1. Parties and definitions
These Terms are between AffixIO (“AffixIO”, “we”, “us”, “our”), the operator of BoundProof Agent and related services, and the person or organisation that accesses or uses the Services (“you”, “your”, “Customer”).
“Services” means BoundProof Agent (including the website at boundproof.affix-io.com, workspaces, APIs, connectors, sandbox, receipt verification and related documentation), and any AffixIO Hub, API, SDK proof allotment, subscription or billing flow offered in connection with BoundProof or AffixIO agent / proof products that reference these Terms.
“Payment Processor” means a third-party payment service provider used to collect fees for the Services (including Stripe or a successor processor). Your merchant payment provider for end-customer transactions is separate and is not AffixIO.
Where you use the Services on behalf of a company or other legal person, you represent that you have authority to bind that entity, and “you” includes that entity.
2. Acceptance of these Terms
Access to or use of the Services constitutes acceptance of these Terms. If you do not agree, you must not use the Services. Continued use after we post updated Terms constitutes acceptance of the updated Terms, subject to section 19.
These Terms form a legally binding agreement. Additional product notices, pricing pages, order forms or Hub checkout confirmations may apply; if they conflict with these Terms on a commercial point expressly stated in a signed order form, that order form prevails for that point only. Otherwise these Terms prevail.
3. Eligibility and business use
You must be at least 18 years of age and capable of entering a binding contract. The Services are designed primarily for business and professional use (B2B). If you are a consumer for the purposes of the Consumer Rights Act 2015 or other mandatory consumer law, nothing in these Terms excludes or limits rights that cannot lawfully be excluded; sections on refunds and liability are read subject to that mandatory law.
You must not use the Services if you are prohibited from receiving services under the laws of England and Wales or under applicable sanctions or export controls.
4. Accounts, workspaces and security
You are responsible for: (a) the accuracy of registration and billing information; (b) maintaining the confidentiality of passwords, API keys, session tokens and recovery material; (c) all activity under your workspace and keys; and (d) promptly revoking compromised credentials and notifying us at hello@affix-io.com.
BoundProof workspaces and credentials are separate from AffixIO Hub credentials unless we expressly link them. Self-service password recovery may not be available for pilot workspaces. We may require proof of account ownership before assisting with access, deletion or recovery.
You must ensure that only authorised personnel create permissions, approve actions or hold owner credentials. Agent keys must not be used to approve or consume execution authority where the product design forbids it.
5. Description of the Services (no overclaims)
BoundProof Agent provides server-side permission evaluation, optional human review, single-use consumption checks and signed decision receipts for agent-proposed actions. AffixIO may also provide related Hub, API and SDK proof tooling.
What the Services do not do. Without limitation, the Services:
- do not replace your payment provider, card acquirer, bank or merchant checkout;
- do not take custody of end-customer card data or settlement funds for your merchant transactions;
- do not independently establish customer identity, KYC, consent, age assurance, or regulatory compliance for your business;
- do not constitute legal, regulatory, financial or cryptographic advice;
- do not guarantee that a signed “allow” receipt is a completed payment, a consumer mandate, or permission that remains valid without online consumption checks;
- do not warrant that marketing materials, NIST / NCSC / PQC references, or documentation create a contractual service level beyond these Terms.
Relay. If you turn on Relay for an agent, BoundProof holds that agent's signing key and signs and delivers requests on its behalf. A request accepted by Relay shows that it was signed by a trusted key, was not changed and carried a valid single-use proof. It does not show who is behind the other agent or that the request is lawful, wise or paid for. You decide which senders to trust and what your agents do with accepted requests.
You remain solely responsible for integrating the Services safely, enforcing gates on covered backend routes, idempotency, reconciliation with your payment provider, and your own security and compliance assessments before production use.
We may modify, suspend features of, or discontinue the Services (including pilot limits) with reasonable notice where practicable, or immediately where needed for security, legal or operational reasons.
