Legal
Terms of service
The agreement between you and the entity that operates Passura.
This document is a working draft published for transparency while Passura is in closed beta. It has not been reviewed by a qualified lawyer, it is not an executed agreement, and it does not yet bind either party. If you need a signed version to complete a procurement review, contact us and we will send the executed document.
- Set the limitation of liability and its cap. The draft below deliberately leaves the figure open rather than proposing one.
- Confirm governing law and jurisdiction (Spain assumed) and whether consumer-protection carve-outs apply to any customer segment.
- Confirm the beta clause is enforceable — particularly disclaiming availability commitments while also charging for paid tiers post-beta.
- Add the indemnity, warranty, and IP-ownership clauses, which are omitted here rather than drafted badly.
- Align termination and data-return wording with the DPA so the two documents cannot conflict.
1. Who this agreement is with
These terms are between you (“Customer”) and PENDING — confirm before launch, NIF PENDING — confirm before launch, registered at PENDING — confirm before launch(“Passura”, “we”). Using the service means accepting them.
2. The service
Passura provides authentication as a service: passwordless and password sign-in, multi-factor authentication, API keys, audit logging, and agent identity over MCP, delivered as a hosted API and management console.
3. Closed beta
Passura is currently in closed beta and provided free of charge. During the beta we do not offer an availability commitment, and features may change or be withdrawn. We will not make a breaking change to an API you depend on without notice.
Pricing takes effect at general availability. Beta participants will be told what changes before it applies to them.
4. Your responsibilities
You are responsible for keeping your API keys and signing secrets confidential, for the lawfulness of the data you send us, and for having a lawful basis to process the personal data of your own end users. You may not use Passura to send unsolicited mail, to attack or overload the service, or to authenticate access to unlawful material.
5. Data protection
Where we process personal data on your behalf, we do so as your processor under the data processing agreement at passura.dev/dpa, which forms part of these terms. Our own processing as a controller is described in the privacy policy.
6. Termination and what happens to your data
You may stop using the service and close your account at any time. On termination, we retain your data for a limited wind-down window so that an accidental closure can be reversed, then delete it. The specific window and the retrieval route are set out in the DPA.
7. Liability
Nothing in this agreement excludes liability that cannot lawfully be excluded. The remaining limitations and the liability cap are pending legal review and are deliberately not stated here rather than stated wrongly.
8. Changes
We may update these terms. Material changes are notified by email to account holders before taking effect, and the date at the top of this page reflects the current version.
9. Governing law
Governing law and jurisdiction are pending legal review. The operator is established in Spain and Spanish law is the expected answer, but it is not stated as settled here.