Terms of Service

Status: Draft for legal review
Version: v0.1
Effective date: To be determined
Authoritative language: English

These Terms of Service govern access to and use of Havenlon products, software, hardware devices, SaaS services, APIs, documentation, websites, developer tools, pilot programs, and related support services.

Please read these Terms carefully before using any Havenlon service. If you access or use the services on behalf of a company, organization, team, or other legal entity, you represent that you have authority to bind that entity, and “you” refers to both that entity and its authorized users.

If you do not agree to these Terms, do not access or use the services.

This version is an early draft prepared for product pilots, website publication, customer communication, and legal review. It is not legal advice. Before commercial deployment, this document should be reviewed and adapted by qualified counsel for the applicable jurisdictions, operating entity, product model, and customer base.

1. Definitions

For purposes of these Terms:

“Havenlon” means the Havenlon brand, its relevant operating entities, products, software, hardware devices, websites, documentation, SaaS services, APIs, firmware, developer tools, and related support services.

“Services” means all products and services provided or made available by Havenlon, including hardware devices, device management services, SaaS services, APIs, policy management, logging, risk-control coordination, execution control, documentation, technical support, pilot programs, and related features.

“Hardware Devices” means hardware products provided or supported by Havenlon, including Enigma Pass Key, Enigma Auth Key, Enigma Hub Mini, Enigma Hub Pro, Enigma Hub Enterprise, and any successor or derivative devices.

“SaaS Services” means cloud-based services provided by Havenlon, including device registration, policy distribution, team management, log synchronization, monitoring, notifications, API access, diagnostics, and other online functions.

“Execution Control” means the mechanisms by which Havenlon constrains, verifies, rejects, permits, records, or coordinates execution requests according to configured policies, approvals, authorizations, hardware arbitration, device state, and security boundaries.

“Digital Assets” means assets, tokens, credentials, rights, records, or other on-chain objects issued, recorded, transferred, or managed through blockchain, distributed ledger, smart contract, or similar technology.

“Transaction” means any on-chain transfer, smart contract call, signature request, authorization request, asset interaction, message signature, permission change, or other action that may affect blockchain state, asset control, account permissions, or business rights.

“User Content” means data, configurations, policies, requests, logs, transaction information, business information, system information, API requests, and other content submitted, transmitted, configured, or processed through the Services by you or on your behalf.

“Third-Party Services” means any service, protocol, network, node, RPC provider, wallet, exchange, custodian, bridge, DEX, oracle, AI system, business system, smart contract, blockchain network, or other product or service not controlled by Havenlon.

2. Havenlon’s Role

Havenlon provides hardware-anchored execution control infrastructure.

The purpose of Havenlon is to establish stronger constraints and a physical trust boundary between software requests, business systems, AI systems, SaaS policies, and final execution.

Havenlon is not a bank, broker-dealer, exchange, custodian, asset manager, investment adviser, payment institution, clearing institution, insurer, legal adviser, tax adviser, or financial adviser.

Havenlon does not provide investment advice, trading advice, legal advice, tax advice, financial advice, or asset management services. Any Transaction you initiate, approve, reject, or execute through Havenlon is your own decision and responsibility.

Havenlon may help you implement pre-execution policies, approval workflows, hardware confirmation, device constraints, and audit logs. Havenlon does not guarantee that any Transaction, business decision, asset allocation, smart contract interaction, automation workflow, or third-party integration will be safe, correct, profitable, compliant, available, reversible, or free from error.

3. Non-Custodial Statement

Unless expressly agreed otherwise in a separate written agreement, Havenlon operates as a non-custodial execution control system.

Havenlon does not custody, hold, manage, own, or control your Digital Assets. Havenlon should not be understood as having ownership, control, disposal authority, or unilateral transfer authority over your Digital Assets.

You remain solely responsible for your accounts, wallets, private keys, seed phrases, passkeys, recovery materials, devices, administrator permissions, policy configurations, approval workflows, transaction intent, and business systems.

Havenlon SaaS Services may support device registration, policy synchronization, log recording, risk-rule management, remote configuration, team collaboration, API access, and notifications. Such SaaS Services do not mean that Havenlon holds your Digital Assets or has unilateral authority to execute Transactions.

