Legal
Terms of Service
Last updated: 17 February 2026
Acceptance of Terms
By accessing or using CMP, the customer organization accepts these Terms of Service as a binding agreement with Forged. If a user accesses the service on behalf of an organization, that user confirms they are authorized to bind the organization. If the customer does not agree to these terms, the service must not be used. These terms apply together with any applicable order form, subscription agreement, and referenced policies.
Service Description
CMP by Forged is a cloud management platform for Azure cost analysis, waste detection, license optimization, and resource governance. The service is delivered through delegated Azure Lighthouse access and is designed for read-only analysis and reporting. CMP does not execute changes in customer Azure resources, deployments, or configurations. The primary service domain is cmp.forged.no and related service subdomains operated by Forged.
Account and Access
Access to CMP is provided to authorized users in the customer's Microsoft Entra ID tenant. The customer is responsible for assigning and maintaining user access rights, roles, and internal approval processes. Authentication is performed through Microsoft Entra ID, and Forged does not store customer passwords. The customer administrator must promptly revoke access for personnel who no longer require access, including employees and contractors leaving the organization.
Customer Obligations
The customer shall ensure that only authorized users access the service and that use remains within agreed business purposes. The customer shall maintain accurate and current organizational information, including billing and legal contact details. The customer shall not reverse-engineer, decompile, disassemble, or otherwise attempt to derive source code or underlying methods of CMP. The customer shall not use the service in violation of applicable law and shall not resell, sublicense, or otherwise provide third-party access without prior written consent from Forged.
Data Processing
Processing of personal data is governed by the Privacy Policy and, where applicable, a separate Data Processing Agreement (DPA). In matters of personal data protection, the DPA takes precedence over these terms to the extent of conflict. For services covered by data protection law, CMP acts as data processor and the customer acts as data controller. Each party remains responsible for complying with its own legal obligations under applicable privacy and security law.
Read-Only Access
CMP operates with read-only delegated access to customer Azure environments through Azure Lighthouse. Forged does not create, modify, or delete customer Azure resources as part of normal service operation. Delegation permissions are controlled by the customer at all times through Azure portal and tenant governance controls. The customer may revoke delegation access at any time, with the understanding that service functionality may be reduced or unavailable after revocation.
Intellectual Property
All rights, title, and interest in CMP by Forged, including software, documentation, product design, and trademarks, remain the property of Forged and its licensors. The customer receives a limited, non-exclusive, non-transferable right to use the service during an active subscription term. No ownership rights are transferred to the customer by use of the service or payment of fees. Customer data and customer-provided materials remain the property of the customer at all times.
Service Availability
Forged targets high service availability and operational continuity but does not guarantee uninterrupted or error-free service. Planned maintenance windows and material service-impacting work will be communicated in reasonable advance when practical. Forged is not responsible for downtime or degraded performance caused by customer systems, third-party providers, internet backbone failures, or force majeure events. Service performance may also be affected by Microsoft Azure platform dependencies outside Forged's direct control.
Fees and Payment
Fees are set out in the applicable order form, subscription agreement, or other written commercial agreement between the parties. Unless expressly stated otherwise, all fees are exclusive of value added tax (MVA) and other applicable taxes. Late payment may incur statutory interest in accordance with forsinkelsesrenteloven. Forged may adjust fees with at least 30 days written notice to the customer's registered billing or contract contact.
Limitation of Liability
To the maximum extent permitted by Norwegian law, Forged's total aggregate liability under these terms is limited to fees paid by the customer in the 12 months preceding the event giving rise to the claim. Forged is not liable for indirect, incidental, consequential, or special damages, including loss of profit, loss of revenue, or loss of data. The limitations in this section do not apply to liability resulting from gross negligence or wilful misconduct. Nothing in these terms limits liability that cannot lawfully be limited under mandatory Norwegian law, including principles under avtaleloven section 36.
Term and Termination
The subscription term is defined in the applicable order form or subscription agreement. Either party may terminate the agreement with 30 days written notice, unless otherwise agreed in writing. Upon termination, customer data will be made available for export for 30 days, after which it will be permanently deleted in line with retention controls and legal obligations. Forged may suspend or terminate access immediately in case of material breach, unlawful use, or non-payment.
Confidentiality
Each party shall treat confidential information received from the other party with reasonable care and at least the same degree of care used for its own confidential information of similar importance. Confidential information may only be used to perform rights and obligations under these terms and may not be disclosed to third parties except to personnel or subprocessors with a legitimate need to know and equivalent confidentiality duties. This confidentiality obligation survives termination for 3 years. Mandatory legal disclosure obligations remain applicable, provided lawful notice is given where permitted.
Changes to Terms
Forged may update these terms with at least 30 days written notice to the customer's registered contract contact. Updates may reflect legal, regulatory, security, or service changes and will include an effective date. Continued use of CMP after the effective date constitutes acceptance of the updated terms. If the customer does not accept the update, the customer may terminate the subscription before the effective date.
Governing Law and Disputes
These terms are governed by Norwegian law. Any dispute, controversy, or claim arising out of or in connection with these terms shall be subject to the exclusive venue agreed by the parties as Oslo tingrett. Mandatory rules on venue and non-waivable statutory rights under Norwegian law remain unaffected where applicable.
Contact
For questions about these terms, contact support@forged.no. Contracting entity: Forged, [Org.nr. pending registration], [Registered address pending]. Corporate registration details and registered address will be updated before onboarding of paying customers.