Terms of Service

1.The agreement

These terms cover the hosted DMZAgent service: this website, the console, the API and SDKs, the docs assistant, the rule-pack library, and every other part of it (together, the “Service”). A signed enterprise or self-hosted agreement governs the use it covers, and it controls wherever it differs from these terms.

You accept these terms by creating an account, by selecting a sign-up button that shows them, or by using the Service. If you accept for an organization, you confirm that you have authority to bind it, and “you” means that organization. The Service is built for business and professional use, and you must be at least 18 to use it.

Our Privacy Policy explains how we handle personal information. Where we process personal data on your behalf, our Data Processing Addendum applies and forms part of these terms. Request a copy from security@dmzagent.com.

2.Accounts and access

Your account is tied to your work email. You sign in with a one-time link sent to that address, or with a passkey you register. Keep your email account, your passkeys and the API keys you create secure. Tell us at security@dmzagent.com if you believe someone else has used them.

Administrators invite people and give each one a role and the work areas it covers. You are responsible for activity under your account, including what the people you invite and the API keys you issue do.

Give us accurate sign-up details and keep them current. We may decline or close an account opened with false details or in breach of these terms.

3.Your data and the records the platform produces

“Customer Data” means the events, documents and other content that you or your systems send to the Service. “Outputs” means what the Service produces from Customer Data: labels, conclusions, logbook entries, evidence packs and the other records it keeps for you.

You own your Customer Data and your Outputs. You give us permission to host, copy, process and display them as needed to provide the Service to you, to keep it secure, and to meet our legal obligations. That permission ends when the data is deleted under Ending the agreement.

We do not use Customer Data or Outputs to train or fine-tune AI models, and we do not share them with other customers.

One figure is pooled across customers. When your work area uses a rule pack, its results count toward that pack’s report card in the library. The report card shows rates and counts, such as how often reviewers accept the pack’s labels, and it identifies no work area, customer or record.

We may use service data to operate, secure and improve the Service. Service data describes how the Service runs, such as usage counts, timings and error rates, and it excludes the content of your records.

You are responsible for holding the rights and consents the law requires to send Customer Data to us, including any personal data in it. Where Customer Data includes personal data, we process it as your processor under the Data Processing Addendum.

4.AI output and automated actions

Parts of the Service use AI models to label events, reason over records, grade rule packs and answer questions. AI output can be incomplete or wrong. Review it before you rely on it, and especially before it affects a person.

Rules, automations and agents act on your instructions. When one of them turns off access, opens a ticket, calls one of your systems or holds an action for review, it does so because you or your administrators set it up to. You choose which systems to connect and what the platform may do in them, and you are responsible for those choices and their results.

Evidence packs, control crosswalks, grades and compliance mappings help you prepare for audits and reviews. They are records and working aids. They are not legal advice, and they do not certify that you or your systems meet any law, regulation or framework.

You are responsible for meeting the laws that apply to your own use of the Service, including laws on automated decisions about people. If your organization connects its own AI model provider account, requests made with it are also governed by your agreement with that provider.

5.Acceptable use

You agree that you will not use the Service to:

• break the law, or send data you have no right to send;
• build profiles of people outside your own organization, or monitor them, for surveillance;
• process children’s personal data without the consent the law requires;
• send malware, or probe, scan or test the security of the Service outside our vulnerability disclosure policy;
• get around metering, rate limits, authentication or the separation between accounts;
• resell the Service, or use the Service or its Outputs to build a competing service;
• copy, decompile or reverse engineer the Service, except where the law allows it regardless of this term;
• interfere with the Service, or with any other customer’s use of it.

Good-faith security research that follows the disclosure policy is welcome, and we will not pursue legal action over it.

6.Rule packs and the marketplace

The library lists rule packs published by us and by independent authors. A pack from an independent author is that author’s content. We review each pack before listing it and publish its grade, and we do not guarantee that any pack is accurate or suits your needs.

Installing a pack adds warning labels to your work area. A pack cannot grant an action your account does not already have, and it cannot reach your systems on its own.

For paid packs we are the seller of record: you pay us, and we settle the author’s share. Each listing shows its price. A monthly pack subscription renews each month until you cancel it, and cancelling stops the next month’s charge.

If you publish packs, you keep the copyright in their content. You give us a license to list, distribute, run and bill for each pack for every account that installs it, and you confirm you have the rights to publish what you submit. We may decline or delist a pack, and accounts that installed it keep the version they hold. Your share of revenue and the settlement schedule are set out in Getting paid.

Referral partners earn commissions under their partner agreement, which controls on commission terms.

7.Fees, billing and taxes

Accounts are opened by agreement, after a meeting with us. Fees, including any metered usage, are the ones set out in the order form or agreement for your engagement. Each bill lists the resources behind every line.

Paid usage and subscriptions are charged to the payment method on your account through our payment processor. You authorize those charges when you add the method.

