The agreement, written so you can actually read it.

Last updated 27 August 2026

Who this is between

"We" and "us" mean Attestkeep, the supplier of the software described on this site. "You" means the person or organisation that creates an account, takes a licence key, or runs the software. If you are agreeing on behalf of a company, you are confirming you may bind it.

Using the software means accepting these terms. If you do not accept them, do not activate a key.

What the licence grants

A licence gives you the right to run Attestkeep inside the clusters your plan covers, for as long as the licence is valid, for your own operational use. The cluster quota attached to your plan is the limit; the licensing page explains how quota, fingerprint binding and the daily check work in practice.

The licence is for you. It is not transferable to another organisation without our written agreement, and a key issued to you is not to be shared outside it.

What it does not grant

Attestkeep is closed source. The licence does not give you the right to decompile, reverse engineer, or derive the source of the software, except where the law of your country gives you that right regardless of what a contract says. It does not let you resell, sublicense, rent, or run the software as a service for third parties, and it does not transfer any ownership: the software and the marks stay ours.

It also does not grant you the right to remove or defeat the licence check. The daily check is part of the product, and disabling it is a breach of this agreement rather than a configuration choice.

Accounts and keys

You need an account to take a key, including the free Community Edition key. Keep the account credentials and the key itself to yourself; anything done with them is treated as done by you. Tell us promptly if you believe either has leaked, and we will issue a replacement key and invalidate the old one.

The details you give us have to be accurate, particularly the billing address, because the tax charged at checkout is calculated from it.

Payment

Paid plans are sold as subscriptions and renew automatically until cancelled. Payments are handled by Paddle as merchant of record, which means your contract for the payment itself is with them, and their terms apply to that part. Prices, renewal, cancellation and refunds are set out on the billing page, and that page is part of this agreement.

If a payment fails and stays unresolved, the licence stops renewing. The software does not delete anything when that happens; it stops being licensed, which the licensing page describes.

Acceptable use

Run Attestkeep on infrastructure you are entitled to run it on. Do not use it to break the law, and do not use it as part of an attack on anyone else's systems. If you find a vulnerability in our software, the security page is how to tell us, and we will not treat a good-faith report made through it as a breach of these terms.

Availability and support

The enforcement path runs inside your cluster, so it does not depend on us being reachable. What does depend on us is licence validation and the account area, and we do not promise those are never unavailable.

Support is by e-mail, at the level your plan describes. We do not commit to a response time on this page, because a number we cannot hold to is worth less than none at all. Where a signed agreement sets support terms, that agreement governs.

Warranty

We build this carefully and we run it ourselves, but the software is provided as it is. We do not warrant that it is free of defects, that it will find every vulnerability in every image, or that it fits a purpose you have in mind but have not told us about. Attestkeep is a control in your pipeline, not a guarantee about the images that pass through it.

Nothing here removes rights you have as a consumer under the law of your country where those rights cannot be excluded by contract.

Liability

Neither side is liable to the other for indirect or consequential loss, for lost profit, or for lost or corrupted data, however it arises. Our total liability to you under this agreement, for any and all claims taken together, is limited to what you paid us in the twelve months before the claim arose.

These limits do not apply to liability that cannot be limited by law, including death or personal injury caused by negligence, and fraud.

Your data

What the product sends, what the account area stores, and how long any of it is kept are set out in the privacy notice. Scan results, policy decisions and the evidence behind them stay in your cluster; we do not receive them.

Ending the agreement

You can stop at any time by cancelling the subscription and uninstalling; the billing page covers what happens to the remainder of a paid term. We can end the agreement if you materially breach it and do not fix the breach after we have asked you to, or immediately if the breach is one that cannot be fixed.

When the agreement ends, the licence ends with it and the software has to be uninstalled. The sections on liability, warranty and governing law survive.

Changes

We may change these terms. If a change materially affects you, we will tell you before it takes effect, and continuing to use the software after that date is how you accept it. If you do not accept it, cancel; the billing page covers what that means mid-term.

Governing law

This agreement is governed by the law of the Republic of Türkiye, and the courts of Türkiye have jurisdiction over disputes arising from it. If you are a consumer, this does not deprive you of the protection of the mandatory law of the country you live in.

Questions about these terms go to legal@attestkeep.com.