Draft for counsel review — not yet in force. These terms are a working draft published for transparency while formal terms are finalized. They describe the service accurately but have not been reviewed by counsel or executed. For an executed agreement, contact us at [email protected] or via the contact page.
These terms are between [LEGAL ENTITY] ("GovSecure AI", "we") and the organization you represent when you create an account or use the service. Purchases by United States government agencies are typically made under an ordering document negotiated with your procurement team; where an ordering document conflicts with these terms, the ordering document controls.
GovSecure AI is a software platform that helps agencies and their contractors prepare and maintain FedRAMP authorization packages. The service currently provides:
Capabilities not listed above are not part of the current service, and descriptions of planned functionality are not commitments to deliver it. The service is a shared multi-tenant platform; tenants are separated by database row-level security, not by dedicated infrastructure.
GovSecure AI is a tool for pursuing and maintaining authorizations. GovSecure AI does not itself hold a FedRAMP authorization, and use of the platform does not confer any authorization, certification, or approval on your systems. Your agency remains responsible for its own authorization decisions and artifacts.
You are responsible for the accuracy of your account information and for safeguarding credentials. The platform supports multi-factor authentication using WebAuthn passkeys with recovery codes; we recommend enrolling all users. You must notify us promptly of any suspected unauthorized access to your account.
Self-serve signup creates a 14-day free trial limited to 1 user, 1 system, and 100 AI calls. No payment method is collected at signup. The trial is distinct from the paid Pilot plan described below. At the end of the trial, continued use of the service requires a paid subscription.
Payments are processed by Stripe; we do not store full payment card numbers. Entitlements (seats, systems, AI calls) are enforced per agency. Current pricing is published on the pricing page; your ordering document governs any negotiated pricing.
You retain ownership of the systems data, control implementations, evidence, and documents you submit. You grant us the rights needed to operate the service on that content: storing it, hashing and scanning uploads, generating documents from it, and — when you use AI features — sending relevant content to our AI model provider as described in the Privacy Policy. Deleted records are soft-deleted and retained per Section 11.
AI outputs are assistive drafts. They are schema-validated, recorded in the audit log, and require human review before inclusion in any authorization artifact. AI outputs are not legal, compliance, or assessment advice, and the platform is not a substitute for the judgment of your assessors and authorizing official. AI usage is metered against your plan's entitlement.
[DRAFT — subject to counsel review.] The service is provided "as is" without warranties of any kind, express or implied, including fitness for a particular purpose. GovSecure AI does not warrant that use of the service will result in any authorization outcome. To the maximum extent permitted by law, each party's aggregate liability under these terms is limited to [LIABILITY CAP]. Nothing in this section limits liability that cannot be limited under applicable law, including any provision of federal law applicable to government customers.
We may suspend access for material breach of these terms, including acceptable-use violations, after notice where practicable. On termination, you may export your data (including generated OSCAL documents and uploaded evidence) for a period of [DATA EXPORT WINDOW]. Deleted and terminated-account records are soft-deleted and retained per the retention terms in the Privacy Policy and your ordering document; audit logs and the evidence ledger are append-only by design.
These terms are governed by the laws of [JURISDICTION], except that agreements with U.S. government customers are governed by applicable federal law. We may update this draft as the service evolves; material changes will be reflected on this page. Executed agreements change only by written amendment.
[LEGAL ENTITY], [ADDRESS]. For legal notices: [LEGAL CONTACT EMAIL]. For anything else, use the contact page.