We give at least 14 days’ notice before a rate increase applies to your account. A decrease can apply at once.

Prices exclude taxes. You pay any sales, use, value-added or similar taxes that apply, other than taxes on our income.

If a payment fails, we tell you and allow at least 14 days to fix it before we suspend paid features. Fees already paid are non-refundable, except where the law requires a refund.

8.Availability and changes to the Service

Self-serve plans carry no availability commitment. We work to keep the Service running and to announce planned maintenance ahead of time. Enterprise agreements can include a service level, and the agreement is where it binds.

The Service changes as it develops. Before we remove a feature you pay for, we give at least 30 days’ notice, unless security or the law requires faster action. Features marked preview or beta are offered as they are, and they may change or end without notice.

9.Confidentiality

Each side will protect the other’s non-public information with at least reasonable care, use it only for this agreement, and share it only with people and providers who need it and are bound to protect it. This excludes information that is public, already known to the receiving side, independently developed, or rightly received from someone else. Either side may disclose information when the law requires it, with notice to the other side where the law allows.

10.Our intellectual property and your feedback

We own the Service, its software, its documentation and the DMZAgent name and marks. These terms give you the right to use the Service while your account is in good standing, and they grant no other rights.

If you send us feedback or suggestions, we may use them without any obligation to you.

11.Suspension

We may suspend access immediately when that is needed to protect the Service, other customers or you, or when the law requires it. We may also suspend for unpaid fees or a serious breach of these terms, after notice. We tell you when we suspend and why, as soon as it is safe to, and we restore access once the cause is fixed.

12.Ending the agreement

Either side may end these terms at any time by written notice to the other. We may end them immediately if you seriously breach Acceptable use.

After the agreement ends, you have 30 days to export your data, or to ask us for a copy of it. We then delete it from our live systems within 30 days. The export window is shorter only if you ask us in writing to delete sooner, or if the account was closed for a serious breach of Acceptable use.

Fees owed before the end remain payable. The sections on your data, confidentiality, intellectual property, disclaimers, liability, indemnity, governing law and general terms continue to apply after the end.

13.Disclaimers

We provide the Service “as is” and “as available.” To the extent the law allows, we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not promise that the Service will be uninterrupted or error-free, or that its output will be accurate or complete.

14.Limitation of liability

To the extent the law allows, neither side is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if told they were possible. Each side’s total liability for all claims under these terms is limited to the fees you paid us for the Service in the 12 months before the event that gave rise to the claim.

These limits do not apply to your payment obligations, to your obligations under Indemnity, or to liability the law does not allow a party to limit.

15.Indemnity

You will defend us against third-party claims that arise from your Customer Data, from actions your rules, automations and agents take in your systems, or from a breach of Acceptable use. You will pay the damages and costs a court awards, or a settlement you approve. We will tell you promptly about the claim, let you control the defense, and cooperate at your expense.

16.Government customers, export and sanctions

The Service is commercial computer software and a commercial service under FAR 12.212 and DFARS 227.7202. A government customer receives only the rights these terms grant. Where a law bars a government customer from accepting a term, that term applies only as far as the law allows.

You will use the Service in line with U.S. export control and sanctions laws. You confirm that you are not located in a country subject to comprehensive U.S. sanctions and are not on a U.S. restricted-party list.

17.Changes to these terms

We post every revision on this page with a new effective date. For a material change, we also email your account administrators at least 14 days before it takes effect. If you keep using the Service after that date, the new terms apply. If you do not agree to them, close your account before they take effect.

18.Governing law and disputes

The laws of the State of North Carolina govern these terms, without regard to conflict-of-law rules. The state and federal courts located in North Carolina have exclusive jurisdiction over any dispute, and both sides consent to it.

Before filing a lawsuit, each side will first describe the dispute to the other in writing and allow 30 days to resolve it. Either side may ask a court for urgent relief at any time to protect its confidential information or intellectual property.

19.General terms

• Entire agreement. These terms, the Privacy Policy, the Data Processing Addendum where it applies, and any order form or signed agreement are the whole agreement on their subject.
• Assignment. Neither side may assign these terms without the other’s consent, except to a successor in a merger, an acquisition or a sale of the business these terms concern.
• Events beyond control. Neither side is liable for a delay or failure caused by events beyond its reasonable control. Payment obligations continue.
• Severability and waiver. If a court holds a term unenforceable, the rest of these terms still apply. Delay in enforcing a term waives nothing.
• Notices. We send notices to the email address on your account. You send notices to legal@dmzagent.com.
• Independent parties. These terms create no partnership, agency or employment relationship between the parties.

20.How to reach us

DMZAgent is owned and operated by Coastal Carolina Tech LLC. Send legal notices to legal@dmzagent.com, security reports to security@dmzagent.com, and privacy requests to privacy@dmzagent.com.