Attestari Terms of Service

These terms are an agreement between you and The Elite360 Corporation ("we", "us") for Attestari: attestari.ai, app.attestari.ai, the Attestari device app, the lookup API, the Attestari MCP server, change monitoring, pre-publish checks and any related service (together, "Attestari"). If you use Attestari for an organisation, you accept these terms for it and confirm you may do so; "you" then means that organisation. A signed order form, where there is one, takes precedence over these terms on anything it covers.

1. What Attestari is, and what a grade is not

Attestari examines the published artifacts of software packages that AI agents install and grades them under the methodology in effect, which is public. A grade is our opinion of a specific package version, reached by an automated process under that methodology, on the evidence it cites. It is not a guarantee that a package is safe, a certification, legal advice or a substitute for your own security review. An A means the examination found no confirmed finding; it does not mean nothing could be wrong. "Not examined" and "not gradeable" are not verdicts. Packages change; a grade applies to the version and the date shown.

No publisher can pay for a rating, a better rating, or the removal of a finding.

2. Accounts

You need an account for paid features. Keep your sign-in secure and your details accurate. You are responsible for what happens under your account and your API keys. Tell us at contact@elite360.ai if you think either has been compromised. You must be at least 16, and old enough to form a binding contract where you live.

3. Plans, trials and billing

• Prices, tiers and what each includes are on the pricing page. Payments are processed by Stripe.
• A trial lasts 14 days with a card on file and becomes a paid subscription on day 15 unless you cancel before then.
• Subscriptions renew automatically for the same term (monthly or annual) until cancelled. You can cancel at any time in the billing portal; cancellation takes effect at the end of the current term, and you keep access until then.
• Fees are exclusive of taxes, which are added where required. Seats added mid-term are charged pro rata; seats cannot be reduced mid-term.
• Usage beyond what your plan includes (for example lookups) is billed as the pricing page states. We warn you when you reach your plan's limit and again at 150% of it, and we never cut off a lookup for exceeding a limit.
• Except where the law requires otherwise, fees already paid are not refunded, including for partial terms.
• If we raise a price, existing subscriptions keep their price for twelve months, and we tell you at least 30 days before the new price applies to you.
• If a payment fails, we retry it and may suspend paid features after reasonable notice until it succeeds.

4. Your data and your content

You keep all rights in what you send us: device inventories, policies, and any package or file you submit for a private examination ("your content"). You give us permission to use your content only to provide Attestari to you, including sending submitted artifacts to our AI provider for analysis as the privacy policy describes. We do not use your content to train AI models, and our AI provider does not either. Private results are visible only to you and never affect a public grade. How we handle personal data is described in the privacy policy; for business accounts the Data Processing Agreement forms part of these terms.

Do not submit anything you do not have the right to share with us.

5. The lookup API, the MCP server and our data

• Every programmatic call uses your key. Keys are personal to your account; do not share them or embed them where others can extract them.
• You may use verdicts inside your own products and workflows. You may display a grade in your own product with the words "Rated by Attestari" and a link to the package's page. You may not redistribute, resell, bulk-export or republish verdicts or reports to third parties, or use them to build a competing rating or dataset, unless a written agreement with us allows it.
• Rate limits and fair-use limits apply as documented. Scraping the public site at volume is not permitted; use the API.
• The methodology is published under its own terms on the site. The engine, the reports, the index and the site are ours, and these terms give you no rights in them beyond using Attestari as described.

6. Protect and policy

Protect can block an agent tool from connecting, according to the policy set for the device. You or your organisation's administrators choose that policy. Blocking or allowing a tool is a decision made under your policy; we are not responsible for the consequences of a tool being blocked, or of a tool being allowed that later proves harmful.

7. Publishers of packages

If you publish a package that Attestari examines, you can claim it through the registry ownership check to see the full report for it, and you can appeal a result at contact@elite360.ai. An appeal is decided under the methodology; a result changes only if the evidence or the methodology requires it. Attestari's pre-publish check is separate from the public grade and never affects it.

8. Acceptable use

Do not: break the law using Attestari; try to get around rate limits, keys, access controls or billing; probe, disrupt or overload our systems; reverse-engineer the service beyond what the law permits; use Attestari to harass anyone, including publishers; misrepresent a grade, alter it, or imply we endorse you; or resell access to Attestari without a written agreement. Packages you submit for examination may contain harmful code, and that is expected; deliberately using Attestari to attack others is not.