You understand and agree that:

Havenlon cannot recover assets lost due to loss of private keys, seed phrases, passkeys, recovery materials, or devices.
Havenlon cannot reverse Transactions that have been signed, broadcast, confirmed, settled, or otherwise finalized by a blockchain network or third-party system.
Havenlon cannot guarantee the security, correctness, availability, or suitability of any third-party chain, protocol, contract, wallet, RPC provider, or application.
Havenlon cannot replace your judgment regarding transaction purpose, transaction counterparty, business legality, asset value, or operational risk.

4. Execution Control Boundary

Havenlon’s execution control capabilities depend on configured policies, hardware constraints, approval workflows, device state, interface protocols, supported chains, supported assets, and supported product features.

Havenlon may, under configured conditions, inspect, restrict, reject, record, prompt, approve, or permit execution requests. Execution control is not complete risk elimination.

You understand and agree that Havenlon does not guarantee that:

Any Transaction is safe.
Any address, contract, protocol, asset, or third-party system is trustworthy.
Any smart contract is free from vulnerabilities, malicious logic, permission risks, economic attacks, or implementation errors.
Any AI agent, bot, automation system, or business system will produce correct or intended instructions.
Any policy configuration will cover all real-world risks.
Any on-chain Transaction can be reversed, recovered, repaired, or cancelled.
Any asset price, liquidity condition, transaction outcome, or economic result will meet your expectations.

Havenlon provides execution constraints according to configured control paths. It does not replace your business judgment, compliance judgment, financial judgment, legal judgment, security operation, or internal governance responsibility.

5. User Responsibilities

You are responsible for all activity occurring through or in connection with your use of the Services, including:

Ensuring that you have authority to use the relevant accounts, devices, wallets, assets, and business systems.
Ensuring that your use complies with applicable law, regulation, contractual obligations, and internal policies.
Safeguarding hardware devices, administrator accounts, PINs, passkeys, private keys, seed phrases, recovery materials, API keys, and access credentials.
Correctly configuring policies, approvers, permissions, thresholds, allowlists, denylists, limits, and other control rules.
Reviewing transaction details before approval or execution, including chain, asset, address, amount, fee, contract, function call, memo, tag, slippage, business purpose, and consequences.
Managing AI systems, bots, automation programs, business systems, third-party applications, and API requests connected to Havenlon.
Periodically testing, auditing, and reviewing policies, permissions, device state, logs, and business workflows.
Installing or accepting security updates, firmware updates, and other necessary updates in a timely manner.
Promptly responding to anomalies, vulnerabilities, unauthorized access, device loss, or security incidents and notifying Havenlon when appropriate.

You must not use the Services for unlawful, fraudulent, malicious, unauthorized, high-risk, or rights-infringing activity.

6. Blockchain and Digital Asset Risks

You understand and accept that blockchain networks and Digital Assets involve significant risks, including:

Transactions are often irreversible once signed, broadcast, confirmed, or settled.
Incorrect addresses, incorrect chains, incorrect asset types, incorrect memo/tag information, or incorrect contract parameters may cause permanent loss.
Smart contracts may contain vulnerabilities, backdoors, logic errors, permission risks, or economic attack surfaces.
Blockchain networks may experience congestion, forks, reorganizations, delays, outages, attacks, or rule changes.
RPC nodes, block explorers, wallets, bridges, DEXs, oracles, and third-party protocols may fail, be attacked, or provide inaccurate information.
Gas fees, slippage, MEV, price volatility, lack of liquidity, and abnormal market conditions may cause losses.
Some assets may lack intrinsic value, liquidity, legal certainty, or regulatory approval.
Laws and regulations may change and affect the availability, legality, transferability, or value of certain assets, chains, protocols, or services.

Except where required by applicable law or expressly agreed in writing, Havenlon is not responsible for losses arising from these risks.

7. AI, Automation, and Third-Party Business Systems

Havenlon may be used with AI agents, automation systems, bots, API services, business systems, risk systems, wallet systems, or other third-party applications.

You understand and agree that:

AI or automation systems may produce incorrect, incomplete, outdated, biased, unsafe, or unintended outputs.
Havenlon is not responsible for the judgments, recommendations, predictions, strategies, transaction intent, or business logic of AI or automation systems.
You must ensure that automated requests are subject to appropriate permissions, policies, approvals, and hardware execution boundaries.
You must not allow any system to bypass Havenlon’s security controls, approval paths, hardware arbitration, or execution constraints.
You are responsible for all requests, Transactions, signatures, approvals, and execution results initiated by you or systems authorized by you.

Havenlon may control requests according to configured policies, but it does not replace your responsibility to determine whether AI outputs or business system instructions are genuine, reasonable, lawful, safe, or aligned with your intent.

8. Hardware Device Terms

You must use Hardware Devices in accordance with Havenlon documentation, specifications, security guidance, and operating instructions.

Unless expressly authorized by Havenlon, you must not:

Disassemble, tamper with, reverse engineer, crack, reflash, bypass, or modify any Hardware Device.
Bypass secure elements, secure boot, tamper-resistance mechanisms, firmware signatures, execution control paths, or hardware arbitration mechanisms.
Use unauthorized firmware, system images, components, interfaces, or debugging tools.
Use Hardware Devices outside their intended operating environment, temperature, voltage, humidity, vibration, or other specified conditions.
Use Hardware Devices for unlawful, offensive, malicious, or unauthorized activity.

Disassembly, tampering, modification, reflashing, bypassing, physical attack, or abnormal use may cause device failure, security-function disablement, unrecoverable data loss, voided warranty, or termination of support.

Havenlon does not guarantee that a device will function or recover data after tampering, damage, loss, theft, water exposure, overvoltage, overheating, physical attack, unauthorized repair, or abnormal use.

Warranty scope, repair procedures, return policies, support periods, and hardware service standards are governed by Havenlon’s separate hardware warranty policy, purchase agreement, or enterprise agreement, as applicable.

9. SaaS Services and Online Functions

Havenlon SaaS Services may support device registration, team management, policy configuration, policy distribution, log synchronization, risk-event recording, API access, notifications, remote management, diagnostics, and other online functions.

You understand and agree that:

SaaS Services may be interrupted, delayed, limited, or unavailable due to maintenance, upgrades, network failure, third-party service failure, security incidents, legal requirements, or force majeure events.
Havenlon may modify, suspend, restrict, or discontinue certain SaaS functions for security, compliance, technical, legal, operational, or business reasons.
SaaS availability does not mean Havenlon guarantees your assets, Transactions, business outcomes, or third-party systems.
SaaS Services may depend on cloud providers, network operators, RPC providers, email providers, SMS providers, push-notification providers, or other third-party infrastructure.

Unless expressly agreed in a separate SLA or enterprise agreement, SaaS Services are provided on an “as is” and “as available” basis, without any specific uptime, response-time, recovery-time, or compensation commitment.

10. Accounts, Permissions, and Security

You must ensure that all accounts, administrators, approvers, developers, API keys, device credentials, and access permissions are used only by authorized persons.

You must take reasonable measures to protect account and system security, including:

Using strong passwords, multi-factor authentication, or other secure authentication methods.
Limiting administrator privileges and high-risk operation privileges.
Regularly reviewing users, roles, API keys, devices, and policy configurations.
Promptly removing departed personnel, expired devices, or untrusted credentials.
Establishing dual review, multi-approval, or separation-of-duty mechanisms for critical operations.
Monitoring abnormal logins, abnormal requests, abnormal Transactions, and abnormal device states.

Requests initiated through your accounts, devices, API keys, policies, or authorized systems may be treated as authorized by you unless you can demonstrate that the request did not result from your management, configuration, device, credential, or security failure.

11. Supported Chains, Assets, and Features

Havenlon provides Services only within the supported scope of chains, assets, protocols, contract types, signature formats, device models, firmware versions, SaaS versions, and APIs expressly supported by Havenlon.

Havenlon may add, modify, suspend, or remove support for certain chains, assets, protocols, features, or Third-Party Services for technical, security, compliance, business, or operational reasons.

You must not assume that any asset, chain, contract, protocol, or feature will remain available permanently because it was previously available.

You assume all risks associated with unsupported use, experimental support, non-standard implementations, test networks, third-party plugins, custom integrations, or use that bypasses official interfaces.

12. Pilot, Beta, MVP, and Experimental Features

Havenlon may provide pilot, beta, MVP, developer preview, experimental, or early-access services or features.

You understand and agree that such services or features may be incomplete, unstable, incompatible, insecure, subject to change, unavailable, or affected by errors, data loss, service interruption, security limitations, or functional changes.

Unless otherwise agreed in writing, pilot, beta, MVP, or experimental features should not be used directly for unverified high-value assets, critical production systems, regulated custody operations, or high-risk environments that cannot tolerate interruption.

