These Terms of Use (the "Terms") govern access to and use of the Stateward platform, websites, applications, APIs, command-line tools, integrations and related services (together, the "Services"), operated by Yggdrasil Digital ("Stateward", "we", "us"). The commercial terms applicable to paid plans and credits are set out separately in our Terms of Sale. Our handling of personal data is described in our Privacy Policy.
By creating an account, installing an integration, or otherwise using the Services, you accept these Terms. If you use the Services on behalf of an organisation, you represent that you are authorised to bind that organisation, and "you" refers to that organisation.
1. The Services
Stateward provides automated security analysis of software: inline review of code changes, dependency and secret scanning, codebase auditing and compliance mapping. The Services are intended for professionals — software teams, companies and individual developers acting for purposes related to their trade, business or profession.
Stateward operates with read-only access to your code repositories. We do not push, merge, or modify your code. The Services produce findings, explanations and suggested fixes; the decision to act on any finding remains yours.
2. Eligibility and Accounts
You must be at least 18 years old and able to enter into a binding contract. You are responsible for the accuracy of the information you provide, for the security of your credentials and API keys, and for all activity under your account. Notify us at hello@stateward.com without delay if you suspect any unauthorised use.
You may connect the Services to third-party platforms (e.g. GitHub, GitLab, Bitbucket). You are responsible for holding the necessary rights and permissions over any repository, code or data you connect, and for complying with the terms of those third-party platforms.
3. Acceptable Use
You agree not to:
- use the Services in violation of any applicable law or third-party right;
- connect, scan or submit code or data you are not authorised to access;
- attempt to gain unauthorised access to the Services, other accounts, or our infrastructure;
- probe, scan, overload, disrupt or test the vulnerability of the Services except under a written authorisation or a published security policy;
- reverse engineer, decompile or attempt to extract the source code or models of the Services, except to the extent this restriction is prohibited by law;
- resell, sublicense or make the Services available to third parties as a competing service, or use the Services to build a competing product;
- use the Services to develop, deliver or facilitate malware, intrusions or other unlawful activity.
We may investigate suspected violations and cooperate with competent authorities.
4. Your Content; Licence to Operate
You retain all rights in the code, repositories, configuration and other materials you submit or connect ("Your Content"). You grant Stateward a limited, non-exclusive, worldwide licence to access, copy, process and transmit Your Content solely as necessary to provide, secure and support the Services for you, and as described in our Privacy Policy and Data Processing Agreement.
We do not use Your Content to train foundation models for third parties. Where AI features are used to produce findings, processing is performed to deliver the Service to you. We may generate and retain aggregated or de-identified statistics and operational metadata that do not identify you or reveal Your Content, to operate and improve the Services.
5. Our Intellectual Property
The Services, including all software, detectors, models, design, documentation, trademarks and content (excluding Your Content), are and remain the exclusive property of Yggdrasil Digital and its licensors. We grant you a limited, non-exclusive, non-transferable, revocable right to use the Services in accordance with these Terms. No other rights are granted.
6. Feedback
If you send us suggestions or feedback, you grant us a perpetual, irrevocable, royalty-free right to use them without restriction or compensation.
7. Third-Party Services
The Services interoperate with third-party platforms and may rely on third-party components. We are not responsible for third-party services, their availability or their terms. Your use of them is governed by their own agreements.
8. Availability and Changes to the Services
We work to keep the Services available but do not guarantee uninterrupted or error-free operation. We may modify, add, suspend or remove features, and perform maintenance, at any time. For changes that materially and adversely affect a paid feature you rely on, we will give reasonable prior notice. The treatment of free plans and free credits is set out in Section 4 of the Terms of Sale.
9. No Security Guarantee — Warranty Disclaimer
Stateward provides automated analysis designed to support, not replace, sound security practices and human judgement. We do not warrant that the Services will detect all vulnerabilities, secrets, defects or risks, or that findings are free of false positives or false negatives.
To the fullest extent permitted by law, the Services are provided "as is" and "as available", without warranty of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement. This Section does not exclude the legal guarantees that cannot be excluded under applicable French law; with respect to the supply of the Services, Stateward is bound by an obligation of means (obligation de moyens), not of result.
10. Limitation of Liability
To the fullest extent permitted by law:
- Stateward shall not be liable for any indirect or consequential loss, including loss of profit, revenue, data, goodwill, or business interruption, or for any security incident, breach or loss that the Services did not detect or prevent.
- For the free plan, Stateward's total aggregate liability arising out of or relating to the Services shall not exceed one hundred euros (€100).
- For paid plans, Stateward's total aggregate liability shall not exceed the amounts you paid to Stateward for the Services during the twelve (12) months preceding the event giving rise to the liability.
Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, for fraud, or for gross negligence or wilful misconduct (faute lourde ou dolosive).
11. Indemnity
You agree to indemnify and hold Stateward harmless from any third-party claim arising out of (a) Your Content, (b) your use of the Services in breach of these Terms or applicable law, or (c) your lack of rights or permissions over any repository, code or data you connected.
12. Suspension and Termination
You may stop using the Services and close your account at any time. We may suspend or terminate your access, in whole or in part, with immediate effect where you materially breach these Terms, where required by law, to protect the Services or other users, or in case of non-payment. Where reasonable, we will give notice and an opportunity to cure.
On termination, your right to use the Services ends and we will delete or return Your Content in accordance with the Privacy Policy and Data Processing Agreement. Sections that by their nature should survive (including Sections 4–11 and 14) survive termination.
13. Changes to these Terms
We may update these Terms. We will post the updated version with a new "Last updated" date and, for material changes, notify you by email or in-product at least thirty (30) days before they take effect. If you continue to use the Services after the effective date, you accept the updated Terms. If you do not accept a material change, you may stop using the Services and close your account before it takes effect.
14. Governing Law and Jurisdiction
These Terms are governed by French law. The parties will first seek an amicable resolution of any dispute. Failing agreement within sixty (60) days, the courts of Toulouse (France) shall have exclusive jurisdiction, to the fullest extent permitted by applicable mandatory rules. Nothing in this clause deprives a consumer of the protection of the mandatory provisions of the law of their habitual residence.
15. Miscellaneous
These Terms, together with the Terms of Sale, Privacy Policy and any order form, constitute the entire agreement between you and Stateward regarding the Services. If any provision is held invalid, the remainder continues in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them to an affiliate or successor.
For any question: hello@stateward.com.