Terms of Service

Version 1.0 · Last updated: August 10, 2026 · The English version of these terms governs.

These Terms of Service (the “Terms”) are an agreement between Verit Global Labs Inc., a Delaware corporation (“Verit”, “we”), and the organization that creates an account or purchases a subscription (the “Customer”, “you”). They govern the use of DiaCroma for Agents — the hosted governance service available at api.diacroma.com and its associated SDKs, gateway, console and documentation (the “Service”). By using the Service you accept these Terms.

1 · What the Service is — and what it is not

The Service places a governance boundary around AI agents. It registers agents, derives proposed operating constraints from the mission and documents you provide, requires an authorized person to review and sign those constraints (the signed record is the agent’s “anchor”), and then governs each proposed tool call against the signed anchor — allowing, escalating to a human, or refusing, including cumulative (trajectory-level) limits — while keeping a signed, append-only audit ledger of every decision.

No semantic sensor. The Service enforces the constraints that were declared and signed. It does not understand the content or business meaning of your agents’ actions, does not verify their factual accuracy, and does not guarantee that governed actions are correct, safe or lawful. Your agents remain your agents: the Customer is solely responsible for what its agents do, for the constraints it chooses to sign, and for compliance of its agents’ conduct with applicable law. The Service asks you to acknowledge this at agent registration.

2 · Accounts and API keys

• An organization is identified by its API key. The key is shown once at issuance; we store only a hash. A recovery code, also shown once, is the only self-service way back into an organization whose key is lost. Keep both safe; you are responsible for activity under your key.
• Keys can be rotated from the API or console at any time. Read-only links grant view access without the write key and can be revoked by rotation.

3 · Subscriptions and billing

• Paid subscriptions are purchased through the Microsoft Marketplace. Billing, plan changes, renewal, suspension and cancellation follow your Microsoft agreement and the marketplace lifecycle; Microsoft is the merchant of record for marketplace purchases.
• A plan covers a number of agents and an allowance of policy re-scans. There is no per-call charge: governed calls that pass through a boundary you run in your own network are not metered and not billed, because they never reach our service.
• The first constraint scan of each registered agent is included. Additional re-scans consume the plan’s re-scan allowance (per subscription; the allowance resets when the plan changes). When the allowance is exhausted the Service refuses the re-scan with a typed error before any model cost is incurred. Nothing else stops: your agents stay governed and the boundary keeps enforcing. The allowance recharges when the plan changes.
• If a subscription is suspended or cancelled through the marketplace, the free-tier limits apply again.
• The free tier is provided as-is for evaluation, with a hard stop at its included number of agents and no billing.

4 · Customer data and intellectual property

• Your data stays yours. Missions, documents, tool metadata, decision records and audit ledgers you create through the Service are Customer data. You grant Verit a limited license to process them solely to provide and secure the Service.
• The Service stays ours. The Service, its software, models of operation and documentation are the property of Verit and its licensors and are protected by intellectual-property law, including pending patent applications. No rights are granted except as stated here.
• We do not use Customer data to train machine-learning models.

5 · Acceptable use

You will not: (a) use the Service to operate agents engaged in unlawful activity; (b) attempt to circumvent the governance boundary, quotas, or metering; (c) probe, disrupt or overload the Service; (d) resell the Service without a separate agreement; (e) misrepresent signed constraints or tamper with audit records.

6 · Security and the audit ledger

We protect the Service with, among other measures, TLS in transit, hashed credentials, secrets kept in a managed secret store, per-organization isolation, and a signed, append-only event chain for governance decisions. The integrity of the audit ledger depends on its append-only nature; deletion requests are honored consistent with Section 4 of the DPA.

7 · Warranties, disclaimers

We warrant that we provide the Service with reasonable skill and care. Except as expressly stated, the Service is provided “as is”, and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. Without limiting Section 1, we do not warrant that governed agents will act correctly, lawfully or profitably.

8 · Limitation of liability

To the maximum extent permitted by law: (a) neither party is liable for indirect, incidental, special, consequential or punitive damages, or lost profits, revenue or data; and (b) each party’s aggregate liability under these Terms is capped at the fees paid by the Customer for the Service in the twelve (12) months preceding the event giving rise to liability. Nothing limits liability for willful misconduct, fraud, or amounts that cannot be limited by law.

9 · Term, suspension and termination

These Terms apply while you use the Service. We may suspend the Service for material breach, security risk, or non-payment through the marketplace, restoring it when the cause is resolved. Either party may terminate for uncured material breach on thirty (30) days’ notice. On termination, your right to use the Service ends; you may export your records via the API before deletion; Sections 4, 7, 8, 10 and 11 survive.

10 · Changes

We may improve or modify the Service, and may update these Terms with at least thirty (30) days’ notice for material changes (posted on this page and, for subscribers, by email to the address on file). Continued use after the effective date constitutes acceptance.

11 · Governing law; general

These Terms are governed by the laws of the State of Delaware, USA, excluding its conflict-of-law rules, and the parties submit to the exclusive jurisdiction of the state and federal courts located in Delaware. If you purchase through Microsoft Marketplace, the marketplace terms govern the purchase transaction itself. Where the Customer is subject to data-protection law, the Data Processing Addendum forms part of these Terms and prevails over them for personal-data processing. If any provision is unenforceable, the remainder stays in effect. Neither party may assign these Terms without consent, except to a successor in a merger or asset sale.

12 · Contact

Verit Global Labs Inc. · diacroma@veritglobal.com