Agreement and eligibility
These Terms of Service ("Terms") are a binding agreement between you or the organisation you represent ("Customer", "you") and Koreshield Labs Ltd ("Koreshield", "we"). They govern your access to and use of our websites, workspace, APIs, SDKs, documentation, and related services (the "Services").
By using the Services, you agree to these Terms and represent that you have authority to bind the Customer. Koreshield Labs Ltd is incorporated in England and Wales under company number 17057784, with its registered office at 3rd Floor, 86–90 Paul Street, London, EC2A 4NE.
The Services
Koreshield provides runtime security boundaries for AI applications. Depending on the integration, a Customer may directly scan untrusted input, retrieved context, or proposed tool actions, or use a protected proxy route. The Services return security findings and policy decisions in detect or enforce mode.
No security product detects every threat. Results may include false positives or false negatives, and novel attacks may bypass detection. Detect mode reports what would be blocked without blocking the request; enforce mode applies the configured block decision. Customers remain responsible for application design, human approvals, permissions, downstream actions, and appropriate fail-safe behaviour.
Accounts and credentials
You must provide accurate account information, keep it current, and protect account credentials and API keys. API keys are secrets, must be kept server-side, and must not be embedded in public code, browser applications, or mobile clients. You are responsible for activity under your account except to the extent caused by Koreshield's breach.
Notify hello@koreshield.ai promptly if you suspect unauthorised access or key exposure. We may require credential rotation or suspend a compromised key to protect the Services and affected parties.
Permitted use and restrictions
You may use the Services to protect applications you own or are authorised to operate. You must not:
- Use the Services unlawfully, infringe rights, or process content you are not authorised to submit.
- Attack, disrupt, overload, bypass, or probe the Services except under Koreshield's written security-testing authorisation.
- Reverse engineer non-public detection logic, extract model or rule assets, or use outputs to build a competing security service.
- Circumvent authentication, rate limits, plan limits, policy controls, or billing measures.
- Resell, sublicense, or white-label the Services without a written partner or OEM agreement.
- Use the Services to create offensive tooling or facilitate unauthorised attacks on AI or other systems.
Customer responsibilities
You control what data and instructions you send to Koreshield and are responsible for having a lawful basis, providing required notices, configuring retention and storage mode, and applying decisions safely in your application. You must not rely on a single security signal where law, safety, or the impact of an action requires additional controls or human review.
You are responsible for your model providers, connectors, agents, users, and downstream systems, including their terms and permissions. Koreshield's action result informs your guard; it does not execute the proposed action.
Plans, trials, billing, and taxes
Plan features, usage allowances, retention defaults, and prices are described on the pricing page or an Order Form. Trial or evaluation access may be limited by time, usage, workspace, or feature. Unless an Order Form says otherwise, subscriptions renew for the selected billing period until cancelled, fees are charged in advance, and fees already paid are non-refundable except where law requires otherwise.
You authorise our billing provider to charge applicable fees and taxes. We may change public pricing on reasonable notice, with changes applying to a later renewal. Enterprise terms, service levels, support commitments, or credits apply only when stated in a signed Order Form or other written agreement.
Customer data and privacy
You retain rights in data you submit. You grant Koreshield the limited rights necessary to process that data to provide, secure, support, and maintain the Services. We do not acquire ownership of Customer Data.
Our Privacy Policy explains controller processing. Where Koreshield processes personal data on your behalf, the Data Processing Agreement forms part of these Terms and takes precedence on that processing. The default hosted storage mode is hash-only; encrypted review-content storage is customer-controlled.
Intellectual property and feedback
Koreshield and its licensors retain all rights in the Services, software, documentation, detection logic, branding, and improvements. Subject to these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable right to use the Services for your internal business purposes and authorised customer deployments.
If you provide feedback, you permit us to use it without restriction or payment, provided we do not identify you publicly without permission. Neither party may use the other's name, logo, or marks in publicity without prior approval, except for accurate internal or legally required references.
Confidentiality
Each party will protect the other's non-public information using reasonable care, use it only to perform or receive the Services, and disclose it only to people and providers who need it and are bound by confidentiality duties. These obligations do not cover information independently developed, lawfully received without restriction, or public through no breach.
A party compelled by law to disclose confidential information will, where legally permitted, give advance notice and reasonable assistance to seek protective treatment.
Availability, changes, and suspension
We aim to operate a reliable service but do not promise uninterrupted or error-free availability unless a signed agreement says otherwise. We may modify the Services to improve security, comply with law, or reflect technical changes, while avoiding a material reduction to paid core functionality during a current term where reasonably practicable.
We may suspend access where necessary to address a security risk, unlawful use, material breach, non-payment, provider requirement, or threat to the Services or others. We will give notice where practicable and restore access when the issue is resolved.
Warranties and disclaimers
We warrant that we will provide the Services with reasonable skill and care and materially in accordance with our documentation. Except for express commitments in these Terms or an Order Form, the Services are provided “as is” and “as available”, and all implied warranties are excluded to the maximum extent permitted by law.
Koreshield does not warrant that every malicious input, poisoned document, unsafe action, data leak, or other AI risk will be identified or prevented. You are responsible for determining whether the Services are suitable for your use case and for maintaining defence in depth.
Liability
To the maximum extent permitted by law, neither party is liable for indirect or consequential loss, or loss of profit, revenue, business, goodwill, anticipated savings, or data. Koreshield's total aggregate liability arising from the Services or these Terms will not exceed the greater of fees paid by the Customer in the 12 months before the event giving rise to the claim or £1,000.
Nothing limits liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, breach of confidentiality or data-protection liability to the extent it cannot lawfully be limited, or any other liability that law does not permit the parties to exclude.
Term and termination
These Terms begin when you first use the Services and continue until your account and all applicable Orders end. You may cancel through the workspace or by contacting us. Unless an Order Form says otherwise, cancellation takes effect at the end of the paid period.
Either party may terminate for an uncured material breach after reasonable written notice. We may terminate immediately for serious unlawful or harmful use, insolvency, or a security emergency. On termination, your right to use the Services ends. Provisions that by nature should survive—including accrued payment, confidentiality, intellectual property, liability, data protection, and governing law—remain effective.
General
These Terms, the DPA, Privacy Policy, applicable Order Forms, and expressly incorporated policies form the agreement between the parties. An Order Form controls for its stated commercial scope; the DPA controls for personal-data processing. Neither party is responsible for delay caused by events beyond its reasonable control.
You may not assign these Terms without our written consent, except in connection with a merger or sale of substantially all relevant assets. We may assign them as part of a reorganisation, financing, merger, or sale. If a provision is unenforceable, it will be adjusted only as needed and the rest remains effective. No third party has a right to enforce these Terms under the Contracts (Rights of Third Parties) Act 1999.
Governing law and contact
These Terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction, subject to either party's right to seek urgent injunctive relief in a competent court.
Legal, support, and security enquiries: hello@koreshield.ai. Postal address: Koreshield Labs Ltd, 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom.