These terms govern your use of the Igris platform. By creating an account or using the service, you agree to them. If you are agreeing on behalf of a company, you confirm you have authority to bind it.
1. The Agreement
This agreement is between you and [ENTITY TBD] ("Igris", "we"). The operating entity will be named here once incorporation completes.
You must be at least 18 years old and legally able to enter contracts. You may not use the service if you are barred from doing so under applicable law.
2. What Igris Provides
Igris offers a runtime governance proxy for LLM and MCP traffic, EU AI Act compliance documentation tooling, and security reporting dashboards. Features vary by plan.
We may change, add, or remove features. We will give reasonable notice before removing functionality you depend on.
3. Accounts and Access
You are responsible for the security of your account credentials and API keys. Notify us promptly if you suspect compromise. Activity under your credentials is attributed to you.
Organisation owners control membership and may remove members and delete the organisation. Deleting an organisation permanently destroys its data as described in our Privacy Policy.
4. Acceptable Use
You may not use Igris to:
- break any applicable law or regulation;
- process data you have no right to process;
- circumvent, disable, or interfere with security or governance controls belonging to anyone else;
- attack, overload, or probe our infrastructure, or attempt to access another customer's data;
- resell or provide the service to third parties except as your plan permits.
We may suspend accounts that violate this section. Where circumstances allow, we will warn you first.
5. Your Responsibilities
Policy configuration is your responsibility. Igris enforces the policies you configure — nothing more. Default settings are not compliance guarantees. Content redaction and body logging are optional settings you control. Leaving redaction disabled, or enabling body logging, is your decision and your risk.
You are responsible for having a lawful basis for the data you route through the platform, for informing your own users where required, and for configuring retention to match your obligations.
6. Third-Party Providers
Igris forwards your traffic to LLM providers, MCP servers, and webhook endpoints that you select and configure. We are a conduit for these transfers.
Those providers' own terms and privacy policies govern their handling of your data. We do not control, endorse, or take responsibility for their availability, their output, or their treatment of what you send them. Model output reaching you through Igris is the provider's output, not ours.
7. Compliance Disclaimer
Read this section carefully.
Igris is software tooling. It is not legal advice, and it does not certify compliance with any law or standard.
Our EU AI Act features, risk classifications, generated documentation, and audit artifacts are aids to your own compliance work. They do not constitute a conformity assessment, do not guarantee that you satisfy the EU AI Act, the GDPR, HIPAA, or any other regime, and are not a substitute for qualified legal counsel or an accredited assessor.
Regulatory obligations remain yours. You are responsible for determining what applies to you, for verifying that any Igris-generated artifact is accurate and adequate for your circumstances, and for the outcome of any audit, assessment, or enforcement action. We accept no liability for regulatory findings, penalties, or losses arising from reliance on the platform's compliance features.
8. Plans, Billing, and Limits
Paid plans are billed in advance through our payments provider on the cycle you select. Fees are non-refundable except where required by law or stated otherwise in writing.
Each plan carries limits, including maximum data retention. Requests exceeding your plan's limits will be rejected. We may change pricing with at least 30 days' notice before your next renewal; continuing to use the service after that constitutes acceptance.
Non-payment may result in suspension or termination after we have notified you and given you a reasonable chance to cure.
9. Intellectual Property
We own the Igris platform, including its software, documentation, and branding. These terms grant you a limited, non-exclusive, non-transferable right to use the service during your subscription. No other rights are granted.
You own your data. Your prompts, responses, tool calls, policies, and configurations remain yours. You grant us only the licence needed to operate the service for you: to process, store, and transmit that data as this agreement and our Privacy Policy describe. We do not use your data to train models.
Feedback you send us may be used without restriction or compensation.
10. Confidentiality
Each party will protect the other's non-public information with at least reasonable care and use it only for this agreement's purposes. This does not cover information that is public, independently developed, or lawfully received from a third party. Disclosure compelled by law is permitted, with notice where lawful.
11. Warranties and Disclaimers
The service is provided "as is" and "as available", without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.
We do not warrant that the service will be uninterrupted or error-free, that it will detect every policy violation, security threat, or piece of sensitive content, or that its output will be accurate or complete. Detection and governance are best-effort. Do not rely on Igris as your only control.
12. Limitation of Liability
To the fullest extent the law allows, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill, even if advised such damages were possible.
Our total aggregate liability arising from this agreement is limited to the amount you paid us in the twelve months preceding the event giving rise to the claim.
Nothing here excludes liability that cannot lawfully be excluded, including for death or personal injury caused by negligence, or for fraud.
13. Termination
You may cancel at any time from your account settings; cancellation takes effect at the end of the current billing period.
We may suspend or terminate for material breach, non-payment, or unlawful use, with notice and a reasonable cure period where the circumstances permit.
Suspension or termination by us — for non-payment, breach, or unlawful use — ends your access but does not, by itself, delete your data. Your data is destroyed only when your organisation is deleted, whether by you or by us at your request, which removes its tenant schema and everything in it as described in our Privacy Policy. Absent a deletion, your data otherwise ages out under the retention periods set out in the Privacy Policy. Note that S3 audit archives are not automatically deleted when an organisation is deleted — email us if you need them purged. Sections covering intellectual property, confidentiality, disclaimers, liability, and governing law survive termination.
14. Changes to These Terms
We may update these terms. The version and date at the top reflect the current revision. We will notify account holders by email before material changes take effect. Continuing to use the service afterwards constitutes acceptance.
15. Governing Law
These terms are governed by the laws of [GOVERNING LAW TBD], and the courts of that jurisdiction have exclusive jurisdiction over disputes. The governing law and venue will be fixed here once the operating entity is incorporated.
16. General
This agreement, together with the Privacy Policy and any order form, is the entire agreement between us. If a provision is unenforceable, the rest survives. Failure to enforce a right is not a waiver of it. You may not assign this agreement without our consent; we may assign it in connection with a merger or sale of assets.