Skip to main content
Intelligent Security Governance — 340+ Frameworks Powered by Ayurak AI
Legal

Terms of Service

Effective Date: 1 January 2025 · Last Updated: February 2026

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you", or "your") and Aristiun BV ("Aristiun", "we", "us", or "our"), a company registered in the Netherlands, governing your access to and use of the Aristiun platform, website (aristiun.com), APIs, integrations, and all related services (collectively, the "Services").

By creating an account, accessing the platform, or using any part of the Services, you agree to be bound by these Terms. If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity. If you do not agree to these Terms, you must not use the Services.

2. Description of Services

Aristiun provides an intelligent security governance platform powered by Ayurak AI, including but not limited to:

  • Security Workbench: Interactive threat modeling environment with architecture diagram upload, collaboration, AI copilot-assisted diagram generation, and living diagram management.
  • Automated Threat Modeling: AI-powered threat identification using STRIDE, PASTA, LINDDUN, MAESTRO, and Attack Tree methodologies.
  • Cloud Security Posture Management (CSPM): Multi-cloud security monitoring across AWS, Azure, and Google Cloud Platform.
  • Application Security Posture Management (ASPM): CI/CD pipeline security scanning and supply chain risk assessment.
  • Compliance Automation: Automated evidence collection, control mapping, and audit preparation across 340+ regulatory frameworks including SOC 2, ISO 27001, HIPAA, GDPR, DORA, PCI DSS, CMMC, and HITRUST CSF.
  • AI Governance: EU AI Act, NIST AI RMF, ISO 42001, and ISO 23894 compliance management.
  • CISO Executive Dashboard: Real-time security posture visualization with financial risk quantification and board-ready reporting.
  • Adversary Simulation: MITRE ATT&CK-mapped attack simulations and red team exercises.
  • Security FinOps: Security spend optimization and ROI analytics.

The specific features available to you depend on your subscription plan. Aristiun reserves the right to modify, update, or discontinue features with reasonable notice.

3. Account Registration & Security

3.1 Account Creation

To use the Services, you must create an account by providing accurate, current, and complete information. You agree to update your information promptly if it changes.

3.2 Account Security

  • You are responsible for maintaining the confidentiality of your account credentials, including passwords and API keys.
  • You must enable multi-factor authentication (MFA) for all administrator accounts.
  • You are responsible for all activities that occur under your account, whether authorized by you or not.
  • You must notify Aristiun immediately at security@aristiun.com if you suspect any unauthorized access to your account.

3.3 Team & Organization Accounts

Organization administrators are responsible for managing user access, permissions, and ensuring all users within their organization comply with these Terms.

4. Subscription Plans & Payment

4.1 Plans

The Services are offered under multiple subscription tiers (Free, Pro, Top Pro, and Enterprise). Plan details, features, and pricing are described on our pricing page and may be updated from time to time.

4.2 Billing & Payment

  • Paid subscriptions are billed in advance on a monthly or annual basis as selected at the time of purchase.
  • All fees are quoted in US Dollars (USD) unless otherwise agreed in writing.
  • Payments are processed via Stripe. By providing payment information, you authorize Aristiun to charge the applicable fees.
  • All fees are exclusive of taxes. You are responsible for all applicable taxes, duties, and government levies.

4.3 Free Tier

The free tier provides limited access to the Services at no charge. Aristiun reserves the right to modify or discontinue the free tier at any time without liability.

4.4 Refunds

Annual subscriptions may be eligible for a pro-rata refund within the first 30 days. Monthly subscriptions are non-refundable. Enterprise agreements are governed by separate terms.

5. Acceptable Use

You agree to use the Services only for lawful purposes and in accordance with these Terms. You shall not:

  • Use the Services to conduct unauthorized security testing, penetration testing, or vulnerability scanning against systems you do not own or have explicit authorization to test.
  • Attempt to gain unauthorized access to any part of the Services, other accounts, or connected systems.
  • Reverse-engineer, decompile, disassemble, or attempt to derive the source code of the platform or the Ayurak AI engine.
  • Use the Services to store or transmit malicious code, malware, or any content that violates applicable laws.
  • Resell, sublicense, or redistribute the Services without prior written consent from Aristiun.
  • Use the Services in a manner that could damage, disable, overburden, or impair the platform (including excessive API calls beyond rate limits).
  • Use automated means (bots, scrapers) to access the Services except through authorized APIs.
  • Misrepresent compliance status, certifications, or security posture based on data generated by the platform.

6. Customer Data

6.1 Ownership

You retain all ownership rights to the data, content, architecture diagrams, threat models, and other materials you upload to or create within the platform ("Customer Data"). Aristiun does not claim ownership of your Customer Data.

6.2 License Grant

You grant Aristiun a limited, non-exclusive, worldwide license to host, store, process, and display your Customer Data solely to provide and improve the Services. This license terminates when you delete your Customer Data or close your account.

6.3 Data Processing

Aristiun processes Customer Data in accordance with our Privacy Policy and any applicable Data Processing Agreement (DPA). Enterprise customers may request a custom DPA.

6.4 Data Export & Portability

You may export your Customer Data at any time through the platform's export functionality or by contacting support@aristiun.com. Upon account termination, we will make your data available for export for 30 days before permanent deletion.

7. Intellectual Property

7.1 Aristiun IP

The Services, including all software, algorithms, AI models (including the Ayurak AI engine), user interfaces, designs, documentation, APIs, and trademarks are the exclusive property of Aristiun BV and are protected by copyright, patent, trademark, and trade secret laws.

7.2 Patents

Aristiun holds patents and patents pending for its security lifecycle management technology, the MAESTRO threat modeling methodology, and related innovations. Use of these patented technologies is licensed solely through your subscription to the Services.

7.3 Feedback

If you provide suggestions, feature requests, or other feedback about the Services, Aristiun may use such feedback without restriction or obligation to you.

8. Third-Party Integrations

The Services integrate with third-party platforms including GitHub, Azure DevOps, Jenkins, Bitbucket, AWS, Azure, and Google Cloud Platform. Your use of these integrations is subject to the respective third party's terms of service. Aristiun is not responsible for the availability, accuracy, or reliability of third-party services.

9. Service Level & Availability

9.1 Uptime

Aristiun targets 99.9% uptime for paid plans, measured on a monthly basis (excluding scheduled maintenance). Enterprise customers may negotiate custom SLAs.

9.2 Scheduled Maintenance

We will provide at least 48 hours' notice for scheduled maintenance windows via email and in-platform notifications. Maintenance is typically performed during low-usage periods (weekends, UTC 02:00–06:00).

9.3 Support

  • Free Tier: Community support and documentation.
  • Pro: Priority email support with 24-hour response time.
  • Top Pro: Dedicated account manager, 8-hour response time.
  • Enterprise: 24/7 support with 1-hour response time for critical issues, dedicated technical account manager.

10. Disclaimers

10.1 No Guarantee of Security

While Aristiun provides tools to assess, manage, and improve your security posture, the Services do not guarantee that your systems are secure or that all vulnerabilities will be identified. Threat modeling, compliance mapping, and risk scoring are advisory in nature and should be used as part of a comprehensive security program.

10.2 Compliance Advisory

The compliance automation features of the Services are designed to assist with regulatory compliance but do not constitute legal advice. Aristiun does not guarantee that using the platform will result in passing an audit or achieving certification. You are responsible for verifying compliance with applicable regulations and engaging qualified auditors.

10.3 AI-Generated Output

Threat findings, remediation recommendations, compliance mappings, and other outputs generated by the Ayurak AI engine are produced algorithmically and should be reviewed by qualified security professionals before implementation. Aristiun does not guarantee the accuracy, completeness, or suitability of AI-generated outputs.

10.4 "As-Is" Basis

THE SERVICES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY.

11. Limitation of Liability

11.1 Exclusion of Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, ARISTIUN SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:

  • Loss of profits, revenue, or business opportunities
  • Loss of data or data breaches resulting from reliance on the Services
  • Cost of procurement of substitute services
  • Regulatory fines or penalties
  • Reputational damage

This limitation applies regardless of the legal theory (contract, tort, negligence, strict liability, or otherwise) and even if Aristiun has been advised of the possibility of such damages.

11.2 Liability Cap

Aristiun's total aggregate liability for any and all claims arising out of or related to these Terms or the Services shall not exceed the greater of: (a) the amount you paid to Aristiun in the 12 months preceding the claim, or (b) USD $100.

12. Indemnification

You agree to indemnify, defend, and hold harmless Aristiun, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from:

  • Your use of the Services in violation of these Terms
  • Your violation of any applicable law or regulation
  • Your Customer Data or content uploaded to the platform
  • Your unauthorized security testing conducted using the platform

13. Term & Termination

13.1 Term

These Terms are effective when you create an account and continue until your account is closed or terminated.

13.2 Termination by You

You may terminate your account at any time by contacting support@aristiun.com or through your account settings. Termination does not entitle you to a refund of prepaid fees except as described in Section 4.4.

13.3 Termination by Aristiun

Aristiun may suspend or terminate your account immediately if you:

  • Violate these Terms or the Acceptable Use policy
  • Fail to pay fees when due (after 15 days' written notice)
  • Become subject to bankruptcy, insolvency, or similar proceedings
  • Pose a security risk to the platform or other customers

13.4 Effect of Termination

Upon termination: (a) your access to the Services will cease immediately; (b) you will have 30 days to export your Customer Data; (c) after 30 days, we will permanently delete your Customer Data; (d) sections of these Terms that by their nature should survive termination will remain in effect (including Sections 6.1, 7, 10, 11, 12, and 15).

14. Modifications to Terms

Aristiun may modify these Terms at any time. We will provide at least 30 days' notice of material changes via email or in-platform notification. Continued use of the Services after the effective date of the updated Terms constitutes your acceptance. If you do not agree to the modified Terms, you must stop using the Services and close your account.

15. Governing Law & Dispute Resolution

15.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Netherlands, without regard to its conflict of law provisions.

15.2 Dispute Resolution

Any dispute arising out of or relating to these Terms shall first be attempted to be resolved through good-faith negotiation. If the dispute cannot be resolved within 30 days, either party may submit the dispute to binding arbitration administered by the Netherlands Arbitration Institute (NAI) in Amsterdam. The language of arbitration shall be English.

15.3 Exceptions

Either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or confidential information.

16. General Provisions

  • Entire Agreement: These Terms, together with the Privacy Policy and any applicable Order Form or DPA, constitute the entire agreement between you and Aristiun.
  • Severability: If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall continue in full force and effect.
  • Waiver: Failure to enforce any right or provision does not constitute a waiver of that right or provision.
  • Assignment: You may not assign these Terms without Aristiun's prior written consent. Aristiun may assign these Terms in connection with a merger, acquisition, or sale of assets.
  • Force Majeure: Aristiun shall not be liable for delays or failures in performance caused by events beyond its reasonable control, including natural disasters, pandemics, acts of government, cyber attacks, or internet outages.
  • Notices: All notices shall be sent to the email address associated with your account (for notices to you) or to legal@aristiun.com (for notices to Aristiun).

17. Contact

For questions about these Terms of Service, please contact us: