Terms of Service

These Terms govern use of Cross by the organisation named in the workspace, order, or invoice and by its authorised users. “Cross”, “we”, and “us” mean the Cross contracting entity identified in that record. “Customer” means the organisation buying or using the service.

The person accepting these Terms confirms that they are at least 18 and authorised to bind the Customer. If they do not have that authority, they must not activate a plan or use a company workspace. These Terms, the selected plan, any order form, the Customer Data Processing Agreement, and any separately signed agreement form the contract between Cross and the Customer.

Cross provides software for organising sponsor-licence information, workforce records, Right to Work evidence, attendance, reminders, document review, and change-reporting workflows. Features depend on the selected plan and may change as the service develops.

Cross is not the Sponsor Management System and does not automatically submit information to the Home Office. The Customer remains responsible for sponsor duties, employment decisions, statutory checks, deadlines, and government submissions.

A Managed plan allows an eligible assigned legal advisor to review information in the Customer’s workspace and provide structured responses while the subscription and assignment are active. Assignment does not transfer the Customer’s legal obligations to Cross or the advisor.

The Managed subscription does not by itself create a solicitor-client relationship. Legal services are governed by a separate Client Care Letter between the Customer and the assigned advisor or regulated legal-services entity. That letter sets the scope, fees, conflicts process, professional duties, complaints route, confidentiality, termination, and file-retention terms for the legal work. It takes priority over these Terms for those services. Cross does not promise a legal outcome, government acceptance, automatic filing, or a fixed response time unless the Client Care Letter expressly says otherwise.

The Customer must provide accurate information, protect login credentials, assign the minimum appropriate access, and promptly remove anyone who should no longer have access. Accounts may not be shared between people.

Owners and Admins can make material workspace and subscription changes. The Customer is responsible for actions taken through its accounts unless those actions result from Cross failing to apply reasonable security controls.

The Customer controls the information it enters or uploads and is responsible for its lawfulness, accuracy, relevance, and quality. It must give appropriate privacy information to employees and other affected people and have a lawful basis for using their data.

The Customer must not upload unnecessary medical records, criminal-offence information, passwords, payment-card data, or unrelated sensitive material. It grants Cross the limited rights needed to host, secure, back up, display, transmit, and otherwise process Customer data to provide the service and meet applicable legal obligations.

Users must not:

• access a workspace, employee record, document, or advisor area without permission;
• upload malicious, unlawful, misleading, infringing, or unnecessary sensitive material;
• share credentials or bypass security, access, rate-limit, or billing controls;
• probe, scan, or disrupt Cross without written authorisation;
• use Cross to harass, discriminate, or make unlawful employment decisions; or
• resell, copy, reverse engineer, or misuse the service except where law permits.

Plan price, billing interval, and included features are shown before Checkout. Displayed prices include VAT unless we clearly state otherwise. Stripe processes payment, creates subscription invoices, and calculates and itemises applicable tax using the billing and tax information supplied by the Customer.

Subscriptions renew automatically for the selected monthly or annual period until cancelled. An upgrade or a monthly-to-annual change may take effect immediately and may include a displayed prorated charge. A downgrade or annual-to-monthly change normally takes effect at the end of the current paid period.

The Customer must keep its billing details and payment method current. Our Cancellation and Refund Policy explains cancellation, service access after cancellation, and when a refund may be available.

If payment fails or becomes overdue, we may retry collection and provide a limited grace period. We may then make the workspace read-only, restrict plan-specific features, or suspend access until payment is resolved. Restrictions do not remove amounts already due or records that must be retained.

A chargeback is a dispute raised through the Customer’s bank or payment provider and is separate from a refund request made to Cross. Customers should contact Cross promptly if they believe a charge is incorrect so it can be investigated, but nothing in these Terms prevents a Customer from exercising a right available through its bank, card scheme, or applicable law.

Cross and Stripe may provide the bank or payment provider with relevant subscription, acceptance, invoice, usage, communication, and refund records when responding to a dispute. While a payment dispute is unresolved, Cross may restrict paid access where reasonable and lawful. A chargeback does not cancel the subscription automatically, remove an otherwise valid amount due, or permit Cross to recover the same amount twice.

Each party must protect the other party’s non-public information and use it only for the contract, except where disclosure is authorised or legally required. Cross applies proportionate technical and organisational safeguards to Customer data.

The Customer must notify Cross promptly of suspected account compromise or unauthorised access. It is responsible for securing devices, downloaded documents, exports, and copies kept outside Cross.

We aim to keep Cross available and secure, but do not guarantee uninterrupted or error-free operation unless a separate service-level agreement says otherwise. Maintenance, provider failure, security response, legal requirements, and events outside reasonable control may interrupt the service. We may change features where reasonably necessary, with notice of a material reduction where practicable.

Cross depends on service providers for hosting, databases, encrypted document storage, email, and payments. It also displays public information obtained from Companies House and GOV.UK. Provider services and public information may be delayed, unavailable, or changed; the Customer must verify information before relying on it for a legal or employment decision.

Cross and its licensors own the platform, software, visual design, and documentation. The Customer receives a limited, non-exclusive, non-transferable right for authorised users to use the service during the applicable entitlement. Customer data remains owned by the Customer or the relevant rights holder.

We may restrict or suspend access where reasonably necessary to protect people, data, the platform, or third parties; investigate unlawful use; comply with law; or address unpaid charges. Either party may terminate as allowed by the plan or a separate agreement.

On termination, the Customer should export information it needs while access remains available. Return, deletion, and legally required retention are governed by the Customer Data Processing Agreement and our Data Retention and Deletion Policy.

Cross supports record keeping and workflow management; it does not guarantee sponsor compliance, immigration status, document authenticity, legal outcomes, or acceptance by a public authority. The Customer must review outputs and obtain professional advice where appropriate.

Nothing in these Terms excludes liability that cannot lawfully be excluded, including liability for fraud or fraudulent misrepresentation, or death or personal injury caused by negligence. Any liability limits in a signed order or service agreement take priority over these online Terms for that Customer.

Neither party may transfer the contract without the other’s consent, except as part of a genuine corporate reorganisation or sale of substantially all relevant assets, subject to continued protection of Customer data. Failure to enforce a term is not a waiver. If one term is unenforceable, the remaining terms continue.

These Terms and applicable orders are governed by the laws of England and Wales, and the courts of England and Wales have jurisdiction unless mandatory law requires otherwise. Notices and questions may be sent through the contact details shown in Cross or on the relevant account, order, or invoice.

We may update these Terms to reflect changes in the service, providers, or law. The current version and effective date appear above. We will give reasonable notice of material changes where practicable. A new version may need to be accepted before Checkout, reactivation, or a plan change.