Terms of Service

Agent

Software, script, or automated process you register with the Service to authenticate through the FleetWarrant SDK and produce audit records of its own activity.

Warrant

The signed, short-lived credential the Service issues to an Agent so it can authenticate. A Warrant carries an Agent’s identity claims, is revocable by you or us, and expires on its own even if never revoked.

Customer Data

Any data you or your Agents submit to the Service, including configuration, redaction rules, and the intercepted request/response data your Agents generate (“Event data”).

Documentation

Our published product documentation, as updated from time to time.

Order Form

A signed order, quote, or online checkout confirming your plan, fees, and any terms specific to your account.

FleetWarrant issues identity to the Agents you register, watches what they do, and gives you a searchable, replayable audit trail of their activity. Today the Service operates in audit-only mode: it records and classifies what your Agents do; it does not block or approve any action they take. Any policy-enforcement or automatic-blocking capability described on our website or in the Documentation is provided only once it is actually enabled on your account, and we’ll tell you when that changes.

We may change, add to, or remove features of the Service as it develops, provided we don’t materially reduce the core functionality you’re paying for during a subscription term without a corresponding adjustment to fees.

You may register for the Service through our self-serve signup flow where available, or through an assisted onboarding process with our team — a “design partner” arrangement, which is the same account relationship under a different name, not a separate product. Either way, you’re responsible for the accuracy of the account and Agent information you give us (including each Agent’s owner, purpose, and vendor) and for keeping your credentials secure.

You’re responsible for activity on your account, including activity by Agents registered under it, whether or not you authorised the specific action — the point of the Service is to give you visibility into that activity, not to shift responsibility for it to us.

You agree not to, and not to let an Agent:

• use the Service to violate any law, or any third party’s rights, including privacy and intellectual property rights;
• attempt to bypass, disable, or interfere with the Service’s identity, redaction, or audit-logging mechanisms;
• probe, scan, or test the vulnerability of the Service, or breach any security or authentication measures, outside an engagement we agree to in writing;
• submit Customer Data you don’t have the right to submit, or configure Agent traffic to route data through the Service in a way that breaches an obligation you owe someone else (such as a confidentiality or data-protection agreement); or
• resell, sublicense, or provide the Service to a third party as a standalone or managed offering without our prior written consent.

We may suspend an Agent, or your account, if we reasonably believe it’s being used in breach of this section — see Term, suspension and termination.

Fees are set out on our pricing page or in your Order Form. Some plans, including our design-partner program, may be offered free or at custom pricing under a separate Order Form; where that’s the case, the Order Form controls over the published price.

Paid plans are billed in advance on a recurring basis (monthly or annually, as selected at checkout or in your Order Form) and renew automatically until cancelled. Fees are exclusive of taxes unless stated otherwise; you’re responsible for any taxes other than those on our income. Payment card and billing information is collected and processed by our third-party payment processor (for example, Stripe) — we don’t store your full card number.

If a payment fails, we may retry it, suspend paid features, or both, after giving you notice at the billing contact on file. Fees, once paid, are non-refundable except where required by law or stated in your Order Form.

As between you and us, you own your Customer Data. We only use it to provide, secure, support, and improve the Service for you, and as this section and our Privacy Policy describe.

The FleetWarrant SDK redacts fields you’ve configured for redaction inside your own environment, before anything is sent to us — we never receive the raw value of a redacted field, in any form. What isn’t redacted is transmitted to the Service and stored: a bounded preview in our operational store for the dashboard, and the full captured record in an immutable archive that is the audit record of what your Agents did. Because that archive exists to be trustworthy evidence, individual records in it can’t be edited or deleted on request the way an ordinary database row can; see the Privacy Policy for how deletion works instead.

You’re responsible for configuring redaction rules appropriately for the data your Agents actually handle before you send real traffic through the Service.

