Version 1.0-2026-07
This Master Service Agreement (“Agreement”) is between Zeroware (“Zeroware”, “we”) and the customer identified at sign-up (“Client”, “you”), effective on the date you accept it (“Effective Date”).
Zeroware provides a governance and integrity layer (“Services”) that scores workloads on entropy and drift, gates wasteful or off-specification requests, self-heals on breach, and produces a tamper-evident audit trail. The Services run inside Client’s own cloud environment (“bring-your-own-cloud”). Zeroware governs on integrity signals only and does not access Client’s underlying data (see the Data Processing Addendum).
This Agreement begins on the Effective Date and continues until terminated. Either party may terminate for material breach not cured within 30 days’ notice. On termination, Client may remove the Zeroware kernel from its cloud at any time; accrued fees remain payable.
Client retains all right, title, and interest in Client Data. Zeroware never inspects, copies, stores, or transmits Client Data; it processes only integrity signals and content fingerprints as described in the DPA. Zeroware is not a processor of Client Data.
Each party will protect the other’s confidential information with reasonable care and use it only to perform under this Agreement.
Zeroware retains all right, title, and interest in the Services, the governance kernel, and all related technology and IP. No rights are granted except the limited right to use the Services during the term. Client retains all rights in Client Data.
Zeroware will perform the Services in a professional manner. EXCEPT AS EXPRESSLY STATED, THE SERVICES ARE PROVIDED “AS IS” WITHOUT WARRANTIES OF ANY KIND. Savings figures are estimates measured against Client’s baseline and are not guaranteed.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY IS LIABLE FOR INDIRECT OR CONSEQUENTIAL DAMAGES. EACH PARTY’S TOTAL LIABILITY IS LIMITED TO THE FEES PAID BY CLIENT IN THE 12 MONTHS BEFORE THE CLAIM.
Each party will defend and indemnify the other against third-party claims arising from its breach of this Agreement or violation of law.
This Agreement is governed by the laws of the State of [___], excluding conflict-of-laws rules. Disputes will be resolved in the state or federal courts located in [___].
This Agreement is the entire agreement between the parties and supersedes prior understandings. If any provision is unenforceable, the rest remains in effect. Neither party may assign without the other’s consent, except to a successor in interest.
By creating an account or using getzeroware.com and the Services, you agree to these Terms and to the Master Service Agreement.
You are responsible for the accuracy of your account information and for safeguarding your credentials, API keys, and two-factor device. Notify us promptly of any unauthorized use.
Ingress keys authenticate your traffic and must be kept secret. You are responsible for activity under your keys. Keys may be rotated or revoked.
We may update these Terms; material changes will be notified. Continued use constitutes acceptance.
We may suspend or terminate access for breach of these Terms. Sections that by their nature survive termination will survive.
We do not access, copy, or store the contents of your workloads or data. The governance kernel runs inside your own cloud and scores signals, not content.
To provide and secure the Services, compute savings and billing, communicate with you, and meet legal obligations. We do not sell personal information.
Encryption in transit and at rest, tamper-evident audit logging, least-privilege access, and two-factor authentication for accounts.
We retain account and audit records for as long as your account is active and as required by law. You may request access, correction, or deletion of your personal information at hello@getzeroware.com.
We use infrastructure providers (e.g., AWS) to operate the platform. Your governed data remains in your own cloud.
This Addendum forms part of the Agreement and governs any processing of personal data in connection with the Services.
The Services are architected so that Zeroware does not access Client Data. Zeroware runs inside Client’s cloud boundary and processes only integrity signals and fingerprints (metadata), not the content of Client’s data. Accordingly, Zeroware acts as a processor solely with respect to limited account and integrity metadata, and is not a processor of Client’s underlying data.
Client Data never leaves Client’s own cloud environment. Zeroware does not transfer, export, or store Client Data.
Zeroware uses AWS to host account/metadata services. Client Data is not shared with sub-processors because it is never accessed.
Zeroware will notify Client without undue delay after becoming aware of a personal-data breach affecting metadata it processes.
Zeroware will reasonably assist Client with data-subject requests and, on termination, delete or return account/metadata it holds, subject to legal retention.
