Terms of service · effective September 17, 2026

The terms under which we provide TruthLock.

These terms are between you, the company or person opening an account, and Iron Rod Systems ("we", "us"). Using the website, the service, or the API means you accept them. A signed order form or enterprise agreement takes precedence where it differs.

1. The service

TruthLock decomposes AI-generated responses into claims, grades each claim against a source hierarchy you declare, applies a reliance policy you configure, and produces signed standing records and attestations. It is offered as a pooled service, as a dedicated deployment in an AWS account, and as an API. Features vary by plan as described on the pricing page at the time of purchase.

2. What TruthLock is not

This section matters more than most.

  • Not a guarantee of truth. A grade reflects how a claim compared with the sources you declared, under the hierarchy, rules, prompts, and models in force at the time. It is only as complete as your sources and only as current as their effective dates. A claim graded Verified can still be wrong if your sources are wrong.
  • Not legal, medical, safety, or professional advice. TruthLock records the standing of claims. It does not decide what you should do with them, beyond what your own reliance policy says. Decisions that affect people remain yours.
  • Not a substitute for your own controls. A reliance policy is a control you configure. If you configure it to allow everything, the service will allow everything and the record will say so.
  • Not a fact-checker of the public web. Unless you add a website connector with declared domains, TruthLock grades only against sources you connect.

3. Accounts and access

You must give accurate account and company information and keep it current. You are responsible for everyone who signs in under your company, for the API keys you issue, and for their use. Tell us promptly at security@truthlock.io if a credential is compromised. You must be at least 18 and authorized to bind the company you register.

4. Your content

You own the responses, questions, connectors, documents, hierarchies, policies, prompts you write, and the standing records and attestations the service produces for you ("customer content"). You grant us the right to process customer content to provide, secure, and support the service and for no other purpose. We do not train models on it and do not use it to serve other customers.

You are responsible for having the right to submit it, including any personal data it contains, and for the connectors you point us at. Our privacy policy and Data Processing Addendum describe how we handle it.

5. Our intellectual property

The service, its software, documentation, grade taxonomy, reason codes, record formats, and the methods described in our pending patent applications are ours or our licensors'. These terms grant you a non-exclusive, non-transferable right to use the service during your subscription. They do not grant a license to the methods for use outside the service. Feedback you give us may be used without obligation.

6. Acceptable use

Do not use the service to break the law, infringe rights, or process data you have no right to process. Do not probe, scan, or test the service for vulnerabilities without written permission, attempt to access another customer's data, resell the service without an agreement, or use it to build a competing verification product by extracting its prompts, grade logic, or records at scale. Do not submit content designed to manipulate grading. We may suspend access to stop abuse and will tell you why.

7. Third-party services

Model providers, search providers, and stores you connect are governed by their own terms. When you bring your own provider keys, your agreement with that provider governs those calls. We are not responsible for their availability, output, or data handling, and their outages surface in the service as Refused grades rather than as guesses.

8. Fees and billing

  • Metered plans are billed monthly in arrears on usage recorded by the service, plus any fixed subscription fee, through Stripe. Usage is visible in the Company page at all times. Alerts fire at 80 percent of any quota you set.
  • Dedicated deployments are billed under an order form, annually in advance unless it says otherwise.
  • Free plans carry hard quotas. Requests beyond them are refused, never silently degraded.
  • Taxes are added where required. Invoices are due on receipt for card payments and net 30 for invoiced accounts.
  • Refunds. Metered charges reflect usage already delivered and are not refunded. Prepaid annual fees are refunded pro rata only if we terminate for convenience.
  • Price changes take effect at your next renewal with at least 30 days' notice.
  • Late payment past 15 days may lead to suspension after notice. Records and attestations remain readable during suspension; new verifications do not run.

9. Availability and support

We aim for the pooled service to be available continuously and give notice of planned maintenance. Rate limits are enforced per company and per key; bursts above them may be served or refused. Service-level commitments, support response times, and credits apply only where an order form grants them. We may change the service, and we will not remove a documented API endpoint without 90 days' notice.

10. Confidentiality

Each of us will protect the other's confidential information with at least reasonable care, use it only under these terms, and disclose it only to people who need it and are bound to protect it. Customer content is your confidential information. Pricing, roadmap, and non-public documentation are ours. This survives termination for five years, and for trade secrets as long as they remain trade secrets.

11. Warranties and disclaimers

We warrant that the service will perform materially as documented and that we will not materially reduce its functionality during a paid term. Your remedy for breach of this warranty is repair, replacement, or termination with a pro rata refund of prepaid fees.

Otherwise the service is provided as is. We disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that grades are correct, that sources are complete, that models will behave consistently over time, or that the service will be uninterrupted or error-free.

12. Limitation of liability

To the extent the law allows, neither of us is liable to the other for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, however caused. Each party's total liability under these terms is limited to the fees you paid us in the twelve months before the claim arose. These limits do not apply to a party's breach of confidentiality, its indemnity obligations, its infringement of the other's intellectual property, or liability that cannot be limited by law.

13. Indemnities

We will defend you against third-party claims that the service, used as permitted, infringes a patent, copyright, or trademark, and pay resulting damages and costs. We may modify or replace the service to avoid infringement, or terminate and refund prepaid fees. This does not cover claims arising from your content, your connectors, your modifications, or your combination of the service with things we did not supply.

You will defend us against third-party claims arising from your content, your use of the service in violation of these terms or the law, or decisions you or your users made in reliance on grades, and pay resulting damages and costs.

14. Term and termination

These terms apply from the day you open an account until it is closed. You may close it at any time from the Company page; metered charges stop at the end of the current period and prepaid fees are not refunded. Either party may terminate for material breach uncured 30 days after notice. We may terminate for convenience with 90 days' notice and a pro rata refund of prepaid fees. On termination you may export your records for 30 days, after which we delete customer content per the privacy policy. A dedicated stack in your own account is yours to keep or destroy.

15. Changes to these terms

We may update these terms. Material changes are emailed to account owners at least 30 days before they take effect and the effective date at the top changes. Continued use after that date is acceptance. If you do not accept, close the account before the change takes effect.

16. General

  • Governing law and venue. The laws of the State of [State], without regard to conflict-of-laws rules, and the state and federal courts located in [County, State]. Each party consents to that jurisdiction.
  • Export. You will comply with export and sanctions laws and will not use the service from or for an embargoed country or a sanctioned person.
  • Assignment. Neither party may assign these terms without consent, except to a successor in a merger or sale of substantially all assets, with notice.
  • Notices to us go to legal@truthlock.io. Notices to you go to your account owner's email.
  • Entire agreement. These terms, the privacy policy, the DPA, and any order form are the whole agreement and replace prior discussions. If a provision is unenforceable, the rest stands. Waivers must be in writing.
  • Publicity. We may name you as a customer only with your written consent.

17. Contact

Iron Rod Systems · legal@truthlock.io