You should conduct small-scale tests, internal validation, security review, and business process review before expanding usage.

Havenlon may modify, restrict, suspend, or discontinue pilot, beta, MVP, or experimental features at any time, without liability for indirect losses, lost profits, lost opportunities, or expected benefits.

13. Third-Party Services

The Services may interact with Third-Party Services, including blockchain networks, RPC nodes, wallets, exchanges, bridges, DEXs, oracles, cloud providers, identity providers, notification providers, AI systems, business systems, smart contracts, or other protocols.

Third-Party Services are controlled by third parties, not by Havenlon.

Havenlon does not guarantee the availability, accuracy, security, compliance, continuity, performance, or suitability of any Third-Party Service.

When using Third-Party Services, you must comply with their terms, policies, fee rules, and risk disclosures. Losses, delays, errors, attacks, asset loss, compliance issues, or business interruption caused by Third-Party Services are your responsibility, except where applicable law requires otherwise or the parties expressly agree in writing.

14. Prohibited Uses

You must not directly or indirectly use the Services to:

Violate any applicable law, regulation, regulatory requirement, sanctions rule, export-control rule, or contractual obligation.
Engage in money laundering, terrorist financing, sanctions evasion, fraud, scam activity, theft, or other illegal financial activity.
Access, control, transfer, or dispose of another person’s assets, accounts, devices, or systems without authorization.
Attack, disrupt, damage, scan, bypass, or test the security boundaries of Havenlon or any third-party system without written authorization.
Distribute malware, backdoors, trojans, exploit code, or attack tools.
Infringe intellectual property rights, privacy rights, trade secrets, or other legal rights of any person.
Bypass Havenlon policies, approvals, hardware arbitration, signing paths, or security controls.
Use the Services for prohibited, sanctioned, restricted, unlicensed, or high-risk business activities.
Misleadingly claim that Havenlon endorses your business, assets, compliance status, or transaction outcomes.

If Havenlon reasonably believes that you have violated these Terms, Havenlon may suspend, restrict, or terminate your access and reserve the right to take further legal action.

15. Data, Logs, and Privacy

Havenlon may process data related to your use of the Services for service operation, security auditing, troubleshooting, compliance, risk control, support, and product improvement.

Such data may include account information, organization information, device identifiers, device state, policy configurations, request metadata, transaction metadata, API logs, error logs, security events, IP addresses, browser information, system versions, and diagnostic information.

Havenlon does not intentionally collect or store your private keys, seed phrases, recovery keys, or other secret materials that would allow unilateral control of your assets.

You understand and agree that Havenlon may process, store, transmit, and disclose necessary data to trusted service providers where required to provide the Services, troubleshoot issues, protect security, comply with law, or perform contractual obligations.

Detailed rules regarding data processing, retention, cross-border transfers, user rights, and privacy protections will be set forth in Havenlon’s separate Privacy Policy. If these Terms conflict with the Privacy Policy regarding personal data processing, the Privacy Policy will govern that subject matter.

16. Intellectual Property

Havenlon and its licensors retain all rights, title, and interest in the Services, software, hardware designs, firmware, documentation, architecture, trademarks, logos, interfaces, APIs, protocols, code, drawings, models, methods, patent applications, trade secrets, and other intellectual property.

Except as expressly authorized by Havenlon, you must not copy, modify, distribute, sell, lease, license, decompile, reverse engineer, disassemble, bypass, publicly display, or otherwise exploit Havenlon intellectual property.

You retain rights in your User Content. You grant Havenlon the rights necessary to use, process, store, transmit, and display User Content for the purpose of providing, maintaining, protecting, improving, and supporting the Services and performing applicable agreements.

Feedback, suggestions, questions, improvement ideas, and feature requests you provide to Havenlon may be used by Havenlon without payment or restriction to improve products, services, documentation, or business operations.

17. Updates, Maintenance, and Changes

Havenlon may release updates to software, firmware, documentation, APIs, policy engines, SaaS functions, or security patches from time to time.

Some updates may be important for security, compatibility, or service availability. You should install or accept necessary updates promptly. Refusal or failure to update may cause reduced functionality, compatibility issues, increased security risk, or limited support.

Havenlon may modify the Services or these Terms for security, technical, legal, compliance, business, or operational reasons. For material changes, Havenlon will use reasonable efforts to notify you.