9. Suspension and ending

You can stop using Attestari and cancel at any time. We may suspend or end your access if you seriously or repeatedly break these terms, if you do not pay, or if the law requires it, and we will tell you why unless the law or security prevents it. When your account ends, you can export your data for 30 days; after that it is deleted as the privacy policy describes. Sections 1, 4 (last paragraph), 5 (restrictions), 10, 11, 12, 14 and 15 survive.

10. Warranties

We provide Attestari with reasonable skill and care, and we will do our best to keep it available. Otherwise, and to the fullest extent the law allows, Attestari is provided "as is" and "as available", without any other warranty, express or implied, including of merchantability, fitness for a particular purpose, accuracy or non-infringement. We do not warrant that any grade is correct or complete, that any package is safe, or that the service will be uninterrupted or error-free. Service levels, where a plan includes them, are set out on the pricing page or in an order form and are the only remedy for missing them.

11. Limits on liability

To the fullest extent the law allows: neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill; and each party's total liability arising out of or relating to Attestari or these terms is limited to the fees you paid us in the twelve months before the event giving rise to the claim. These limits do not apply to your payment obligations, to a breach of section 5's restrictions or section 8, or to liability that cannot be limited by law (for example for fraud, or for death or personal injury caused by negligence).

12. Indemnity

If a third party makes a claim against us because of your content, your breach of these terms, or your use of Attestari in breach of the law, you will defend us and cover the resulting damages and reasonable costs, provided we tell you promptly and let you control the defence.

13. Changes

We may change Attestari and these terms. If a change to these terms materially reduces your rights, we tell account holders by email at least 30 days before it takes effect; if you do not agree, you may cancel before then and we refund any prepaid fees for the unused part of the term. The effective date at the top shows the current version.

14. General

• Governing law: the laws of the State of Idaho, without regard to its conflict-of-laws rules. Any dispute not subject to arbitration below is heard in the state or federal courts in Ada County, Idaho, and both parties consent to their jurisdiction.
• Nothing in these terms limits rights you have as a consumer under the law of the country where you live that cannot be limited by contract.
• Export and sanctions laws apply to your use of Attestari; do not use it where they prohibit it.
• Neither party is responsible for delays caused by events beyond its reasonable control.
• You may not assign these terms without our consent; we may assign them to a successor to our business, with notice.
• If a provision is unenforceable, the rest stays in effect. Not enforcing a provision is not a waiver of it.
• These terms, the privacy policy, the DPA where it applies, and any order form are the whole agreement between us about Attestari.
• Notices to us: contact@elite360.ai. Notices to you: the email on your account.

15. Arbitration and no class actions

Please read this section: it affects how disputes are resolved.

• Talk first. Before starting a claim, the party with the complaint sends a written notice to the other (to us at contact@elite360.ai) and both try in good faith to resolve it for 30 days.
• Arbitration. Any dispute arising out of or relating to Attestari or these terms that is not resolved that way is decided by binding arbitration administered by the American Arbitration Association under its Consumer Arbitration Rules if you use Attestari as an individual for personal purposes, and its Commercial Arbitration Rules otherwise. One arbitrator decides; the hearing is by video or in Boise, Idaho, or by written submissions where the rules allow. Fees are paid as those rules provide. Judgment on the award may be entered in any court with jurisdiction.
• Exceptions. Either party may bring an individual claim in small-claims court, and either party may ask a court for an injunction to protect its intellectual property or to stop a breach of section 5 or section 8.
• No class actions. Claims are brought only individually, never as a plaintiff or class member in a class, collective or representative proceeding, and the arbitrator may not consolidate claims of different people. If this paragraph is found unenforceable for a claim, that claim goes to the courts named in section 14, not to arbitration.
• Opting out. You can opt out of this section within 30 days of first accepting these terms by emailing contact@elite360.ai with your name, your account email and a statement that you opt out of arbitration. Opting out does not affect the rest of these terms.
• Where the law of the country you live in does not allow pre-dispute arbitration for consumers, this section does not apply to you.