Terms of Service

1. Acceptance and authority

By accessing or using Attest, you agree to these terms and the Privacy Policy. If you use Attest for an organization, you represent that you are authorized to accept these terms for that organization. You must be legally able to enter into a binding agreement and must not use Attest if applicable law prohibits you from doing so.

2. Accounts and access

You must provide accurate account information, protect your credentials, and promptly notify us of suspected unauthorized access. Organization administrators control invitations, roles, connected identity providers, campaigns, and access to organization content. You are responsible for activity performed through your account unless caused by our failure to use reasonable safeguards.

3. Permitted use

Subject to these terms and any applicable order or agreement, we grant you a limited, non-exclusive, non-transferable right to use Attest for your organization’s internal business purposes. You may use Attest to conduct readiness assessments, administer governance workflows, manage policy and training campaigns, collect attestations, maintain evidence, and produce reports.

You may not:

• Use Attest unlawfully, deceptively, or to infringe another person’s rights.
• Attempt to bypass access controls, probe non-public systems, introduce malicious code, or disrupt the service.
• Reverse engineer or copy protected portions of the service except where applicable law expressly permits it.
• Use automated means to extract data in a way that materially burdens the service or violates another person’s rights.
• Misrepresent an assessment, attestation, signature, evidence record, identity, or authorization.

4. Customer content and responsibilities

You and your organization retain ownership of content submitted to Attest. You grant us the rights reasonably necessary to host, process, transmit, display, protect, and support that content to provide the service. You are responsible for having the notices, permissions, and lawful basis required to submit workforce, policy, assessment, training, and evidence information.

Attest supports governance and evidence workflows, but it does not provide legal advice, determine regulatory compliance, replace professional judgment, or guarantee that a policy or control will satisfy a particular auditor, regulator, insurer, or court.

5. Third-party services

Attest may connect with identity providers, directory services, communications providers, payment services, or other third-party systems selected by you or your organization. Third-party services are governed by their own terms and privacy practices. We are not responsible for a third-party service’s independent operation, but we remain responsible for our obligations when a provider processes information on our behalf.

6. Fees, subscriptions, and changes

Paid services, subscription periods, usage limits, renewal terms, and fees are described in the applicable order, checkout, or signed agreement. Unless that agreement says otherwise, fees are non-refundable except as required by law. We may improve, update, or change service features while preserving the material value of an active paid service.

7. Intellectual property and feedback

Noderunner and its licensors own Attest, including its software, interfaces, documentation, trademarks, and underlying technology, excluding customer content. If you provide feedback, you allow us to use it without restriction or payment, provided we do not identify you publicly without permission.

8. Suspension and termination

You may stop using Attest at any time. We may suspend or restrict access when reasonably necessary to address a security risk, unlawful activity, material breach, nonpayment, or harm to the service or others. Where practicable, we will provide notice and an opportunity to resolve the issue. Termination does not eliminate obligations that by their nature should survive, including payment, confidentiality, ownership, disclaimers, and limitations of liability.

9. Disclaimers and liability

To the fullest extent permitted by law, Attest is provided “as is” and “as available.” We disclaim implied warranties of merchantability, fitness for a particular purpose, non-infringement, and any warranty that the service will be uninterrupted or error-free.

To the fullest extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenues, goodwill, or data, arising from these terms. Any liability limits in a signed agreement or order govern. Nothing in these terms excludes liability that cannot lawfully be limited.

10. General terms

These terms, together with the Privacy Policy and any applicable order or signed agreement, form the agreement governing your use of Attest. You may not assign the agreement without our consent, except as part of a permitted business reorganization. We may assign it in connection with a merger, reorganization, or sale of the relevant business. If a provision is unenforceable, the remaining provisions remain effective. Failure to enforce a provision is not a waiver.

We may update these terms by posting a revised version and changing the effective date. If a change materially affects an active paid service, we will provide reasonable notice through the service or to the organization’s administrator.