Terms of service.
These terms govern your use of the provael.com website and the Provael software. Effective 6 July 2026. The Provael software is also licensed under Apache-2.0; where the licence and these terms differ for the software, the licence controls.
1. Authorized use only
Provael is an offensive-security tool. You may use it only to test systems that you own or for which you have explicit, documented permission to assess. You represent and warrant that, for every system you point Provael at, you hold the necessary authorization, and that you will use Provael only for lawful, defensive, and authorized purposes. You must not use Provael to attack, disrupt, or gain unauthorized access to any system, and you are solely responsible for your use and for complying with all laws that apply to you, including any computer-misuse and data-protection laws in your jurisdiction.
2. The software is provided “as is”
The website and software are provided on an “as is” and “as available” basis, without warranties of any kind, whether express or implied, including but not limited to implied warranties of merchantability, fitness for a particular purpose, and non-infringement. Provael does not warrant that results are accurate, complete, or fit for any compliance or safety determination. A result is evidence toward assurance, not a certificate.
3. No safety certification
Provael measures a policy’s behaviour under adversarial conditions in simulation. It does not certify that a system is safe, compliant, or fit to deploy. Nothing on this site is legal advice.
4. Limitation of liability
To the maximum extent permitted by law, Provael will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for lost profits, lost data, or business interruption, however caused and on any theory of liability.
To the maximum extent permitted by law, Provael’s total aggregate liability arising out of or relating to the software, the website, or these terms is limited to the greater of (a) the fees you paid to Provael in the twelve months preceding the event giving rise to the claim, or (b) USD 100. This cap does not apply to liability for gross negligence, wilful misconduct, or any liability that cannot be excluded or limited under applicable law.
5. Indemnity
You agree to indemnify, defend, and hold harmless Provael and its maintainer,Sattyam Jain, from and against any claims, damages, liabilities, losses, and expenses (including reasonable legal fees) arising out of or related to your use of Provael, your breach of these terms, or any testing you carry out without proper authorization.
6. Intellectual property
The Provael name, mark, and site content are owned by Provael. The Provael software is licensed under Apache-2.0; the “Embodied AI Security Top 10” is published under CC BY-SA 4.0. You retain ownership of your own policies, data, and results.
7. Third-party services
The site links to and embeds third-party services (for example, GitHub and Cal.com). Their terms and privacy policies govern your use of them.
8. Governing law and jurisdiction
These terms are governed by the laws of India, without regard to its conflict-of-laws rules. You agree that the courts of India have exclusive jurisdiction over any dispute arising out of or relating to these terms, the website, or the software, subject to any mandatory rights you may have under the law of your own country of residence.
9. Terms for paid engagements DRAFT · pending legal review
The clauses in this section are a working draft, not yet in effect, and are not legal advice. They will govern paid assessments once finalized with counsel; until then each paid engagement is contracted individually. Published here for transparency and review.
9.1 Confidentiality (mutual)
For a paid engagement, each party keeps the other's non-public information confidential and uses it only to perform or receive the assessment - your policies, model weights, results, and pre-publication findings, and Provael's non-public methods. A mutual NDA is available on request and, once signed, controls over this summary.
9.2 Your data and model weights
In a paid engagement Provael acts as a data processor for any model weights, inputs, or personal data you provide. It processes them only to run the assessment you requested, does not use them to train models, applies reasonable technical and organizational security measures, uses only the subprocessors listed in the privacy policy, and deletes or returns them on request or within 30 days of the engagement ending. A full data-processing agreement is available on request.
9.3 Refund
If Provael cannot produce a measured attack-success rate on your policy within the first week of a paid engagement, you may cancel for a full refund of fees paid.
9.4 Term and termination
Either party may terminate a paid engagement on written notice. On termination you pay for work performed to date, Provael delivers any evidence produced so far, and each party returns or deletes the other's confidential information under 9.1 and 9.2.
9.5 Provael's indemnity
Provael will defend and indemnify you against a third-party claim that aProvael deliverable, used as provided, infringes that party's intellectual-property rights, provided you notify Provael promptly and allow it to control the defense. This balances the customer indemnity in section 5.
9.6 Dispute resolution for paid engagements
Notwithstanding section 8, a dispute arising from a paid engagement is resolved by binding arbitration seated in a neutral venue set out in the engagement contract (or, failing agreement, in the customer's jurisdiction), rather than exclusively in the courts ofIndia.
10. Changes
We may update these terms and will revise the effective date. Continued use constitutes acceptance.
11. Contact
Questions about these terms: [email protected].
These are standard terms provided in good faith and are not a substitute for legal advice.