Terms of Service
Last updated
Last updated
These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer," "you," or "your") and Oten ("Oten," "Oten KMS," "we," "us," or "our") governing your access to and use of the Key Management Service ("Oten KMS" or "Service").
By accessing or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organization, you represent that you have the authority to bind that organization to these Terms.
We reserve the right to modify these Terms at any time. Material changes will be notified at least 30 days in advance. Continued use after changes take effect constitutes acceptance.
Oten KMS is a cloud-based key management service that provides:
Customer Managed Key (CMK) creation and management
Cryptographic operations (wrap, unwrap, encrypt, decrypt, as authorized by Customer)
Key lifecycle management (rotation, versioning, status updates)
Integration with third-party services (Google Workspace CSE, Google Drive)
Trusted Execution Environment (TEE) support
Access control and policy management
Audit logging and compliance reporting
The Service includes:
We strive to maintain high availability. Service Level Agreements (SLAs) are defined in separate agreements where applicable.
To use the Service, you must:
You are responsible for:
Subject to these Terms, we grant you a limited, non-exclusive, non-transferable license to access and use the Service for your internal business purposes.
You agree to use the Service only for lawful purposes and in accordance with:
You shall NOT:
You retain all rights, title, and interest in:
You are responsible for:
We process your data only as necessary to provide the Service and as described in our Privacy Policy.
We strive to maintain high availability for the Service. Specific uptime commitments and service credits, if any, are defined in separate Service Level Agreements.
Support is provided according to your service tier:
Service credits for downtime are available according to the applicable SLA agreement.
Fees are exclusive of applicable taxes. You are responsible for all taxes except those based on our net income.
We retain all rights to:
Any feedback, suggestions, or ideas you provide may be used by us without obligation or compensation to you.
You shall not:
Both parties agree to protect confidential information disclosed during the relationship, including:
Confidentiality obligations do not apply to information that:
Disclosure is permitted if required by law, provided reasonable notice is given where legally permitted.
We warrant that:
You warrant that:
EXCEPT AS EXPRESSLY PROVIDED, THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.
WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE, OR THAT VULNERABILITIES WILL NEVER OCCUR.
TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITIES.
OUR TOTAL LIABILITY SHALL NOT EXCEED THE FEES PAID BY YOU IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
These limitations do not apply to:
We will indemnify you against third-party claims alleging that the Service infringes intellectual property rights, provided you:
This indemnity does not apply to claims arising from Customer modifications, misuse, or combination with non-approved systems.
You will indemnify us against third-party claims arising from:
These Terms are effective until terminated by either party.
Either party may terminate with 30 days written notice.
Either party may terminate immediately if the other party:
Upon termination:
The Service is designed with controls and security principles aligned to widely recognized compliance frameworks and may support customer compliance efforts, subject to applicable agreements and certifications.
Including:
On-site audits are subject to mutual agreement, scope definition, confidentiality obligations, and may be limited or declined where they pose security or operational risks. The customer may audit its own use through logs and reports available in the Service.
You are responsible for ensuring your use of the Service complies with applicable laws and regulations in your jurisdiction.
These Terms are governed by the laws of Singapore, without regard to conflict of law principles.
Before initiating formal proceedings, parties agree to attempt informal resolution for 30 days.
Disputes not resolved informally shall be resolved by binding arbitration under the rules of SIAC, except for:
You agree to resolve disputes individually and waive any right to participate in class actions.
These Terms, together with the Privacy Policy and any applicable SLA, constitute the entire agreement between the parties.
If any provision is found unenforceable, the remaining provisions shall continue in effect.
Failure to enforce any provision does not constitute a waiver of that provision.
You may not assign these Terms without our written consent. We may assign these Terms in connection with a merger or acquisition.
Neither party is liable for delays caused by circumstances beyond reasonable control, including natural disasters, war, terrorism, or government actions.
Notices shall be sent to:
The parties are independent contractors. Nothing in these Terms creates a partnership, joint venture, or agency relationship.
For questions about these Terms, contact: support@oten.com
"API" means Application Programming Interface.
"CMK" or "Customer Managed Key" means encryption keys created and managed by Customer through the Service.
"Confidential Information" means non-public information disclosed by either party.
"Customer Data" means data provided by Customer or generated through Customer's use of the Service.
"HSM" means Hardware Security Module.
"Service" means the Oten KMS platform and related services provided by Oten.
"SLA" means Service Level Agreement.
"TEE" means Trusted Execution Environment.
By using the Oten KMS Service, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service.
