Clarion Terms of Service

Relationship to Other Agreements

These Terms apply to Clarion alongside any separate written agreement between you or your organization and Cantina, including a master services agreement, statement of work, mutual non-disclosure agreement, data processing agreement, or business associate agreement. If these Terms conflict with a written agreement, the written agreement controls for that conflict. These Terms do not supersede, amend, or limit any written agreement.

The Cantina General Terms of Use continue to apply to Clarion, including provisions and obligations relating to account security, authority to bind an organization, permitted use, third-party content, fees, Cantina rights, suspension or termination, user termination, license and intellectual property, use of marks, disclaimers, prohibited jurisdictions, limitation of liability, indemnification, changes to terms, severability, assignment, notices, and electronic acceptance. Some Cantina General Terms of Use provisions are specific to Cantina marketplace, security review, researcher, payment, KYC, tax, blockchain, or similar workflows and apply to Clarion only where relevant.

If these Terms conflict with the Cantina General Terms of Use for Clarion, these Terms control only for Clarion and only to the extent of the conflict. The Google Workspace API and Customer Data restrictions in these Terms and in the Clarion Privacy & Legal Disclosures control over any broader data analytics, deliverable-use, or AI/ML training language in the Cantina General Terms of Use.

Clarion-specific privacy disclosures are available in the Clarion Privacy & Legal Disclosures. The full Clarion privacy policy is available at clarion.cantina.xyz/about/privacy. Cantina’s broader privacy policy is available at cantina.security/privacy-policy.

Clarion Service

Clarion helps authorized users monitor, enrich, triage, investigate, and respond to security and operational alerts. Clarion may connect to third-party services, including Google Workspace, cloud providers, SIEMs, notification tools, ticketing tools, source control providers, and other systems you configure.

You are responsible for ensuring that you have the rights, permissions, and consents needed to connect third-party services to Clarion and to submit data to Clarion.

Accounts and Workspaces

You are responsible for maintaining the confidentiality of your account credentials and for activity that occurs through your account or workspace. You must promptly notify Cantina of unauthorized access, credential compromise, or other security concerns at security@cantina.security.

Workspace administrators are responsible for managing authorized users, integrations, permissions, notification destinations, and workspace configuration.

Cantina may monitor, log, audit, and analyze use of Clarion to provide, secure, maintain, support, troubleshoot, and improve Clarion, subject to these Terms, the Clarion Privacy & Legal Disclosures, the Cantina General Terms of Use, and any applicable written agreement.

Acceptable Use

You may not use Clarion to:

• violate applicable law or third-party rights;
• gain unauthorized access to systems, accounts, data, or networks;
• interfere with, disrupt, overload, or degrade Clarion or third-party services;
• submit malware, exploit code, or harmful content except as part of an authorized security workflow;
• reverse engineer, copy, or create derivative works of Clarion except where applicable law prohibits this restriction;
• bypass usage limits, security controls, or access controls;
• use Clarion for spam, phishing, fraud, harassment, or unlawful surveillance.

Customer Data

“Customer Data” means data, content, configuration, credentials, alerts, logs, findings, messages, files, and other information submitted to or accessed by Clarion through your account, workspace, integrations, or authorized use of the service.

Cantina will protect Customer Data using reasonable care and will use it only as permitted by these Terms. Cantina may process Customer Data to provide, secure, maintain, support, troubleshoot, analyze service performance, and improve Clarion; to comply with applicable law; and as agreed with the customer. Nothing in these Terms or in the Cantina General Terms of Use permits Cantina to use Google Workspace API data in a way that conflicts with the Google API Services User Data Policy or Clarion’s Google API Limited Use Disclosure.

Clarion does not use Google Workspace API data to develop, improve, or train generalized AI or ML models. Where Clarion uses AI services, Google Workspace API data is used only to provide user-facing Clarion functionality requested by the user or workspace administrator. If Clarion processes personal data on your behalf, Cantina’s data processing agreement applies once signed by you and Cantina; it is available on request.

Third-Party Services and AI Providers

Clarion may interoperate with third-party services that you connect or authorize. Your use of those services remains subject to their own terms, policies, and permissions. Clarion relies on, and may act through, the third-party systems and integrations you connect, and Cantina is not responsible for their availability, accuracy or security.

Clarion may use third-party service providers, including AI service providers, to provide Clarion functionality requested by users or workspace administrators. Cantina remains responsible for using those providers consistently with these Terms, the Clarion Privacy & Legal Disclosures, and applicable customer agreements.

