Terms of Service

1. Acceptance of Terms

By accessing or using SoterAI's platform, APIs, dashboard, marketplace integrations, or related services (collectively, the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.

If you do not agree to these Terms, you must not access or use the Service.

2. Description of Service

SoterAI provides defense-in-depth software for AI risk reduction. The Service includes prompt injection detection, data-loss prevention, content moderation, red-team analysis, security policy management, audit logging, and integration connectors for workflow automation platforms.

SoterAI provides defense-in-depth software for AI risk reduction. It does not guarantee prevention of every attack, disclosure, outage, or model failure. The Service is designed to reduce risk and provide security tooling, not to serve as a complete security solution in isolation.

3. Accounts and Access

To use the Service, you must create an account and provide accurate, complete registration information. You are responsible for:

• Maintaining the confidentiality of your account credentials
• All activities that occur under your account
• Promptly notifying us of any unauthorized access to your account
• Ensuring that account access is limited to authorized individuals within your organization

We reserve the right to suspend or terminate accounts that violate these Terms or that we reasonably believe have been compromised.

4. API Keys and Security Responsibilities

API keys are generated through the dashboard and are shown in full only once at the time of creation. API keys are stored in encrypted form and cannot be retrieved after creation. If a key is lost, you must revoke it and generate a new one.

You are responsible for:

• Keeping API keys confidential and secure
• Not embedding API keys in client-side code, public repositories, or unencrypted storage
• Rotating keys periodically and revoking compromised keys immediately
• Monitoring API usage for anomalous activity

SoterAI is not liable for unauthorized use of your API keys resulting from your failure to secure them.

5. Acceptable Use

You agree to use the Service only for lawful purposes and in compliance with these Terms. Acceptable use includes:

• Scanning prompts and AI outputs for security threats in your own applications
• Configuring security policies for your organization's AI workflows
• Using red-team and security testing features against systems you own or are explicitly authorized to assess
• Integrating SoterAI with workflow platforms for automated security analysis
• Reviewing audit logs and security reports for compliance purposes

6. Prohibited Use

You may not use the Service to:

• Conduct security testing, red-teaming, or penetration testing against systems you do not own or are not explicitly authorized to assess
• Circumvent or attempt to circumvent rate limits, access controls, or security measures
• Reverse-engineer, decompile, or disassemble any part of the Service
• Resell, sublicense, or redistribute the Service or API access without authorization
• Transmit malware, viruses, or other harmful code through the Service
• Use the Service to facilitate illegal activities, harassment, or discrimination
• Submit content that infringes intellectual property rights of third parties
• Attempt to access other users' data, accounts, or API keys
• Use automated means to scrape, crawl, or extract data from the dashboard or documentation beyond normal API usage

7. AI Security Limitations

Users are responsible for configuring security policies correctly for their use case. SoterAI provides tools and defaults, but the effectiveness of security analysis depends on proper configuration, threshold settings, and policy definitions.

You acknowledge that:

• No security system can detect all threats with 100% accuracy
• False positives and false negatives are inherent in any detection system
• SoterAI should be used as part of a defense-in-depth strategy, not as a sole security control
• You remain responsible for lawful data processing, application security, access control, human oversight, and incident response
• Detection capabilities may vary based on the type, language, and sophistication of threats

8. Customer Content and Data

You retain all rights to the content you submit to the Service for analysis ("Customer Content"). By submitting content, you grant SoterAI a limited, non-exclusive license to process that content solely for the purpose of providing the Service.

SoterAI processes text content (prompts, AI outputs) server-side for security analysis. Raw text is processed in-memory and is not persisted to long-term storage. Threat detection summaries (risk scores, categories, timestamps, actions taken) are stored for audit and dashboard display.

We do not use Customer Content to train machine learning models without explicit opt-in consent.

9. Marketplace Integrations

SoterAI provides integration connectors for workflow automation platforms including n8n, Zapier, Make, Dify, and Botpress. Marketplace integrations (n8n, Zapier, Make, Dify, Botpress) may be subject to additional third-party platform terms.

Integration nodes are stateless connectors that transmit data to SoterAI's API for processing and return results to the calling platform. SoterAI is not responsible for the data handling practices, availability, or security of third-party platforms.

You are responsible for reviewing and complying with the terms of service and privacy policies of any third-party platforms you connect to SoterAI.

