By using this site or the Keystone platform you agree to these terms. If you are accepting on behalf of a company, you confirm you are authorised to bind it. If you do not agree, do not use the service.

Keystone is in private beta. Features may change, and availability during the beta is provided on a commercially reasonable basis rather than under a formal uptime commitment. Design-partner and beta pricing is stated in your order and is not an open-ended entitlement unless we say so in writing.

• Subscriptions are annual unless your order states a multi-year term, and prices are the ones on your order form.
• Multi-year discounts apply for the committed term; ending early does not retroactively convert to annual pricing.
• Invoices are payable within thirty days of issue unless agreed otherwise.
• Fees are exclusive of taxes, which are added where applicable.

• Keep your account credentials secure and tell us promptly about any suspected compromise.
• Only connect cloud accounts you are authorised to connect.
• Do not attempt to breach, overload or reverse engineer the service, or use it to break the law.
• Do not resell or provide the service to third parties without a written MSSP or partner agreement.

Automations are disabled by default and only run when you enable them. When you enable one, you authorise Keystone to perform that specific action in your environment on your behalf. You remain responsible for choosing which automations to enable and for the operational consequences of the changes they make. We log every action so you can see exactly what ran and when.

Keystone helps you gather evidence and hold configuration to a standard. It is not an auditor, not a law firm, and does not certify your organisation against any framework. Audit outcomes and regulatory obligations remain yours.

You own your data and the configuration Keystone reads from your environment. We own the platform, its interfaces and its underlying models and content. Feedback you send us may be used to improve the product without obligation, but your data is never used to build features for another customer's benefit in an identifiable form.

Each side will protect the other's non-public information with at least reasonable care and use it only to perform under these terms. This survives termination.

The service is provided as described in our documentation and, apart from that, without further warranty. To the maximum extent permitted by law, neither side is liable for indirect or consequential loss, and our aggregate liability is limited to the fees you paid in the twelve months before the claim. Nothing here limits liability that cannot be limited by law.

Either side may terminate for material breach that is not cured within thirty days of notice. You may disconnect your cloud accounts at any time. On termination we stop collection, and on request we delete your data as described in the privacy policy.

We may update these terms; material changes are notified to customers before they take effect and the date at the top is updated. Questions go to legal@hireken.io.