These Terms of Service (“Terms”) govern your access to and use of the StackArc service (“Service”), including the website at stackarc.io, the StackArc scanning platform, and any related reports, dashboards, or documentation. By accessing or using the Service, you agree to be bound by these Terms.
1. The Service
StackArc provides an agentless, read-only Cloud Security Posture Management (CSPM) scanning platform for AWS environments. The Service produces findings, prioritization, compliance mappings, and audit evidence packs based on automated, deterministic analysis of your AWS resource state.
2. Eligibility and account
You must be at least the age of majority in your jurisdiction and authorized to enter into a contract on behalf of the organization you represent. You are responsible for maintaining the confidentiality of account credentials and for all activity that occurs under your account.
3. Customer responsibilities
- You confirm that you have the authority to grant StackArc read-only access to the AWS accounts you onboard.
- You are responsible for the accuracy and lawfulness of any data present in your AWS accounts.
- You will not use the Service to scan AWS accounts you do not control or have explicit authorization to assess.
- You will comply with applicable laws, including Quebec Law 25, PIPEDA, and any other regulatory regime that governs your organization.
4. Access model
StackArc connects to your AWS accounts using the AWS-native cross-account AssumeRole pattern with a unique ExternalId. The role attaches only the AWS-managed SecurityAudit policy: read-only by design, zero write or delete actions. You may revoke access at any moment by deleting the role from your IAM console.
5. Fees and payment
Fees, currency, and billing cadence are described in the order form or signup flow. Unless otherwise stated, prices are in Canadian dollars (CAD), exclusive of applicable taxes. Subscriptions renew automatically until cancelled in accordance with these Terms.
6. Intellectual property
StackArc retains all right, title, and interest in the Service, including the rule engine, reporting templates, software, brand, and documentation. You retain all right, title, and interest in your AWS-resource state data and any findings generated about your environment. We grant you a non-exclusive, non-transferable, revocable license to use the Service for your internal business purposes for the duration of your subscription.
7. Confidentiality
Each party agrees to protect the other's confidential information with at least the same degree of care it uses to protect its own confidential information, and in no case less than a reasonable standard of care.
8. Service availability
We aim for high availability but do not guarantee uninterrupted access during the trial or pre-launch period. Service-level commitments, when applicable, are stated in the order form or a separate Service Level Agreement.
9. Disclaimer and limitation of liability
The Service is provided “as is” and “as available.” To the maximum extent permitted by law, StackArc disclaims all implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.
StackArc's aggregate liability under these Terms shall not exceed the fees paid by you to StackArc in the twelve months preceding the event giving rise to the claim. Neither party shall be liable for indirect, incidental, consequential, or punitive damages.
10. Termination
Either party may terminate these Terms for material breach if the breach is not cured within thirty days of written notice. Upon termination, your access to the Service ends, and your data is retained for the period specified in our Privacy Policy before deletion.
11. Governing law
These Terms are governed by the laws of the Province of Quebec, Canada, without regard to its conflict-of-law principles. Any dispute shall be resolved exclusively in the courts of the Province of Quebec, judicial district of Montreal.
12. Changes to these Terms
We may update these Terms from time to time. Material changes will be notified by email to active customers at least thirty days before taking effect.
13. Contact
Questions about these Terms can be addressed to legal@stackarc.io.