Your continued use of the Services after changes become effective means that you accept the updated Terms. If you do not agree to the changes, you must stop using the affected Services.

18. Suspension and Termination

Havenlon may suspend, restrict, or terminate your access to all or part of the Services if:

You violate these Terms or another applicable agreement.
Your use creates or may create security, legal, compliance, operational, or reputational risk.
You fail to pay applicable fees when due.
Your account, device, API key, or system is abnormal, attacked, compromised, misused, or subject to unauthorized access.
Required by law, regulation, court order, law enforcement request, government request, or competent authority.
A Third-Party Service, chain, asset, or protocol becomes unavailable or presents material risk.
Havenlon determines that suspension or termination is necessary for security, maintenance, or business adjustment.

Termination does not affect rights, obligations, liability limitations, intellectual property provisions, confidentiality obligations, dispute-resolution provisions, or other terms that by their nature should survive termination.

19. Fees, Payments, and Taxes

Certain Havenlon Services, Hardware Devices, enterprise functions, SaaS plans, API usage, support services, SLAs, private deployments, audit support, or custom development may require payment.

Prices, payment methods, billing cycles, refund policies, taxes, renewals, late-payment handling, and service scope will be specified in an order, quote, purchase page, invoice, enterprise agreement, or other written document.

Unless expressly agreed otherwise in writing, you are responsible for taxes, duties, bank fees, on-chain gas fees, network fees, third-party service fees, and other costs arising from purchase or use of the Services.

20. Disclaimers

To the maximum extent permitted by applicable law, the Services are provided on an “as is” and “as available” basis.

Havenlon disclaims all express, implied, statutory, and other warranties, including warranties of merchantability, fitness for a particular purpose, non-infringement, continuous availability, error-free operation, vulnerability-free operation, complete security, complete accuracy, complete compatibility, and suitability for your particular business purpose.

Havenlon does not warrant that:

The Services will be uninterrupted, timely, secure, error-free, or available at all times.
All vulnerabilities, errors, or security issues will be discovered or corrected.
All Transactions, signatures, policies, or approvals will match your true intent.
All on-chain or third-party risks will be identified or prevented.
Use of the Services will prevent asset loss, business loss, attacks, fraud, or user error.
The Services are suitable for regulated custody, financial services, critical infrastructure, or other high-risk use cases unless expressly agreed in writing.

21. Limitation of Liability

To the maximum extent permitted by applicable law, Havenlon and its affiliates, officers, employees, contractors, suppliers, licensors, and partners will not be liable for:

Indirect, incidental, special, punitive, exemplary, or consequential damages.
Loss of profits, revenue, goodwill, business opportunities, or expected benefits.
Digital asset price volatility, failed transactions, irreversible transactions, asset loss, or on-chain execution results.
Losses caused by Third-Party Services, smart contracts, RPC providers, wallets, bridges, DEXs, exchanges, AI systems, or business systems.
User configuration errors, approval errors, address errors, chain-selection errors, asset-selection errors, permission errors, or policy-setting errors.
Loss, disclosure, theft, misuse, or compromise of private keys, seed phrases, passkeys, Auth Keys, Hubs, recovery materials, devices, accounts, API keys, or access credentials.
Unauthorized access, attacks, malware, social engineering, phishing, insider abuse, or third-party intrusion.
Service interruption, data loss, missing logs, network failure, or force majeure events.

Unless applicable law requires otherwise or the parties expressly agree in writing, Havenlon’s total cumulative liability to you will not exceed the greater of:

The amount you paid to Havenlon for the relevant Services during the twelve months before the claim arose; or
USD 1,000 or its equivalent in another currency.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for fraud, intentional misconduct, or other liability that applicable law expressly prohibits from being limited.

22. Indemnification

You agree to indemnify, defend, and hold harmless Havenlon and its affiliates, officers, employees, contractors, suppliers, licensors, and partners from and against any third-party claims, losses, liabilities, penalties, damages, costs, and expenses, including reasonable attorneys’ fees, arising from or relating to:

Your breach of these Terms or another applicable agreement.
Your violation of law, regulation, or third-party rights.
Your User Content, policy configurations, business systems, AI systems, automation requests, or Transactions.
Misuse, abuse, tampering, bypassing, or unauthorized use of the Services by you or your authorized users.
Failure to protect accounts, devices, private keys, seed phrases, passkeys, API keys, or other credentials.
Transactions, business relationships, contracts, assets, taxes, compliance matters, or disputes between you and third parties.

