1. Agreement
These terms are a binding agreement between you and Sythe LLC, doing business as Sythe Labs ("Sythe Labs", "we", "us"). They apply to sythelabs.com and to the Sythe Labs platform and every integration, agent, and API we provide with it (together, the "Services"). By using the Services you accept these terms. If you do not accept them, do not use the Services.
If you use the Services for an organization, you represent that you have authority to bind that organization, and "you" means the organization as well. If your organization has a signed subscription, services, or engagement agreement with us, that agreement controls where it conflicts with these terms.
2. Accounts
You must give us accurate information and keep it current. You are responsible for everything done under your account, including by people you invite, and for keeping your credentials and any API keys or tokens you issue confidential. Tell us promptly through the support page if you believe an account has been compromised.
3. Your data
You own the data you put into the Services or that the Services collect from systems and accounts you connect ("Customer Data"). You grant us a non-exclusive, worldwide license to host, process, transmit, and display Customer Data as needed to provide, secure, and support the Services, and to produce the compliance evidence, reports, and findings you ask the Services to produce.
You are responsible for Customer Data. You represent that you have every right, consent, and notice required to give it to us and to let us process it as described in these terms and our Privacy Policy, including for the personal information of your employees, contractors, and users that a connected integration imports. You will not put into the Services any data you are not permitted to share.
4. Connected accounts and integrations
When you connect a third-party account such as Google Workspace, Vercel, Cloudflare, or Neon, you represent that you are authorized to grant that access on behalf of the account owner. The provider's own terms and privacy notice govern your relationship with the provider. Integrations are also governed by our EULA, and we may change or withdraw an integration when the provider changes its API, terms, or availability.
5. Security testing and scanning
Some Services probe, scan, or test systems. You may point them only at systems and networks you own or that you have express written authorization to test, and you must be able to produce that authorization on request. You are solely responsible for any disruption, loss, or legal exposure that results from testing a system you were not entitled to test, and you will indemnify us for it under section 12. We may refuse, pause, or stop any test at our discretion, and we may report unlawful activity to the affected party or to law enforcement.
6. Acceptable use
You will not, and will not let anyone else:
- use the Services to break the law or violate anyone's rights;
- probe, interfere with, or bypass security or access controls of the Services or of any system you are not authorized to test;
- upload malware, overload or disrupt the Services, or access another customer's account or data;
- copy, scrape, reverse engineer, or build a competing product from the Services, or resell or sublicense them without our written consent;
- remove or alter any notice, watermark, or attribution in output the Services produce;
- use the Services to send unsolicited messages or to harvest personal information.
7. Intellectual property and feedback
Sythe Labs and its licensors own the Services, the software behind them, our control libraries, templates, and documentation, and all related intellectual property. Subject to these terms we grant you a limited, revocable, non-exclusive, non-transferable right to use the Services for your internal business purposes. No other rights are granted, by implication or otherwise. If you send us feedback or suggestions, we may use them without restriction or compensation.
8. Suspension and termination
You may stop using the Services at any time. We may suspend or terminate your access immediately, with notice where practical, if you breach these terms, if your use creates a security, legal, or operational risk, if a bill goes unpaid, or if the law requires it. On termination your right to use the Services ends and we handle Customer Data as our Privacy Policy and any signed agreement describe. Sections 3, 5, 7, and 10 through 14 survive termination.
9. Changes to the Services
We may add, change, or retire features, and we may change or discontinue the Services with reasonable notice where practical. We are not liable to you for any modification, suspension, or discontinuation of the Services.
10. No legal or compliance advice
The Services produce controls, evidence, findings, and reports to help you run a security and compliance program. They are not legal advice and do not guarantee that you will pass an audit, obtain or keep a certification, satisfy a regulator, or be free of vulnerabilities. You are responsible for your own compliance decisions and for verifying any output before you rely on it.
11. Disclaimers and limitation of liability
The Services are provided as is and as available. To the fullest extent the law allows, we disclaim all warranties not expressly stated in a signed agreement with you, including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and any warranty that the Services will be uninterrupted, error-free, or secure.
To the fullest extent the law allows, Sythe Labs will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, data, or goodwill, however caused and under any theory of liability, even if we were told they were possible. Our total liability arising out of or relating to the Services and these terms will not exceed the amount you paid us for the Services in the twelve months before the event giving rise to the claim, or one hundred US dollars if you paid nothing. These limits do not apply where the law forbids them.
12. Indemnification
You will defend, indemnify, and hold harmless Sythe LLC and its officers, employees, and contractors from any claim, loss, liability, and expense, including reasonable legal fees, arising out of Customer Data, your breach of these terms, your use of the Services in violation of law, or any testing or scanning you directed at a system you were not authorized to test.
13. Governing law and disputes
These terms are governed by the laws of the State of Colorado, without regard to its conflict-of-law rules, and any dispute will be brought exclusively in the state or federal courts located in Colorado. Each party consents to that jurisdiction and waives any objection to venue. Either party may seek injunctive relief in any court of competent jurisdiction to protect its intellectual property or confidential information.
14. General
These terms, our Privacy Policy, our EULA, and any signed agreement are the entire agreement between us about the Services. You may not assign these terms without our written consent; we may assign them to a successor. If a court finds any part unenforceable, the rest stays in effect. Our failure to enforce a term is not a waiver of it. Neither party is liable for delay caused by events outside its reasonable control. You will comply with US export and sanctions law when using the Services. Notices to us go through the support page; notices to you go to the email on your account.
15. Changes to these terms
We may update these terms. The current version is always at this URL with its revision date, and we will notify account holders of material changes before they take effect. Using the Services after the effective date means you accept the updated terms.