Terms of Service

Version: tos-2026-10 Effective date: 2026-10-19 Applies to: ATHELOS Cloud and ATHELOS Dedicated operated by ZERODIN.

1. Acceptance of Terms

By creating an account or using ATHELOS, you ("Customer") agree to these Terms of Service ("Terms") on behalf of the entity you represent. If you do not have authority to bind that entity, you may not use the service. If you do not agree to these Terms, do not use the service.

These Terms form the master agreement between you and ZERODIN ("we", "us") governing your use of ATHELOS. The Data Processing Agreement (Annex A), the Sub-Processor List (Annex B), and the Data Retention & Deletion Policy (Annex C) are incorporated into these Terms by reference.

2. What ATHELOS Is

ATHELOS is a cybersecurity consultancy platform for running engagements, managing findings, producing reports, and handling related business workflows. It is provided in two commercial forms:

• ATHELOS Cloud — multi-tenant software-as-a-service, isolated per tenant at the database level.
• ATHELOS Dedicated — a single-tenant deployment on a dedicated server operated by ZERODIN.

Self-Hosted deployment is covered by a separate license and is not subject to these Terms.

ATHELOS is a professional tool. It is not a substitute for professional judgment, and we are not responsible for decisions made using its output.

3. Accounts and Access

You are responsible for:

• All activity that occurs under your account.
• Ensuring your users keep their credentials secure, including enabling multi-factor authentication where the platform offers it.
• Notifying us immediately at security@athelos.pro if you become aware of unauthorized access.

We may suspend an account if we reasonably believe it has been compromised or is being used in violation of §5.

4. Subscription, Billing, and Cancellation

4.1 Plans and pricing

ATHELOS Cloud is offered in three tiers — Solo, Small Firm, Firm — each with a defined limit on users, engagements, storage, and AI usage. Current pricing is published at https://athelos.pro/pricing. Prices may change with 30 days' notice.

ATHELOS Dedicated is offered on a fixed monthly fee per instance, with pricing agreed in the ordering document.

4.2 Billing

Subscriptions are billed monthly in advance through Stripe. Payment method data is handled entirely by Stripe and never touches our servers. Failed payments enter a 7-day grace period, after which the account may be suspended.

4.3 Cancellation

You may cancel at any time via the Stripe Customer Portal. Cancellation takes effect at the end of the current billing period. Data retention after cancellation is governed by the Data Retention & Deletion Policy (Annex C).

4.4 Refunds

First-time Cloud subscribers are eligible for a refund within 30 days of their first payment if they are not satisfied with the service. This does not apply to renewals or to Dedicated.

5. Acceptable Use

You agree not to:

• Use ATHELOS for any activity that is illegal in your jurisdiction or the jurisdiction of the target of any security testing.
• Conduct security testing against systems without documented authorization from their owner.
• Reverse engineer, decompile, or scrape the ATHELOS software or infrastructure.
• Resell, sublicense, or provide ATHELOS to third parties as a service without a written agreement.
• Interfere with the security, integrity, or performance of the platform.

We may suspend or terminate an account found in violation of this section, without refund, and may report violations to the relevant authorities where required by law.

6. Customer Data and Privacy

You own all data you upload or generate in ATHELOS. We process it as described in the Data Processing Agreement (Annex A) and only on your documented instructions.

When you use ATHELOS Cloud, your tenant data is stored in a dedicated Postgres database, MinIO bucket, and Meilisearch index that no other tenant can access. Physical isolation and testable isolation are described in docs/CLOUD.md and proven by the OWASP Cross-Tenant Boundary Test.

Deletion follows the Data Retention & Deletion Policy (Annex C). Our sub-processors are listed in Annex B.

7. Intellectual Property

The ATHELOS software, documentation, design system, and all related intellectual property are owned by ZERODIN and its licensors. Nothing in these Terms transfers ownership of that IP to you.

You retain ownership of everything you create using ATHELOS — findings, reports, evidence, contracts, and client data. Reports and deliverables you generate remain yours.

8. Service Level

For ATHELOS Cloud we target 99.5% monthly uptime, excluding scheduled maintenance announced at least 24 hours in advance and excluding failures outside our reasonable control. We do not offer financial service-level credits for the Solo plan. Firm plan customers may negotiate a separate SLA.

For ATHELOS Dedicated the target is the same, and dedicated customers receive a documented escalation path in their ordering document.

9. Warranty Disclaimer

ATHELOS is provided "as is" and "as available". We do not warrant that it will be uninterrupted, error-free, or fit for any particular purpose. You are responsible for determining whether ATHELOS is appropriate for your use case and for complying with the laws applicable to your work.

Nothing in this section limits any warranty or right that cannot be excluded under applicable law.

10. Limitation of Liability

To the maximum extent permitted by law, our aggregate liability under these Terms is limited to the total fees you paid us in the twelve months preceding the claim.

Neither party is liable for indirect, incidental, special, or consequential damages, including lost profits, lost data, or business interruption, even if advised of the possibility.

Nothing in this section limits liability for fraud, willful misconduct, or any liability that cannot be excluded by law.

11. Indemnification

You agree to indemnify us against claims arising from your breach of these Terms, your violation of applicable law, or your unauthorized testing of third-party systems.

We agree to indemnify you against claims that ATHELOS itself infringes a third party's intellectual property, provided you notify us promptly and give us control of the defense.

12. Suspension and Termination

We may suspend or terminate your account:

• Immediately for non-payment after the grace period in §4.2.
• Immediately for any violation of §5 (Acceptable Use).
• On 30 days' written notice for any other material breach, if the breach is not cured within that period.

You may terminate on 30 days' written notice for convenience. Termination for convenience does not entitle you to a refund of fees already paid for the current billing period.

On termination, data is retained and then deleted per Annex C.

13. Changes to These Terms

We may update these Terms. Material changes will be announced by email to the account owner at least 30 days before they take effect. Continued use of ATHELOS after that date constitutes acceptance of the updated Terms. If you disagree with the changes, you may terminate per §12.

The current version number appears at the top of this document. The version in effect at any given time is the one published at https://athelos.pro/terms.

14. Governing Law and Disputes

These Terms are governed by the laws of Ireland, consistent with our EU establishment for payment processing and data protection.

Disputes will be resolved in the courts of Ireland, except that you may bring a claim in your local courts if consumer protection law in your jurisdiction requires it. Both parties agree to attempt good-faith resolution before initiating proceedings.

15. Contact

• Commercial and legal: legal@athelos.pro
• Privacy and data protection: privacy@athelos.pro
• Security: security@athelos.pro

Annex A — Data Processing Agreement

See docs/legal/DPA.md (version dpa-2026-10).

Annex B — Sub-Processor List

See docs/legal/SUB-PROCESSORS.md (version subprocessors-2026-10).

Annex C — Data Retention & Deletion Policy

See docs/legal/RETENTION.md (version retention-2026-10).

Version History