Terms of Service

If you have a negotiated agreement, it wins. Where Guardian and a customer have executed a master subscription agreement or an order form containing conflicting terms, that document controls to the extent of the conflict. These terms govern all other access to the service, including trials, free tiers, evaluation tenants and self-service subscriptions.

1. Agreement and acceptance

These Terms of Service (the "Terms") form a binding agreement between Guardian Security, Inc., a Delaware corporation ("Guardian", "we", "us"), and the entity or person agreeing to them ("Customer", "you"). If you accept these Terms on behalf of an organisation, you represent that you have authority to bind that organisation, and "you" refers to that organisation.

You accept these Terms by executing an order form that references them, by clicking to accept, or by accessing or using the service. If you do not agree, do not use the service.

Order of precedence where documents conflict. A conflict is resolved by the highest applicable document, not by whichever was signed most recently.

2. Definitions

Service: The Guardian Sentinel platform, including the analyst console, sensors and agents, APIs, connectors and any managed service identified on an order form.
Customer Data: All data, including security telemetry, configuration and content, that you or your authorised users submit to or generate within the service.; Customer Data does not include Service Telemetry.
Service Telemetry: Operational data about the service itself — sensor health, ingest volume, feature usage counters, error rates — collected in pseudonymised form so that Guardian can operate, secure, support and improve the service.
Authorised User: An individual you permit to use the service, including your employees, contractors and, where an order form allows, your affiliates' personnel.
Order Form: A document executed by both parties, or an online checkout you complete, specifying the subscribed products, quantities, term and fees.
Documentation: The then-current technical documentation Guardian publishes for the service.
Protected Endpoint: A physical or virtual host, container node, cloud account or identity, as defined for the relevant product on the order form, that is the unit of subscription measurement.
Confidential Information: Non-public information disclosed by one party to the other that is designated confidential or that a reasonable person would understand to be confidential.

3. The service

3.1 Provision. Guardian will make the service available in accordance with these Terms, the applicable order form, the Documentation and the Service Level Agreement in section 9. We will provide the service using commercially reasonable skill and care, and will not materially reduce its overall functionality during a paid subscription term.

3.2 Changes to the service. We improve the service continuously and may add, modify or remove individual features. If we intend to discontinue a material feature you are actively using, we will give at least 180 days' notice, offer a functionally comparable replacement where one exists, and — if neither is acceptable to you — allow you to terminate the affected portion of your subscription with a pro-rata refund of prepaid fees.

3.3 Beta and preview features. Features labelled beta, preview, early access or similar are optional, provided "as is", excluded from the Service Level Agreement and support commitments, and may be changed or withdrawn at any time. Do not use them for production workloads you cannot afford to lose.

3.4 Protection is local. Sensor-side prevention continues to enforce the policy last received even when the sensor cannot reach the Guardian control plane. Loss of connectivity degrades visibility and centralised response, not endpoint protection.

3.5 No guarantee of interception. No security product stops every attack, and Guardian does not warrant that the service will detect or prevent all threats. The service is one control in your programme; it is not a substitute for the programme.

4. Licence grant and restrictions

4.1 Grant. Subject to these Terms and payment of the applicable fees, Guardian grants you a non-exclusive, non-transferable, non-sublicensable, worldwide right during the subscription term to access and use the service, and to install and run the sensors, for your internal business purposes, up to the quantities on the order form.

4.2 Affiliates. Your affiliates may use the service under your subscription provided you remain responsible for their compliance with these Terms and their usage counts toward your subscribed quantities.

4.3 Restrictions. You will not, and will not permit any third party to:

Resell, rent, lease, sublicense, time-share or provide the service to any third party except under an executed Guardian partner agreement.
Reverse engineer, decompile or disassemble the service or sensors, or attempt to derive source code, models, weights or detection logic, except to the extent that this restriction is prohibited by applicable law.
Copy, modify or create derivative works of the service, other than configuration and content you are expressly permitted to author.
Remove or obscure proprietary notices, or use Guardian marks other than as permitted in writing.
Use the service to build or train a competing product, or to benchmark it for publication without Guardian's prior written consent — which we grant routinely for methodologically sound tests, and refuse only for tests designed to mislead.
Access the service to circumvent quantity limits, including by rotating identifiers or under-reporting Protected Endpoints.
Interfere with or disrupt the integrity or performance of the service, or attempt to gain unauthorised access to it or to another customer's tenant, except under the vulnerability disclosure policy published on Trust & security.

