Terms of Service

1. Acceptance of these Terms

These Terms of Service (the "Terms") are an agreement between Bastion Shield Technologies Ltd, a company registered in England and Wales with company number 17105460 ("Bastion Shield", "we", "us", "our"), and the organisation on whose behalf you create an account or use our services ("Customer", "you", "your").

They apply to this website and to Bulwark, including the hosted application at app.bastionshieldtechnologies.com, the Bulwark API, and our software development kits ("SDKs") and gateway components (together, the "Service"). By creating an account, accepting these Terms during sign-up, or using the Service, you agree to them on behalf of your organisation. If you do not agree, do not use the Service.

Services under separate agreements

We also provide consulting and engineering services. Those are delivered under a separate written service agreement or statement of work, which sets out scope, deliverables, timeline, fees, intellectual property and confidentiality for that engagement. Where you have a signed agreement with us (including an order form for a Business or Enterprise plan), that agreement takes precedence over these Terms to the extent they conflict.

2. Licence to use the Service

The Service

Bulwark gives your AI agents an identity, evaluates their actions against the policies you set, routes actions for human approval where your policies require it, and keeps a tamper-evident audit trail of the decisions it makes. Bulwark operates in two modes, which you choose per policy:

• Monitor mode (available on every plan). Bulwark evaluates and records each action and returns a decision, but does not stop the action.
• Enforce mode (Team plan and above). A deny or escalate decision is returned to your integration so that the action is blocked, or held until a person approves it. Enforcement takes effect through the SDK, gateway or API integration you install, so it depends on that integration being correctly installed and configured in your systems.

Your licence

Subject to these Terms and payment of any applicable fees, we grant you a limited, non-exclusive, non-transferable, non-sublicensable licence, for the duration of your subscription, to access and use the Service for your organisation's internal business purposes, within the limits of your plan.

SDKs and gateway components

Our SDKs and gateway components are licensed under the licence that accompanies each package (for example, the licence file or the licence field in the package metadata). Where a package licence grants you broader rights than this section, the package licence governs your use of that package. Using an SDK to connect to the hosted Service remains subject to these Terms.

Restrictions

Except as expressly permitted by these Terms, a package licence, or applicable law, you must not:

• sell, resell, rent, sublicense or provide the Service to a third party, or use it to run a competing service;
• copy, modify or create derivative works of the hosted Service;
• decompile, disassemble or reverse engineer the Service, except to the extent that applicable law permits this despite a contractual restriction;
• circumvent plan limits, quotas, rate limits, authentication or other technical controls;
• remove or obscure any proprietary notices.

3. Eligibility and accounts

The Service is for business use only. It is not intended for consumers and is not directed at children. By using the Service you confirm that you are 18 or over, that you are using it on behalf of an organisation, and that you have authority to bind that organisation to these Terms.

When you create an account, you agree to:

• provide accurate and complete information, and keep it up to date;
• keep your passwords, API keys and other credentials secure and confidential;
• tell us promptly at info@bastionshieldtechnologies.com if you suspect unauthorised access to your account;
• take responsibility for all activity under your account, including activity by your users and by the agents you register.

4. Subscriptions, pricing and billing

Plans

Bulwark is offered on the plans described on our website and on the Billing page in the dashboard. Each plan sets the number of governed agents, the features (including whether enforce mode is available), any usage allowance and the audit retention period. At the date of these Terms:

• Free covers up to 3 governed agents in monitor mode, with 7-day audit retention, at no charge. We may change Free plan limits or features, and will tell you before a change that reduces them.
• Team costs GBP 149 per month for up to 10 governed agents and includes enforce mode and 30-day audit retention. It is self-serve and billed monthly through Stripe.
• Business and Enterprise are custom plans, available by arrangement only. They are not self-serve: you agree them with our sales team.

Custom plans (Business and Enterprise)

A Business or Enterprise plan is governed by a written order form or agreement signed by both parties. That document may set its own fees, limits, retention, support, service level agreement, liability cap and other terms. For that plan, where the order form or agreement conflicts with these Terms, the order form or agreement prevails. Anything it does not cover is governed by these Terms.

Where we offer a trial, it ends on the date shown in the dashboard. Unless you subscribe to a paid plan, your workspace then returns to the Free plan and its limits.

