Terms of service
Last updated: 2026-06-12 — placeholder. Executed agreement will be published before general availability.
1. Service description
Stillvault provides a vendor-blind secret-release platform for human-in-the-loop secret management. The service consists of a control plane, a managed-broker tier (optional), a mobile application, and associated tooling. Stillvault relays sealed blobs and coordinates approvals; it does not hold keys that can decrypt customer secrets.
The service is provided “as-is” during the pre-GA period. Features, pricing, and terms are subject to change.
2. Acceptable use
You may use Stillvault to manage secrets for legitimate software systems. You may not:
- Use the service to store, relay, or approve access to unlawful material.
- Attempt to reverse-engineer, intercept, or tamper with the encrypted-relay mechanism.
- Share credentials or access tokens in a way that violates tenant isolation.
- Use the service in a manner that degrades availability for other tenants.
3. Limitation of liability
To the extent permitted by applicable law, Stillvault and its operators are not liable for indirect, incidental, or consequential damages arising from use of the service, including loss of data, loss of profits, or service interruption.
The vendor-blind architecture means Stillvault cannot recover or produce customer secrets if key material is lost. Customers are responsible for backup and recovery of Org Identity keys and enrolled passkeys.
4. Termination
Either party may terminate the agreement on written notice. On termination, Stillvault will delete tenant data including ciphertext stores, audit logs, and enrollment records within 30 days, subject to any legal retention obligations.
This is a placeholder. The executed agreement governing your use of Stillvault will be published in full before general availability.