Terms of Service

1. Acceptance of Terms

By accessing or using the Noxys platform, you agree to be bound by these Terms of Service (“Terms”). If you are using Noxys on behalf of an organization, you represent that you have authority to bind that organization. If you do not agree to these Terms, you must not use the service.

These Terms constitute a legally binding agreement between you (or your organization) and Noxys Security SAS, a French simplified joint-stock company.

2. Description of Service

Noxys is a European sovereign AI Firewall designed to help organizations govern the use of generative AI within their teams. The platform includes:

• Shadow AI discovery — automatic detection of unauthorized AI tools used across the organization
• PII detection — identification of personal or confidential data sent to external AI services
• Policy engine — definition and enforcement of AI usage rules by team, department, or risk level
• Compliance reporting — dashboards and exports for internal audits, ISO 27001, NIS2, and GDPR compliance

Noxys reserves the right to modify, suspend, or discontinue any part of the service at any time, with reasonable notice except in cases of security emergencies.

3. Account Registration

To access the service, you must create an account by providing accurate and current information, including:

• A valid professional email address
• Your organization name

You are responsible for the confidentiality of your login credentials and for all activity conducted under your account. You must notify Noxys immediately of any unauthorized access to your account.

One account corresponds to one organization. Sharing an account across multiple organizations is prohibited.

4. Subscription Plans and Pricing

Noxys offers the following subscription plans. All prices exclude VAT.

Noxys reserves the right to modify pricing with 60 days notice. Price changes do not apply to current annual subscriptions.

5. Free Trial

At the end of the trial period, the account automatically reverts to the Free plan unless a paid subscription is activated. No charge is made without explicit consent.

6. Payment Terms

• Billing is annual or monthly, as selected at the time of subscription
• All payments are denominated in euros (EUR) only
• Invoices are issued electronically and sent to the registered billing email address
• Payment is due within 30 days of the invoice date
• Late payment may result in service suspension after formal notice

Annual plans include a discount equivalent to 2 months free. Annual subscriptions are non-refundable except where required by law.

7. Data and Privacy

The processing of personal data by Noxys is governed by our Privacy Policy, which is incorporated into these Terms by reference.

• EU data residency — all data is hosted exclusively in datacenters located within the European Union
• GDPR compliance — Noxys acts as data processor for your users' data and data controller for account data
• Zero US cloud dependency — Noxys does not use AWS, GCP, or Azure

For Business and Enterprise plans, a Data Processing Agreement (DPA) compliant with GDPR Article 28 is available upon request.

8. Acceptable Use

By using Noxys, you agree not to:

• Reverse engineer, decompile, or disassemble any component of the platform
• Resell, sublicense, or redistribute access to the service to third parties without prior written authorization
• Circumvent or attempt to circumvent the platform's security controls, policies, or monitoring mechanisms
• Use the service for illegal purposes or in violation of applicable regulations
• Introduce malicious code, conduct denial-of-service attacks, or otherwise interfere with the integrity of the service
• Access or attempt to access other customers' data

Any violation of these rules may result in immediate account suspension without notice or refund.

9. Intellectual Property

Noxys Security SAS is and remains the exclusive owner of the Noxys platform, including its source code, algorithms, user interface, brand, and documentation. These Terms do not grant you any ownership rights over the platform.

You retain full ownership of your data. Noxys claims no rights over the content you transmit or store through the service. You grant Noxys a limited, non-exclusive, non-transferable license to process your data solely for the purpose of providing the service.

10. Service Level

11. Limitation of Liability

To the fullest extent permitted by applicable law, Noxys Security SAS shall not be liable for any indirect, incidental, consequential, or punitive damages, including loss of profits, data, or business opportunities, arising from the use or inability to use the service.

Noxys's total liability to you under these Terms is limited, for any claim arising within a 12-month period, to the amount you actually paid to Noxys during that same period.

These limitations do not apply in cases of gross negligence, fraud, or where French law prohibits limitation of liability.

12. Termination

Either party may terminate the service with 30 days written notice, without penalty (except for current annual subscriptions, which are non-refundable).

Noxys may terminate immediately in the event of a material breach of these Terms, including violation of the acceptable use policy.

Upon termination, you may export your data within a 30-day window. After this period, your data will be permanently deleted. Noxys can provide data migration assistance upon request for Business and Enterprise plans.

13. Governing Law

These Terms are governed by French law. Any dispute relating to their interpretation, validity, or performance shall be subject to the exclusive jurisdiction of the courts of Paris, France, unless mandatory consumer law provisions provide otherwise.

In the event of a dispute, the parties agree to seek an amicable resolution within 30 days before initiating legal proceedings.

14. Contact

For any questions regarding these Terms, contact Noxys Security SAS at: [email protected]

Noxys Security SAS