Terms of Service

These Terms of Service (the "Terms") govern your access to and use of the security platform, agents, websites, APIs and related services (together, the "Service") provided by Distriib LLC. By creating an account, installing an agent, or otherwise using the Service, you agree to these Terms.

If you are entering into these Terms on behalf of an organization, you represent that you have authority to bind that organization, and "you" or "Customer" refers to that organization. If you do not agree to these Terms, do not use the Service.

The Service is a multi-tenant security platform. It lets the Customer collect, store, search and analyse security logs and telemetry; write detection rules and alerts; keep threat-intelligence, blocklist and exclusion lists; and, optionally, enforce a response on the endpoint through our agent.

Security logs are stored in a search engine backed by object storage; account and configuration metadata lives in a managed Postgres database. The Service relies on the third parties listed in the Sub-processors document.

We may add, change or remove features over time. Some features — the AI assistant, certain threat-intelligence feeds, detection-as-code integrations, cold storage — are optional, and some depend on third-party services.

• You must give accurate account information and keep it current.
• You are responsible for safeguarding credentials and access tokens — including agent enrollment and ingest tokens — and for all activity under your account.
• You must tell us promptly at support@distriib.com about any unauthorized use or suspected compromise.
• The Service is multi-tenant and each tenant's data is isolated across several layers (see the Security Overview). You may invite users to your tenant and assign them roles — admin, editor or viewer — and you are responsible for what the users you authorize do.

You agree not to, and not to let any user:

• use the Service in breach of any applicable law or regulation;
• upload, store or transmit unlawful, infringing or malicious content, except where it is necessary for legitimate security analysis;
• attempt to reach the Service's infrastructure or another tenant's data without authorization, or to get around tenant isolation or access controls;
• probe, scan or test the security of the Service without our prior written consent, or disrupt or degrade it (excessive load, denial of service);
• reverse engineer, decompile or resell the Service, except where the law forbids that restriction;
• use the Service to monitor individuals without a lawful basis and the required notices (see section 5).

We may suspend or limit access to protect the Service, other customers or third parties, or to comply with the law.

The Service can collect endpoint and network telemetry that may contain personal data: source IP addresses, hostnames, usernames, process and command-line execution events, WAF and HTTP access logs, and — where the Customer opts in, off by default — browser-visited URLs and AI coding-assistant activity.

For that telemetry the Customer is the data controller and Distriib acts as a processor, processing it on the Customer's behalf and instructions.

As controller, the Customer is solely responsible for:

• establishing and documenting a lawful basis for collecting and processing the telemetry, including any monitoring of employees or their devices, under every law that applies to it;
• giving all required notices to the people whose data is collected — employees, contractors, users of monitored devices — and obtaining their consent where the law requires it, especially before turning on command-line or browser-URL collection;
• configuring the Service — retention, the optional collection switches, redaction — consistently with its own legal obligations;
• having the right to send us every piece of data it submits.

A separate Data Processing Agreement may govern the processing relationship; where one is in place, it controls over anything in these Terms that conflicts with it on personal data.

The Service is sold to organizations under a contract — an ingest package per organization — invoiced by Distriib directly. There is no payment processor inside the product and no card data passes through it.

Unless your contract says otherwise: fees are quoted exclusive of taxes; charges are non-refundable except where the law requires a refund; and we may change pricing prospectively, with notice.

The Service uses third parties to run (hosting, database, log storage, email) and to provide optional features (threat-intelligence feeds, source-control integrations, and any AI model the Customer connects itself). They are listed, with their purpose and the data they see, in the Sub-processors document.

Your use of an optional integration may also be subject to that provider's own terms. We are not responsible for third-party services we do not control.

As between the parties, Distriib and its licensors own all rights in the Service, including its software, documentation and trademarks. Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Service while your subscription lasts.

You keep every right in the data you submit ("Customer Data"). You grant us a limited licence to host, process and transmit Customer Data solely to provide and support the Service, to keep it secure, and as otherwise allowed by these Terms or a Data Processing Agreement.

We work to keep the Service available, but we do not guarantee that it will be uninterrupted or error-free. Unless a separate written service-level agreement applies, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranty of merchantability, fitness for a particular purpose, title or non-infringement.

No security product detects or prevents every threat, and we do not warrant that this one will.

To the maximum extent the law permits: neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, revenue, data or goodwill; and each party's total aggregate liability arising out of or relating to these Terms will not exceed the amounts paid or payable by the Customer for the Service in the twelve (12) months before the event giving rise to the claim.

Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

These Terms apply for as long as you use the Service. Either party may terminate as set out in the applicable order or service agreement. We may suspend or terminate access for breach of these Terms, for non-payment, where the law requires it, or to protect the Service or other people.

When the agreement ends, your right to use the Service ends, and Customer Data is handled as described in the Data Retention policy. Sections that by their nature should outlive the agreement — intellectual property, disclaimers, limitation of liability — survive it.

We may update these Terms. When a change is material we will give reasonable notice, by updating the date at the top of this page and, where appropriate, by telling you directly. Continuing to use the Service after a change takes effect means you accept the updated Terms.

The governing law and the venue for any dispute are those stated in the service agreement between Distriib and the Customer, except where mandatory local law provides otherwise. If your agreement does not state them, write to us at support@distriib.com before relying on this section.

• Distriib LLC — support@distriib.com
• San José, Costa Rica