The publication director is the person responsible for TrustProtocol, reachable at contact@trustprotocol.tech.

Subject: These terms govern the use of TrustProtocol services, a SaaS platform for AI agent governance and compliance.

Service access: Access to TrustProtocol is provided through an API key upon subscription to a plan. The API key is strictly personal and confidential.

Plans and pricing:

• Professional and Enterprise — both sales-assisted, unlimited agents, custom pricing agreed directly with each client. Contact us at contact@trustprotocol.tech

Billing: Billing terms (frequency, invoicing) are agreed directly with each client as part of onboarding, since both plans are sales-assisted rather than self-serve.

Termination: Subscriptions may be cancelled at any time with 30 days notice. Data is retained for 90 days after termination, then permanently deleted.

SLA (Service Level Agreement): Availability commitments are agreed per contract with Professional and Enterprise clients, excluding scheduled maintenance.

Liability: TrustProtocol provides a logging and governance infrastructure. TrustProtocol cannot be held liable for actions performed by the client's AI agents. TrustProtocol's liability is limited to the amount of subscriptions paid in the last 12 months.

Governing law: These terms are governed by French law. Any dispute shall be submitted to the competent French courts.

Data Controller: TrustProtocol, contact@trustprotocol.tech, France.

Data collected:

• Client identification data (name, email, organization)
• AI agent action logs (action description, cost, timestamp, cryptographic hashes)
• Billing data (no payment card is ever stored by TrustProtocol)

Processing purposes: Service delivery, billing, regulatory compliance, service improvement.

Legal basis: Contract performance (GDPR Art. 6.1.b) and legal obligations (GDPR Art. 6.1.c).

Retention period: Data is retained for the duration of the subscription + 5 years for legal and accounting obligations.

Data hosting: All data is hosted on servers located in Frankfurt, Germany (European Union), in compliance with GDPR.

Your rights: Under GDPR, you have the rights of access, rectification, erasure, portability and objection. To exercise these rights: contact@trustprotocol.tech

Cookies: TrustProtocol does not use tracking or advertising cookies. Only technically necessary cookies for service operation are used.

Sub-processors:

• Render Services Inc. — API & database hosting (Frankfurt, EU)
• Cloudflare Inc. — CDN & DDoS protection
• FreeTSA.org — RFC 3161 timestamping service (not eIDAS-qualified)

For any complaint regarding your personal data, you may also contact the CNIL (French Data Protection Authority): cnil.fr

All content on trustprotocol.tech (text, graphics, logo, technical architecture) is the exclusive property of TrustProtocol and is protected by French and international intellectual property laws.

Any reproduction, distribution or use without prior written authorization is strictly prohibited.