iFixAi Terms of Service

1. Agreement to These Terms

1.1 These Terms of Service (“Terms”) are an agreement between iFixAi Inc., a Delaware corporation with its address at 2810 North Church Street, Wilmington, DE 19802, United States (“iFixAi,” “we,” “us” or “our”), and the organization or person that uses the Services (“you” or “your”).

1.2 You accept these Terms when you tick a box or click a button to agree to them, sign an Order Form that refers to them, or use the Hosted Services. If you use the Services on behalf of an organization, you confirm that you are authorized to bind that organization, and “you” means that organization.

1.3 The Services are for business and professional use. You must be at least 18 years old to use them.

1.4 AI tools acting for you. You may connect an AI assistant or coding tool, for example through our MCP connector, that signs in, starts audits or otherwise uses the Services on your behalf. A person with authority must approve that connection. You are responsible for everything the tool does through your account as if you had done it yourself.

1.5 Our Privacy Policy explains how we handle personal information. Any Order Form you sign with us forms part of these Terms.

2. Definitions

• “Agent” means an AI agent, assistant or workflow you connect to the Services for auditing. Each deployed agent with its own job, endpoint and permissions counts as a separate Agent, even if several run on the same model.
• “Audit” means one run of inspections against one Agent, resulting in a Report.
• “Customer Data” means data you or your Authorized Users provide to or connect through the Services, including repository files, Agent configurations, endpoints and credentials, simulation environments, and your Agent’s replies and actions recorded during Audits.
• “Documentation” means the product guides and descriptions we publish for the Services.
• “Hosted Services” means iFixAi OS (our web dashboard), our MCP connector, our API and related hosted features.
• “Open-Source Software” means the iFixAi engine and related code we publish under an open-source license at github.com/ifixai-ai.
• “Order Form” means a quote, order form or other ordering document agreed between you and us that sets out your Package, number of Agents, billing term and fees.
• “Package” means the paid plan you subscribe to, currently Startup, Growth, Enterprise or Agentic Enterprise, as described on our website and in your Order Form.
• “Report” means the audit report produced by an Audit, including its findings, evidence, outcome counts and framework mappings.
• “Services” means the ifixai.ai website, the Hosted Services and any related support we provide.
• “Workspace” means your organization’s account on the Hosted Services, and “Authorized Users” means the people you allow to use it.

3. The Services

3.1 What iFixAi does. iFixAi is an independent auditing service for AI agents. It tests whether an Agent does the job it is meant to do, within the rules it is meant to follow, and shows you the evidence.

3.2 How an Audit works. When you run an Audit on the Hosted Services:

1. (a)we build a simulation environment from your Agent’s definition (for example, its AGENTS.md file), describing the roles, tools and rules the Agent works with, which you can review before any Audit runs;
2. (b)we send test inputs to your Agent at its endpoint, the way a user would, including adversarial inputs designed to get it to break its rules or misuse its tools;
3. (c)we record your Agent’s replies and the actions it takes; and
4. (d)AI models that we select, accessed through our AI model provider OpenRouter, review the results, and we produce a Report with the findings, the evidence behind them and a summary of outcomes.

3.3 Changes and new features. We regularly add, change and retire inspections and features to keep up with new risks. We will not materially reduce the core functionality of your paid Package during a billing period you have paid for. Features we label as beta, preview or experimental are provided as-is, may change or end at any time and are not covered by any service commitment.

3.4 Support. We provide support by email at support@ifixai.ai. Dedicated support or service levels apply only if they are included in your Order Form.

4. Open-Source Software

4.1 Our Open-Source Software is licensed under the Apache License, Version 2.0. That license, not these Terms, governs your use of it, and nothing in these Terms limits the rights it gives you.

4.2 The Apache license does not give you any right to use the iFixAi name, logos or badge.

4.3 The Open-Source Software runs on your own infrastructure with your own AI model keys, and you are responsible for that use. By default it sends us limited, pseudonymous usage information, which you can switch off, as described in our Privacy Policy.

5. Accounts and Workspaces

5.1 Sign-in. You sign in to the Hosted Services with a work account from a supported provider, such as Microsoft or Google. You must give us accurate information and keep it up to date.