4.4 Security testing. You may perform penetration testing against your own tenant without prior notice, subject to the rules of engagement in our disclosure policy. Testing that degrades service for other customers is not permitted and will be treated as an availability incident.

5. Acceptable use

5.1 Your responsibilities. You are responsible for the accuracy and legality of Customer Data, for obtaining any consents or notices required to deploy monitoring software in your environment, for configuring the service appropriately, for the acts and omissions of your Authorised Users, and for maintaining the security of account credentials.

5.2 Prohibited use. You will not use the service to:

Violate applicable law, including data protection, employment monitoring, wiretap and export control law.
Monitor individuals without a lawful basis, or to conduct surveillance of employees in a manner prohibited in their jurisdiction.
Transmit malicious code to third parties, or to launch, facilitate or assist an attack against any system you are not authorised to test.
Store or process data you are contractually or legally prohibited from disclosing to a processor.
Interfere with another customer's use of the service, or probe, scan or test the vulnerability of Guardian infrastructure outside your own tenant.

5.3 Deployment consent. Endpoint monitoring is lawful in most jurisdictions only with appropriate notice to, and sometimes consent from, affected personnel. You are the controller of that decision. Guardian provides configuration controls — including field-level masking, content exclusion and regional processing — to help you comply, but cannot make the assessment for you.

5.4 Enforcement. If we reasonably believe a use violates this section and creates imminent risk to the service, other customers or third parties, we may suspend the offending activity. We will use the least disruptive measure available, notify you as soon as practicable, and restore access promptly once the issue is resolved. Suspension for acceptable-use reasons does not relieve you of payment obligations for the remainder of the term unless the underlying dispute is resolved in your favour.

6. Customer data, privacy and security

6.1 Ownership. As between the parties, you own all right, title and interest in Customer Data. Guardian acquires no rights in it other than the limited rights granted in section 6.2.

6.2 Licence to operate. You grant Guardian a worldwide, non-exclusive licence to host, copy, transmit, display and process Customer Data solely to provide, secure and support the service, and to comply with law. That licence terminates on deletion of the data.

6.3 No secondary use. Guardian will not sell Customer Data, will not use it for advertising, and will not use identifiable Customer Data to train models made available to other customers. Aggregated and de-identified statistics that cannot reasonably be re-associated with you or any individual may be used to improve the service and to publish research, and we will not attempt to re-identify them.

6.4 Data protection. Where Guardian processes personal data contained in Customer Data, it does so as a processor under the Data Processing Addendum, which is incorporated into these Terms and includes the 2021 Standard Contractual Clauses and the UK Addendum. Guardian's own controller-role processing is described in the Privacy Policy.

6.5 Security. Guardian will maintain administrative, physical and technical safeguards designed to protect Customer Data, as described on Trust & security, and will not materially degrade them during a subscription term. Guardian will notify you without undue delay and in any event within 24 hours of confirming a security incident affecting your tenant.

6.6 Export and deletion. You may export Customer Data at any time during the term through the console or API in a documented, machine-readable format. On termination your tenant becomes read-only for 30 days, after which Guardian deletes Customer Data from production within a further 30 days and from backups within 90 days as the backup cycle rolls forward. A certificate of destruction is available on request at no charge.

6.7 Encryption keys. Where you elect to hold the key that wraps your tenant's data encryption keys, revoking that key renders the tenant cryptographically unreadable to Guardian. That is an intended capability and not a service defect; Guardian has no obligation or ability to recover data made unreadable in that way.

7. Third-party and partner services

7.1 Integrations. The service integrates with third-party products. If you enable an integration, you authorise Guardian to exchange the necessary data with that provider. Your use of a third-party product is governed by your agreement with that provider, and Guardian is not responsible for it.

7.2 Purchases through partners. If you obtained the service through an authorised Guardian partner or reseller, your commercial terms — including fees, invoicing and term — are with that partner, while these Terms continue to govern your use of the service. Guardian's obligations under the Service Level Agreement run to you directly. Partners are not authorised to make commitments on Guardian's behalf, and Guardian is not bound by any representation a partner makes that conflicts with these Terms. See Partners.

