Terms of Service

Asyrx provides AI Agent Action Security and decision-support intelligence for proposed actions by AI agents, automated systems, applications, and related software. Depending on configuration, the Services may evaluate proposed actions and return Action Risk Scores, Blast Radius Scores, risk factors, reason codes, behavioral or policy context, confidence information, and recommended controls.

Asyrx does not, by default, authorize, approve, deny, execute, or automatically block customer transactions or actions. The customer remains responsible for its own authorization, execution, policies, configurations, human review, and operational decisions. A customer may use Asyrx output as an input to its own systems, but the customer determines how that output is interpreted and acted upon.

• Access to an Enterprise Sandbox, Agent Risk Assessment, pilot, beta, or other evaluation environment may be invitation-only, approval-only, time-limited, usage-limited, or subject to additional written terms.
• Submitting an access request does not guarantee acceptance. We may verify company domain, role, title, business use case, expected action volume, security requirements, and other qualification information.
• Public or personal email addresses may require manual review and may not be eligible for automatic access.
• Sandbox and evaluation environments are not intended for production reliance unless Asyrx expressly agrees otherwise in writing.

You are responsible for safeguarding account credentials, API keys, tokens, webhook secrets, and other authentication materials. You must promptly notify Asyrx if you suspect unauthorized access or credential compromise. You may not share credentials in a manner that defeats account, organization, role, or usage restrictions.

“Customer Data” means data, content, metadata, configuration, action context, policies, identifiers, and other information submitted to the Services by or for you. As between the parties, you retain your rights in Customer Data. You grant Asyrx a limited right to host, process, transmit, analyze, and otherwise use Customer Data only as necessary to provide, secure, maintain, support, and improve the Services as permitted by the applicable agreement and law.

You are responsible for ensuring that you have the rights, notices, consents, and lawful basis necessary to submit Customer Data. You should minimize the data provided to Asyrx and avoid submitting passwords, authentication secrets, payment-card data, special-category data, protected health information, or other highly sensitive content unless specifically necessary, lawful, supported by the Services, and covered by an appropriate Enterprise Agreement.

Asyrx may generate service metadata such as request identifiers, timestamps, response codes, latency, risk-engine version, feature usage, error information, aggregate statistics, and security logs (“Service Data”). Asyrx may use Service Data to operate, secure, troubleshoot, measure, and improve the Services, subject to applicable law and contractual restrictions. Asyrx will not automatically use private Customer Data to train cross-customer models unless the applicable agreement and required permissions expressly allow it.

• Validate Asyrx outputs before relying on them for consequential decisions.
• Maintain appropriate authentication, authorization, least-privilege, approval, and execution controls in your own systems.
• Configure thresholds, policies, integrations, destinations, and agents appropriately for your environment.
• Maintain backups, recovery procedures, and safeguards for systems on which AI agents or automated workflows may act.
• Comply with laws, contractual duties, internal policies, and third-party platform terms applicable to your use.
• Avoid treating an Action Risk Score, Blast Radius Score, recommendation, or confidence value as a guarantee of safety, fraud detection, legal compliance, or correctness.

You must comply with the Asyrx Acceptable Use Policy, which is incorporated into these Terms. We may suspend or restrict access where reasonably necessary to address security threats, unlawful activity, abuse, material violations, or risks to the Services or other customers.

The Services may integrate with or demonstrate compatibility with third-party systems such as Salesforce, Shopify, GitHub, cloud services, APIs, or other enterprise applications. Third-party services are governed by their own terms and privacy practices. Asyrx does not control third-party services and is not responsible for their availability, security, changes, or actions. Unless expressly agreed otherwise, Asyrx does not execute third-party transactions on your behalf.

Asyrx and its licensors retain all rights in the Services, APIs, software, documentation, scoring frameworks, taxonomies, risk models, Blast Radius methodology, reason-code systems, interfaces, trademarks, and related technology, excluding Customer Data. No rights are granted except the limited rights necessary to use the Services under these Terms or an Enterprise Agreement.

If you provide suggestions, feedback, or ideas about the Services, you grant Asyrx a perpetual, irrevocable, worldwide, royalty-free right to use that feedback without restriction, provided that Asyrx does not identify you publicly as the source without permission.