Oten KMS API and endpoints
Administrative console/dashboard
Documentation and technical support
Integration connectors
Audit and logging capabilities
Provide accurate and complete registration information
Maintain the accuracy of your account information
Designate authorized administrators
Maintaining the confidentiality of authentication credentials
Implementing appropriate access controls within your organization
Promptly notifying us of any unauthorized access or security breach
All activities that occur under your account
Use of strong authentication methods is required
Multi-factor authentication (MFA) is strongly recommended
API keys and tokens must be securely stored and rotated regularly
These Terms
Applicable laws and regulations
Our Acceptable Use Policy
Industry best practices for key management
Use the Service for illegal activities or to facilitate illegal transactions
Attempt to gain unauthorized access to the Service or its systems
Interfere with or disrupt the Service or its infrastructure
Reverse engineer, decompile, or disassemble any part of the Service except to the extent permitted by applicable law
Resell, sublicense, or redistribute the Service without authorization
Use the Service to store or process prohibited content
Exceed rate limits or abuse API endpoints
Circumvent security controls or access restrictions
Use the Service to manage keys for malicious software or ransomware
Your Customer Managed Keys (CMKs)
Data encrypted using your keys
Configuration and policy data
Audit logs related to your use of the Service (excluding Oten system logs and analytics)
Backing up key metadata or recovery materials where supported by the Service
Configuring appropriate key lifecycle policies
Managing access permissions and conditions
Compliance with your own regulatory requirements
Data encrypted using keys managed through the Service
Key creation, rotation, and deletion are Customer-controlled
We do not store or persist plaintext key material, and we are not able to access your plaintext key material in a human-readable form
Deleted keys cannot be recovered after the retention period as configured by Customer policies or as required by law
Maintenance windows will be announced in advance
We will minimize disruption during maintenance
Emergency maintenance may occur without advance notice
Standard: Email support during business hours
Premium: 24/7 support with priority response
Enterprise: Dedicated support with SLA guarantees
Response times, if any, are defined in the applicable plan documentation or SLA.
Fees are based on your selected service plan
Usage-based charges may apply for API calls, key operations, and storage
Current pricing is available on our website or in your service agreement
Invoices are issued monthly/annually as agreed
Payment is due within 30 days of invoice date
Late payments may incur interest charges
Price changes will be notified at least 60 days in advance
Changes take effect at the next billing cycle after the notice period
The Service and its underlying technology
Our trademarks, logos, and branding
Documentation and training materials
Improvements and enhancements to the Service
Remove or alter any proprietary notices
Use our trademarks without authorization
Claim ownership of any part of the Service
Technical specifications and documentation
Pricing and business terms
Security configurations and audit results
Is publicly available
Was known prior to disclosure
Is independently developed
Is rightfully obtained from third parties
The Service will perform substantially as described in documentation
We will use commercially reasonable security measures
We have the right to provide the Service
You have authority to enter into these Terms
Your use will comply with applicable laws
You will not use the Service for prohibited purposes
Breach of confidentiality obligations
Violation of intellectual property rights
Gross negligence or willful misconduct
Indemnification obligations
Notify us promptly of the claim
Allow us to control the defense
Cooperate in the defense
Your use of the Service in violation of these Terms
Your violation of applicable laws
Customer Data provided or generated through Customer’s use of the Service
Your end users' actions
Materially breaches these Terms and fails to cure within 30 days
Becomes insolvent or files for bankruptcy
Ceases business operations
Your access to the Service will be suspended
You must pay all outstanding fees
We will provide a data export period of 30 days, subject to technical feasibility and security constraints provided Customer is current on all payment obligations
After the export period, your data will be securely deleted
Provisions that should survive (confidentiality, liability, etc.) will remain in effect
You are responsible for exporting or backing up key material before termination
Keys will be scheduled for destruction after the export period
Destroyed keys cannot be recovered
GDPR
CCPA
HIPAA (only when a Business Associate Agreement is executed)
SOC 2 (controls designed to align with Trust Services Criteria)
ISO 27001 (controls aligned; certification planned)
Integration is subject to Google's terms and conditions
We are not responsible for Google service availability or changes
You must comply with Google's acceptable use policies
File encryption/decryption operations are performed according to your policies
We are not responsible for data loss due to misconfiguration
Google Drive's terms apply to stored content
Third-party integrations are provided "as is"
Changes to third-party services may affect functionality
Additional terms may apply for specific integrations
Intellectual property disputes
Injunctive relief requests
Small claims within jurisdiction limits
Customer: The email address on file for your account
Company: support@oten.live