Terms and Conditions

1. Agreement and definitions

These Terms and Conditions govern access to and use of TrustProof, the service operated by TrustProof Tech (ABN 42718806704). By creating an account, purchasing a package or using the service, you agree to these terms. If you use TrustProof for an organisation, you confirm that you have authority to bind that organisation.

“TrustProof”, “we”, “us” and “our” mean TrustProof Tech. “Customer”, “you” and “your” mean the person or organisation using the service. “Service” means the TrustProof website, application, account, workspace, AWS readiness workflows, monitoring, reports and related support.

2. Service description and boundaries

TrustProof is a preparation partner between a customer’s AWS environment and an independent CPA. A customer configures a read-only connection, after which TrustProof gathers supported AWS evidence and starts the evidence trail from the connection date. The service surfaces selected findings, including S3 public access, IAM access keys unrotated for 90 or more days, and SSH or RDP exposure.

TrustProof organises supported evidence for the CPA Dashboard and guides customer review and approval. The customer executes AWS changes. TrustProof does not promise certification, complete coverage of a framework, auditor acceptance or a particular audit result.

Automated AWS evidence is mapped only to the framework requirements shown as supported in the product, which change as the service develops. Guided readiness programmes help the customer organise evidence and approvals for a framework; they do not establish compliance with it. TrustProof is not a compliance guarantee, an independent CPA audit or legal advice.

3. Accounts, workspaces and access

You must provide accurate account information, keep your credentials secure and promptly update information that is no longer accurate. You are responsible for activity carried out through your account and for restricting access to people you authorise.

Where a workspace exists, the workspace owner is responsible for invitations, member access and the customer’s use of workspace data. A package purchase may require a signed-in account and, where applicable, the workspace owner. You must not access another person’s account or workspace without permission.

4. AWS connection and customer responsibilities

You must be authorised to connect the AWS environment and must configure a supported read-only connection with appropriate permissions. You are responsible for the AWS account, the accuracy of information supplied to TrustProof and the security of the connection.

You remain responsible for reviewing and approving findings and evidence, deciding which AWS changes to make, executing those changes in your own environment and reviewing product output with your independent CPA. TrustProof does not execute AWS changes for you and does not replace your security, risk, change-management or audit processes.

5. Packages, pricing and billing

The current package catalogue provides a one-off Readiness Programme plus recurring monitoring in AUD. All prices are in AUD and include GST.

• Growth: A$7,999 Readiness Programme, A$899/month monthly monitoring, or A$8,600 for 12-month prepaid monitoring (20% off 12 monthly payments); due today is A$8,898 monthly or A$16,599 prepaid.
• Corporate: A$21,999 Readiness Programme, A$2,199/month monthly monitoring, or A$21,000 for 12-month prepaid monitoring (20% off 12 monthly payments); due today is A$24,198 monthly or A$42,999 prepaid.
• Enterprise: A$47,999 Readiness Programme, A$4,999/month monthly monitoring, or A$47,000 for 12-month prepaid monitoring (22% off 12 monthly payments); due today is A$52,998 monthly or A$94,999 prepaid.

The 12-month prepaid amount is the monitoring price for the full service term, not the total due today. Due today is the Readiness Programme plus the selected monitoring amount. The Readiness Programme is not charged again on renewal. Checkout is hosted by Paddle. TrustProof confirms package access only after matching payment and active subscription records.

6. Monitoring subscriptions and cancellation

Monthly monitoring renews at the published monthly rate until cancelled. Annual monitoring renews at the published annual rate after its 12-month service term. The Readiness Programme is not charged again on renewal.

You can request cancellation through the billing tools made available by Paddle or by contacting support@trustproof.tech. Cancellation takes effect at the end of the paid monitoring period unless a different outcome is required by applicable law or confirmed by TrustProof. Refund rules are set out in the Refund Policy.

7. Customer content and intellectual property

You retain your rights in information, AWS evidence and other material that you submit or make available to TrustProof. You grant us the limited permission needed to host, process, analyse, display and share that material to provide the service, follow your instructions, maintain security and meet our legal obligations.

TrustProof and its licensors retain all rights in the service, software, design, documentation, templates, branding and other materials we provide. We grant you a limited, non-exclusive, non-transferable right to use those materials as part of the service during your paid access period.

8. Acceptable use

You must not:

• use TrustProof for an AWS environment or data you are not authorised to access;
• provide credentials or secrets through an unsupported channel or attempt to obtain another customer’s information;
• interfere with the service, bypass access controls, probe its security or introduce malicious code;
• use product output to misrepresent certification, audit results or the scope of an independent CPA review; or
• use TrustProof in breach of law or the rights of another person.

9. Availability and disclaimers

We will use reasonable care to operate the service, but access may be unavailable or delayed because of maintenance, AWS, Paddle, hosting, network or other third party issues. The service and its output are provided for preparation and information purposes. To the extent permitted by law, we do not warrant that the service will be uninterrupted, error-free, complete or suitable for every customer environment.

You must independently assess findings, evidence, recommendations and reports before relying on them. TrustProof does not provide legal advice, tax advice, security certification or an audit opinion.

10. Liability

Nothing in these terms excludes, restricts or modifies a right, remedy, guarantee, warranty or condition that cannot lawfully be excluded, restricted or modified. To the extent permitted by law, TrustProof is not liable for indirect, incidental, special or consequential loss, loss of profits, loss of data, loss of opportunity or loss arising from AWS changes made by the customer or another person.

To the extent permitted by law, our total liability arising from the service is limited to the amount paid by the customer to TrustProof for the affected service during the 12 months before the event giving rise to the claim. This limitation does not apply to liability that cannot lawfully be limited.

11. Suspension and termination

We may suspend or restrict access where reasonably necessary to protect the service, investigate security or misuse, comply with law, respond to a payment failure or enforce these terms. We will restore access when the reason for the suspension is resolved where it is reasonable to do so.

When access ends, your right to use the service ends. We may retain or delete information in accordance with the Privacy Policy, legal obligations, legitimate business records and backup processes. Terms that by their nature should continue, including payment obligations, intellectual-property rights, disclaimers and liability limits, continue after termination.

12. Changes and general terms

We may update these terms when the service, package catalogue or applicable requirements change. The updated terms will be published on this page. If a change materially affects a paid service, we will take reasonable steps to notify affected customers. Continued use after the effective date of an update constitutes acceptance of the updated terms.

These terms, the Privacy Policy and the Refund Policy form the agreement between you and TrustProof for the service. If a provision is unenforceable, it will be read down or severed to the extent necessary without affecting the remaining provisions. A failure to enforce a provision is not a waiver of that provision.

These terms are governed by the laws of Victoria, Australia. The parties submit to the courts of Victoria and courts entitled to hear appeals from them, except where a non-excludable law requires another forum.

13. Contact

Questions about these terms, your account or the service can be sent to support@trustproof.tech. Do not include AWS credentials or secret keys in your message.