7.3 Marketplace transactions. Subscriptions purchased through a cloud marketplace are additionally subject to that marketplace's terms for billing and entitlement, which control over section 8 to the extent of any conflict.

8. Fees, billing, taxes and renewal

8.1 Fees. You will pay the fees on the order form. Fees are based on subscribed quantities, are payable in advance unless otherwise stated, and are non-refundable except as expressly provided in these Terms.

8.2 Invoicing and payment. Invoices are due 30 days from the invoice date unless the order form says otherwise. Undisputed amounts more than 15 days overdue may accrue interest at the lesser of 1% per month or the maximum permitted by law.

8.3 Overage. If your usage exceeds subscribed quantities, we will notify you and, unless you reduce usage within 30 days, invoice the excess at the rates on the order form, pro-rated for the remainder of the term. The service will not be degraded or disabled for overage; we would rather you were protected and invoiced than exposed and compliant.

8.4 Taxes. Fees exclude taxes. You are responsible for all sales, use, VAT, GST and similar taxes, excluding taxes on Guardian's net income. Where you are required to withhold tax, you will gross up so that Guardian receives the full invoiced amount.

8.5 Renewal and price changes. Subscriptions renew automatically for successive terms of equal length unless either party gives notice of non-renewal at least 30 days before the end of the current term. Guardian will not increase fees during a term. For a renewal term, any increase will be notified at least 60 days before renewal and, for subscriptions of twelve months or longer, will not exceed 7% over the expiring rate for the same products and quantities.

8.6 Suspension for non-payment. We may suspend the service for undisputed fees more than 30 days overdue, after at least 10 days' written notice to your billing and administrative contacts. Suspension does not delete Customer Data, and access is restored promptly on payment.

9. Service level agreement

9.1 Availability commitment. Guardian commits that the Sentinel control plane will be available at least 99.99% of each calendar month, and that the analytics and reporting plane will be available at least 99.9%. Availability is measured by Guardian's monitoring at one-minute granularity from at least three independent vantage points per region, and the measurement data is available to you on request.

9.2 Exclusions. Downtime does not include unavailability caused by: scheduled maintenance announced at least 72 hours in advance and performed within a published window (Guardian targets fewer than four hours of such maintenance per quarter); factors outside Guardian's reasonable control, including your network or equipment; your breach of these Terms; suspension permitted under sections 5 or 8; or beta features.

9.3 Service credits. If Guardian misses the commitment, credits are calculated from Guardian's own measurement and applied automatically to the next invoice. You do not need to submit a claim.

Service credits, applied to the monthly fee for the affected component.
Measured monthly availability	Credit
Below 99.99% but at or above 99.90%	10%
Below 99.90% but at or above 99.00%	25%
Below 99.00% but at or above 95.00%	50%
Below 95.00%	100%

9.4 Chronic failure. If measured availability falls below 99.00% in any three months within a rolling twelve-month period, you may terminate the affected subscription for cause on written notice and receive a pro-rata refund of prepaid fees for the remainder of the term. That right is in addition to service credits, not instead of them.

9.5 Sole remedy. Except for the termination right in section 9.4, service credits are your sole and exclusive remedy for any failure to meet the availability commitment.

10. Support

Support is provided in English 24 hours a day, every day, for Severity 1 and 2 issues, and during regional business hours for Severity 3 and 4. Severity is assigned by Guardian on the facts you report; you may escalate a severity assessment you disagree with and a duty manager will review it within one hour.

Targets are for first human response, not for resolution. Guardian publishes measured performance against these targets in the customer portal each month.

Enterprise plans include a named customer success manager and a designated support engineer. Managed detection and response engagements carry separate operational service levels described in the relevant order form and on Managed detection & response.

11. Intellectual property and feedback

11.1 Guardian property. Guardian and its licensors retain all right, title and interest in the service, the sensors, detection content, models, documentation and all related intellectual property. No rights are granted except as expressly stated in these Terms.