5.2 Workspaces. We create a Workspace for your organization, usually based on your company email domain. We may approve, decline or limit requests for access. Once your organization’s domain is approved, colleagues who sign in with an email address at that domain may join your Workspace. Your organization owns its Workspace, and its administrators control who has access.

5.3 Keeping your account secure. You are responsible for your Authorized Users, for keeping sign-in details and API keys secure, and for all activity in your Workspace. Tell us promptly at support@ifixai.ai if you suspect unauthorized access.

6. Packages, Fees and Renewal

6.1 Packages. Our Packages are priced per Agent, per month. Startup, Growth and Enterprise each cover up to three Agents. Agentic Enterprise is for four or more Agents and is quoted individually. The inspections, number of Audits and features included in each Package are described on our website and in your Order Form.

6.2 Audit allowance. Each Package includes a set number of Audits per Agent each month. Unused Audits do not carry over to the next month. Audits that fail to complete, are cancelled or are refused do not count toward your allowance.

6.3 Fees and invoicing. Your fees are set out in your Order Form. Unless your Order Form says otherwise, fees are billed in U.S. dollars in advance at the start of each billing period, and invoices are due within thirty (30) days of the invoice date. You can pay by bank transfer or any other method we accept.

6.4 Automatic renewal. Your subscription renews automatically at the end of each billing period for another period of the same length (one month for monthly billing, one year for annual billing), unless you cancel before the renewal date. We will email your billing contact a reminder at least thirty (30) days before an annual renewal and at least seven (7) days before a monthly renewal. To cancel, reply to that email or write to support@ifixai.ai before the renewal date. Cancellation takes effect at the end of the current billing period, and you keep access until then.

6.5 Price changes. We may change our prices by giving you at least thirty (30) days’ notice. New prices apply from your next renewal, never to a billing period you have already paid for.

6.6 Late payment. If an invoice is more than fifteen (15) days overdue, we may suspend the Hosted Services after giving you at least ten (10) days’ notice by email. Overdue amounts may accrue interest at 1% per month or the highest rate allowed by law, whichever is lower.

6.7 Taxes. Fees do not include taxes. You are responsible for any sales, use, value-added or similar taxes on your purchase, other than taxes on our income.

6.8 Refunds. Fees are non-refundable, except where Sections 15.1, 17.2 or 18.4 provide for a refund or where the law requires one.

6.9 Free use and promotions. We may offer free access, demo audits, trials or promotional codes. Unless we say otherwise, each offer is limited to one per person and one per organization, has no cash value, cannot be transferred or combined with other offers, and may expire or be withdrawn at any time. We may cancel promotional access that is misused, for example through multiple accounts. Free and promotional access is provided as-is.

7. Your Agent and Your Responsibilities

7.1 Permission to test. Only connect Agents, endpoints, repositories and systems that you own or are authorized to test. By starting an Audit, you confirm that you have every permission needed for us to send test inputs to your Agent and to any tools or systems it can reach, including any permission required by the provider of the AI model your Agent runs on.

7.2 Use a staging environment. Audits are designed to push your Agent into doing things it should not do. We strongly recommend connecting a staging or test version of your Agent, with test data and sandboxed tools, rather than a production system. Paid Packages include a hosted sandbox for your Agent’s tools.

7.3 Your Agent’s costs. Audits call your Agent at its own endpoint, just as a user would. Any costs your Agent incurs in answering, such as usage charges from your AI model provider or cloud provider, are your responsibility. The AI models we use to review the results are included in your Package.

7.4 Your Agent’s actions. You are responsible for your Agent and for anything it does during an Audit, including actions it takes in connected systems. We are not responsible for those actions, for any charges they create, or for your Agent’s provider limiting or suspending your account because of Audit traffic.

7.5 Credentials. Only give us the credentials needed to reach your Agent, ideally test credentials with limited permissions that you can revoke. You can remove a connection and its credentials at any time.

7.6 Personal data. Please avoid putting real personal data into your Agent’s test setup. If Customer Data includes personal information, you are responsible for having the right to share it with us for the Audit.

8. Customer Data

8.1 You own your data. As between you and us, you own Customer Data and your Reports.

8.2 Our permission to use it. You give us a limited, non-exclusive right to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the Services for you, as described in these Terms and our Privacy Policy.

