---
title: Agreements & Compliance
description: Manage company agreements, sign mandatory terms of service/privacy policies, and review compliance histories.
---

In order to maintain safety, legal compliance, and regulatory alignment, PromptEasy.EU requires tenant organizations to agree to our platform terms. The **Agreements & Compliance** dashboard section allows company superadministrators to review, sign, and monitor all contract states.

---

## Accessing Agreements

Only users with the **Superadmin** role can access the Agreements dashboard page. 
- Path: `/dashboard/agreements`
- Sidebar Menu: **Agreements**

Other user roles (Admin, Moderator, and User) will receive an *Access Denied* alert if they attempt to view this page.

---

## Contract Compliance Status

The agreements dashboard checks compliance for three primary contracts:

1. **Terms of Service (ToS)**: Mandatory contract governing general platform usage, seat quotas, billing terms, and data residency guarantees.
2. **Privacy Policy**: Mandatory contract details covering GDPR data processing, user information storage, and encryption commitments.
3. **AI Act Cooperation Addendum (AACA)**: Optional agreement required only for Premium/Enterprise plan tenants who operate high-risk AI models under the EU AI Act (Article 25(4) value chain requirements).

### Status Types
Each contract is displayed in a card with one of three compliance states:

- **Up to Date** (Secondary/Green): The latest published version of the contract is signed and verified.
- **Action Required** (Destructive/Red): A new version of the contract has been published, or a mandatory contract remains unsigned. A signature is required.
- **Not Signed** (Outline/Grey): The optional AACA agreement has never been signed and is currently inactive.

---

## Signing an Agreement

When a contract requires a signature (displays **Action Required** or **Not Signed**):

1. Click the **Sign Agreement** action button on the contract card.
2. A drawer/dialog will open containing the complete contract content.
3. Review the contract text carefully.
4. Draw your signature by typing your full account name exactly as listed (e.g., *Jane Doe*).
5. Click **Accept & Sign Agreement**. The system will generate a cryptographically secure SHA-256 signature hash and record it in the tenant ledger.

---

## Signature Ledger

Every signed contract is preserved in an immutable, tenant-wide ledger on the Agreements page.
For each record, compliance officers can view:
- **Contract Name & Version** (e.g., *Privacy Policy v2*)
- **Signatory Name** (the name of the Superadmin who signed)
- **Cryptographic Signature Hash**: A SHA-256 checksum calculated from the signature timestamp, contract ID, signatory's name, and the application's secure key.
- **Timestamp**: The date and time when the signature was recorded.

Clicking **View Receipt** opens a detailed, secure dialog displaying the complete signed contract markdown text alongside audit metadata and the cryptographic hash for verification.

---

## Consequences of Non-Compliance

Mandatory contracts (Terms of Service and Privacy Policy) are critical for platform operation. 

> **WARNING**
> **Failure to Sign Contracts**  
>   Failure to approve mandatory contract updates (ToS and Privacy Policy) within the allowed grace period will eventually cause your tenant account to enter **View-Only Mode**.
>   
>   In View-Only Mode:
>   - Users and Admins can view and copy existing prompt templates.
>   - No new prompts, versions, teams, vaults, or suggestions can be created or updated.
>   - To restore full account functionality, a Superadmin must log in, visit the Agreements page, and sign all outstanding mandatory agreements.