Terms of Service

1. Agreement to Terms

By accessing or using the GraphWarden service (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms. If you do not agree to these Terms, do not use the Service.

These Terms constitute a legal agreement between you ("Customer", "you", or "your") and 9247-4246 QUEBEC INC., operating as GraphWarden ("GraphWarden", "we", "us", or "our").

2. Description of Service

GraphWarden is a zero-trust security proxy for Microsoft Graph API. The Service acts as an intermediary between your applications and Microsoft Graph, providing granular access control, secrets management, data filtering, and audit logging for API requests.

The Service consists of two components: (a) the GraphWarden management dashboard hosted at app.graphwarden.com, and (b) the GraphWarden proxy agent that runs in your environment (on-premise) or in our hosted infrastructure (cloud).

3. Account Registration

To use the Service, you must create an account and provide accurate, complete, and current information. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

Each account is intended for use by a single organization. You may not share your account with other organizations or create multiple accounts for the same organization without prior written consent from GraphWarden.

You must notify us immediately if you become aware of any unauthorized use of your account.

4. Acceptable Use

You agree not to:

• Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service.
• Resell, sublicense, or redistribute the Service to third parties without written authorization.
• Use the Service for any illegal purpose or in violation of any applicable laws or regulations.
• Attempt to gain unauthorized access to the Service, its servers, or any systems connected to the Service.
• Interfere with or disrupt the integrity or performance of the Service.
• Use the Service to transmit malicious code, malware, or any harmful content.

5. Intellectual Property

GraphWarden and its licensors own all rights, title, and interest in the Service, including all intellectual property rights. The Service is protected by copyright, trademark, and other intellectual property laws.

You retain all rights to your data, your YAML rule configurations, and your custom policies. GraphWarden does not claim ownership of any content or data you create or process through the Service.

Your use of the Service does not grant you any rights to use GraphWarden's trademarks, logos, or brand features without prior written permission.

6. Service Availability

GraphWarden provides the Service on a best-effort basis. We strive to maintain high availability but do not guarantee uninterrupted or error-free operation unless a separate Service Level Agreement (SLA) add-on has been purchased.

We reserve the right to perform scheduled maintenance, which may result in temporary service interruptions. We will provide reasonable advance notice of planned maintenance whenever possible.

For on-premise deployments, service availability depends on your infrastructure and is your responsibility.

7. Data and Privacy

Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference.

GraphWarden does not store Microsoft 365 data. The Service operates as a pass-through proxy. Data flows through the proxy but is never persisted, written to disk, or stored in any database by GraphWarden.

8. Fees and Payment

The Service is licensed on a per-tenant, annual billing basis. Prices are subject to change with 30 days' written notice before your next renewal date.

All fees are non-refundable except as expressly stated in these Terms or required by applicable law. Failure to pay fees when due may result in suspension or termination of your access to the Service.

If you purchase the Service through an authorized reseller or distribution partner, payment terms are governed by your agreement with that partner.

9. Termination

Either party may terminate this agreement with 30 days' written notice to the other party.

GraphWarden may terminate or suspend your access immediately, without prior notice, if you breach these Terms or engage in activity that threatens the security or integrity of the Service.

Upon termination, you may request an export of your account data (rule configurations, audit logs, and account settings) within 30 days of the termination date. After this period, we will delete your data in accordance with our Privacy Policy.

10. Limitation of Liability

To the maximum extent permitted by applicable law, GraphWarden shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits or revenues, whether incurred directly or indirectly, or any loss of data, use, goodwill, or other intangible losses resulting from your use of the Service.

In no event shall GraphWarden's total aggregate liability exceed the amount you paid to GraphWarden for the Service in the twelve (12) months preceding the event giving rise to the claim.

11. Indemnification

You agree to indemnify, defend, and hold harmless GraphWarden and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to your use of the Service or your violation of these Terms.

GraphWarden agrees to indemnify, defend, and hold harmless the Customer from and against any claims that the Service infringes the intellectual property rights of a third party.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the Province of Quebec and the federal laws of Canada applicable therein, without regard to conflict of law principles.

13. Dispute Resolution

In the event of a dispute arising out of or relating to these Terms, the parties agree to first attempt to resolve the dispute through good faith negotiation for a period of 30 days. If the dispute cannot be resolved through negotiation, it shall be submitted to the courts of Montreal, Quebec, Canada, which shall have exclusive jurisdiction.

15. Contact

If you have questions about these Terms of Service, please contact us: