The contract between CipherRun and any team that creates an account, generates an API key, or submits a charge through our billing surface. Read this once before you wire us into your stack.
By creating an account, generating an API key, or submitting a charge to Stripe via /pricing, you agree to these terms. If you are agreeing on behalf of a company, you represent that you have authority to bind that company, and "you" in these terms refers to that company. If you do not agree, do not use the service.
API keys are issued at /admin/apikeys and are prefixed cr_ws_….
Treat them as bearer credentials. You are responsible for any action taken with a key
that is currently bound to your workspace, including actions performed by an employee,
contractor, or attacker who obtained the key. Rotate keys immediately if you suspect
exposure; rotation invalidates the previous key and is logged in workflow_runs
as a step-output reference for the audit trail.
Workspace membership is governed by the admin/editor/viewer RBAC roles defined in
middleware/require-workspace.js. Editors cannot rotate keys; viewers cannot
run workflows. Role escalation is a security event and should be reported via
/security.
You agree not to use CipherRun to:
CipherRun offers three plans at /pricing: Starter
at $299 / month, Team at $599 / month, and Business at
$999 / month. All plans are billed monthly via Stripe and auto-renew at the end of each
period recorded in subscriptions.current_period_end. You can cancel from the
Stripe billing portal at any time; cancellation stops the next renewal but does not
retroactively refund the current period.
Refunds are issued only when required by applicable EU or UK consumer-protection law or as the outcome of a Stripe dispute resolved in your favor. Service credits are not provided for downtime on the free trial — see §5.
CipherRun is operated on a best-effort basis. The system-of-record for component status (API gateway, Stripe webhook reachability, scheduled crons) is /status, which resolves on every render and is not cached. No service-level agreement is included with any plan; the free trial is provided without uptime commitments. If we move past the free trial to paid SLAs, that change will be made on a future revision of these terms with the notice in §11.
You retain all right, title, and interest in the data you upload, POST through the API, or otherwise provide to CipherRun. You grant CipherRun a limited, non-exclusive license to process that data only as necessary to:
workflow_runs, execution_logs, and analytics_events.CipherRun does not use your data to train foundation models, does not sell your data, and does not share it with anyone outside the sub-processor list disclosed in /legal/privacy §4.
You may delete your account at any time from /app; deletion cascades to
workspace membership, API keys, and queued workflows. We may suspend or terminate access
for material breach of these terms with reasonable prior notice where practical, or
immediately where continued access poses a security or billing risk to other tenants.
Post-termination data retention is governed by /legal/privacy; the retention windows in its §5 apply even after an account is closed.
CipherRun retains ownership of the workflow execution engine, the EJS view templates, the
verdict-panel schema documented in workflows/FIELD-CONTRACT.md, the YAML step
type registry, the brand assets, and the documentation at /docs.
You retain ownership of workflows you author, integrations you configure, and any downstream artefacts you build on top of the service. You may export your workflows and run history at any time; re-importing them into a different CipherRun account is explicitly permitted.
The service is provided "as is" and "as available" without warranty of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the verdicts, scores, or threat-intel enrichment produced by workflows are accurate enough to be relied on as the sole basis for a high-stakes business decision.
To the maximum extent permitted by applicable law, CipherRun's aggregate liability for all claims arising in any 12-month period is capped at the fees actually paid by you for the service during the 12 months immediately preceding the event giving rise to the claim. Nothing in these terms waives any statutory right that cannot be excluded by contract in your jurisdiction.
These terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-law principles. The exclusive venue for any dispute is the state or federal courts located in Delaware, except where a mandatory consumer-protection statute in your jurisdiction directs otherwise. This choice-of-law provision is interim and will be reviewed as part of the next SOC 2 Type II audit cycle.
For material changes (anything that affects billing, data handling, liability, or
termination), we provide at least 14 days' notice by email to the address stored in
customers.email and by a Postmark blast to active subscribers. Non-material
changes (clarifications, typos, contact-channel updates) are posted silently with an
updated effective date at the top of this page.
Contract questions, billing disputes, and data-handling escalations: legal@cipherrun.io. Vulnerabilities and abuse reports: /security. We aim to acknowledge within three business days.