11.2 Customer property. You retain all right, title and interest in Customer Data and in any detection content, playbooks or queries you author. If you choose to publish content to a Guardian community catalogue, you grant Guardian and other users a licence to use it for that purpose, revocable prospectively at any time.

11.3 Feedback. If you give us suggestions or feedback, we may use them without restriction or obligation. We will not identify you as the source without your permission.

11.4 Publicity. Neither party will use the other's name or marks in publicity without prior written consent. Guardian may list your name and logo in a factual customer list, and will remove it within 30 days of your written request.

11.5 Open source. The service includes open source components listed in the Documentation and in the software bill of materials published with each release. Those components are licensed under their own terms, which prevail over these Terms in respect of those components only.

12. Confidentiality

12.1 Obligations. Each party will protect the other's Confidential Information with at least the care it uses for its own, will not disclose it except to personnel and advisers who need it and are bound by confidentiality obligations, and will use it only to perform under these Terms.

12.2 Exclusions. Confidential Information does not include information that is or becomes public through no fault of the receiving party, was rightfully known without restriction before disclosure, is rightfully received from a third party without restriction, or is independently developed without use of the disclosing party's information.

12.3 Compelled disclosure. A party may disclose Confidential Information where legally compelled, provided it gives prompt notice (unless prohibited), discloses only what is required, and reasonably cooperates in seeking protective treatment.

12.4 Duration. These obligations continue for three years after disclosure, and indefinitely for information that constitutes a trade secret under applicable law.

13. Warranties and disclaimers

13.1 Mutual warranties. Each party warrants that it has the legal power and authority to enter into these Terms.

13.2 Guardian warranties. Guardian warrants that: (a) the service will perform materially in accordance with the Documentation; (b) it will not materially decrease the overall functionality of the service during a paid term; (c) it will provide the service in accordance with applicable law; and (d) the sensors do not contain any time bomb, drop-dead device or other routine designed to disable the service other than documented licence expiry. Your remedy for breach of (a) is repair, replacement or, if neither is commercially reasonable, termination and a pro-rata refund.

13.3 Disclaimer. Except as expressly stated in section 13.2, the service is provided "as is". To the maximum extent permitted by law, Guardian disclaims all other warranties, whether express, implied or statutory, including warranties of merchantability, fitness for a particular purpose, title and non-infringement, and any warranty arising from course of dealing or usage of trade.

13.4 Security realism. Guardian does not warrant that the service will be uninterrupted or error free, that it will detect or prevent every attack, or that Customer Data will never be lost or compromised. Security is probabilistic. Any vendor telling you otherwise is selling something other than security.

14. Indemnification

14.1 By Guardian. Guardian will defend you against any third-party claim alleging that the service, used in accordance with these Terms, infringes that third party's patent, copyright, trademark or trade secret, and will pay damages finally awarded or amounts agreed in settlement. This obligation is not subject to the liability cap in section 15.

If the service becomes, or Guardian believes it may become, the subject of such a claim, Guardian may at its option procure the right to continue using it, modify it to be non-infringing, or terminate the affected subscription and refund prepaid fees for the unused term. Guardian has no obligation for claims arising from your modification of the service, combination with products not supplied by Guardian where the claim would not arise but for the combination, or use after notice to stop.

14.2 By Customer. You will defend Guardian against any third-party claim arising from Customer Data or from your use of the service in violation of section 5, and will pay damages finally awarded or amounts agreed in settlement.

14.3 Procedure. The indemnified party must give prompt written notice, grant sole control of the defence and settlement (except that no settlement admitting liability or imposing a non-monetary obligation may be made without consent, not to be unreasonably withheld), and provide reasonable cooperation at the indemnifying party's expense.

15. Limitation of liability

15.1 Exclusion of indirect damages. Neither party will be liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, goodwill or anticipated savings, even if advised of the possibility.

15.2 Cap. Each party's aggregate liability arising out of or related to these Terms will not exceed the fees paid or payable by you for the service in the twelve months preceding the event giving rise to liability.

15.3 Enhanced cap for security failures. Guardian's aggregate liability for a breach of its security obligations in section 6.5 that results in unauthorised access to Customer Data is capped at three times the fees paid or payable in the preceding twelve months. We publish this rather than negotiate it case by case.