10. Billing and Subscriptions

Paid plans are billed on a monthly or annual basis as specified at the time of subscription. All fees are non-refundable except as required by applicable law or as otherwise stated in your order form.

• Subscription renewals are automatic unless cancelled before the renewal date
• Price changes will be communicated at least 30 days before taking effect
• Downgrading your plan may result in loss of access to certain features or data retention limits
• Overdue payments may result in service suspension after reasonable notice

11. Free Plan Limitations

Free plan usage is subject to rate limits and may be reduced or discontinued. Free plans are intended for evaluation, development, and small-scale use.

• Free plan rate limits may be adjusted without prior notice
• Some features, integrations, or advanced capabilities may not be available on the free plan
• Audit log retention may be shorter on the free plan compared to paid plans
• SoterAI reserves the right to discontinue free plans with 30 days' notice
• Free plan accounts inactive for more than 90 days may be scheduled for deletion

12. Service Availability

We aim to provide high availability for the Service but do not guarantee uninterrupted access. The Service may be temporarily unavailable due to:

• Scheduled maintenance (communicated in advance where feasible)
• Unplanned outages or infrastructure failures
• Force majeure events beyond our reasonable control
• Security incidents requiring emergency remediation

Service-level commitments, where applicable, are defined in the applicable order form or published service-level documentation for your plan tier.

13. Beta and Developer-Preview Features

SoterAI may offer features designated as "beta," "preview," "experimental," or "developer preview." These features:

• Are provided "as-is" without warranties of any kind
• May be incomplete, contain bugs, or behave unexpectedly
• May be modified, suspended, or discontinued without notice
• Should not be relied upon for production security workloads unless explicitly stated otherwise
• May have separate or additional terms communicated at the time of access

Feedback provided on beta features may be used by SoterAI to improve the Service without obligation or compensation.

14. Intellectual Property

SoterAI and its licensors retain all rights, title, and interest in the Service, including all software, algorithms, documentation, branding, trademarks, and related intellectual property. These Terms do not grant you any rights to SoterAI's intellectual property beyond the limited right to use the Service as described herein.

You retain all intellectual property rights in your Customer Content. SoterAI does not claim ownership of content you submit for analysis.

15. Disclaimers

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ACCURACY.

SoterAI does not warrant that:

• The Service will detect all security threats or prevent all attacks
• The Service will be uninterrupted, error-free, or free of vulnerabilities
• Detection results will be accurate, complete, or suitable for any particular compliance requirement
• The Service will meet your specific security or regulatory requirements

16. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, SOTERAI AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM:

• Your use of or inability to use the Service
• Any unauthorized access to or alteration of your data
• Any failure of the Service to detect a security threat
• Actions taken or not taken based on Service outputs
• Any third-party conduct or content on the Service

IN NO EVENT SHALL SOTERAI'S TOTAL LIABILITY EXCEED THE AMOUNTS PAID BY YOU TO SOTERAI IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR ONE HUNDRED DOLLARS ($100), WHICHEVER IS GREATER.

17. Termination

You may terminate your account at any time by contacting support@soterai.dev or through the account settings in the dashboard.

SoterAI may suspend or terminate your access to the Service if:

• You violate these Terms or any applicable policies
• Your account is used for prohibited activities
• Required by law or regulation
• Your account has been inactive for an extended period (with prior notice)

Upon termination, your right to use the Service ceases immediately. We may retain certain data as required by law or for legitimate business purposes, as described in our Privacy Policy.

18. Changes to Terms

We may update these Terms from time to time. If we make material changes, we will notify you by posting the updated Terms on our website and updating the "Last Updated" date. For significant changes, we may also provide notice via email or an in-dashboard notification.

Your continued use of the Service after the effective date of revised Terms constitutes acceptance of the updated Terms. If you do not agree to the revised Terms, you must discontinue use of the Service.

19. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the jurisdiction in which SoterAI is incorporated, without regard to conflict of law principles. Any disputes arising from or relating to these Terms or the Service shall be resolved in the courts of that jurisdiction.

If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.

20. Contact Information

If you have questions or concerns about these Terms, please contact us:

• General support: support@soterai.dev
• Security concerns: security@soterai.dev

21. Last Updated

These Terms of Service were last updated on June 2026.