Terms of Service

Who you are agreeing with

TrustRail is offered by Keerthish Suresh, a sole trader in Western Australia trading as TrustRail (“TrustRail”, “we”, “us”). If TrustRail is later operated by a company, we will update these terms and tell you before that change takes effect.

By creating an account or using the service you agree to these terms. If you use TrustRail for an organization, you confirm you are authorized to accept them on its behalf, and “you” means that organization. TrustRail is a business service; it is not offered for personal, household or consumer use.

The service

TrustRail is an authorization, execution and evidence boundary for actions taken by AI agents. It evaluates actions your agents request against policies you set, can require a person to approve them, can execute approved actions through a gateway that holds the provider credential, and records what happened in a tamper-evident audit chain.

The service is in public beta. Features may change, and we may add, alter or retire parts of it. We will give you reasonable notice before removing a feature you rely on.

Your account

Keep your sign-in factors secure and tell us promptly at privacy@kynthiaai.systems if you believe your account has been compromised. You are responsible for activity under your account and for the people you invite to your workspace and the roles you give them.

What you remain responsible for

TrustRail applies the policies you configure. It does not decide what your policies should be, and its decisions are only as protective as those policies and the way you integrate it. In particular:

• Decision mode returns allow, deny or approval to your own code, which then performs the action itself. It does not stop a process that ignores or bypasses the answer.
• Enforce mode executes an action only through the TrustRail gateway, with a credential your agent does not hold. It covers only the action types marked executable and only credentials you have connected to TrustRail. Credentials an agent can reach any other way are outside it.
• You remain responsible for your agents, for the actions they take, for your accounts with third-party providers (for example Stripe, GitHub or your cloud provider), and for approvals given by people in your workspace.

What TrustRail does not do describes these limits in more detail and forms part of how we describe the service.

Credentials you connect

When you connect a provider credential, you authorize us to store it encrypted and to use it only to perform actions that your workspace’s policies and approvals allow, and to make read-only calls that test it. We never return a stored credential to the console or to an agent. You can disconnect a credential at any time, and you should also revoke it with the provider if you believe it has been exposed.

Acceptable use

You must not use TrustRail to:

• break the law, or help anyone else break it;
• execute actions you are not authorized to take against an account, system or person;
• send spam or messages that recipients have not agreed to receive;
• probe, overload or attack the service or other customers, except through security research you have agreed with us in advance;
• resell or provide the hosted service to third parties as a service of your own without our written agreement.

Fees

Plans and per-action prices are published on the pricing page. The hosted pilot currently takes no payment. We will give you at least 30 days’ notice by email before we start charging you or change a price that applies to you, and you may stop using the service before then. Prices exclude GST and other taxes, which will be added where they apply. Paid plans are billed through Stripe; we never see your full card details.

Your data

You own the data you put into TrustRail, including policies, action requests, approvals and audit records. You grant us the rights we need to host, process and transmit it to provide the service, keep it secure, and meet our legal obligations. We do not sell your data and we do not use it to train machine-learning models.

We may use aggregated measurements that do not identify you or your users (for example, the number of decisions the service handles) to operate and improve TrustRail. How we handle personal information is described in our Privacy Policy.

Availability and support

The service is provided without a service-level commitment while it is in beta, and support is provided on a best-effort basis through privacy@kynthiaai.systems. We will tell you about planned maintenance that we expect to interrupt the service where we reasonably can. Audit records are append-only and you can export your evidence at any time from the console.

Warranties and liability

Nothing in these terms excludes, restricts or modifies any right or remedy, or any guarantee, warranty or other term or condition, implied or imposed by the Australian Consumer Law or any other law that cannot lawfully be excluded or limited. Where our liability for failing to comply with such a guarantee can be limited, it is limited, at our option, to supplying the service again or paying the cost of having it supplied again.

Subject to that, the service is provided “as is” and we make no other warranties, including that it will be uninterrupted or error-free or that it will detect or stop every unwanted action.

To the extent the law allows, neither party is liable for indirect or consequential loss, or for loss of profits, revenue or data, and our total liability arising out of or relating to these terms is limited to the greater of the fees you paid us in the 12 months before the event giving rise to the claim and AUD 100.

You agree to compensate us for claims by third parties arising from actions your agents take, content you submit, or your breach of section 6, except to the extent the claim is caused by our breach of these terms.

Suspension and ending

You can stop using TrustRail at any time, and ask us to close your workspace as described in the Privacy Policy. We may suspend or end your access if you materially breach these terms and do not fix the breach within 14 days of our notice, or immediately where that is needed to protect the service, other customers or the law. Before we end the service for any reason other than your breach, we will give you at least 30 days’ notice and the chance to export your data.

Software and licences

The SDKs and other components we publish are licensed under the terms in their own licence files (currently the Business Source License 1.1). Those licences, not these terms, govern self-hosting. These terms govern the hosted service we operate.

Changes to these terms

We may update these terms. For a change that materially affects you, we will email the workspace owners at least 30 days before it takes effect. If you continue using the service after that, the new terms apply.

Governing law

These terms are governed by the laws of Western Australia, and the courts of Western Australia and those that can hear appeals from them have non-exclusive jurisdiction.

Contact

Questions about these terms: privacy@kynthiaai.systems.