Terms of Service

Effective & last updated: August 20, 2026

1. Acceptance of terms

These Terms of Service ("Terms") govern access to and use of parapet.run, the Parapet control plane, and the Parapet gateway (together, the "Service"), operated by SaaS Scaling LLC, a California limited liability company ("Parapet," "we," "us," or "our"). By creating an account, deploying the gateway, or otherwise using the Service, you agree to these Terms on behalf of yourself and, if applicable, the organization you represent ("you" or "Customer"). If you don't agree, don't use the Service.

2. Description of the Service

The Parapet gateway is a policy enforcement point: your agent's traffic is routed to it via a base-URL configuration change, and it relays that traffic to your chosen upstream provider after evaluating it against your configured policy. The Parapet control plane distributes that policy to your gateway deployment(s) and aggregates the resulting audit trail and telemetry, per the content-minimization behavior described in our Privacy Policy. We may update, add to, or deprecate features of the Service over time.

3. Accounts & eligibility

You must provide accurate information to create a control-plane account and keep it current. You're responsible for activity under your account and for the members you invite to your organization/tenant. You must be legally able to enter into these Terms to use the Service.

4. Your responsibilities

• Policy configuration. Parapet enforces the policy you configure. We're responsible for evaluating it correctly and failing closed when we can't; you're responsible for the policy's content — what it does and doesn't permit is your decision.
• Credentials. In the Service's default operating mode, the gateway forwards your own upstream provider credential (e.g., your model provider API key) unchanged rather than storing it. You're responsible for keeping that credential secure on your side, the same as you would be without Parapet in the path.
• Deployment boundary. Where the Service identifies an individual agent by a claim in the request path rather than a verified credential, that claim is trusted within the network boundary you deploy the gateway into. You're responsible for making sure that boundary matches your intended trust model — ask us if you're unsure whether your deployment topology is a good fit.
• Compliance with applicable law in how you use the Service.

5. Acceptable use

Don't use the Service to violate applicable law, to interfere with or disrupt the Service's operation or other customers' use of it, to attempt unauthorized access to systems or data, or to reverse-engineer the Service except to the extent applicable law prohibits that restriction.

6. Fees & payment

Fees for paid tiers of the Service are as described in your order form, plan page, or a separate written agreement. Fees are non-refundable except as required by law or as we separately agree in writing. We may suspend access for non-payment after notice.

7. Data & privacy

Our Privacy Policy describes what data we collect and how we handle it, including our security incident response process. Where applicable law requires a separate data processing agreement for personal data processed through the Service, contact legal@parapet.run.

8. Intellectual property

We own the Service and all related intellectual property, excluding your data and any open-source components we distribute under their own license. Subject to these Terms, we grant you a non-exclusive, non-transferable right to use the Service during your subscription term. You retain ownership of the policy configuration, telemetry, and other data you or your agents generate through the Service ("Customer Data"), and grant us the right to process it solely to provide and support the Service.

9. Confidentiality

Each party will protect the other's confidential information with the same care it uses for its own confidential information (and no less than reasonable care), and will use it only to perform under these Terms. This doesn't cover information that's public, already known, or independently developed without reference to the disclosing party's confidential information.

10. Warranties & disclaimers

We'll provide the Service using commercially reasonable care. Except as expressly stated in these Terms, the Service is provided "as is," without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service is uninterrupted or error-free, and we make no claim of any security certification (SOC 2, ISO 27001, HIPAA, or similar) unless and until we've actually obtained it — check our current status if a certification is a requirement for your use case.

11. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits or lost data, arising from these Terms or the Service, even if advised of the possibility. Each party's total liability arising from these Terms will not exceed the amount you paid us for the Service in the 12 months before the claim arose. Nothing in this section limits liability for a party's gross negligence, willful misconduct, or a breach of §9 (Confidentiality), where applicable law doesn't permit that limit to be excluded.

12. Indemnification

You'll defend and indemnify us against third-party claims arising from your misuse of the Service or violation of these Terms. We'll defend and indemnify you against third-party claims that the Service, as provided by us, infringes that party's intellectual property rights, subject to prompt notice and our control of the defense.

13. Term & termination

These Terms apply for as long as you use the Service. Either party may terminate for the other's uncured material breach after 30 days' written notice. We may suspend or terminate access immediately if needed to prevent harm to the Service, other customers, or third parties. On termination, your right to use the Service ends; Customer Data is handled per the retention terms in our Privacy Policy.

14. Governing law & disputes

These Terms are governed by the laws of the State of California, without regard to its conflict-of-law principles, and the parties consent to the exclusive jurisdiction of the state and federal courts located in California for any dispute not otherwise subject to arbitration or another dispute-resolution process agreed in a separate written agreement.

15. Miscellaneous

Neither party may assign these Terms without the other's consent, except in connection with a merger, acquisition, or sale of substantially all assets. Neither party is liable for delay caused by events beyond its reasonable control. If any provision of these Terms is found unenforceable, the rest remains in effect. These Terms, together with the Privacy Policy and any order form, are the entire agreement between the parties on this subject.

16. Changes to these terms

We may update these Terms from time to time. We'll update the date at the top of this page, and for material changes we'll provide more prominent notice (e.g., email to account owners) before they take effect.

17. Contact us

Questions about these Terms: legal@parapet.run

SaaS Scaling LLC, a California limited liability company