Terms of Service

1. Acceptance of terms

By accessing or using TrustCtrl ("the Service"), you agree to be bound by these Terms of Service. If you are using the Service on behalf of an organisation, you represent that you have authority to bind that organisation to these terms.

If you do not agree to these terms, do not use the Service.

2. Description of the service

TrustCtrl is a digital trust monitoring platform operated by Certiva ApS (CVR: 46450965), Denmark. Five products — CertControl (TLS certificates), WatchControl (uptime and service monitoring), SiteControl (website quality and security), BrandControl (brand protection) and MailControl (email security and deliverability) — contribute observations to one shared model of the domains you monitor.

TrustCtrl observes your infrastructure from the outside, the way visitors and attackers see it. No software is installed on your systems.

3. Early access — no fees, no payment terms

The Service is currently offered free of charge during early access. No payment is required, no payment details are collected, and no payment terms apply under this version of these terms.

Before any billing starts, we will publish a revised version of these terms covering paid plans, prices and payment conditions, and notify registered account holders by email with reasonable notice. You will never be charged unless you have expressly agreed to a paid plan.

During early access we may adjust which features are included, and the plan structure shown on the pricing page is a planned structure that may change before launch.

4. Accounts and access

Signup is verify-first: no account, organisation or data is created until you confirm your email address via the confirmation link.

• You are responsible for maintaining the confidentiality of your credentials
• You must notify us immediately of any unauthorised access to your account
• You may not share account access with individuals outside your organisation
• You are responsible for all activity that occurs under your account

Two-factor authentication (TOTP) is available and can be enforced organisation-wide. We recommend enabling it.

5. Domains you may add

You may only add domains that you own, operate or are expressly authorised to monitor. When you add a domain, you warrant that you hold that ownership or authorisation.

Ownership verification: full monitoring requires that you prove control of the domain by publishing a DNS record we provide. Unverified domains receive only limited, passive checks. Once a domain is verified, all five products enrol it and scanning starts automatically.

Outbound monitoring traffic: monitoring means the platform periodically makes outbound network requests to the domains you add on your behalf — including TLS certificate retrieval, DNS lookups, HTTP requests, website crawling, port and protocol checks and email-record checks. By adding a domain you accept that these requests are made on your instruction.

We are not liable for monitoring performed against domains where verification or authorisation was obtained fraudulently or misrepresented by you.

6. Acceptable use

You may use the Service only for lawful purposes and in accordance with these terms. You agree not to:

• Add or attempt to scan domains, hosts or systems that you do not own or are not authorised to monitor
• Attempt to circumvent authentication, access controls, verification steps or rate limits
• Use the Service to facilitate attacks on, or reconnaissance of, third-party systems
• Reverse engineer, decompile or extract the source code of the Service
• Resell, sublicense or otherwise commercialise access to the Service without written consent
• Use the Service in a manner that violates applicable laws or regulations

7. Data and privacy

Our handling of personal data is described in the Privacy Policy, which forms part of these terms. Our standard Data Processing Agreement (DPA) covers the monitoring data we process on your behalf.

8. Service availability

The Service is provided on an early-access basis, "as is" and "as available". We aim to keep it reliable, but during early access we do not offer a service level agreement (SLA) or guarantee uninterrupted access, and features may change, be added or be withdrawn. Scheduled maintenance will be communicated in advance where possible. We are not liable for downtime caused by factors outside our reasonable control.

9. Intellectual property

The Service, including its design, code and content, is owned by Certiva ApS and protected by intellectual property laws. These terms do not grant you any ownership rights in the Service. You retain ownership of the data you add to or generate within the Service.

10. Limitation of liability

To the maximum extent permitted by applicable law, Certiva ApS is not liable for indirect, incidental, special or consequential damages arising from your use of the Service. As the Service is currently provided free of charge, our total aggregate liability shall not exceed the fees you have paid for the Service in the twelve months preceding the claim.

The Service is a monitoring and visibility tool. It does not guarantee the detection of every issue, vulnerability or impersonation attempt, and should be used as part of a broader security and quality programme — not as a substitute for one.

11. Suspension and termination

You may close your account at any time. We reserve the right to suspend or terminate accounts that violate these terms, and to end or modify the early-access programme with reasonable notice. Upon termination, your access to the Service ceases and your data is deleted in accordance with the Privacy Policy and applicable law.

12. Changes to these terms

We may update these terms from time to time. Material changes — including any future introduction of paid plans — will be communicated to registered account holders by email at least 30 days before taking effect. Continued use of the Service after that date constitutes acceptance of the revised terms.

13. Governing law

These terms are governed by Danish law. Any disputes shall be subject to the exclusive jurisdiction of the courts of Denmark.

14. Contact

For questions about these terms:
Certiva ApS (CVR: 46450965)
Denmark
Email: mail@trustctrl.com
Web: trustctrl.com/contact