Terms of Service

Overview

These Terms of Service ("Terms") govern your use of TrustFix, operated by Vikavi Security LLC ("we", "us", or "our"), a Delaware limited liability company headquartered in the Greater St. Louis area, United States. By using the Service at trustfix.dev, you agree to these Terms.

1. The Service

TrustFix provides automated scanning of cloud identity configurations and CI/CD workflows to detect non-human identity misconfigurations, and generates remediation recommendations delivered as pull requests. The Service is read-only with respect to your infrastructure — TrustFix never automatically applies changes. All remediation actions require human review and approval.

2. Account registration

You must create an account to use the Service. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You must provide accurate information and keep it current. You must be 18 years or older to use the Service.

3. Acceptable use

You agree to use the Service only on cloud accounts and repositories you own or are explicitly authorized to scan. Your use is also governed by our Acceptable Use Policy, which is incorporated into these Terms. Among other things, you must not:

• Scan accounts or repositories you are not authorized to access.
• Attempt to circumvent the Service’s security controls or rate limits.
• Use the Service to harm, disrupt, or gain unauthorized access to any system.
• Resell or sublicense the Service without written permission.
• Reverse engineer the Service or its underlying detection algorithms, except where this restriction is prohibited by law.

4. AI-generated recommendations

TrustFix uses AI to generate remediation recommendations, including Terraform changes. These recommendations are provided for informational purposes and require human review before implementation. We do not guarantee that AI-generated fixes are complete, accurate, or suitable for your environment. You are solely responsible for reviewing, testing, and deciding whether to apply any recommended change.

5. Pricing and payment

The Service is currently offered on an invitation-only basis under custom enterprise agreements. The features, usage limits, and fees that apply to you — including any trial, design-partner, or no-charge access — are set out in the order form or written agreement between you and us. Where recurring fees apply, they are billed as stated in that agreement. Unless that agreement states otherwise, fees are non-refundable for partial periods, and you may cancel effective at the end of the then-current billing period. Our open-source command-line tool is provided separately under its own open-source license at no charge.

6. Data and security

You retain ownership of all data you provide to the Service. You grant us a limited license to access and process your cloud and source-control data solely to provide the Service. We use read-only access to your cloud accounts and never store long-lived cloud credentials. Our processing of personal data on your behalf is governed by our Data Processing Addendum. See our Privacy Policy for full details on data handling.

7. Disclaimer of warranties

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT IT WILL DETECT ALL SECURITY MISCONFIGURATIONS IN YOUR ENVIRONMENT. YOUR USE OF THE SERVICE AND ANY REMEDIATION ACTIONS YOU TAKE BASED ON ITS RECOMMENDATIONS ARE AT YOUR OWN RISK.

8. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VIKAVI SECURITY LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR BUSINESS, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE THREE MONTHS PRECEDING THE CLAIM.

9. Indemnification

You agree to indemnify and hold harmless Vikavi Security LLC and its members, officers, and agents from any claims, damages, or expenses arising from your use of the Service, your violation of these Terms, or your violation of any third party’s rights.

10. Termination

We may suspend or terminate your account if you violate these Terms. You may terminate your account at any time by contacting us. Upon termination, your access to the Service will cease and your data will be deleted within 30 days, except where retention is required by law. Certain tamper-evident trust-ledger and attestation records may be retained for the limited period needed to evidence the integrity of past attestations, as described in our Data Processing Addendum.

11. Governing law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles. Any disputes shall be resolved in the courts of Delaware.

12. Changes to terms

We may update these Terms from time to time. We will notify you of material changes by email. Continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

13. General provisions

The following provisions govern the interpretation and enforcement of these Terms.

• Entire agreement. These Terms, together with any order form, enterprise agreement, Data Processing Addendum, and policies referenced here, are the entire agreement between you and us regarding the Service and supersede all prior or contemporaneous understandings. An enterprise agreement signed by both parties controls over any conflicting term here.
• Severability. If any provision of these Terms is held invalid or unenforceable, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.
• No waiver. Our failure to enforce any right or provision is not a waiver of that right or provision. Any waiver must be in writing to be effective.
• Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, reorganization, or sale of assets. Any prohibited assignment is void.
• Force majeure. Neither party is liable for any delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control, including acts of God, war, terrorism, civil unrest, labor disputes, governmental action, internet or utility failures, or third-party cloud-provider outages.
• Export and sanctions compliance. You represent that you are not located in, and will not use the Service in, any country or by any person subject to U.S. embargoes or sanctions, and that you will comply with all applicable export-control and sanctions laws. You will not use the Service to test or attack systems you are not authorized to assess.
• No third-party beneficiaries. These Terms do not create any third-party beneficiary rights.
• Independent contractors. The parties are independent contractors. These Terms create no partnership, joint venture, agency, fiduciary, or employment relationship.
• Survival. Provisions that by their nature should survive termination — including Disclaimer of warranties, Limitation of liability, Indemnification, and these General provisions — survive termination of these Terms.
• Notices. We may provide notices to you by email to the address on your account or by posting in the Service. Legal notices to us must be sent to legal@trustfix.dev.

14. Contact

Vikavi Security LLC, operating as TrustFix — a Delaware limited liability company, Greater St. Louis area, United States. For support, email support@trustfix.dev. For general inquiries, email hello@trustfix.dev. For legal notices, email legal@trustfix.dev.