Terms of Service

1. The Agreement

By accessing or using AxiomAuth ("the Service"), you enter into a binding agreement with Axiom Identity Services Ltd. If you do not agree to these Terms, do not use the Service. If you are using the Service on behalf of a business or other legal entity, you represent that you have the authority to bind that entity to these Terms.

2. Permitted Use

The Service is licensed for use by organisations and their authorised administrators to manage employee and contractor identity, authentication, and access. You may not:

• Resell or sublicense access to the Service without prior written agreement.
• Use the Service to provide authentication services to third parties outside your organisation.
• Attempt to circumvent or interfere with the security mechanisms of the Service.
• Use the Service in any manner that violates applicable law, including data protection and employment law.

3. Accounts and Access

You are responsible for maintaining the confidentiality of your administrator credentials and API keys. All activities that occur under your account are your responsibility. You must notify us immediately at [email protected] if you suspect unauthorised access to your account.

4. Data Processing

This section constitutes a Data Processing Agreement ("DPA") between Axiom Identity Services Ltd. ("Processor") and the customer ("Controller") for the purposes of EU GDPR Article 28.

4.1 Roles. The customer is the Data Controller in respect of all personal data processed through the AxiomAuth platform (including user identities, session records, and audit logs). Axiom Identity Services Ltd. acts solely as a Data Processor, processing personal data only on the documented instructions of the Controller.

4.2 Sub-processors. The Company uses the following sub-processors: Amazon Web Services (cloud infrastructure, EU region), and Stripe (payment processing). By using the Service, the Controller consents to the engagement of these sub-processors.

4.3 Data residency. All identity and session data is stored within the European Union. Data is not transferred to third countries except where Standard Contractual Clauses or equivalent transfer mechanisms are in place.

5. Service Availability

We target 99.9% monthly uptime for the AxiomAuth API and SSO portal. Planned maintenance windows will be communicated with a minimum of 48 hours' notice. Current status is available at axiomauth.com/status. Service Level Agreements with financial remedies are available on Enterprise plans.

6. Limitation of Liability

Liability cap. To the maximum extent permitted by law, the Company's total aggregate liability to you for any claim arising out of or in connection with the Service is limited to the greater of: (a) the total fees paid by you in the 12 months immediately preceding the event giving rise to the claim, or (b) €1,000.

Indirect loss. The Company shall not be liable for any indirect, consequential, incidental, or punitive damages, including loss of data, loss of profits, or business interruption, even if advised of the possibility of such damages.

7. Termination

Either party may terminate the agreement on 30 days' written notice. We reserve the right to suspend or terminate accounts immediately where we have reasonable grounds to believe the Service is being used in violation of these Terms or applicable law. On termination, customer data will be deleted within 90 days unless a longer retention period is required by law.

8. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated by email to account administrators at least 30 days before they take effect. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

9. Governing Law

These Terms are governed by the laws of Ireland. Any disputes shall be subject to the exclusive jurisdiction of the courts of Ireland.

Contact: [email protected]