Aarmos is a governance runtime that you run yourself — in your browser, on your device, and through the Aarmos CLI and local proxy. You configure it with your own credentials for third-party AI providers and connected services. Policy evaluation, receipt signing, and key custody happen on your device and do not require our cloud. A limited set of server-side surfaces (accounts, entitlements, optional evidence delivery, and narrow request proxies) is described in our Privacy notes; outside those surfaces, Aarmatix does not host, store, or process your prompts, outputs, keys, or connector payloads.

You must be at least 18 years old and legally able to enter into a binding contract. If you use the Service on behalf of an organization, you represent that you are authorized to bind that organization to these Terms. You are responsible for maintaining the confidentiality of any account credentials, device password, and recovery code, and for all activity conducted through them.

You retain all rights to the prompts, files, data, keys, and other content you provide to or through the Service ("Your Content"). You grant Aarmatix a limited licence to process Your Content solely as necessary to operate the Service for you. You are solely responsible for Your Content and for ensuring you have the rights and permissions needed to use it with the Service and with any third-party provider.

The Service is designed to connect to third-party AI models, APIs, and other services chosen by you ("Third-Party Services"). Your use of Third-Party Services is governed by their own terms and privacy policies. Aarmatix does not control, endorse, or assume responsibility for Third-Party Services, and is not a party to your relationship with their providers. Fees, rate limits, availability, and data handling by Third-Party Services are between you and the provider.

You agree not to use the Service to:

• violate any applicable law, regulation, or third-party right;
• infringe intellectual property, privacy, or publicity rights;
• generate or distribute content that is unlawful, defamatory, harassing, deceptive, or sexually exploitative of minors;
• attempt to reverse engineer, decompile, or extract source code from the Service, except to the extent that applicable law expressly permits;
• probe, scan, disrupt, or overload the Service, Third-Party Services, or their infrastructure;
• build a competing product using the Service, or use the Service to train a machine-learning model that competes with it;
• use the Service to make automated decisions in domains that require human oversight without appropriate safeguards.

You are accountable for the actions your configured agents take through the Service, including any messages sent, data modified, payments initiated, or resources consumed.

Community edition. Community is our free edition. We expect it to remain free, and we intend to preserve a meaningful free experience. Community capabilities and limits may evolve as the Service develops. Receipts, policies, and exports you have already produced remain yours and remain independently verifiable offline with the open, independently distributed avar verifier, regardless of any plan change.

The Service is offered as three plans — Community, Team, and Enterprise — described on the Pricing page. Fees are payable in advance. Refunds are governed by our Refunds, which forms part of these Terms and provides a 14-day money-back guarantee on your first purchase and prorated refunds on annual plans within 30 days. You are responsible for all taxes associated with your purchases other than taxes based on our net income. We may change prices and plan features prospectively; changes will not affect the current paid term.

Merchant of Record. Our order process is conducted by our online reseller Paddle.com. Paddle.com is the Merchant of Record for all our orders. Paddle provides all customer service inquiries and handles returns. Payment, billing, tax collection, invoicing, and refund mechanics are governed by the Paddle Checkout Buyer Terms.

Free trials and features labelled "beta", "preview", or similar are provided as-is, may be modified or discontinued at any time, and may be subject to additional terms presented at the time of access.

The Service, including its software, design, documentation, trademarks, and all related intellectual property, is owned by Aarmatix or its licensors and is protected by law. Except for the limited right to use the Service in accordance with these Terms, no rights are granted to you by implication, estoppel, or otherwise.

If you submit suggestions, ideas, or feedback, you grant Aarmatix a perpetual, irrevocable, worldwide, royalty-free licence to use them for any purpose without obligation to you.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WITHOUT LIMITATION IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE. AARMATIX DOES NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT OUTPUTS FROM AI MODELS WILL BE ACCURATE, COMPLETE, OR SUITABLE FOR ANY PARTICULAR PURPOSE. YOU ARE RESPONSIBLE FOR REVIEWING AND VERIFYING OUTPUTS BEFORE RELYING ON THEM.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AARMATIX AND ITS AFFILIATES, OFFICERS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. AARMATIX'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS RELATING TO THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE AMOUNTS YOU PAID TO AARMATIX FOR THE SERVICE IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS (US$100).

You agree to defend, indemnify, and hold harmless Aarmatix and its affiliates from and against any claims, damages, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to (a) Your Content, (b) your use of the Service or any Third-Party Service, (c) your violation of these Terms or applicable law, or (d) the governance, policies, decision definitions, evaluators, or inputs you configured or supplied.

You may stop using the Service at any time. We may suspend or terminate your access to the Service, with or without notice, if we reasonably believe you have violated these Terms or created risk or possible legal exposure for us, other users, or third parties. Sections that by their nature should survive termination (including sections 3, 5, 8–12, 14, and 16–18) will survive.

These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict-of-laws rules. The state and federal courts located in Delaware will have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Service, and you consent to personal jurisdiction there. Nothing in this section limits any non-waivable rights you have under the laws of your country of residence.

We may update these Terms from time to time. If we make material changes, we will update the effective date at the top of this page and, where appropriate, provide additional notice. Your continued use of the Service after the changes take effect constitutes your acceptance of the updated Terms.

Receipts and other evidence the Service produces are designed to be append-only: once written, an entry is not edited or silently removed. Operational content is separate from evidence — archiving an agent or clearing a conversation removes the operational content while preserving the evidence metadata needed to keep the record verifiable. Evidence retention on our servers varies by plan as described on the Pricing page; evidence produced on your device stays under your control. You can export your receipts at any time and verify them offline with the open, independently distributed avar verifier, independently of Aarmatix.

The Evidence Relay is an optional feature available on Team and Enterprise plans. It is off unless you enable it. When enabled, governance evidence your device signs is copied to your workspace so that your teammates, exports, and compliance reviews can reach it.

What the Relay does. The Relay transports and stores governance evidence. It does not participate in governance: it does not evaluate policy, does not alter verdicts, and does not transform, normalize, enrich, repair, or interpret what you send. Evidence is stored as your device signed it, so what you retrieve is byte-for-byte what you produced.

What the Relay holds. Evidence is accepted under a published evidence contract consisting of typed sections — the decision, the participants, the verdict, the chain linkage, the producer, and any namespaced extensions you declare — together with per-section and per-record size limits. Policy documents are held as a separate class of evidence with their own retention, access, and encryption settings. Content is deduplicated by hash and isolated to your workspace. Evidence recorded before the evidence contract took effect is retained exactly as signed and is not rewritten.

What the Relay does not hold. The Relay is not a store for prompts, model outputs, conversation transcripts, tool results, credentials, or connector traffic. Fields your own policies choose to record are recorded as you supply them; you are responsible for what your policies write into evidence.

Where the Relay runs. The Relay may be hosted by Aarmatix, run against object storage you own, or run entirely inside your environment. Behavior, evidence contract, and verification results are the same in every case; hosting affects who operates the storage, not what the record means.

Availability and independence. Enforcement, receipt signing, and your on-device chain do not depend on the Relay. An interruption of the Relay does not stop the Service from governing on your device. Daily ingest limits and plan-based retention apply and are described on the Pricing page; where an ingest limit is reached, the Service continues to govern and sign locally.

Your evidence is portable. You may export your evidence at any time in an open, documented format and verify it offline, without an account and without contacting Aarmatix.

The Service evaluates the governance you declare, composes the contributions of the participants you configure into a verdict according to its published composition rules, and produces evidence you can verify independently of Aarmatix. Aarmatix records what occurred; it does not determine what ought to occur.

You are responsible for: which actions you route through the Service and choose to govern; the content of your policies, grants, and classifications; any evaluator you bind to a decision, including its behaviour when it cannot evaluate; the accuracy of the inputs you supply, which the Service records as supplied and does not independently retrieve or verify; whether your declared governance meets your legal, regulatory, contractual, and organizational obligations; and any activity that is not routed through the Service. See the shared responsibility model and governance guarantees.

AARMATIX DOES NOT WARRANT THAT GOVERNANCE CONFIGURED BY YOU IS CORRECT, COMPLETE, OR SUFFICIENT FOR ANY LEGAL, REGULATORY, CONTRACTUAL, OR BUSINESS PURPOSE, OR THAT ANY VERDICT PRODUCED BY THE SERVICE REFLECTS AN APPROPRIATE OUTCOME FOR YOUR ORGANIZATION.

The Service is not legal, regulatory, compliance, accounting, financial, medical, or safety advice, and is not a substitute for professional judgement or for controls your organization is required to operate. You remain the decision-maker of record for every action taken by or on behalf of your organization, whether or not that action was governed by the Service.

Questions about these Terms can be sent through the Support page.