Each party may access the other’s non-public business, technical, or product information (“Confidential Information”). The receiving party will use it only to exercise its rights and perform its obligations under these Terms, protect it with at least the care it uses for its own confidential information of similar sensitivity (and never less than reasonable care), and not disclose it except to personnel, contractors, or advisors who need it and are bound to confidentiality at least as protective as this section, or as required by law with reasonable notice to the other party where legally permitted.

We own the Service, including the FleetWarrant SDK, control plane, policy engine, and all underlying software, and all intellectual property rights in them. Subject to these Terms, we grant you a non-exclusive, non-transferable licence to access and use the Service during your subscription term, solely for your internal business purposes.

You retain all rights in your Customer Data. You grant us a licence to host, process, and display it as needed to provide the Service to you, and — in de-identified, aggregated form that can’t reasonably identify you or your Agents — to improve the Service’s Action Mapper patterns, redaction defaults, and reliability.

These Terms apply for as long as you have an active account. Either party may terminate for the other party’s uncured material breach on 30 days’ written notice, or immediately if the breach can’t reasonably be cured. You may cancel a paid plan at any time, effective at the end of your current billing period, in your account settings or by contacting us.

We may suspend your account or a specific Agent’s access immediately, with notice where reasonably practicable, if we reasonably believe continued access poses a security risk, breaches acceptable use, or if fees are materially overdue.

On termination, your right to access the Service ends. We’ll make your Customer Data available for export for 30 days after termination on request, after which we may delete it from our operational store — subject to the archive-retention limits described in the Privacy Policy.

Each party warrants it has the authority to enter into these Terms. Except as expressly stated in this section, the Service is provided “as is”, and to the maximum extent permitted by law we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement.

We don’t warrant that the Service will be uninterrupted or error-free, that it will detect or record every action an Agent takes (see the Documentation for known limitations on capture, such as declined content types and size limits), or that it satisfies any specific regulatory, audit, or certification requirement you may be subject to.

To the maximum extent permitted by law, neither party is liable to the other for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of or related to these Terms, even if advised of the possibility.

Each party’s total liability arising out of or related to these Terms is capped at the fees you paid us in the 12 months before the claim arose (or, for claims arising before any fees are paid, at AUD $1,000). This cap doesn’t apply to either party’s indemnification obligations, breach of the confidentiality section, or a party’s liability that can’t lawfully be limited.

You’ll defend and indemnify us against third-party claims arising from your Customer Data, your use of the Service in breach of acceptable use, or your violation of applicable law. We’ll defend and indemnify you against third-party claims that the Service, as provided by us and used in accordance with these Terms, infringes that third party’s intellectual property rights.

The Service is designed to help support your own obligations under frameworks such as the EU AI Act, SOC 2, ISO 27001, APRA CPS 230, and the NIST AI RMF — for example, by producing the access-control and record-keeping evidence those frameworks call for. Using the Service doesn’t by itself make you compliant with any law or standard, we don’t warrant compliance with any specific regime, and you remain solely responsible for your own compliance obligations.

We may update these Terms from time to time. If a change is material, we’ll give you at least 30 days’ notice by email or in-product notice before it takes effect; continued use of the Service after that date means you accept the updated Terms. If you don’t agree, you may cancel before the change takes effect.

These Terms are governed by the laws of Queensland, Australia, without regard to conflict-of-law principles, and the parties submit to the exclusive jurisdiction of its courts for any dispute not otherwise resolved by good-faith negotiation between the parties.

• Assignment — neither party may assign these Terms without the other’s consent, except to a successor in a merger, acquisition, or sale of substantially all assets.
• Entire agreement — these Terms, together with any Order Form and the Privacy Policy, are the entire agreement between us on this subject and supersede any prior discussions on it.
• Severability — if any provision is found unenforceable, the rest remain in full effect.
• Force majeure — neither party is liable for delay or failure caused by events reasonably beyond its control.
• No waiver — failing to enforce a provision isn’t a waiver of it.

Questions about these Terms? Email hello@fleetwarrant.com.