Status: legal-review draft for PolicyStrata Clearance. Do not publish as final legal terms without counsel review.
Service
Clearance is the hosted PolicyStrata platform for AI-agent release control, evidence packs, review decisions, runtime decision history, audit logs, and enterprise administration.
Accounts And Administration
Customers are responsible for authorized account access, workspace membership, role assignment, SSO configuration, SCIM directory configuration, runner-token handling, and timely removal of users who no longer require access.
Customer Data
Customers retain ownership of their data. The hosted service is designed for metadata-only storage and should not be used to submit raw prompts, traces, credentials, database rows, or other sensitive raw artifacts unless a separate written agreement explicitly permits it.
Acceptable Use
Customers may not use the service to violate law, bypass security controls, attack the platform, disrupt other customers, upload malware, or submit data they are not authorized to process.
Billing
Paid subscriptions are billed through Stripe or an executed order form. Stripe webhooks are the source of truth for subscription state in the product.
Confidentiality
Confidential information handling, exclusions, compelled disclosure, and survival periods require final legal drafting before customer signature. Pilot order forms should either incorporate an approved NDA or include counsel-approved confidentiality terms.
Intellectual Property
Customers retain ownership of their customer data, raw evidence, prompts, traces, schemas, records, policies, and agent code. PolicyStrata retains ownership of the service, software, documentation, schemas, control packs, templates, and pre-existing materials. Pilot-specific feedback, deliverables, and implementation work require final ownership and license language in the order form or MSA.
Availability
The service is provided using commercially reasonable efforts unless an order form or support exhibit states otherwise. Formal uptime SLAs should not be offered until the reliability process in docs/reliability.md is operationally proven.
Suspension And Termination
Access may be suspended for security risk, nonpayment, legal requirement, or material breach. Termination and data return/deletion should follow the applicable order form and DPA.
Disclaimers And Liability
Warranty disclaimers, liability caps, exclusions, indemnities, governing law, and dispute resolution require final legal drafting before customer signature.