8.3 How we handle it. In particular:

1. (a)our GitHub App has read-only access to the repositories you choose; we read the files you select and never request write access;
2. (b)we send selected files, and your Agent’s replies and actions, to AI models accessed through OpenRouter to build simulation environments and review Audit results;
3. (c)we keep the credentials you provide in encrypted storage and use them only to reach your Agent; and
4. (d)in-progress Audit results are deleted when the Audit ends, and completed Reports, including the evidence behind the findings, are kept in your Workspace until you delete them or your subscription ends.

8.4 No training and no sale. We do not use Customer Data to train AI models, and we do not sell Customer Data. We access AI models through OpenRouter using settings that exclude providers that train on the data sent to them.

8.5 Usage information. We may collect information about how the Services are used, and may use aggregated or de-identified data that does not identify you, your Agents or any individual, to operate and improve the Services.

8.6 Personal information. Where Customer Data includes personal information, we process it on your behalf as your service provider. If you need a data processing agreement, contact privacy@ifixai.ai.

8.7 Export and deletion. After your subscription ends, you have thirty (30) days to export your Reports. We then delete Customer Data from our active systems within a further thirty (30) days, unless the law requires us to keep it. Backups are overwritten on their normal schedule.

9. Reports: Evidence, Not Certification

9.1 A Report is evidence of how your Agent behaved during a specific Audit, on a specific version, against a specific set of inspections. It is not a certification, a legal opinion, a guarantee of security, or a statement that your Agent complies with any law, regulation or standard.

9.2 Where a Report maps findings to frameworks such as the EU AI Act, the NIST AI Risk Management Framework, ISO/IEC 42001 or the OWASP Top 10 for LLM Applications, the mapping shows which controls a finding relates to. Whether your Agent is compliant remains a decision for you and your advisers.

9.3 Findings are produced with the help of AI models, which can make mistakes. Results can differ between Audits, and no Audit can detect every problem. You remain responsible for your decisions about deploying and operating your Agent.

9.4 If you believe a finding is wrong, tell us through the Hosted Services or at support@ifixai.ai. We review these reports to improve future Audits, but we do not change a completed Report.

9.5 Sharing Reports. You may share your Reports with others, such as your customers, auditors, investors or regulators, as long as you share them in full, do not alter them and do not present them as a certification. Reports are prepared for you. Anyone else who reads a Report does so for information only and may not rely on it as the basis of a claim against iFixAi.

10. The Audited by iFixAi Badge

10.1 The Growth, Enterprise and Agentic Enterprise Packages include the “Audited by iFixAi” badge: the standard badge with Growth, and the gold badge with Enterprise and Agentic Enterprise. The Startup Package does not include a badge.

10.2 The badge means that your Agent has been audited by iFixAi. It does not mean that your Agent passed an Audit, is certified or compliant, or is endorsed by iFixAi.

10.3 While your eligible subscription is active, you may display the badge we provide for your Agent on your website and in your materials. The badge refers to the Audit it was issued for. Do not alter it or use it for a different Agent. We may withdraw permission to use the badge if your subscription ends or the badge is misused.

11. Acceptable Use

You must not, and must not allow anyone else to:

1. (a)audit, test or attack any agent or system that you are not authorized to test;
2. (b)use the Services, or the test inputs and techniques they contain, to attack, disrupt or gain unauthorized access to any system outside an authorized Audit;
3. (c)copy, extract or resell our inspections, test inputs, review methods or Reports as a standalone product, or use the Hosted Services to build a competing service (this does not limit your rights under the Open-Source Software license);
4. (d)break, probe or get around the security, usage limits or access controls of the Hosted Services, or load-test them without our permission;
5. (e)misuse free access or promotions, for example by creating multiple accounts;
6. (f)upload malicious code, or content you have no right to share;
7. (g)misrepresent a Report or the badge, or suggest that iFixAi certifies, endorses or partners with you when it does not; or
8. (h)use the Services in a way that breaks any law.

We may suspend access that breaks this Section, with notice where reasonably possible.

12. Intellectual Property

12.1 Ours. We and our licensors own the Services, including the Hosted Services, inspections, review methods, Report templates and software (other than the Open-Source Software, which is governed by its license), and the iFixAi name, logos and badge. We reserve all rights not expressly granted in these Terms.

12.2 Your right to use the Hosted Services. During your subscription, and subject to these Terms, we give you a non-exclusive, non-transferable right for your Authorized Users to use the Hosted Services for your business purposes.

