Terms of Service

1. The Service

TrustFix provides automated scanning of AWS IAM configurations and GitHub Actions workflows to detect security misconfigurations, and generates AI-powered remediation recommendations delivered as GitHub Pull Requests. The Service is designed as a read-only scanning tool — TrustFix never automatically applies changes to your infrastructure. All remediation actions require human review and approval.

2. Account Registration

You must create an account to use the Service. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. You must provide accurate information and keep it current. You must be 18 years or older to use the Service.

3. Acceptable Use

You agree to use the Service only on AWS accounts and GitHub repositories that you own or have explicit authorization to scan. You must not:

• Use the Service to scan accounts or repositories you are not authorized to access
• Attempt to circumvent the Service's security controls
• Use the Service to harm, disrupt, or gain unauthorized access to any system
• Resell or sublicense the Service without written permission
• Reverse engineer the Service or its underlying algorithms

4. AI-Generated Recommendations

TrustFix uses AI to generate Terraform fix recommendations. These recommendations are provided for informational purposes and require human review before implementation. We do not guarantee that AI-generated fixes are complete, accurate, or suitable for your specific environment. You are solely responsible for reviewing, testing, and deciding whether to apply any recommended changes to your infrastructure.

5. Pricing and Payment

The Service is offered on the following plans:

• Free: GitHub Action scanner, detection only
• Pro ($499/month): AI-powered remediation PRs, full dashboard, 50 fixes/month
• Team ($799/month): 200 fixes/month, SOC2 evidence export, multi-account

Subscriptions are billed monthly. You may cancel at any time. Cancellation takes effect at the end of the current billing period. No refunds are provided for partial months.

6. Data and Security

You retain ownership of all data you provide to the Service. You grant us a limited license to access and process your AWS and GitHub data solely to provide the Service. We use read-only access to your AWS accounts and never store your AWS credentials. See our Privacy Policy for full details on data handling.

7. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR THAT IT WILL DETECT ALL SECURITY MISCONFIGURATIONS IN YOUR ENVIRONMENT. YOUR USE OF THE SERVICE AND ANY REMEDIATION ACTIONS YOU TAKE BASED ON ITS RECOMMENDATIONS ARE AT YOUR OWN RISK.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, VIKAVI SECURITY LLC SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR BUSINESS, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE AMOUNT YOU PAID US IN THE THREE MONTHS PRECEDING THE CLAIM.

9. Indemnification

You agree to indemnify and hold harmless Vikavi Security LLC and its members, officers, and agents from any claims, damages, or expenses arising from your use of the Service, your violation of these Terms, or your violation of any third party's rights.

10. Termination

We may suspend or terminate your account if you violate these Terms. You may terminate your account at any time by contacting us. Upon termination, your access to the Service will cease and your data will be deleted within 30 days.

11. Governing Law

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law principles. Any disputes shall be resolved in the courts of Delaware.

12. Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by email. Continued use of the Service after changes constitutes acceptance of the updated Terms.

13. Contact

Vikavi Security LLC, operating as TrustFix
Delaware, United States
Email: support@trustfix.dev