Billing and automatic renewal

Paid self-serve subscriptions are billed monthly in advance through our payment processor, Stripe. Your subscription renews automatically each month at the then-current price for your plan, and your payment method is charged on each renewal date, until you cancel. You authorise us, through Stripe, to charge the payment method you provide for all fees due.

How to cancel

You can cancel any paid plan at any time. On the Team plan, cancel from the Billing page in the dashboard by selecting Manage billing, which opens the Stripe billing portal. On a Business or Enterprise plan, tell us in writing at info@bastionshieldtechnologies.com.

Cancellation takes effect at the end of the billing period you have already paid for. You keep access to your paid plan until then, you will not be charged again, and your workspace then moves to the Free plan. We do not give pro-rata refunds for the rest of that period, except where the law requires a refund or we have agreed to one in writing.

Usage allowances

Some plans include a monthly allowance of governed decisions, shown with a usage meter on the Billing page. Exceeding the allowance never blocks your agents. Usage above the allowance is shown for information and is not charged automatically. If your usage stays above your allowance, we may contact you about a more suitable plan, and any change to your plan or price would follow the rest of this section.

Taxes

Prices are stated exclusive of VAT and other applicable taxes unless we say otherwise. Where VAT or a similar tax applies, it is added at the applicable rate. You are responsible for any taxes on your purchase other than taxes on our income.

Price changes

We may change the price of a plan by giving you at least 30 days' notice by email or in the dashboard. The new price applies from your first renewal after the notice period ends. If you do not accept the change, you can cancel before it takes effect.

Failed and late payment

If a payment fails, Stripe may retry it and we will notify you. If a payment remains outstanding after we have given you notice and a reasonable opportunity to pay, we may suspend paid features or move your workspace to the Free plan until payment is made. For amounts invoiced under a written agreement, we may charge interest on overdue sums as permitted by the Late Payment of Commercial Debts (Interest) Act 1998.

Refunds

Fees are non-refundable, including for partial billing periods and unused agents or usage, except where a refund is required by law or we have agreed to one in writing.

5. Your content and data

Customer Data

"Customer Data" means the data you or your agents submit to the Service, including agent identities and metadata, the policies you configure, approval records, and the audit events and decisions the Service records about your agents' actions. As between you and us, you own Customer Data. You grant us the rights we need to host, process and display Customer Data in order to provide, secure and support the Service. We process Customer Data only on your instructions, as set out in these Terms and your use of the Service.

No prompts or completions

Bulwark governs on metadata: which agent, which action, which resource, and on whose behalf. It does not store or display the prompts sent to your models or the completions they return. Content-bearing fields are removed at ingest, before anything is stored. You should not send raw prompts, completions, customer documents or special category personal data to the Service, and you must not rely on our filtering as your only safeguard.

Data protection

For the purposes of UK data protection law, you are the controller and we are your processor for personal data contained in Customer Data. We are the controller of account data, such as the names, work email addresses and billing contacts of your users, and of data collected through this website. Our Privacy Policy explains how we handle personal data for which we are controller. A Data Processing Addendum covering our processing of Customer Data is available on request from info@bastionshieldtechnologies.com.

Security

We use technical and organisational measures designed to protect Customer Data, including encryption in transit, tenant isolation, role-based access controls, data minimisation at ingest, an append-only hash-chained audit trail, and regular backups. No system is completely secure, and you remain responsible for securing your own systems, credentials and integrations.

Retention

Audit events are retained for the period that applies to your plan (7 days on Free, 30 days on Team, 12 months on Business, and as agreed in writing on Enterprise), after which they may be deleted. You can export your evidence at any time while your account is active.

Export and deletion on termination

Before closing your account you can export your Customer Data from the dashboard. What happens to Customer Data after termination is described in section 13.

6. Third-party services

Providers we use

We use the following third parties to provide the Service and run our business:

• Fly.io: application hosting and the managed Postgres database for the Service.
• Amazon Web Services: hosting of this website (AWS Amplify and Amazon CloudFront) and storage of database backups (Amazon S3).
• Resend: transactional email, such as sign-up, password reset and confirmation emails.
• Stripe: payment processing, subscriptions and invoices. Stripe processes your payment details under its own terms; we do not store full card numbers.
• Slack: internal notifications to our team when a new account is created.
• Formspree: backup delivery of website contact form submissions if our email delivery fails.
• Zoho: our company email, used when you correspond with us.

