Terms of Service

1. The Service

We provide an automated site reliability engineering (SRE) and cloud security platform: configuration scans and health reports, uptime checks and SLOs, incident intake, AI triage, paging of your responders, optional automatic remediation, and cost visibility (the “Service”). The Service is delivered by software; it does not include an on-call engineer or hands-on engineering work. What is included depends on your plan, as described on our pricing page at the time of purchase.

The free health check is offered as is, may be limited or discontinued, and includes no response-time commitment.

2. Accounts

You are responsible for your team's accounts, for keeping sign-in credentials secure and for the roles you assign. Users must sign in with a verified business email. Tell us promptly through security@infrascanai.com if you suspect unauthorized access.

3. Authorization to scan

Each time you connect a cloud account, the person connecting it signs a scan authorization in the portal. By signing, you represent that you own the account or have written permission from its owner to grant us access, and you authorize us to perform the read-only configuration review described in that authorization. We keep a record of who signed, when, and the exact text accepted.

Scans are read-only. We do not attempt exploitation, penetration testing or denial-of-service testing, and we do not read application data beyond configuration metadata. You can revoke access at any time by removing the role or disconnecting the account in the portal; scheduled scans stop immediately.

4. Automatic remediation

Automatic remediation is optional and off by default. If an owner or admin turns it on, you authorize the Service to perform, in the accounts where you granted our remediation identity access, the actions you selected in your response policy, when an incident matches a runbook you created. The Service limits actions to the hourly maximum you set, does not repeat a runbook within 30 minutes, and records every attempt and its result in the incident timeline. Your cloud provider's audit logs also record each call.

You are responsible for the runbooks, match rules and allowed actions you configure and for confirming they are safe for your systems. You can turn automatic remediation off, or remove the access you granted, at any time. We may pause automatic remediation for all customers if we detect a fault in it.

5. AI assistance and deliverables

We use AI to draft, analyze and quality-check reports and to write triage notes on incidents. Every report is checked by a separate automated review against the published checklist for its type before release; a report that does not pass after two attempts is released marked “flagged” with the gaps listed. Reports and triage notes are recommendations based on the information available at the time. You decide whether and how to implement them, and you remain responsible for your systems and your compliance obligations. A readiness assessment is not an audit opinion or certification.

6. Your responsibilities

• Give us accurate information and timely access needed to deliver the Service.
• Keep your own backups and business continuity plans, unless backup management is part of your plan.
• Follow our Acceptable Use Policy.
• Comply with the laws that apply to your business and data, including obtaining any consents needed for us to process data in your accounts.

7. Fees, payment and taxes

Prices are in US dollars. Plans are billed in advance for each monthly or yearly period. Payments are processed by Stripe; we do not store card numbers.

Sales and use taxes are calculated at checkout from your billing address and added where they apply. Invoices are due within the period stated on them. If a payment fails, we will notify you and may suspend paid features after 14 days of non-payment; the free health check stays available.

8. Automatic renewal and cancellation

Paid plans renew automatically at the end of each monthly or yearly period, at the price shown when you subscribed plus applicable tax, and are charged to your payment method on file until you cancel. Before checkout we show you these terms, and you must check a box to accept them. We email a confirmation with the terms, the price and how to cancel.

How to cancel. Cancel online at any time from Billing in your portal, without calling or emailing us. Cancellation takes effect at the end of the current period; you keep the Service until then. We do not refund past charges except where required by law.

Reminders and price changes. For yearly plans, we email a reminder 15 to 45 days before renewal with the amount and how to cancel. We will notify you of any price change at least 30 days before it applies, and you can cancel before it takes effect.

9. Incident response

The Service notifies and pages the responders you configure, through the channels you configure, and may run automatic remediation as described above. Your team remains responsible for responding to and resolving incidents. Paging depends on email, Slack, PagerDuty and other third parties that we do not control, so we do not guarantee that a page is delivered or acknowledged within any time.

10. Confidentiality and data

Each party will protect the other's confidential information with at least reasonable care and use it only to perform under these Terms. We process data in your cloud accounts as your service provider under our Data Processing Addendum, which is part of these Terms. Our Privacy Policy explains how we handle personal information about you and your team.

11. Intellectual property

You own your data and the reports and postmortems the Service produces for you, and the runbooks you write. We keep ownership of the platform, our checklists, templates, tools and general know-how, and grant you a non-exclusive license to use any of them embedded in your deliverables for your internal business purposes. You grant us the right to use your data only to provide and secure the Service.

12. Warranties and disclaimers

We will perform the Service in a professional and workmanlike manner consistent with generally accepted industry standards. If we breach this warranty, tell us within 30 days and we will correct the affected part of the Service or, if we cannot, refund the fees paid for the affected period.

EXCEPT AS STATED ABOVE, THE SERVICE IS PROVIDED “AS IS”. TO THE EXTENT PERMITTED BY LAW, WE DISCLAIM ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL FIND EVERY VULNERABILITY, PREVENT OR FIX EVERY INCIDENT, OR THAT AN AUTOMATIC REMEDIATION ACTION WILL SUCCEED.

13. Limitation of liability

TO THE EXTENT PERMITTED BY LAW, NEITHER PARTY IS LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE OR DATA, AND EACH PARTY'S TOTAL LIABILITY ARISING FROM THESE TERMS IS LIMITED TO THE FEES YOU PAID US IN THE 12 MONTHS BEFORE THE CLAIM. THESE LIMITS DO NOT APPLY TO YOUR PAYMENT OBLIGATIONS, A PARTY'S INDEMNIFICATION OBLIGATIONS, OR LIABILITY THAT CANNOT BE LIMITED BY LAW.

14. Indemnification

You will defend and indemnify us against third-party claims arising from your breach of the scan authorization (for example, connecting an account you were not authorized to connect) or of the Acceptable Use Policy. We will defend and indemnify you against third-party claims that the Service or reports it produced, as delivered, infringe a US intellectual property right. The indemnified party must give prompt notice and reasonable cooperation.

15. Term, suspension and termination

These Terms apply while you have an account. Either party may terminate for material breach not cured within 30 days of notice. We may suspend access immediately to stop a security threat or unlawful use, and will tell you why. After termination, you can export your reports for 30 days; we then delete your data as described in our Privacy Policy, except records we must keep by law.

16. Governing law and disputes

These Terms are governed by the laws of the State of Arkansas, without regard to its conflict-of-laws rules. The state and federal courts located in Benton County, Arkansas, have exclusive jurisdiction, and each party consents to them. Before filing a claim, each party will try in good faith to resolve the dispute by written notice and a meeting within 30 days.

17. General

We may update these Terms with at least 30 days' notice by email for material changes; changes do not apply retroactively. Neither party may assign these Terms without consent, except to a successor in a merger or sale of substantially all assets. Neither party is liable for delays caused by events beyond its reasonable control. If a provision is unenforceable, the rest remains in effect. These Terms, the DPA, the Acceptable Use Policy and any signed order form are the entire agreement.

18. Contact and notices

Marcos Morris, 3401 SW 2nd St, Bentonville, AR 72712. Contact: privacy@infrascanai.com.