Plain-language operating terms.

By signing up for trueno and connecting an AWS account, you agree to these terms. If you're agreeing on behalf of a company, you confirm that you have the authority to bind your organization.

Use trueno only against AWS accounts that you own or are authorized to monitor. Do not use the platform to scan accounts belonging to other parties, automate abuse, or evade rate limits. We may suspend access that violates this policy.

You authorize trueno to assume the IAM role you create with the read-only AWS-managed policies you attach. We do not call write APIs. You can revoke access at any time by deleting the IAM role: AssumeRole calls then fail and no further data flows in.

The service is provided on an as-is, as-available basis. We invest in reliability but do not publish a formal SLA. Maintenance windows and incidents are communicated through the status page and email.

Your workspace data is yours. We do not claim ownership of findings, comments, or AWS metadata that pass through the platform. We process them on your behalf to operate the service and improve detection accuracy in your workspace only.

trueno relies on subprocessors to deliver the service: Supabase (database + auth), Vercel (hosting, web analytics, and Speed Insights), Stripe (payments and billing), Resend (transactional email), PostHog (product analytics), Sentry (error monitoring), and Upstash (rate-limiting). The privacy page documents what each subprocessor handles.

Delete the IAM role to revoke AWS access. Email support@trueno.io to delete your workspace. We remove workspace data within 30 days of a confirmed deletion request. Either party may terminate this agreement at any time, with or without cause.

We may update these terms from time to time. Material changes will be communicated by email and posted here with a new effective date at least 30 days before they take effect. Continued use after the effective date constitutes acceptance.

To the maximum extent permitted by law, trueno is not liable for indirect, incidental, or consequential damages, including losses caused by misconfiguration of the IAM role, AWS API errors, or interpretation of findings as remediation advice. The platform is a signal source, not a replacement for engineering judgment. Aggregate liability for any claim is capped at fees paid in the twelve months preceding the claim, or one hundred US dollars if no fees have been paid.

These terms are governed by the laws of the State of Wyoming, USA, where Trueno LLC, the company that operates trueno, is incorporated, without regard to its conflict-of-laws principles. Disputes will be resolved in the state or federal courts located in Wyoming.