Terms of Service

Aegis is a compliance automation platform that connects to your cloud, source-control, and identity systems to collect evidence, map it to controls in frameworks such as SOC 2 and ISO 27001, and help you maintain a continuous compliance posture.

The Service is intended for organisations and the named individuals authorised to act on their behalf. You may use the Service only in compliance with these Terms and all applicable laws and regulations.

To use the Service you must create an account and a workspace. The person who creates the workspace becomes its initial owner and is responsible for inviting and removing other users, managing roles, and configuring integrations.

You are responsible for keeping your credentials secure, for all activity that occurs under your account, and for ensuring that every member of your workspace has agreed to these Terms.

When you connect an integration (for example AWS or GitHub) we collect a limited set of read-only signals required to evaluate the controls you have selected. The specific data we ingest is described in the Service documentation and the per-provider consent screens you complete at install time.

You retain all rights, title, and interest in the data you submit to the Service. You grant Aegis a non-exclusive, worldwide licence to access, process, and store that data solely to provide and improve the Service for you.

You agree not to:

• Use the Service to violate any law or third-party right;
• Attempt to gain unauthorised access to the Service, its systems, or any other customer's data;
• Resell or sublicence the Service without our written consent;
• Reverse-engineer the Service except where expressly permitted by applicable law;
• Submit data to the Service that you do not have the right to submit.

Fees are described on our pricing page or in your order form. Trials are free for the duration stated when you sign up; after that, your plan converts to the tier you select. Fees are non-refundable except where required by law.

Each party will protect the other's Confidential Information using the same degree of care it uses for its own confidential information, and at minimum with reasonable care. Confidential Information does not include information that is publicly known through no breach of these Terms.

We maintain administrative, technical, and physical safeguards designed to protect customer data. Specific commitments and audit reports are made available to customers under NDA.

These Terms remain in effect for as long as you have an account. You may close your account at any time from the workspace settings. We may suspend or terminate your access for material breach of these Terms, with notice and a reasonable opportunity to cure where appropriate.

Upon termination we will, on request, return or delete customer data in accordance with the Data Processing Addendum.

The Service is provided “as is” without warranties of any kind, except as expressly stated in these Terms. To the maximum extent permitted by law, neither party will be liable for any indirect, incidental, consequential, special, or punitive damages.

Aegis' aggregate liability under these Terms will not exceed the fees you have paid for the Service in the twelve months preceding the event giving rise to the claim.

We may update these Terms from time to time. Material changes will be communicated to workspace owners at least thirty days in advance. Your continued use of the Service after the effective date constitutes acceptance of the updated Terms.

For any questions about these Terms, contact us at legal@aegis.example.com.