Terms of Service

1. Service Provider

Provider: [Company Name - TBD]

Address: [Registered Address - TBD]

VAT: [VAT Number - TBD]

Contact: support@eurtifact.eu

2. Service Description

Eurtifact provides an EU-sovereign artifact registry platform with:

• Container image storage and distribution
• Automated security scanning (Trivy)
• SBOM generation (Syft)
• Artifact signing (Cosign)
• NIS2, CRA, and GDPR compliance features

3. User Obligations

Users must:

• Provide accurate account information
• Maintain confidentiality of credentials
• Comply with acceptable use policy (see Section 5)
• Not attempt to circumvent security measures
• Report security vulnerabilities to security@eurtifact.eu

4. Service Availability

Trial Environment: No SLA guarantee. Service provided as-is for testing.

Production Environment: 99.5% uptime SLA (when commercially available).

Scheduled maintenance will be communicated 48 hours in advance.

5. Acceptable Use Policy

Prohibited:

• Uploading malicious artifacts (malware, backdoors)
• Hosting illegal or copyrighted content without authorization
• Attempting to access other tenants' data
• DDoS attacks or excessive API usage
• Circumventing quarantine or security policies

Violation consequences: Account suspension or termination.

6. Data Ownership

You retain ownership of artifacts and data you upload. We claim no intellectual property rights over your content.

We reserve the right to scan artifacts for security and compliance purposes.

7. Limitation of Liability

Eurtifact is provided "as is" without warranties. We are not liable for:

• Data loss (maintain your own backups)
• Service interruptions
• Vulnerabilities in upstream artifacts
• Indirect or consequential damages

Maximum liability: Limited to fees paid in the preceding 12 months.

8. Termination

By User: Delete account via settings page. Data deleted within 30 days (except audit logs retained for 2 years per NIS2).

By Provider: We may terminate accounts violating acceptable use policy with 7 days' notice (or immediately for security violations).

9. Governing Law

Jurisdiction: EU law and laws of [Country - TBD]

Dispute Resolution: Arbitration or courts of [Country - TBD]

10. Changes to Terms

We may update these terms with 30 days' notice. Continued use after changes constitutes acceptance.

11. Contact

General: support@eurtifact.eu

Legal: legal@eurtifact.eu

Security: security@eurtifact.eu