Terms of Service - AuditBeam

1. Agreement to Terms

By accessing and using AuditBeam ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

The Service is operated by Francisco Javier Pulido Vergara ("we", "us", or "our"), located in Seville, Spain.

2. Description of Service

AuditBeam provides automated compliance scanning for AWS (Amazon Web Services) infrastructure. The Service:

Connects to your AWS account via IAM role assumption
Scans your infrastructure configuration for compliance with security frameworks (currently ISO 27001:2022)
Generates compliance reports
Provides remediation guidance

Important: AuditBeam is a tool to assist with compliance efforts. It does not guarantee compliance, certification, or audit passage. You are responsible for your own compliance with applicable regulations and standards.

3. Account Registration

To use the Service, you must:

Be at least 18 years old
Provide accurate, current, and complete information during registration
Maintain the security of your account password
Promptly update your account information if it changes
Accept responsibility for all activities that occur under your account

You may not share your account credentials with others. You are responsible for maintaining the confidentiality of your password.

4. AWS Access and Permissions

4.1 How We Access Your AWS Account

The Service accesses your AWS account using IAM role assumption. You create an IAM role in your AWS account and provide us with the role ARN (Amazon Resource Name).

4.2 Permissions Required

The IAM role must have read-only permissions to security-relevant services. We provide a CloudFormation template with the exact permissions required.

4.3 Your Responsibilities

You are responsible for:

Creating and maintaining the IAM role with appropriate permissions
Ensuring the role ARN provided to us is correct
Monitoring AWS CloudTrail logs for our API calls (if desired)
Revoking access by deleting the IAM role when you no longer wish to use the Service

4.4 Our Commitments

We commit to:

Only requesting read-only permissions
Never modifying your AWS infrastructure
Not accessing your application data or customer data
Using access only for the purpose of generating compliance scans

5. Service Tiers and Limitations

5.1 Free Tier

4 scans per 30-day rolling window
1 AWS account
Scan results retained for 30 days
Email support with 24-48 hour response time

5.2 Paid Tiers

Paid tiers (Starter, Professional, Business) are currently in development. Features and pricing will be communicated before launch. Current free tier users will receive advance notice and priority access.

5.3 Fair Use

You agree to use the Service in good faith and not to:

Abuse free tier limits by creating multiple accounts
Attempt to reverse engineer or copy the Service
Use the Service to scan AWS accounts you don't own or have permission to scan
Overload our systems with excessive API requests

6. Data and Privacy

Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference.

In summary:

We store your account information (email, name, password hash)
We store metadata about your AWS infrastructure (not the data itself)
We store scan results
All data is hosted in the European Union
We comply with GDPR
You can request data deletion at any time

7. Intellectual Property

7.1 Our Property

The Service, including all software, algorithms, reports, and content, is owned by us and protected by copyright and other intellectual property laws.

7.2 Your Data

You retain all rights to your AWS infrastructure data. We claim no ownership over your infrastructure configurations or compliance data.

7.3 License to Use

We grant you a limited, non-exclusive, non-transferable license to use the Service for your internal compliance purposes only.

8. Disclaimers and Limitations of Liability

8.1 No Warranty

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. We do not guarantee that:

The Service will be uninterrupted or error-free
All compliance issues will be detected
Scan results are 100% accurate
Using the Service will result in compliance certification

8.2 Not Legal or Compliance Advice

The Service provides technical scanning and reporting. It does not constitute legal advice, compliance consulting, or audit services. You should consult with qualified professionals for compliance implementation.

8.3 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES.

Our total liability shall not exceed the amount you paid us in the 12 months preceding the claim (or €100 if you're on the free tier).

9. Prohibited Uses

You may not use the Service to:

Violate any laws or regulations
Scan AWS accounts without proper authorization
Attempt to gain unauthorized access to our systems
Distribute malware or engage in malicious activity
Impersonate others or provide false information
Interfere with or disrupt the Service
Resell or redistribute the Service without our written permission

10. Termination

10.1 By You

You may terminate your account at any time by:

Deleting your account through the dashboard, or
Emailing support@auditbeam.eu to request account deletion

10.2 By Us

We may suspend or terminate your account if:

You violate these Terms
We suspect fraudulent or abusive activity
You fail to pay for paid services (when available)
Required by law

10.3 Effect of Termination

Upon termination:

Your access to the Service will cease immediately
We will delete your data within 30 days (unless required to retain by law)
You should delete the IAM role from your AWS account

11. Changes to Terms

We may update these Terms from time to time. We will notify you of material changes by:

Email to your registered address
Notice on the Service dashboard
Updating the "Last updated" date at the top of this page

Your continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

12. Governing Law and Disputes

These Terms are governed by the laws of Spain and the European Union.

Any disputes arising from these Terms or use of the Service shall be subject to the exclusive jurisdiction of the courts of Seville, Spain.

For EU residents: You retain all rights granted under applicable EU consumer protection laws.

13. Contact Information

If you have questions about these Terms, please contact us:

Email: support@auditbeam.eu
Service operated by: Francisco Javier Pulido Vergara
Location: Seville, Spain

Full legal address available upon request for GDPR compliance purposes.

14. Miscellaneous

14.1 Entire Agreement

These Terms, together with our Privacy Policy, constitute the entire agreement between you and us regarding the Service.

14.2 Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

14.3 Waiver

Our failure to enforce any right or provision of these Terms shall not be deemed a waiver of such right or provision.

14.4 Assignment

You may not assign or transfer these Terms or your account without our written consent. We may assign our rights and obligations without restriction.