6. Free trials, free proofs and pilot allotments
From time to time we may offer free or promotional allotments, including without limitation: free BoundProof Agent decision evaluations; agent-oriented free SDK proof allocations (for example up to 150 proofs on eligible provision flows); and Hub free proof allocations for eligible human account holders (for example 100 proofs). Specific quantities, expiry, eligibility and campaign rules are stated on the relevant offer page or Hub flow at the time of claim.
Relay is free during the beta, within the limits shown on the Relay page. Relay does not use your evaluations or any AffixIO proof allowance. We may introduce limits or charges for Relay later with reasonable notice.
No guarantee of continued free allotment. Free and pilot allotments are discretionary, may be changed, reduced, withdrawn or refused (including for duplicate, shared, automated or abusive signups), and do not create an entitlement to paid-equivalent capacity, uptime, support or future free credits. Unused free proofs or evaluations do not roll over unless we expressly say so. Free allotments are not transferable and have no cash value.
7. Fees, billing and Payment Processors
Paid plans, subscriptions and usage fees (including BoundProof Agent Starter or other priced offerings) are as published on AffixIO pricing / checkout pages or as agreed in writing. Prices may be shown in GBP, USD, EUR or other currencies and may be geo-resolved. Taxes (including VAT) may be added where applicable.
By submitting a payment method or completing checkout you: (a) authorise AffixIO and its Payment Processor to charge the stated fees, renewals, taxes and permitted adjustments; (b) represent that you are authorised to use that payment method; and (c) agree to keep payment method, billing address, currency selection and tax information accurate and up to date.
Fees are billed in advance or as otherwise stated at checkout. We may suspend or limit the Services for non-payment, failed charges, chargebacks or overdue balances. You remain liable for fees incurred up to termination and for amounts wrongly reversed where you are at fault under section 8.
8. Your responsibility for payment errors, failed charges and chargebacks
You are solely responsible for the correctness of payments you initiate or authorise for the Services. To the maximum extent permitted by law, AffixIO is not liable for loss arising from:
- incorrect payment amounts, wrong currency, duplicate payments, or payments sent to the wrong account or destination where AffixIO did not cause the error;
- declined cards, insufficient funds, expired cards, bank refusals, 3-D Secure / SCA failures, or other payment-method failures;
- inaccurate tax IDs, VAT numbers, billing details or self-declared business/consumer status;
- delays or errors by banks, card schemes or Payment Processors outside AffixIO’s reasonable control;
- chargebacks, disputes, reclaim or reversal requests that you or your payment method issuer initiate without a valid basis under these Terms or applicable scheme rules, or that arise from your mistake, change of mind (except where mandatory consumer law requires otherwise), or failure to update payment details;
- your failure to reconcile your own merchant payment flows with your payment provider (BoundProof signed decisions are not payment settlement).
If a charge fails, you must promptly provide a valid payment method. If you initiate a chargeback or dispute for fees properly owed, we may contest it, suspend the Services, and recover the disputed amount together with reasonable administrative costs and Payment Processor fees, to the extent permitted by law.
Where AffixIO is not at fault, you must not treat AffixIO as responsible for restoring funds lost through your payment error; you must pursue recovery with your bank or Payment Processor. AffixIO will, where reasonably practicable, provide transaction references to assist that process, without admitting liability.
9. Refunds
Business customers. Except where required by law or expressly agreed in writing, fees for the Services are non-refundable, including unused subscription periods, free-allotment conversions and partially used billing periods.
Consumers. If you are a consumer entitled to mandatory cooling-off or other rights under the Consumer Rights Act 2015 or Consumer Contracts Regulations 2013, those rights apply. Where digital services begin with your express consent during a cooling-off period, you may lose the right to cancel for services already performed, as permitted by law. Contact us to exercise any statutory right.
We may, at our sole discretion, offer a goodwill credit or refund without creating a precedent or obligation.