Our Privacy Policy describes what each provider processes. We may change these providers. Where a change affects the processing of Customer Data, we will notify you as described in our Data Processing Addendum.

Services you connect

You may connect Bulwark to services that you choose and control, such as model providers, MCP servers, identity providers, Slack, PagerDuty, SIEM tools and webhooks. Those services are provided by third parties under their own terms, and you are responsible for your accounts with them, for the data you send to them, and for their behaviour. We are not responsible for third-party services that you connect, and their availability may affect what Bulwark can do.

7. Acceptable use

You must not use the Service, or allow anyone else to use it, to:

• break any applicable law or regulation, or infringe the rights of others;
• attempt to gain unauthorised access to the Service, other customers' workspaces, or our infrastructure;
• attack, overload or disrupt the Service, including through denial-of-service activity or transmitting malicious code;
• exceed or circumvent rate limits, quotas or plan limits, or access the website or Service by automated means other than through the API and SDKs as documented;
• submit data you have no lawful basis to process, or send deliberately falsified telemetry to produce misleading audit records;
• share accounts, passwords or API keys with anyone outside your organisation, or embed API keys where third parties can read them;
• reverse engineer the Service, except to the extent applicable law permits this despite a contractual restriction.

Security testing and responsible disclosure

Security testing of the Service, including penetration testing and vulnerability scanning, is permitted only with our prior written permission and within the scope we agree. If you find a vulnerability, please report it to us privately using the contact in our security.txt file and give us a reasonable opportunity to fix it before disclosing it publicly.

8. Availability, support and changes

We work to keep the Service available and reliable, but we do not guarantee uninterrupted or error-free operation. There is no service level agreement, uptime commitment or response-time commitment on the Free or Team plans. A contractual service level agreement applies only to a custom plan (Business or Enterprise), and only where it is set out in that plan's written order form or agreement.

We may carry out scheduled maintenance, and will try to give advance notice of maintenance that we expect to cause significant disruption. Because the Service can sit in the path of your agents' actions, you are responsible for deciding how your systems behave if the Service is unavailable.

Support is provided through the channels shown for your plan. We may change, add or remove features. We will give you reasonable notice before a change that materially reduces the core functionality of a paid plan you are subscribed to, and if you do not accept it you may cancel.

9. Our intellectual property

We and our licensors own all rights in the Service, the website and their content, including software, designs, text, graphics and logos, and all improvements to them. Except for the licence in section 2 and any package licence, these Terms do not grant you any rights in our intellectual property. You may not reproduce, distribute or create derivative works of website content without our written permission.

If you give us feedback or suggestions about the Service, you grant us a perpetual, worldwide, royalty-free licence to use them for any purpose without obligation to you. This does not give us any rights in your Customer Data.

10. Disclaimers

Bulwark is a governance and decision-support tool. It helps you identify, control and record what your AI agents do, but it is not a guarantee against misuse, error or harm by your agents, and it is not a substitute for your own security controls, testing, human oversight or professional advice. Bulwark evaluates and records what your integrations report to it; it has no independent visibility into your systems.

Nothing on this website or in the Service is legal, regulatory or compliance advice. Bulwark produces evidence that can support your own compliance work. It does not certify you, and using it does not make you compliant with any law, regulation or standard. Where we describe how Bulwark relates to a framework, we mean that the evidence it produces is designed to support your work against that framework. Whether you meet your obligations depends on your systems, your controls and your assessors.

Except as expressly stated in these Terms, and to the extent permitted by law, the Service and this website are provided "as is" and "as available", and we exclude all implied warranties, conditions and terms, including as to satisfactory quality and fitness for a particular purpose.

11. Limitation of liability

Nothing in these Terms limits or excludes liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot be limited or excluded under the law of England and Wales.

Subject to that:

• neither party is liable for any indirect or consequential loss, or for any loss of profit, revenue, business, goodwill or anticipated savings, whether arising in contract, tort (including negligence), breach of statutory duty or otherwise;
• we are not liable for loss arising from the acts or omissions of your AI agents, your integrations, or third-party services you connect, except to the extent caused by our breach of these Terms;
• our total aggregate liability arising out of or in connection with these Terms and the Service is limited to the greater of the fees you paid us for the Service in the 12 months before the event giving rise to the claim, or GBP 100.

