These Terms of Service govern your use of Toevan. They form the agreement between Toevan OÜ and the organisation that subscribes to the service. Personal-data processing is governed by the Data Processing Agreement, which is incorporated into these Terms by reference.
Some sections carry enforceable clause wording marked [LAWYER] that will be produced from an EU services-agreement template and reviewed by counsel before first signature. The service description, fees, the compliance limiter, intellectual property, and acceptable use below state how Toevan actually operates.
The service
Toevan connects to your source repository, indexes your code, evaluates the deterministic rules (blueprints and constraints) you configure, gates pull requests against them, and produces signed, auditor-ready evidence of what was enforced.
The core analysis is deterministic and runs on Toevan's EU infrastructure. AI fix generation is a separate, optional, per-violation feature; how it and your code are handled is set out on the Security page and in the Data Processing Agreement.
Fees and billing
The service is offered in tiers (Starter, Team, and Enterprise); the current tiers and prices are shown on our website and are not restated here. Fees are quoted and charged in euros (EUR).
Payment processor. Billing is intended to run through Stripe. Billing is currently simulated: no live payment is taken yet, and the Stripe integration goes live before any charge is made. When it does, EU business-to-business sales are handled under the VAT reverse-charge mechanism where applicable, and you are responsible for accounting for VAT in your own member state.
The billing cycle, renewal, and any late-payment or suspension terms are [LAWYER].
What a passing result means (compliance limiter)
This is the most important thing to understand about what Toevan does and does not promise.
Toevan provides enforcement and evidence for the controls that you own and configure. A passing (green) result means that the rules you defined were enforced on the code that was analysed, and that there is signed evidence of it. It does not mean that your organisation is compliant with any law, regulation, or framework.
Toevan does not certify or guarantee your regulatory compliance. Compliance is a property of your whole organisation, its processes, and controls that live outside a code repository, and it is judged by your auditors and regulators, not by Toevan. Toevan is a tool that enforces the rules you choose and proves that it did; the responsibility for choosing the right rules, and for compliance overall, remains yours.
Intellectual property
- Your code and your evidence are yours. You retain all rights in your source code and in the evidence records the service generates for you, including the copy written to your own repository. Toevan claims no ownership of them.
- The platform is ours. Toevan owns the platform, its software, and all related intellectual property, and grants you a limited, non-exclusive right to use it for the term of your subscription.
- The method is a trade secret. The conformance-predicate method that decides how rules are evaluated is an undisclosed trade secret, retained server-side and not derivable from the product's outputs. Nothing in these Terms grants any right to it, and it is not described here.
Acceptable use
When using Toevan you agree not to:
- connect or analyse repositories you are not authorised to govern, or direct the service at code you do not have the right to process;
- attempt to reverse-engineer, decompile, or otherwise derive the analysis engine or the conformance-predicate method;
- probe, scan, or test the security of the service except through the responsible-disclosure channel, or interfere with its integrity or availability;
- use the service in violation of applicable law or to infringe another party's rights.
Warranties and disclaimers
The service is provided on the warranty terms, and with the disclaimers, set out in [LAWYER]. This section is read together with the compliance limiter above, which is a deliberate and binding statement of scope, not a disclaimer of the product working as described.
Limitation of liability
Liability under these Terms is capped, and indirect and consequential damages are excluded, as set out in [LAWYER].
Indemnification
The parties' indemnification obligations are [LAWYER].
Term and termination
The term, renewal, termination rights, and the consequences of termination are [LAWYER]. On termination, the return and deletion of your data follow the Data Processing Agreement, and evidence written to your own repository remains yours.
Changes to these terms
These Terms are versioned. The current version and the date it last changed appear at the top of this page, and the changelog below records the history. We will give notice of material changes; the mechanism and notice period are [LAWYER].
Governing law and venue
These Terms are governed by the laws of Estonia, and the venue for disputes is Estonia. The precise dispute-resolution clause is [LAWYER].
Changelog
- v1.0.0
Initial draft: service description (deterministic analysis versus optional AI fixes), fees and billing (Stripe intended, currently simulated, EUR, reverse-charge VAT), the compliance limiter (a passing result is not a compliance certification), the intellectual-property split with the conformance-predicate method as an undisclosed trade secret, and acceptable use. Warranties, liability cap, indemnities, and term and termination are marked [LAWYER] pending counsel. Estonian governing law.