23. Export Control, Sanctions, and Compliance

You represent and warrant that you and your end users are not located in, resident in, organized in, or controlled by any jurisdiction, person, or entity subject to applicable sanctions, embargoes, or export-control restrictions, and that you will not use the Services for purposes that violate sanctions, export-control laws, anti-money-laundering laws, counter-terrorist-financing laws, anti-bribery laws, or other applicable laws.

Havenlon may refuse, suspend, restrict, or terminate service to particular users, regions, entities, assets, chains, protocols, or business activities based on law, regulation, sanctions, export controls, or internal compliance requirements.

24. Enterprise Agreements, SLAs, and Order of Precedence

For enterprise customers, pilot customers, private deployment customers, SLA customers, or custom service customers, the parties may enter into separate orders, master service agreements, pilot agreements, SLAs, data processing agreements, confidentiality agreements, support agreements, or other written documents.

If these Terms conflict with a separately signed written agreement between you and Havenlon, the separate written agreement will control to the extent of the conflict.

Unless expressly agreed otherwise in writing, these Terms do not constitute a commitment by Havenlon regarding any specific availability, response time, recovery time, compensation standard, security certification, compliance certification, or regulatory suitability.

25. Governing Law and Dispute Resolution

The governing law, dispute-resolution mechanism, arbitral institution, competent court, and venue for these Terms will be determined by Havenlon based on the actual operating entity, customer location, business model, and applicable law and may be supplemented in the final version.

Before the final version is determined, if the parties have entered into a separate written agreement, the dispute-resolution provisions in that agreement will apply.

26. General Terms

If any part of these Terms is held invalid, illegal, or unenforceable, the remaining parts will remain in effect.

Havenlon’s failure or delay in exercising any right under these Terms does not constitute a waiver of that right.

You may not assign or transfer your rights or obligations under these Terms without Havenlon’s prior written consent. Havenlon may assign or transfer these Terms in connection with restructuring, merger, acquisition, asset transfer, financing, affiliate reorganization, or business operations.

These Terms, together with referenced policies, orders, agreements, and documents, constitute the entire agreement between you and Havenlon regarding the relevant Services.

27. Contact

If you have questions about these Terms, the Services, security incidents, compliance matters, or data processing, please contact Havenlon through the official website or designated contact channels.

Website: https://havenlon.com
Email: [email protected]

Appendix A: Key Risk Summary

This summary is provided for convenience and does not replace the full Terms.

Havenlon is a non-custodial execution control system, not a bank, exchange, custodian, or investment adviser.
You remain responsible for your assets, wallets, private keys, seed phrases, passkeys, devices, policies, and transaction decisions.
Blockchain Transactions are often irreversible, and incorrect Transactions may cause permanent loss.
Havenlon can provide execution constraints, but cannot eliminate all business, market, protocol, AI, third-party, configuration, or human risks.
Hardware execution control is not a guarantee of transaction outcome, asset value, protocol security, or business legality.
Outputs from AI agents, bots, automation systems, or third-party business systems remain your responsibility.
Pilot, beta, MVP, or experimental features should not be used for high-value assets or critical production environments without validation.
Unauthorized disassembly, tampering, reflashing, bypassing, or physical attacks may disable security functions, void warranties, or cause unrecoverable data loss.
Havenlon does not provide an SLA by default unless a separate enterprise agreement or SLA is signed.
By using Havenlon, you accept these Terms and the associated risks.

Appendix B: Future Legal, Compliance, and Security Documents

Havenlon may prepare and publish additional documents depending on product stage, customer type, deployment model, and applicable legal requirements. Some documents may apply only to enterprise customers, pilot customers, private deployment customers, or customers who sign separate agreements.

Planned or related documents may include:

Privacy Policy.
Hardware Warranty Policy.
Acceptable Use Policy.
Enterprise Master Services Agreement.
Pilot Program Agreement.
Service Level Agreement.
Data Processing Agreement.
Security Whitepaper.
Vulnerability Disclosure Policy.
Open Source and Third-Party License Notices.

These documents may supplement, modify, or govern specific services, deployments, customer relationships, or legal requirements when published or separately agreed.