Fees, usage commitments, implementation charges, support terms, overages, contract periods, and payment terms are stated in the applicable Order Form or Enterprise Agreement. Except where required by law or expressly stated in an agreement, fees are non-refundable. Asyrx may impose reasonable sandbox, API, storage, or usage limits.

Pre-release, pilot, evaluation, experimental, or beta features may be incomplete, changed, suspended, or discontinued. Unless otherwise agreed in writing, they are provided for evaluation, may have reduced support or availability, and should not be used as the sole control for production-critical or safety-critical decisions.

If the parties exchange non-public business, technical, security, pricing, product, or customer information that is designated confidential or reasonably should be understood to be confidential, each party will use reasonable care to protect it and use it only for the relationship. Confidentiality obligations do not apply to information that is lawfully public, independently developed, rightfully received without restriction, or required to be disclosed by law, subject to lawful notice where permitted. A separate NDA or Enterprise Agreement controls if applicable.

Asyrx maintains technical and organizational measures intended to protect the Services and Customer Data appropriate to the nature and risk of the processing. Security is a shared responsibility. No system can be guaranteed secure, and Asyrx does not warrant that the Services will prevent every malicious, unintended, or high-impact action. Additional information is available on the Security & Compliance page and, where applicable, in an Enterprise Agreement or DPA.

The Services provide software-based risk intelligence and workflow support. They do not provide legal, investment, financial, accounting, regulatory, insurance, or other professional advice. Scores and recommendations are probabilistic or rules-based decision-support outputs and may be incomplete, inaccurate, delayed, or affected by the quality of data provided. You are responsible for independent review appropriate to the consequences of the proposed action.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND EXCEPT AS EXPRESSLY PROVIDED IN AN ENTERPRISE AGREEMENT, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE.” ASYRX DISCLAIMS IMPLIED WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ANY WARRANTY THAT THE SERVICES WILL BE ERROR-FREE, UNINTERRUPTED, OR WILL IDENTIFY EVERY RISK, THREAT, FRAUD, POLICY VIOLATION, OR HARMFUL ACTION.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, GOODWILL, DATA, OR BUSINESS INTERRUPTION, ARISING OUT OF OR RELATING TO THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY.

EXCEPT FOR LIABILITY THAT CANNOT LAWFULLY BE LIMITED AND EXCEPT AS OTHERWISE STATED IN AN ENTERPRISE AGREEMENT, ASYRX’S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICES WILL NOT EXCEED THE FEES PAID OR PAYABLE FOR THE SERVICES GIVING RISE TO THE CLAIM DURING THE TWELVE MONTHS BEFORE THE EVENT GIVING RISE TO LIABILITY; IF NO FEES WERE PAID, THE CAP WILL BE USD $100.

To the extent permitted by law, you will defend and indemnify Asyrx and its affiliates, officers, directors, employees, and contractors against third-party claims arising from your unlawful use of the Services, Customer Data submitted without required rights or permissions, your violation of the Acceptable Use Policy, or your execution or use of actions after receiving Asyrx decision-support output. Enterprise Agreements may contain different indemnity terms.

You may stop using the Services at any time, subject to contractual commitments. Asyrx may suspend or terminate access for material breach, non-payment, security risk, unlawful use, abuse, sanctions concerns, or where necessary to protect the Services. Upon termination, rights to use the Services end. Data return, retention, and deletion are governed by the applicable agreement, DPA, and Privacy Policy.

You may not use the Services in violation of applicable export-control, trade-sanctions, or anti-boycott laws. You represent that neither you nor the organization you represent is prohibited from receiving the Services under applicable law.

We may update the Services and these Terms. Material changes will be posted with a revised date and, where required by law or contract, additional notice. Changes do not retroactively modify signed Enterprise Agreements unless those agreements permit it.

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles.

Except where applicable law or a separate written Enterprise Agreement requires otherwise, disputes will be subject to the jurisdiction of the courts located in Ontario, Canada.

If any provision is unenforceable, it will be modified to the minimum extent necessary and the remaining provisions remain effective. Failure to enforce a provision is not a waiver. You may not assign these Terms without Asyrx’s prior written consent, except as permitted by an Enterprise Agreement. Asyrx may assign these Terms in connection with a merger, reorganization, financing, or sale of all or substantially all relevant assets.