10. Acceptable use and prohibited use
You must use the Services only for lawful purposes and in accordance with documentation. You must not:
- probe, overload, disrupt or circumvent security, rate limits or authentication;
- share or publish secret API keys, or use keys in untrusted browser code where server-side use is required;
- submit card numbers, payment credentials, government identity numbers or unnecessary sensitive personal data into BoundProof fields;
- misrepresent signed receipts as proof of payment, KYC, consent or legal compliance;
- use the Services to facilitate fraud, unauthorised payments, sanctions evasion, malware or infringement of third-party rights;
- resell or white-label the Services except under a written AffixIO agreement;
- reverse engineer the Services except to the limited extent permitted by mandatory law;
- create abusive free-tier accounts or automate signup to harvest allotments.
We may investigate suspected misuse and cooperate with law enforcement where legally required.
11. Intellectual property
AffixIO and its licensors own all right, title and interest in the Services, software, documentation, branding, ML-DSA signing infrastructure, site content and feedback you provide relating to the Services (excluding your User Content). No rights are granted except the limited, revocable, non-exclusive, non-transferable right to use the Services as permitted by these Terms during your authorised access.
You must not remove proprietary notices. “AffixIO”, “BoundProof” and related marks are identifiers of AffixIO; you may not use them in a way that implies endorsement without permission.
12. User content and licences
“User Content” means data you submit to the Services (such as workspace names, agent identifiers, permission parameters, action metadata and opaque order references). You retain ownership of User Content. You grant AffixIO a worldwide, non-exclusive licence to host, process, transmit and display User Content solely to provide, secure, improve and support the Services and to meet legal obligations.
You represent that you have all rights necessary to submit User Content and that it does not violate law or third-party rights.
13. Disclaimer of warranties
TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTY OF ANY KIND, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, QUIET ENJOYMENT AND NON-INFRINGEMENT.
We do not warrant that the Services will be uninterrupted, error-free, secure, or free of harmful components; that proofs, signatures or receipts will meet your legal or regulatory needs; or that documentation, NIST/NCSC/PQC marketing statements, benchmarks or examples are warranties or service levels.
Cryptographic attestations and SDK proofs are technical artefacts only. They are not legal advice, not a guarantee of payment outcome, and not a substitute for your own compliance programme.
Nothing in this section excludes warranties that cannot be excluded under the laws of England and Wales (including, for consumers, certain rights under the Consumer Rights Act 2015).
14. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW:
- AffixIO shall not be liable for any indirect, incidental, special, consequential, exemplary or punitive loss; loss of profits, revenue, business, goodwill, data, anticipated savings or contracts; business interruption; or cost of substitute services; whether arising in contract, tort (including negligence), breach of statutory duty or otherwise, even if advised of the possibility.
- AffixIO’s total aggregate liability arising out of or in connection with the Services or these Terms shall not exceed the greater of: (a) the total fees you paid to AffixIO for the Services in the twelve (12) months immediately preceding the claim; or (b) one hundred pounds sterling (£100).
- AffixIO shall have no liability for payment errors, failed or incorrect charges, chargebacks or merchant payment outcomes where AffixIO is not at fault, as described in section 8.
Non-excludable liabilities. Nothing in these Terms excludes or limits liability for: death or personal injury caused by negligence; fraud or fraudulent misrepresentation; or any other liability that cannot be excluded or limited under the laws of England and Wales.
You acknowledge that the fees (including free use) reflect this allocation of risk, and that you should arrange your own insurance and integration controls accordingly.
15. Indemnity
You shall indemnify, defend and hold harmless AffixIO and its officers, contractors and agents from and against any claims, damages, losses, costs and expenses (including reasonable legal fees) arising out of or related to: (a) your misuse of the Services; (b) your User Content; (c) your violation of these Terms or law; (d) payment disputes, chargebacks or failed charges caused by you or your payment method where AffixIO is not at fault; (e) third-party claims arising from your products, agents, checkout, customers or integration (including alleged unauthorised payments or lack of consent); and (f) your failure to enforce execution gates or to reconcile with your payment provider.
16. Suspension and termination
You may stop using the Services at any time. We may suspend or terminate access immediately if you breach these Terms, fail to pay, create security or legal risk, or if we discontinue the Services. Upon termination, your licence ends; sections that by nature should survive (including ownership, payment obligations, disclaimers, liability limits, indemnity, governing law and general clauses) survive.
