Terms of Service
Effective June 2026
These Terms of Service ("Terms") govern your access to and use of the Attestd API, developer portal, documentation site, and related services (collectively, the "Service") provided by Marshall Digital Solutions Ltd., incorporated in Toronto, Ontario, Canada ("we", "us", "Attestd").
Acceptance
By creating an account, obtaining an API key, or making API requests, you agree to these Terms and our Privacy Policy. If you do not agree, do not use the Service.
Governing law
These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. You agree that any dispute arising from or relating to these Terms or the Service shall be resolved exclusively in the courts of Ontario, Canada.
If you access the Service from outside Canada, you are responsible for compliance with local laws. Use of the Service may not be lawful in all jurisdictions.
Permitted use and licensing
Subject to these Terms and your subscription tier, we grant you a limited, non-exclusive, non-transferable license to access the Service for your own internal operational use: CI/CD gating, security tooling, AI agent integration, vulnerability management, and similar purposes.
Direct use only (Free, Solo, and Team tiers): subscriptions at these tiers are licensed for direct internal use only. You may integrate Attestd into your own systems, pipelines, and tooling. You may not embed the API in a product or service you offer to third parties, resell API access, white-label Attestd responses, or use the API to power a managed security service on behalf of others without a separate Platform agreement. Contact [email protected] for Platform licensing.
Acceptable use
Permitted uses include security automation, CI/CD gates, AI agent tooling, and operational vulnerability checks consistent with your internal security program.
You may not: scrape or bulk-download API responses for resale or redistribution; circumvent rate limits or authentication; share API keys across unrelated organizations; use the Service to harass, abuse, or interfere with the Service or other users; or use the Service in violation of applicable law.
API keys and account security
You are responsible for safeguarding your API keys and account credentials. Activity under your keys is your responsibility until you revoke compromised keys through the developer portal.
No warranty
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.
Attestd data is derived from third-party sources including the NVD and CISA KEV. We do not warrant that data is complete, accurate, timely, or error-free. Security decisions made using Attestd output remain solely your responsibility.
Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, MARSHALL DIGITAL SOLUTIONS LTD. AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM OR RELATED TO YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
Our aggregate liability for any claim arising from these Terms or the Service shall not exceed the fees paid by you to Attestd in the twelve (12) months preceding the event giving rise to the claim, or one hundred Canadian dollars (CAD $100) if no fees were paid.
Indemnification
You agree to indemnify, defend, and hold harmless Marshall Digital Solutions Ltd. and its officers from any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising from your use of the Service in violation of these Terms or applicable law.
Termination
We may suspend or terminate your access immediately for violation of these Terms, non-payment, abuse, or operational necessity, with or without notice where permitted by law. You may stop using the Service at any time by deleting your account and revoking API keys.
Changes
We may modify these Terms from time to time. Material changes will be posted on this page with an updated effective date. Continued use after changes constitutes acceptance.
Entire agreement
These Terms, together with the Privacy Policy and any order or subscription terms presented at checkout, constitute the entire agreement between you and Marshall Digital Solutions Ltd. regarding the Service.
Contact
Marshall Digital Solutions Ltd.
Toronto, Ontario, Canada
[email protected]