1. Who you are contracting with
The service is operated by Sentinelleai (a registered sole proprietorship), established in Quebec, Canada — the full postal address is provided on request, and to any authority that asks. "We", "us" and "Sentinelleai" mean that operator. "You" means the person or organisation holding the account.
Using the service means accepting these terms. If you are accepting on behalf of an organisation, you confirm you are entitled to bind it.
2. What the service is, and what it is not
Sentinelleai scans and monitors systems you own or are authorised to test, and reports what it found. It is not an audit, not a penetration test, and not a certification of any kind. A clean result means the checks that ran found nothing; it is not evidence that nothing is there. Before a mainnet deployment, a public launch or a certification, engage a qualified professional — our output is their starting material, not a substitute for them.
Each plan sells only the functions listed as in place at the time you subscribe. Functions shown as in observation are visible on purpose and are not sold; nothing obliges us to deliver them on a date.
3. Accounts
You create your own account from the sign-up form, and it does nothing until you have confirmed the address by following the link we send to it — an unconfirmed address is a claim, not an account, and it is refused a session. We may also create an account for you directly. You are responsible for keeping your credentials secret, for the actions taken under your account, and for the people you add to your organisation. Two-factor authentication is available and we recommend it. Tell us at info@sentinelleai.app as soon as you suspect an account is compromised.
4. What you may point the service at
This is the clause that matters most, and a breach of it ends the agreement immediately.
- You may submit only systems you own, or for which you hold a documented authorisation to test. Web and DNS targets must additionally be proven yours through the mechanism the service provides before they can be scanned.
- You may not use any function of the service against a third party's systems, to disrupt a service, to test anyone's defences without their consent, or in a manner prohibited by the law applying to you.
- Phishing simulations, pretext assessments and load testing are run against your own people and infrastructure under a recorded authorisation, never anyone else's.
We may suspend an account immediately, without notice, where we reasonably believe a target is not yours. We do not owe you a refund for a suspension caused by this clause.
5. The protections that act on your systems
Three add-ons do not merely report: auto-pause can pause a contract, site lockdown can make your site answer as unavailable, and host containment can stop a process or isolate a host. Each is sold separately, each is armed by you, and each requires you to read and sign its own instructions before it can be subscribed to. Those signed instructions form part of this agreement for the protection they cover, and they prevail over this page where the two differ.
None of the three reverses itself. Reopening a contract, releasing a lock and restoring a host are always your decision and your action. You remain responsible for arming a protection on the right target, for the configuration you supply, and for what a protection does when it acts as designed.
6. Fees and payment
Prices are shown on the pricing page in United States dollars, before any tax that may apply to you. Monthly plans are charged in advance and renew until cancelled. Some items are charged per use rather than per month, and the pricing page says which. Payment is handled by Stripe; your card details are entered on Stripe's own page and never reach our servers.
We may change prices. A change applies to your next renewal, not to a period you have already paid for, and we will tell you before it takes effect. Cancellation and refunds are on the refund and cancellation page.
7. Referral program
Every account has a personal referral link. When an account created through your link pays us, you earn site credit equal to 5% of the amount that account actually paid, after discounts and excluding taxes, for payments made during the first 12 months after that account was created. Credit is added to your balance when the payment is received, and you can see it on your referrals page.
- Credit is site credit only: it can be used for the services we sell, for example an AI reasoning pass or a reduction of your next subscription invoice. It is never paid out in cash, cannot be transferred, and has no value when an account is closed.
- The referrer of an account is set once, when the account is created, and cannot be changed afterwards. You may not refer yourself, create or use duplicate accounts to earn credit, or pay with a card also used by the referrer; accounts of the same company are not referrals of each other.
- We may cancel credit obtained in breach of this clause and close the accounts involved.
- We may change or end the program at any time. A change applies from the date it is announced and does not take away credit already added to your balance.
- If you promote your link publicly (a website, a video, a social media post, a newsletter or an advertisement), you must clearly and prominently disclose that you earn a commission when someone signs up and pays. The rules on endorsements and testimonials apply to you, including the Competition Act in Canada and the FTC's Endorsement Guides in the United States.
8. Your data
What we collect, where it runs and how long it is kept is on the privacy page and in the data handling guide. Two points belong here as well: source code submitted for a scan is deleted when the scan ends, whether it succeeded or failed, and the record of protective actions is kept in an append-only ledger that cannot be edited after the fact — including by us.
9. Availability
We do not commit to an uptime figure on this page. The service is operated on a best-effort basis, and maintenance, a failure of a third party we depend on, or an interruption at our host can make it unavailable. If you need a service level as a contractual commitment, ask us before you subscribe and it will be agreed separately and in writing.
10. No warranty of security
The service is provided as it is. We do not warrant that it will find every vulnerability, that a finding is exhaustive or free of false positives, that a protection will act in time, or that acting will prevent a loss. Security software is evidence about a system, not a guarantee about it.
11. Liability
Neither party excludes liability for fraud, for wilful misconduct, or for anything that cannot be excluded under the applicable law. Subject to that, we are not liable for indirect or consequential loss, for lost profit, revenue or data, and our total liability for all claims in any twelve-month period is limited to the fees you paid us in that period.
The consent you signed for a protection states, for that protection, what happens when it acts and what we do not answer for. Where a loss follows from a protection acting on a target you armed, or from a configuration you supplied, that document governs.
12. Ending the agreement
You may cancel at any time from your billing portal. We may end the agreement on notice, or immediately where you breach clause 4, where payment fails and is not resolved, or where the law requires it. When the agreement ends we stop scanning, protections you armed are disarmed, and your data is handled as the privacy page describes.
13. Changes to these terms
We may change these terms. The current version is always at this address with its effective date at the top; a material change will be announced to your account address before it applies. Using the service after a change means accepting it.
14. Governing law
These terms are governed by the laws of the Province of Quebec and the federal laws of Canada applicable therein, and a dispute that cannot be settled between us goes to the courts of the judicial district of Quebec. Write to info@sentinelleai.app first: most things are settled faster that way than by anyone's lawyer.