Terms of Service

1. Who these Terms apply to

These Terms of Service govern access to and use of Tallin's software, websites, APIs, reports, exports, provider connectors, gateway-related features, evidence workflows, and related support services.

Tallin is intended for business use. If you create a workspace, invite users, connect providers, upload evidence, or configure billing on behalf of a company, you represent that you are authorized to bind that company to these Terms.

If a signed order form, master services agreement, data processing addendum, security addendum, or other written agreement applies to your workspace, that written agreement controls where it conflicts with these Terms.

2. The service

Tallin helps companies discover, ledger, control, and prove AI usage across supported providers, enterprise apps, billing sources, identity signals, gateway traffic, CSV uploads, and other configured evidence sources.

Tallin labels signal quality honestly. Records, dashboards, and reports may identify data as observed, inferred, enforced, or not covered, and may show attribution confidence where identity matching is partial.

Tallin does not guarantee complete visibility into every AI interaction, employee device, personal account, unmanaged provider, prompt, file, or off-network usage path. Coverage depends on the sources you connect, the permissions you grant, provider API limits, billing data quality, imported evidence, and your environment.

3. Accounts and administrators

Customers are responsible for workspace configuration, administrator access, invited users, provider credentials, billing setup, security settings, and the accuracy of company profile information.

You must keep account credentials secure and promptly notify Tallin if you believe a workspace, invitation, provider credential, webhook, or authentication method has been compromised.

Administrators are responsible for ensuring they have appropriate authority to connect provider workspaces, cloud billing exports, SSO logs, employee directories, expense evidence, and other company-controlled sources.

4. Customer data and permitted use

Customer data includes workspace profile information, administrator and user identity data, provider configuration data, usage and spend records, uploaded evidence, gateway activity, report exports, audit events, support requests, and related metadata submitted to or generated through the service.

Customer owns its customer data. Tallin may process customer data to provide, secure, monitor, troubleshoot, support, bill for, and improve the service, as described in the Privacy Policy and any applicable Data Processing Addendum.

Tallin does not sell customer workspace data. Tallin does not use customer data to train general-purpose AI models. Customers should avoid uploading personal, sensitive, regulated, or confidential information that is not needed for AI spend, coverage, evidence, support, or control workflows.

5. Provider connections and third-party services

Tallin integrates with third-party providers and services, including AI providers, enterprise application vendors, cloud billing systems, identity providers, payment processors, email providers, SIEM destinations, Slack, Teams, and similar systems.

Customer is responsible for complying with third-party provider terms, maintaining valid provider accounts, granting only appropriate permissions, and ensuring Tallin's access is permitted by customer policy and applicable law.

Third-party services may change APIs, exports, billing formats, rate limits, permissions, pricing, or availability. Tallin may update, suspend, degrade, or discontinue a connector or source when provider behavior changes or when continued operation would create security, reliability, legal, or operational risk.

6. Reports, evidence, and professional judgment

Tallin reports, coverage scores, diligence packets, board summaries, alerts, and exports are operational evidence tools. They are not legal advice, compliance certification, financial advice, accounting advice, or a guarantee that customer satisfies any law, regulation, standard, audit, contract, or diligence request.

Customer is responsible for reviewing Tallin outputs, validating evidence, interpreting legal or compliance obligations with qualified advisors, and making business decisions based on customer context.

Tallin may use benchmarks, mappings, confidence scores, and inferred signals. Those outputs may be incomplete, delayed, inaccurate, or dependent on assumptions that should be reviewed before external use.

7. Acceptable use

You may not use Tallin to violate law, infringe rights, misrepresent evidence, bypass provider restrictions, interfere with the service, overload infrastructure, probe or test systems without authorization, reverse engineer the service, or attempt to access another customer's data.

You may not submit malicious code, unlawful content, or data you do not have the right to process through Tallin. You may not use the service to make automated decisions about individuals where applicable law requires a different process.

Tallin may suspend access if we reasonably believe a workspace creates security risk, legal risk, service abuse, non-payment risk, or risk to another customer, provider, or third party.

8. Billing, renewals, and cancellation

Self-service plans are billed according to the plan, seat band, billing interval, add-ons, taxes, and payment terms shown at checkout or in the applicable order form. Paid plans may renew automatically unless canceled before the renewal date.

Customers must provide accurate billing information and authorize Tallin or its payment processor to charge applicable fees. Fees are non-refundable except where required by law or expressly stated in a written agreement.

Customers can cancel renewal through the billing portal where available, by following in-product billing instructions, or by contacting Tallin at hello@gettallin.com. Cancellation stops future renewal but does not automatically refund the then-current subscription period.

Tallin may suspend or downgrade access for overdue payments after reasonable notice, unless a separate written agreement says otherwise.

9. Confidentiality and security

Each party may receive non-public information from the other that should reasonably be understood as confidential. The receiving party will use reasonable care to protect confidential information and will use it only to perform or receive the service.

Tallin uses administrative, technical, and organizational safeguards designed for a B2B SaaS service that handles provider credentials, usage data, spend records, identity context, audit events, and evidence exports. No system is perfectly secure.

Customer is responsible for configuring authentication, roles, provider permissions, destination URLs, webhook secrets, and user access in a way that matches its internal security requirements.

10. Intellectual property

Tallin and its licensors own the service, software, interfaces, workflows, documentation, templates, design elements, connectors, code, and related intellectual property. Customer receives a limited, non-exclusive, non-transferable right to use the service during the subscription term.

Customer owns customer data. Customer grants Tallin the rights needed to host, process, transmit, display, secure, support, and operate customer data for the service.

If customer provides feedback, suggestions, or ideas, Tallin may use them without restriction or obligation, so long as Tallin does not disclose customer confidential information in doing so.

11. Beta features and changes

Tallin may offer beta, preview, pilot, experimental, or limited-availability features, including connectors, gateway features, reports, evidence workflows, alert destinations, and AI-assisted capabilities. These features may be changed, limited, or discontinued at any time.

Tallin may update the service and these Terms over time. Material changes to these Terms will be posted publicly or communicated through reasonable channels. Continued use of the service after changes become effective means acceptance of the updated Terms.

12. Disclaimers

The service is provided on an as-is and as-available basis except as expressly stated in a written agreement. Tallin disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation to the maximum extent permitted by law.

Tallin does not warrant that every provider signal, billing row, identity match, cost calculation, coverage score, alert, report, export, webhook delivery, or AI-assisted response will be complete, timely, accurate, or accepted by a third party.

13. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost goodwill, lost data, or business interruption, even if advised of the possibility.

To the maximum extent permitted by law, Tallin's total liability arising out of or relating to the service will not exceed the fees paid by customer to Tallin for the service during the three months before the event giving rise to liability, unless a signed agreement states a different limit.

14. Indemnity

Customer will defend and indemnify Tallin from third-party claims arising from customer data, customer misuse of the service, customer violation of law, customer violation of third-party provider terms, or customer use of reports or exports outside the service's intended operational evidence purpose.

Tallin will defend and indemnify customer from third-party claims alleging that the core Tallin software infringes that third party's intellectual property rights, subject to customary exclusions for customer data, third-party services, modifications, combinations, misuse, or beta features.

15. Suspension and termination

Customer may stop using the service and cancel renewal as described in the billing section or applicable order form. Tallin may suspend or terminate access for material breach, non-payment, security risk, legal risk, or service abuse.

After termination, customer access to the workspace may end. Tallin may retain or delete customer data according to the applicable agreement, Privacy Policy, Data Processing Addendum, retention settings, backup practices, and legal obligations.

16. Contact

Questions about these Terms can be sent to hello@gettallin.com. Security disclosures should be sent to security@gettallin.com.

Tallin may require workspace creators, administrators, or billing owners to accept these Terms through an in-product checkbox, account flow, order form, or similar acceptance mechanism.