Legal

AegisGate Security, LLC legal documents, terms of service, privacy policy, data processing agreement, cookie policy, and subprocessor list.

📋 DRAFT — Not Legal Advice
These legal documents are self-drafted by AegisGate Security, LLC for the v4.2.0 release. AegisGate Security, LLC is not a law firm, and these documents do not constitute legal advice. Production-grade review by qualified legal counsel is deferred to v4.2.0+ when budget is available. Until then, customers and counterparties should rely on these documents at their own risk and consult their own legal counsel.

Legal Documents

AegisGate Security, LLC’s legal documents are listed below. Each document is a 2.0 DRAFT for the v4.2.0 release.

For Customers and End Users

DocumentPurposeLast Updated
Terms of ServiceThe agreement governing your use of AegisGate Security Platform2026-06-07
Privacy PolicyHow we collect, use, and protect personal data2026-06-07
Cookie PolicyThe cookies and tracking technologies we use2026-06-07
End-User License AgreementSoftware license for AegisGate Security Platform2026-07-29
Data Processing AgreementGDPR Article 28 agreement for customers processing personal data through the Platform2026-06-07
Business Associate AgreementHIPAA Business Associate Agreement for Professional tier subscribers handling PHI2026-07-29
Subprocessor ListThird-party service providers that process personal data on our behalf2026-06-07
Security AddendumSecurity controls, infrastructure, and compliance posture for Professional and Enterprise tiers2026-07-29
Acceptable Use PolicyDefines permitted and prohibited uses of the service2026-07-29
Mutual NDAMutual non-disclosure agreement for business discussions2026-07-29
Beta User AgreementSupplemental terms for v4.2.0 program participants2026-06-07

Accessibility

DocumentPurposeLast Updated
Accessibility StatementOur commitment to accessibility and conformance with WCAG 2.1, ADA, Section 508, and EU Accessibility Act 20252026-07-29

Security and Compliance

DocumentPurposeLast Updated
Vulnerability Disclosure PolicyHow to report security vulnerabilities — coordinated disclosure with 90-day timeline2026-07-29
Breach Notification PolicyHow AegisGate notifies affected parties in the event of a data breach2026-07-29
Incident Response SLASeverity-based response targets and escalation procedures2026-07-29
Vendor Risk AssessmentThird-party risk assessments for subprocessors (Cloudflare, Netlify, GitHub, Stripe)2026-07-29
Recovery Time and Point ObjectivesRTO/RPO targets by tier and component for business continuity planning2026-07-29
Data Disposal PolicyData classification, retention, and disposal procedures2026-07-29
Processing Integrity ControlsSOC 2 Processing Integrity criteria — validation methods, error handling, and data accuracy2026-07-29
Security Awareness TrainingSecurity awareness training program with role-based modules, phishing simulations, and completion tracking2026-07-29
Training Completion RecordsTraining completion and assessment records for SOC 2 CC1.3, HIPAA §164.308(a)(5), ISO 27001 A.6.32026-07-29
Disaster Recovery TestDR test results documenting full platform recovery in 15.5 minutes, RTO/RPO validation2026-07-29
Compliance Self-AssessmentsHIPAA, NIST CSF 2.0, SOC 2 Type 1, CIS v8 IG1, EU AI Act self-assessments2026-07-29

For Developers and Contributors

DocumentPurposeLast Updated
Open-Core License (Apache 2.0 + Commercial)Plain-English summary of the open-core licensing model — Apache 2.0 community edition + commercial enterprise modules2026-08-20

Questions?

For questions about any of these documents, contact:

Counsel Sign-Off Required

All documents on this page are 2.0 DRAFT for v4.2.0 and require counsel review before being used as binding legal agreements. The full 17-clause vendor-favorability framework applied to these documents is documented in the internal legal review framework (a confidential document not published on this site). When budget is available, AegisGate Security, LLC will engage qualified counsel to convert these DRAFTs to production-grade legal documents.