12.3 Reports. You may use, copy and share your Reports as described in Section 9.5. We keep ownership of the methods, templates and inspection content reflected in them.

12.4 Feedback. If you send us suggestions or feedback, we may use them without restriction or payment to you.

13. Confidentiality

13.1 “Confidential Information” means non-public information that one party shares with the other and that is marked confidential or would reasonably be understood to be confidential. Customer Data and your Reports are your Confidential Information. The pricing in your Order Form and our non-public product and security information are ours.

13.2 The receiving party will use Confidential Information only to perform under these Terms, protect it with at least reasonable care, and share it only with its employees, contractors and service providers who need to know it and are bound by similar confidentiality duties.

13.3 These duties do not apply to information that is or becomes public through no fault of the receiving party, was already known to it, is received from someone else without a duty of confidentiality, or is independently developed. A party may disclose Confidential Information when required by law, after notifying the other party where the law allows.

13.4 We will not make any of your Reports public without your permission.

14. Third-Party Services

The Services work with services we do not control, such as GitHub, Microsoft and Google sign-in, MCP clients such as Claude Code or Cursor, the AI model providers we access through OpenRouter, and the model provider your own Agent runs on. Your use of those services is governed by their own terms, and we are not responsible for them. We may change the AI models and model providers we use from time to time.

15. Warranties and Disclaimers

15.1 For paid Packages, we warrant that the Hosted Services will perform materially as described in the Documentation. If they do not, tell us and we will use reasonable efforts to fix the problem or re-run the affected Audit. If we cannot, you may end the affected subscription and we will refund prepaid fees for the remaining period. This is your only remedy for a breach of this warranty.

EXCEPT AS STATED IN SECTION 15.1, THE SERVICES, REPORTS AND BADGES ARE PROVIDED “AS IS” AND “AS AVAILABLE,” AND WE DISCLAIM ALL OTHER WARRANTIES, WHETHER EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT AUDITS WILL IDENTIFY EVERY RISK, VULNERABILITY OR FAILURE IN YOUR AGENT.

16. Limitation of Liability

16.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL OR DATA, EVEN IF IT WAS ADVISED THAT SUCH DAMAGES WERE POSSIBLE.

16.2 EACH PARTY’S TOTAL LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE FEES PAID AND PAYABLE BY YOU TO US IN THE TWELVE (12) MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM, AND (B) ONE HUNDRED U.S. DOLLARS (US$100).

16.3 FOR CLAIMS ARISING FROM A BREACH OF SECTION 13 (CONFIDENTIALITY) OR OF OUR OBLIGATIONS TO PROTECT CUSTOMER DATA, THE LIMIT IN SECTION 16.2 IS TWO TIMES (2X) THE AMOUNT STATED THERE.

16.4 THESE LIMITS DO NOT APPLY TO YOUR OBLIGATION TO PAY FEES, TO A PARTY’S OBLIGATIONS UNDER SECTION 17 (INDEMNIFICATION), TO YOUR BREACH OF SECTION 7.1 OR SECTION 11, OR TO A PARTY’S GROSS NEGLIGENCE, FRAUD OR WILLFUL MISCONDUCT.

16.5 WE ARE NOT LIABLE FOR ACTIONS TAKEN BY YOUR AGENT, OR FOR COSTS YOUR AGENT INCURS, DURING AN AUDIT.

17. Indemnification

17.1 By you. You will defend us against any third-party claim, and pay any damages, costs and reasonable legal fees finally awarded against us or agreed in a settlement, arising from (a) Customer Data or your Agent, including any Audit of a system you were not authorized to test, (b) your breach of Section 7 or Section 11, or (c) your use of a Report or badge in a way these Terms do not allow.

17.2 By us. We will defend you against any third-party claim that the Hosted Services, as provided by us and used in line with these Terms, infringe that third party’s U.S. patent, copyright or trademark or misappropriate its trade secret, and pay any damages, costs and reasonable legal fees finally awarded against you or agreed in a settlement. This does not apply to claims arising from Customer Data, the Open-Source Software, combinations with anything we did not provide, changes not made by us, or free or promotional use. If the Hosted Services are, or we believe they may become, the subject of such a claim, we may modify them, obtain the right for you to keep using them, or end your subscription and refund prepaid fees for the remaining period.

