Terms of Service.

Agreement

• These terms govern your use of Sentinel by Black Llama (“Sentinel”), operated by Black Llama. By creating an account or running a scan you agree to them and to the Privacy Policy.
• If you accept for a company, you confirm you may bind it.

What a scan is

An automated read of the code or sites you authorize, producing a report and, when the rules are met, a dated badge.

• A scan runs Sentinel’s automated checks and reports findings with a file, line and suggested fix.
• It is not a security audit, not a penetration test, not a SOC 2 report and not an ISO/IEC 27001 audit result. Those come only from licensed CPA firms and accredited ISO bodies, and we are not affiliated with the AICPA or ISO.
• We do not guarantee that a scan finds every issue, or that code with a clean report has no leaks, vulnerabilities or compliance gaps. A clean scan means those automated checks passed on the code we were given at that time.
• You are responsible for fixing findings and for your own compliance decisions.

Your authorization

• You may scan only code, accounts and sites you own or are authorized to scan. Live-site scans require proof of domain ownership and a signed authorization from the company that controls the hostnames.
• A program or agency that pays for scans cannot consent on behalf of a company that has not authorized them.

Plans, payment and refunds

• Plans and prices are shown on the Pricing page. Payment is taken by Stripe. Taxes are added where required.
• Refunds: full refund if no scan has run, otherwise none. Once a scan has run, the work has been done and the report delivered.
• Path to Platinum is a six-month term. It can be canceled at the end of the term; scans and badges already earned stay valid for their validity period.
• Billing questions: team@gigahertzcompany.com. A person replies within one business day.

Acceptable use

• Do not scan systems you are not authorized to test.
• Do not probe, attack or overload Sentinel, evade its limits, or access another customer’s data.
• Do not upload malware or content you have no right to share, or use the service to break the law.
• We may suspend access for abuse. We will tell you why unless the law forbids it.

Badge usage rules

A badge is a dated, scoped statement. Use it as one.

• Always show the tier and the period it covers, and link the badge to its verification page.
• Never describe it as an audit result, SOC 2 or ISO 27001.
• Show the live badge image from /badge/<slug>.svg, linked to /verify/<slug>.
• Use the permitted sentence above, word for word, with your tier, date and scope filled in.
• Say “Black Llama Privacy-Ready badge, Gold” and show the period it covers.
• Say no leaks of the types Sentinel checks were found in the stated period.
• Say it helps you prepare for SOC 2.
• Include the badge in security questionnaires and sales decks alongside the verification link.
• Call it a SOC 2 report, a SOC 2 audit, an ISO 27001 award or “compliance”.
• Crop, recolor, restyle or re-render the badge, or use the Black Llama mark without the badge.
• Display a tier you do not currently hold, or an expired badge.
• Use the AICPA SOC logo, ISO logos or any accreditation mark next to it.
• Say “audited”, “verified by auditors”, “leak-proof”, “100% secure” or “guaranteed private”.
• Call it GDPR, CCPA or HIPAA compliance.
• Do not show a tier you do not currently hold or an expired badge. We may revoke a badge that is misused.

Your data and ours

• You keep all rights in your code. You give us permission to process it only to run the scans you ask for, as described in the Privacy Policy.
• We keep all rights in Sentinel, its rules and its reports’ format. You may share your own reports with your auditors and buyers.

No warranty

• The service is provided as is and as available. We do not promise it will be uninterrupted or error-free, or that it will meet a particular audit or buyer requirement.

Limitation of liability

• To the extent the law allows, Black Llama is not liable for indirect, incidental, special or consequential damages, lost profits, lost deals or data loss.
• Our total liability for any claim is limited to the amount you paid us in the twelve months before it arose.
• Nothing here limits liability that cannot be limited by law.

Ending and changes

• You can stop using Sentinel at any time. We can end access for breach of these terms.
• We may update these terms. We will email account owners about material changes before they apply.
• Governing law and venue will be set when counsel completes review of this draft.
• Contact: team@gigahertzcompany.com.