Terms of service.

01The agreement

By creating an account or using the platform you agree to these terms. If you are agreeing on behalf of a company, you confirm you have authority to bind it. If you do not agree, do not use the service.

02What we provide

A governed execution runtime for software agents: durable sessions, isolated sandboxes, policy evaluation, an identity-aware gateway, and an evidence chain. Scope depends on your plan.

We provide infrastructure. We do not provide the agent, the model, or the judgement about what your agent should be allowed to do. Policy is yours to write and yours to get right.

03Your responsibilities

• Keep credentials secure and do not share accounts
• Write and review the policy governing your agents
• Have the rights to any data your agents process
• Comply with laws applying to your use, including data protection and export control
• Nominate real humans as approvers for escalated actions

You are responsible for what your agents do within the boundary you configured. A permissive policy that you wrote is not a defect in our service.

04Acceptable use

You may not use the platform to:

• Attack, scan, or gain unauthorised access to systems you do not own or have permission to test
• Build or operate malware, botnets, credential-stuffing tools, or spam infrastructure
• Circumvent another party's technical controls or terms
• Process material that is illegal to possess or distribute
• Conduct surveillance of individuals without a lawful basis
• Attempt to escape sandbox isolation or tamper with evidence chains other than in a test we have authorised in writing

Security research against your own deployment is welcome and covered by our disclosure policy. Tell us first.

05Fees

Paid plans are billed monthly in arrears on metered usage, or annually in advance for Enterprise. Fees exclude tax. Invoices are due 30 days from issue.

We may change list pricing with 30 days' notice. Annual contracts hold their price for the term.

Persistent non-payment after written notice may result in suspension. We will not delete your evidence chain during a payment dispute.

06Availability

We target 99.95% monthly availability for the control plane on Enterprise plans, with service credits set out in the order form. Team and Developer plans are provided without an uptime commitment.

Planned maintenance is announced at least 72 hours ahead and scheduled to avoid running sessions where possible. Sessions survive control-plane maintenance with cached policy.

07Your data

You own your data. We process it to deliver the service under the Data Processing Addendum. We claim no licence to it beyond what is needed to run the platform, and we do not use it to train models.

You may export your evidence chain, session metadata, and policy at any time, in a documented format, without charge — including after termination and during a dispute.

08Confidentiality

Each side will protect the other's confidential information with reasonable care and use it only for the purposes of this agreement. This survives termination by three years. Information that is public, independently developed, or lawfully received elsewhere is not covered.

09Intellectual property

We keep all rights in the platform. You keep all rights in your data, your policies, and your agents.

Our SDKs, evidence verifier, and policy compiler are licensed under Apache 2.0; those licences govern that code and nothing here restricts your rights under them.

If you give us feedback we may use it without obligation. We will not claim your ideas as your only contribution to a paid relationship.

10Warranties and disclaimers

We warrant that we will provide the service with reasonable skill and care and will not materially reduce security functionality during a paid term.

Beyond that the service is provided as is. We do not warrant that a correctly configured boundary makes an agent safe, that policy you wrote expresses what you intended, or that isolation is unbreakable. Security is a property of a system, and your agents and your configuration are part of that system.

11Liability

Neither side is liable for indirect, consequential, or punitive damages, or for lost profits or lost data, except where the law does not allow that exclusion.

Each side's total liability is capped at the fees paid or payable in the 12 months before the claim. That cap does not apply to your payment obligations, either side's wilful misconduct, or breach of confidentiality.

12Term and termination

Self-serve plans run month to month and you may cancel any time; the current month is not refunded. Annual plans run for their term.

Either side may terminate for material breach after 30 days' written notice if the breach is not fixed. We may suspend immediately for activity that threatens the platform or another customer, and will tell you why.

On termination you have 90 days to export your data before deletion.

13Changes

We may update these terms with 30 days' notice by email to account administrators. Continued use after that is acceptance. If a change materially disadvantages you, you may terminate and receive a pro-rata refund of prepaid fees.

14Law

These terms are governed by the laws of the State of Delaware, and the parties submit to the exclusive jurisdiction of its courts. Nothing here removes a consumer right you have where you live.