15.4 Exclusions from the cap. The caps in sections 15.2 and 15.3 do not apply to: your payment obligations; either party's indemnification obligations under section 14; a party's fraud, wilful misconduct or gross negligence; your breach of section 4.3; or any liability that cannot be limited under applicable law, including liability for death or personal injury caused by negligence.

15.5 Allocation of risk. The limitations in this section reflect an agreed allocation of risk and are an essential basis of the bargain between the parties, and apply even if a limited remedy fails of its essential purpose.

16. Term, termination and general provisions

16.1 Term. These Terms begin on the earlier of your acceptance or first use of the service, and continue until all subscriptions have expired or been terminated.

16.2 Termination for cause. Either party may terminate for the other's material breach that remains uncured 30 days after written notice describing the breach, or immediately if the other party becomes insolvent, makes an assignment for the benefit of creditors, or has a receiver appointed.

16.3 Effect of termination. On termination your right to use the service ends. If Guardian terminates for your uncured breach, you remain liable for fees for the remainder of the term. If you terminate for Guardian's uncured breach, Guardian will refund prepaid fees for the unused portion of the term. Section 6.6 governs data export and deletion.

16.4 Survival. Sections 2, 4.3, 6.1, 6.3, 6.6, 11, 12, 13.3, 14, 15 and 16 survive termination, together with any provision that by its nature should survive.

16.5 Governing law and venue. These Terms are governed by the laws of the State of Delaware, excluding its conflict of laws rules and the United Nations Convention on Contracts for the International Sale of Goods. The exclusive venue is the state and federal courts located in Wilmington, Delaware, and each party consents to personal jurisdiction there. Where Customer is domiciled in the EEA, the UK or Switzerland, the agreement is instead governed by the laws of Ireland with exclusive venue in the courts of Dublin.

16.6 Dispute resolution. Before filing a claim, each party will escalate the dispute to an executive with authority to resolve it and attempt in good faith to settle it within 30 days. Nothing in this section prevents either party from seeking injunctive relief to protect intellectual property or Confidential Information.

16.7 Export and sanctions. Each party will comply with applicable export control and sanctions laws. You represent that you are not located in, and will not make the service available to anyone in, an embargoed jurisdiction or on a restricted-party list.

16.8 US government users. The service is "commercial computer software" and "commercial computer software documentation" as defined in FAR 12.212 and DFARS 227.7202. Government users acquire only the rights set out in these Terms. Government customers requiring FedRAMP or DoD-authorised environments must subscribe to Guardian Government Cloud as described on Government & defence.

16.9 Assignment. Neither party may assign these Terms without the other's written consent, except to an affiliate or in connection with a merger, acquisition or sale of substantially all assets, with notice to the other party. Any other attempted assignment is void.

16.10 Force majeure. Neither party is liable for a failure to perform (other than payment obligations) caused by circumstances beyond its reasonable control, provided it notifies the other party and uses reasonable efforts to mitigate.

16.11 Notices. Legal notices to Guardian must be sent to [email protected] and by post to Guardian Security, Inc., Attn: Legal, 1400 Congress Avenue, Suite 900, Austin, Texas 78701, United States. Notices to you are sent to the administrative contact on your account. Notice is effective on receipt, or two business days after posting, whichever is earlier.

16.12 Changes to these Terms. Guardian may update these Terms. Material changes take effect for existing customers at the start of the next renewal term, or 30 days after notice for month-to-month subscriptions, and we will tell you what changed rather than only that something did. Continued use after the effective date constitutes acceptance. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of prepaid fees.

16.13 Entire agreement and severability. These Terms, together with the documents referenced in section 1, are the entire agreement between the parties on this subject and supersede all prior discussions. No purchase order terms have any effect. If a provision is held unenforceable, it will be modified to the minimum extent necessary and the remainder will continue in force. No waiver is effective unless in writing, and no failure to enforce is a waiver. Nothing creates a partnership, agency or employment relationship, and there are no third-party beneficiaries.

Guardian Security, Inc. · Terms of Service version 9.0 · Effective 1 July 2026 · Supersedes version 8.4 of 2 September 2025. This English text is the authoritative version; translations are provided for convenience only. A redline against the previous version is available from [email protected] on request.