These Terms of Service ("Terms") are a legal agreement between you ("Customer," "you," or "your") and Straitum ("Straitum," "we," "us," or "our") governing your access to and use of the Straitum security risk platform at app.straitum.com and the marketing website at straitum.com (collectively, the "Services"). By accessing or using the Services, you agree to be bound by these Terms. If you do not agree, do not use the Services.
You must be at least 18 years old and have the legal authority to enter into contracts on behalf of yourself or your organization to use the Services. By creating an account, you represent and warrant that all information you provide is accurate and that you will keep it current.
You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Notify us immediately at hello@straitum.com if you suspect unauthorized access.
Straitum is a unified security risk platform for lean security teams. The Services include:
We reserve the right to modify, suspend, or discontinue any aspect of the Services with reasonable notice.
You agree to use the Services only for lawful purposes and in accordance with these Terms. You must not:
You retain full ownership of all data you upload, import, or create within the Services ("Customer Data"). These Terms do not grant Straitum any ownership rights in your Customer Data.
You grant Straitum a limited, non-exclusive license to process your Customer Data solely to provide and improve the Services. We will not use your Customer Data for any other purpose, including training AI models, without your explicit written consent.
We implement reasonable security measures to protect your Customer Data, as described in our Privacy Policy. You are responsible for ensuring that any data you upload to the Services complies with applicable laws, including obtaining any necessary consents from individuals whose data may be included.
You may export your Customer Data at any time using the export features within the platform. Upon account termination, we will delete your Customer Data within 30 days upon written request, subject to applicable legal retention obligations.
The Services, including all software, interfaces, content, and documentation, are the exclusive property of Straitum and its licensors, protected by copyright, trademark, and other intellectual property laws. These Terms do not grant you any rights to use Straitum's trademarks, logos, or brand elements without prior written consent.
If you provide feedback, suggestions, or ideas regarding the Services, you grant us a non-exclusive, royalty-free, perpetual license to use that feedback without restriction or obligation to you.
Each party agrees to keep the other's confidential information ("Confidential Information") strictly confidential and not to disclose it to any third party without prior written consent, except as required by law. "Confidential Information" includes technical data, business plans, customer information, pricing, and any other information designated as confidential. This obligation survives termination of these Terms for 3 years.
For demo sessions where you share security data under a mutual NDA, the NDA terms govern. If no NDA is in place, your data shared during a demo will be treated as Confidential Information under this section and will not be retained after the session without your written consent.
During the early access period, access to the Services may be provided free of charge or under separate written agreement. Straitum reserves the right to introduce paid subscription tiers with at least 30 days' written notice to existing users.
If paid plans are introduced, the following terms will apply:
The Services integrate with or import data from third-party tools (e.g., Tenable, Qualys, CrowdStrike, Microsoft Defender). Your use of those third-party services is governed by their respective terms and privacy policies. Straitum is not responsible for the accuracy, availability, or practices of any third-party service.
THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
STRAITUM DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF VULNERABILITIES. THE SERVICES ARE A RISK MANAGEMENT TOOL — THEY DO NOT GUARANTEE SECURITY OR PREVENT SECURITY INCIDENTS. YOU ARE SOLELY RESPONSIBLE FOR YOUR SECURITY PROGRAM AND DECISIONS.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, STRAITUM AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, GOODWILL, OR BUSINESS, ARISING FROM OR RELATED TO THESE TERMS OR YOUR USE OF THE SERVICES, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN NO EVENT WILL STRAITUM'S TOTAL AGGREGATE LIABILITY EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID TO STRAITUM IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) ONE HUNDRED U.S. DOLLARS ($100).
You agree to indemnify, defend, and hold harmless Straitum and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising from: (a) your use of the Services in violation of these Terms; (b) your Customer Data; (c) your violation of any applicable law or third-party rights; or (d) your negligence or willful misconduct.
These Terms are effective when you first access the Services and remain in effect until terminated. Either party may terminate these Terms at any time with written notice.
We may suspend or terminate your access immediately, without prior notice, if:
Upon termination, your right to access the Services ceases immediately. Sections 4.1, 5, 6, 9, 10, 11, and 13 survive termination.
These Terms are governed by the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Any disputes arising from these Terms will be resolved through binding arbitration under the rules of the American Arbitration Association, conducted in English. You waive the right to participate in class-action lawsuits or class-wide arbitration.
Notwithstanding the foregoing, either party may seek injunctive relief in any court of competent jurisdiction to protect intellectual property or confidential information.
Questions about these Terms? Contact us at hello@straitum.com