Trials, Fees, and Suspension

Some Clarion functionality may be provided through a trial, pilot, paid subscription, order form, statement of work, or other written agreement. Fees, payment terms, usage limits, and subscription terms are governed by the applicable agreement or ordering document.

If a trial workspace is not converted to a paid subscription within 60 days, Cantina may suspend or delete the workspace and associated data.

Cantina may suspend or restrict access to Clarion if we reasonably believe use of the service creates a security risk, violates these Terms, violates the Cantina General Terms of Use, violates applicable law, or could harm Clarion, Cantina, users, customers, or third parties.

You may terminate your use of Clarion by discontinuing use of the service or by contacting Cantina to request account deletion, subject to Cantina’s need to retain information as required by law, to resolve disputes, to enforce rights, to maintain security, or as agreed with the customer. You may request deletion of Customer Data at any time by emailing security@cantina.security, and Cantina will confirm deletion in writing within thirty (30) days, subject to the same retention needs.

Security Workflows

Clarion can automate or assist with security workflows, investigations, and response actions. You authorize Clarion to read from and take actions in the systems you connect, within the permissions you grant, and you represent that you have the right to grant them. Each action follows the approval setting selected for your workspace in Clarion (starting from the default shown there), including settings under which an action runs without approval or an unanswered approval request is resolved automatically. Actions taken in accordance with those settings, including approvals given by your users, are taken on your authority. You are responsible for reviewing and configuring Clarion appropriately for your environment, permissions, risk tolerance, and internal policies. If you configure Clarion to pause a smart contract in an emergency, the signing keys Clarion holds for that purpose are used only to submit the pause transactions you configure. Cantina does not take custody of your wallets or assets, and blockchain risks are governed by the Cantina General Terms of Use.

Clarion is not a substitute for independent security judgment and does not guarantee that every alert, threat, vulnerability, misconfiguration, or incident will be detected, prevented, or resolved.

Intellectual Property

Cantina owns Clarion and all related software, documentation, interfaces, designs, and technology, excluding Customer Data and third-party materials. Subject to these Terms and any applicable agreement, Cantina grants you a limited, non-exclusive, non-transferable right to access and use Clarion for your internal security operations.

You retain ownership of Customer Data. You grant Cantina the rights needed to process Customer Data to provide and support Clarion and as otherwise described in these Terms, the Clarion Privacy & Legal Disclosures, and any applicable customer agreement.

Prohibited Jurisdictions and Compliance

You may not access or use Clarion from a jurisdiction where such access or use is prohibited by applicable law, sanctions, export controls, or the Cantina General Terms of Use. You may not misrepresent your location, identity, organization, authority, or eligibility to use Clarion.

Disclaimers

Clarion is provided “as is” and “as available” except as expressly stated in a written agreement. To the maximum extent permitted by law, Cantina disclaims all warranties, including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

Limitation of Liability

To the maximum extent permitted by law, Cantina will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost savings, lost business opportunity, loss of data, or service interruption arising from or related to Clarion.

If no separate written agreement sets a different liability limit, Cantina’s total liability arising from or related to Clarion will not exceed the greater of US$100 or the fees paid or payable to Cantina for Clarion by you or your organization for the three (3) months of Clarion services preceding the event giving rise to the claim.

Indemnification

You agree to defend, indemnify, and hold harmless Cantina, its affiliates, service providers, and their respective officers, directors, employees, contractors, agents, successors, and assigns from claims, liabilities, damages, losses, costs, and expenses arising out of or relating to your violation of these Terms, your violation of the Cantina General Terms of Use, your use of Clarion, your Customer Data, your integrations, or access to Clarion through your account or workspace.

Changes to These Terms

Cantina may update these Terms from time to time. Updates are effective when posted unless a later effective date is stated. If changes materially affect your rights or obligations, Cantina may provide additional notice through Clarion, email, or other reasonable means.

Your continued use of Clarion after updated Terms become effective means you accept the updated Terms.

General Legal Terms

If any part of these Terms is held invalid or unenforceable, the remaining provisions remain in effect. Cantina may assign or delegate these Terms as permitted by the Cantina General Terms of Use. You may not assign or delegate your rights or obligations under these Terms without Cantina’s prior written consent.

You consent to receive notices and communications electronically. By checking an acceptance box, clicking a similar acceptance control, accessing Clarion, or continuing to use Clarion, you agree that your action constitutes valid electronic acceptance of these Terms and any incorporated terms.

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules, and the state and federal courts located in Wilmington, Delaware have exclusive jurisdiction over any dispute arising out of or relating to these Terms or Clarion, unless a written agreement provides otherwise.

Contact

Questions about these Terms can be sent to support@cantina.security.