Terms of Service

1. Acceptance of Terms

These Terms of Service ("Terms") govern access to and use of Lutril's Access Governance platform (the "Service") provided by Lutril SAS ("Lutril", "we", "our"). By creating a workspace, connecting integrations, inviting users, or otherwise using the Service, you agree to these Terms and applicable order documents (including any MSA, Order Form, and DPA).

2. Service Scope

• The Service includes access governance capabilities such as access reviews, access requests, workflow routing, role delegation, application catalogue management, policy orchestration, and evidence exports.
• The Service may include additional modules over time, including dashboards, onboarding and offboarding workflows, integration-specific views, and API endpoints.
• Feature availability may depend on plan, integration compatibility, and environment configuration.

3. Eligibility & Account Security

• You represent that you are authorized to act on behalf of your organization and to bind it contractually.
• You are responsible for maintaining secure administrator credentials, enforcing MFA where available, and managing user access to your workspace.
• You must keep contact information (billing, legal, and security contacts) accurate and up to date.

4. Customer Responsibilities

• Configure least-privilege access and reviewer or delegate assignments appropriately.
• Ensure lawful basis and authorization for data synchronized from third-party systems into Lutril.
• Review and validate exported reports before sharing with auditors, partners, or regulators.
• Promptly notify Lutril of suspected unauthorized use or security incidents involving your workspace.

5. Acceptable Use

• You must not use the Service to violate applicable laws, privacy obligations, or third-party rights.
• You must not attempt to disrupt, probe, reverse engineer, or bypass security controls of the Service.
• You must not upload malware, perform abusive automation, or overload APIs beyond documented limits.

6. Integrations & Third-Party Services

• The Service interoperates with third-party systems (for example identity providers, business apps, and collaboration tools) only when enabled by the customer.
• You are responsible for your third-party account configuration, permissions, and compliance with third-party terms.
• Lutril is not responsible for third-party outages, API changes, or removed scopes that impact connector behavior.

7. Data Protection & Subprocessors

Customer data remains under customer ownership. Lutril processes customer data to provide and secure the Service, according to the applicable DPA and documented instructions. Lutril does not sell customer personal data. The current list of approved subprocessors is maintained on our Subprocessors page.

8. Fees & Payment

Fees, invoicing cadence, and commercial terms are defined in your Order Form or equivalent commercial agreement.

• Unless explicitly stated otherwise, subscriptions are billed in advance and are non-refundable.
• Overages, add-ons, or expanded usage may be invoiced under the pricing terms in your Order Form.
• Late payments may incur suspension rights, applicable late fees, and collection actions where permitted by law.

9. Availability & Support

Lutril provides support through designated channels and commercially reasonable efforts to maintain platform availability. Planned maintenance and urgent security maintenance may be performed as needed.

10. Beta & Preview Features

• Beta or preview features are provided as-is and may change, be limited, or be discontinued.
• SLAs and production commitments do not automatically apply to beta or preview features unless explicitly stated.

11. Suspension

Lutril may suspend access (in whole or in part) if required to prevent active abuse, security threats, non-payment, or material contractual breach.

12. Term & Termination

• Subscription term, renewal mechanics, and termination rights are defined by your Order Form or MSA.
• Upon termination, customer export and deletion timelines follow the applicable contract and DPA commitments.
• Certain sections survive termination, including confidentiality, IP protections, limitation of liability, and payment obligations accrued before termination.

13. Intellectual Property

• Lutril and its licensors retain all rights, title, and interest in the Service, software, documentation, and branding.
• No ownership rights are transferred to customer except the limited right to use the Service during an active subscription.
• Feedback may be used by Lutril to improve the Service without restriction.

14. Confidentiality

Each party will protect the other party's confidential information using at least reasonable care and use it only for permitted contractual purposes.

15. Warranty Disclaimer & Limitation of Liability

• Except as expressly stated in an applicable MSA, the Service is provided on an as-is and as-available basis.
• To the maximum extent permitted by law, Lutril disclaims implied warranties, including merchantability, fitness for a particular purpose, and non-infringement.
• Each party's liability limitations, exclusions, and indemnity obligations are governed by the signed commercial agreement (or these Terms if no separate agreement applies).

16. Governing Law, Changes & Contact

• These Terms are governed by French law unless otherwise specified in a superseding written agreement.
• Lutril may update these Terms to reflect legal, security, or product changes. Material updates are communicated before taking effect.
• Questions regarding these Terms can be sent to privacy@lutril.com.