The cap above applies to the Free and Team plans. For a Business or Enterprise plan, a different liability cap applies only where the written order form or agreement for that plan sets one; otherwise the cap above applies.

These limits reflect the fees we charge and the allocation of risk between businesses, and you agree they are reasonable. The limits on our liability do not apply to your obligation to pay fees or to your obligations under section 12.

12. Indemnification

You will indemnify us against losses, damages, costs and reasonable legal fees arising from any third-party claim to the extent it results from (a) Customer Data or other material you submit, including a claim that it infringes someone's rights or was processed without a lawful basis, (b) your use of the Service in breach of section 7 or applicable law, or (c) the actions of AI agents you operate.

We will notify you promptly of any such claim, allow you to control its defence and settlement (provided you do not settle in a way that imposes obligations on us without our consent), and give you reasonable cooperation at your expense.

13. Suspension and termination

By you

You may stop using the Service at any time. To end a paid subscription, cancel as described in section 4. An admin can also close your organisation from the dashboard settings. Closing an organisation deletes it, its users, agents, policies, API keys and audit trail immediately and permanently, so export anything you need first.

By us

We may terminate your account on 30 days' notice for any reason. We may suspend or terminate your access immediately, or on such notice as is practicable, if you materially breach these Terms (including section 7) and, where the breach can be remedied, do not remedy it within 14 days of our notice; if you fail to pay as described in section 4; if your use poses a security risk to the Service or others; or where required by law. Where we terminate for convenience, we will refund any fees prepaid for the period after termination.

Effect of termination

On termination your licence ends and you must stop using the Service. Unless you closed your organisation yourself, you will have 30 days to export your Customer Data, after which we will delete it in line with our retention practices, except where we are required by law to keep it. Backup copies are removed as our backup cycle rotates. Fees due before termination remain payable.

Sections that by their nature should continue after termination survive it, including those on fees owed, intellectual property, disclaimers, limitation of liability, indemnification, confidentiality, governing law and dispute resolution.

14. Governing law and jurisdiction

These Terms, and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with them or their subject matter, are governed by the law of England and Wales. Subject to section 15, the courts of England and Wales have exclusive jurisdiction.

15. Dispute resolution

If a dispute arises, either party may give the other written notice describing it. Each party will then make a senior representative available, and both will try in good faith to resolve the dispute informally within 30 days of the notice. If it is not resolved within that period, either party may bring proceedings in the courts of England and Wales.

Nothing in this section prevents either party from seeking urgent injunctive or other interim relief from a court at any time.

16. Notices for customers outside the UK

The Service is designed for businesses. If you use it from outside the United Kingdom, you are responsible for complying with the laws that apply to you. Where mandatory consumer protection or other local laws give you rights that cannot be excluded or limited by contract, nothing in these Terms affects those rights.

17. Changes to these Terms

We may update these Terms from time to time. The date at the top of this page shows when they were last changed. For material changes, we will notify account admins by email or in the dashboard at least 30 days before the change takes effect, unless the change is required sooner by law. If you continue to use the Service after a change takes effect, the updated Terms apply. If you do not agree with a material change, you may cancel before it takes effect.

18. General

Confidentiality

Each party will keep confidential the non-public information it receives from the other in connection with the Service and will use it only to perform these Terms. This does not apply to information that is or becomes public through no fault of the receiving party, or that must be disclosed by law. This obligation survives termination.

Other terms

• Events outside our control. Neither party is liable for delay or failure caused by events beyond its reasonable control, other than failure to pay.
• Assignment. You may not assign or transfer these Terms without our written consent. We may assign them to an affiliate or to a successor of our business.
• Severability. If any provision is found invalid or unenforceable, the rest of these Terms continue in full force and effect.
• No waiver. A delay in enforcing a right is not a waiver of it.
• Entire agreement. These Terms, together with any order form, Data Processing Addendum or service agreement signed by both parties, are the entire agreement between us about their subject matter.
• Third-party rights. No one other than the parties has any right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.

19. Contact

If you have any questions about these Terms, please contact us:

Bastion Shield Technologies Ltd
Registered in England and Wales, company number 17105460. Registered office as shown on the Companies House register.
Email: info@bastionshieldtechnologies.com

Formal legal notices should be sent by email to the address above and, where required, to our registered office.