Terms of Service

By accessing or using CloudCerta, you agree to be bound by these Terms of Service and any policies referenced here. If you are using CloudCerta on behalf of an organization, you represent that you have authority to bind that organization to these terms. If you do not agree, do not access or use the service.

CloudCerta is a cloud-security assurance platform that provides continuous, tool-neutral posture assessment for connected cloud accounts, starting with the Cloud Posture tool for AWS. The service evaluates configuration and metadata against security best practices and surfaces findings, scoring, and reports to help you understand and improve your security posture. Additional tools and cloud providers may be added over time.

You must create an account to use CloudCerta and provide accurate, current information during registration. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. You must be authorized to act on behalf of your organization and be of legal age to enter into a binding contract in your jurisdiction.

You agree not to use CloudCerta to interfere with, disrupt, or gain unauthorized access to any system, or to scan or assess cloud accounts you are not authorized to assess. You agree not to reverse engineer, resell, or misuse the service, and to comply with all applicable laws in your use of the platform.

To assess your cloud security posture, you grant CloudCerta access via a read-only cross-account IAM role secured with a unique External ID that you configure in your own cloud account. CloudCerta uses this role solely to read resource configuration and metadata for assessment purposes — it never modifies your infrastructure and never requests, stores, or persists your cloud account credentials or access keys. Access sessions are time-limited and scoped strictly to read-only permissions.

Certain plans and features are offered on a subscription basis, and applicable fees are presented to you before you subscribe. Fees are billed in advance on a recurring basis unless otherwise stated, and are non-refundable except as required by law or expressly stated in an order form. We may change pricing prospectively with reasonable notice.

CloudCerta and its licensors retain all right, title, and interest in the platform, including its software, design, and documentation. You retain ownership of the data you submit to the service; you grant us a limited license to process that data solely to provide and improve the service for you. No other rights are granted except as expressly set out in these terms.

Each party agrees to protect the other's confidential information with the same degree of care it uses for its own similarly sensitive information, and not to disclose it to third parties except as necessary to provide or use the service. Findings, reports, and account data are treated as your confidential information and are not shared outside your tenant. This obligation survives termination of these terms.

The service is provided “as is” and “as available” without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. CloudCerta does not warrant that findings are exhaustive or that use of the service will prevent all security incidents; collection failures are surfaced as such and are never presented as a passing result.

To the maximum extent permitted by law, CloudCerta will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, or goodwill, arising from your use of the service. Our aggregate liability for any claim arising out of these terms will not exceed the amount you paid us in the twelve months preceding the claim.

You agree to indemnify and hold CloudCerta harmless from claims, damages, and expenses (including reasonable legal fees) arising from your misuse of the service, your violation of these terms, or your violation of any applicable law or third-party right. CloudCerta will provide reasonable notice of any such claim and may participate in its defense at its own expense.

These terms remain in effect while you use the service. You may stop using CloudCerta and close your account at any time; we may suspend or terminate access for material breach of these terms, non-payment, or where required by law. Provisions that by their nature should survive termination — including confidentiality, disclaimers, and limitation of liability — continue to apply.

These terms are governed by the laws of the jurisdiction specified in your order form or, absent such specification, the jurisdiction in which CloudCerta is incorporated, without regard to conflict-of-law principles. Any disputes arising from these terms are resolved in the courts of that jurisdiction, unless otherwise agreed in writing.

We may update these terms from time to time to reflect changes to the service or applicable law. We will post the updated terms with a revised “Last updated” date, and material changes will be communicated to account administrators. Continued use of the service after changes take effect constitutes acceptance of the revised terms.

Questions about these terms can be sent to legal@cloudcerta.com.