Pilot workspace data may be retained until deletion is arranged; there may be no automatic purge. Contact us for deletion requests subject to legal retention needs.
17. Force majeure
Neither party is liable for delay or failure to perform due to events beyond reasonable control, including network or cloud outages, denial-of-service attacks, Payment Processor or banking failures, strikes, epidemic, war, terrorism, fire, flood, governmental action or failures of utilities or suppliers. This does not excuse your obligation to pay fees already due.
18. Data handling and privacy
BoundProof may store username, workspace name, salted password hash, hashed session tokens, hashed API keys, registered agents, permissions, action details, signed decisions, owner audit events and access-log metadata (which may include IP addresses). Signing keys are stored outside the public web directory. Public receipt verification does not save uploaded receipts. The public sandbox uses synthetic data and does not save decisions to company accounts.
Do not submit card numbers, payment credentials, government identifiers or unnecessary sensitive personal information. Use opaque order references where possible.
Personal data processing for BoundProof is described in the BoundProof Privacy Policy. Broader AffixIO security and trust posture is also summarised on the AffixIO Trust Centre and Security pages. By using the Services you acknowledge that processing described in these Terms and the Privacy Policy is necessary to operate BoundProof. For privacy requests, contact hello@affix-io.com or use Contact AffixIO.
19. Changes to these Terms
We may update these Terms by posting a revised version at https://boundproof.affix-io.com/terms/ and updating the effective date. Material changes will be notified by site notice or email where reasonably practicable. If you continue using the Services after the effective date, you accept the revised Terms. If you do not agree, you must stop using the Services and, where applicable, cancel paid subscriptions in accordance with the cancellation instructions then in force.
20. Governing law and jurisdiction
These Terms and any dispute or claim (including non-contractual disputes or claims) arising out of or in connection with them or their subject matter are governed by the law of England and Wales.
The courts of England and Wales have exclusive jurisdiction, except that AffixIO may seek injunctive or interim relief in any jurisdiction to protect its intellectual property or confidential information. If you are a consumer habitually resident in another part of the United Kingdom or the EU/EEA, mandatory local consumer jurisdiction and choice-of-law protections may also apply in your favour.
21. General
Severability. If any provision of these Terms is held invalid, illegal or unenforceable, it shall be modified to the minimum extent necessary to make it valid and enforceable, or if modification is not possible, severed. The remaining provisions continue in full force.
Entire agreement. These Terms (together with any order form or checkout terms expressly incorporated) constitute the entire agreement between you and AffixIO regarding the Services and supersede prior non-fraudulent representations on the same subject. You acknowledge you have not relied on any representation not set out in these Terms, except for fraudulent misrepresentation.
No waiver. Failure to enforce a provision is not a waiver. Any waiver must be in writing and signed by AffixIO to be effective, and applies only to the specific instance.
Assignment. You may not assign or transfer these Terms without AffixIO’s prior written consent. AffixIO may assign these Terms to an affiliate or successor in connection with a corporate reorganisation, merger or sale of assets. These Terms bind permitted successors and assigns.
Notices. We may notify you via the Services, the email associated with your account, or the contact details you provide. You may notify us using the contact details in section 22.
Third-party rights. Except for indemnified AffixIO personnel as intended beneficiaries of section 15, a person who is not a party to these Terms has no right under the Contracts (Rights of Third Parties) Act 1999 to enforce them.
Interpretation. Headings are for convenience only. “Including” means “including without limitation”. References to statutes include amendments and re-enactments.
22. Contact
AffixIO — operator of BoundProof Agent
Email: hello@affix-io.com
Web: https://www.affix-io.com/contact/
Product: https://boundproof.affix-io.com/
These Terms are a commercial standard-form agreement drafted for AffixIO / BoundProof under an English and Welsh law style. They are not solicitor advice to you, and AffixIO does not claim that any particular dispute outcome is guaranteed. For advice on your specific situation, consult a qualified solicitor.