17.3 Process. The party seeking protection must notify the other party promptly, let it control the defense and settlement (a settlement cannot impose obligations on the protected party without its consent), and reasonably cooperate.

18. Term, Suspension and Termination

18.1 Term. These Terms apply from when you first accept them until all your subscriptions have ended and you stop using the Services.

18.2 Cancellation. You can cancel a subscription at any time. Cancellation takes effect at the end of the current billing period (see Section 6.4).

18.3 Suspension. We may suspend all or part of the Hosted Services if needed to prevent harm to the Services or to others, if you breach Section 11, or for non-payment under Section 6.6. We will give notice where reasonably possible and restore access once the issue is resolved.

18.4 Termination for breach. Either party may end a subscription if the other materially breaches these Terms and does not fix the breach within thirty (30) days of written notice. If you end a subscription because of our breach, we will refund prepaid fees for the remaining period.

18.5 What happens when a subscription ends. Your access to the Hosted Services under that subscription ends, any unpaid fees become due, and your permission to display the badge ends. You should uninstall our GitHub App and revoke any credentials you gave us. Customer Data is handled as described in Section 8.7.

18.6 Survival. Sections 6 (for amounts owed), 8.7, 9, 12, 13, 15, 16, 17, 20 and 22 continue to apply after these Terms end.

19. Changes to These Terms

We may update these Terms from time to time. If we make a material change, we will tell you by email or in the Hosted Services at least thirty (30) days before it takes effect. For paid subscriptions, material changes apply from your next renewal. If you do not agree to a change, you can cancel before it applies to you. Changes to Section 20 will not apply to disputes that arose before the change. The “Last updated” date at the top shows when these Terms last changed.

20. Governing Law and Disputes

20.1 These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

20.2 Before going to court, each party will first try to resolve a dispute informally by contacting the other and negotiating in good faith for at least thirty (30) days.

20.3 The state and federal courts located in the State of Delaware have exclusive jurisdiction over any dispute arising out of or relating to these Terms, and each party consents to their jurisdiction. Either party may still ask any court for an injunction or other urgent relief to protect its intellectual property or Confidential Information.

20.4 EACH PARTY WAIVES ITS RIGHT TO A JURY TRIAL IN ANY DISPUTE ARISING OUT OF OR RELATING TO THESE TERMS. TO THE EXTENT PERMITTED BY LAW, CLAIMS MAY BE BROUGHT ONLY ON AN INDIVIDUAL BASIS AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY CLASS OR REPRESENTATIVE ACTION.

21. Export Controls and Sanctions

You may not use the Services in violation of U.S. export control or sanctions laws, or any other sanctions laws that apply to you. You confirm that you are not located in a country subject to comprehensive U.S. sanctions, and that you are not on, or owned or controlled by anyone on, a U.S. government list of restricted parties.

22. General

22.1 Entire agreement. These Terms, your Order Form and our Privacy Policy are the entire agreement between us about the Services. If they conflict, your Order Form controls, then these Terms, then the Documentation.

22.2 Assignment. Neither party may assign these Terms without the other’s consent, except that either party may assign them without consent to a successor in a merger, acquisition or sale of all or substantially all of its business or assets.

22.3 Notices. We may send notices to the email address of your account administrator or billing contact. You may send notices to legal@ifixai.ai. Notices of breach or legal claims should also be sent by mail to our address in Section 23.

22.4 Events beyond our control. Neither party is liable for delays or failures caused by events beyond its reasonable control, such as outages of internet, hosting or AI model providers, cyberattacks, natural disasters or government action. This does not excuse payment obligations.

22.5 Publicity. Neither party will use the other’s name or logo in its marketing without permission.

22.6 U.S. government users. The Services are “commercial computer software” and “commercial computer software documentation,” and are provided to U.S. government users only with the rights set out in these Terms.

22.7 Other terms. If any part of these Terms is found unenforceable, the rest remains in effect. Not enforcing a provision is not a waiver of it. The parties are independent contractors, and these Terms create no rights for anyone else. These Terms may be accepted electronically. If we provide a translation, the English version controls.

23. Contact

iFixAi Inc., 2810 North Church Street, Wilmington, DE 19802, United States

Legal notices: legal@ifixai.ai · Support: support@ifixai.ai · Phone: (929) 810-4610