a Data Processing Addendum
is at [/dpa](https://checkbox.site/dpa).