Terms of Service

We provide device attestation as a service: you call our API, we tell you whether the device on the other end is a real, distinct piece of hardware. The shape of the contract is described on /how-it-works and our architecture doc. Our uptime targets and refund policies live on each plan tier — see /pricing.

We'll keep the public API contract stable within a major version. If we deprecate something, we give at least 90 days' notice in the dashboard and via email. Pre-1.0 SDKs may move faster — we'll flag that in each release's notes.

Don't use Root Herald to attest devices you don't have permission to attest. Don't reverse the service to harm users. Don't resell our verdicts as your own attestation service. Don't run abuse, malware, illegal content, or anything you would be ashamed to put your name on.

You're responsible for your own users. We help you verify their devices; we are not their controller. Your privacy policy and terms of service apply to them; ours apply to you.

Free tier is free. Paid plans are billed monthly in advance via Stripe. Overage on attestations is billed monthly in arrears at the per-1K rate shown on /pricing. We'll email you when usage crosses 80% and 100% of your included quota so there are no surprises.

Refunds are at our discretion. If we make a billing mistake we'll fix it. If you cancel mid-month we pro-rate the unused portion of fixed-monthly charges; overage already incurred is non-refundable.

To the maximum extent permitted by law, our aggregate liability for any claim related to Root Herald is capped at the fees you paid us in the 12 months before the claim. We don't exclude liability for fraud, willful misconduct, gross negligence, or anything that can't be waived under your local law.

Root Herald is provided "as is." We attest a device's hardware identity at the moment it signs — a cryptographic fact about the silicon behind that request. That is not a guarantee of all future device state: if a device passes attestation and is later compromised in a way neither side could have known at signing time, that's a change in the world, not a defect of the service.

You can close your tenant from the dashboard at any time. We can suspend or terminate your tenant for material breach of these terms (we'll usually warn you first and give a chance to fix it). On termination we delete your data per the privacy policy.

These terms are governed by the law of the state of Delaware, USA. Disputes go to arbitration in San Francisco under JAMS rules. Both sides waive the right to a jury trial and to class actions. If any clause is unenforceable, the rest still stands.

We'll email tenant admins and post the new version with a fresh "Last updated." Continued use after 30 days is acceptance. If you don't like the changes, close your tenant — you'll get a refund of any prepaid fixed fees.