Terms and Conditions

Please read these Terms carefully. By accessing or using CertLocker, you agree to be bound by these Terms. If you are using CertLocker on behalf of an organisation, you confirm that you have authority to accept these Terms for that organisation.

1. Who We Are

CertLocker is operated by CertLocker UK Ltd, a company registered in England and Wales under company number 17360784. References to "CertLocker", "we", "us", and "our" mean CertLocker UK Ltd as the operator of the CertLocker website and services.

CertLocker provides software for certificate lifecycle management, cryptographic artefact custody, secrets workflows, scoped tokens, host access, endpoint checks, and audit evidence.

2. Accounts and Access

You are responsible for keeping your account credentials, API keys, tokens, and two-factor authentication methods secure. You must not share credentials outside authorised users, bypass access controls, or use CertLocker to gain unauthorised access to systems, data, or networks.

You are responsible for activity performed through your account, including activity by invited users, service accounts, automation, API clients, and integrations configured by you or your organisation.

3. Acceptable Use

You must not use CertLocker to:

• break applicable laws or regulations;
• store or transmit unlawful, harmful, or infringing material;
• probe, scan, attack, overload, or disrupt systems without authorisation;
• circumvent rate limits, authentication, authorisation, billing, or security controls;
• reverse engineer the service except where allowed by law;
• misrepresent ownership of certificates, domains, infrastructure, secrets, or access paths.

4. Customer Data and Security Responsibilities

You retain ownership of data, certificates, keys, secrets, configuration, logs, and other material you submit to CertLocker. You grant us the rights needed to host, process, secure, back up, transmit, and display that material for the purpose of providing the service.

CertLocker is operational security software, but it does not replace your responsibility to validate ownership, configure least-privilege access, rotate credentials, review audit events, maintain backups, and comply with your internal policies and legal obligations.

5. Plans, Billing, and Changes

Hosted plans, limits, pricing, and included features may vary by tier. Paid plans are billed according to the plan selected in the hosted application or agreed separately in writing. Taxes, payment processor fees, currency conversion, and bank charges may apply.

We may change features, limits, pricing, or availability over time. Where a change materially affects a paid subscription, we will use reasonable efforts to provide notice before the change takes effect.

6. Trials, Free Plans, and Evaluation Use

Free plans, trials, previews, beta features, and evaluation access may be limited, changed, suspended, or withdrawn. They are provided for review and testing unless we agree otherwise in writing.

7. Service Availability and Support

We aim to provide a reliable service, but we do not guarantee uninterrupted availability. Maintenance, outages, third-party failures, network issues, security incidents, or operational constraints may affect access. Support availability depends on your plan or written agreement.

8. Third-Party Services

CertLocker may integrate with third-party services such as certificate authorities, DNS providers, mail providers, payment processors, identity providers, infrastructure platforms, and monitoring tools. Your use of those services is governed by their own terms and policies.

9. Intellectual Property

CertLocker, including its software, website, documentation, design, trademarks, and service content, is owned by us or our licensors. These Terms do not transfer ownership of CertLocker intellectual property to you.

10. Confidentiality

Each party may receive non-public information from the other. The receiving party must use reasonable care to protect confidential information and use it only for purposes connected with CertLocker, except where disclosure is required by law or authorised in writing.

11. Disclaimers

CertLocker is provided on an "as is" and "as available" basis to the maximum extent permitted by law. We do not promise that the service will be error-free, uninterrupted, meet every requirement, or prevent every security incident, expiry, misconfiguration, or access issue.

12. Limitation of Liability

To the maximum extent permitted by law, we will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for loss of profits, revenue, goodwill, data, business opportunity, or business interruption. Our total liability for claims connected with CertLocker is limited to the amounts paid by you for the service in the twelve months before the event giving rise to the claim, or GBP 100 if you have not paid for the service.

13. Suspension and Termination

We may suspend or terminate access if you breach these Terms, create security or operational risk, fail to pay applicable fees, misuse the service, or if required by law. You may stop using CertLocker at any time. Data export and deletion options may depend on your plan, configuration, and legal retention requirements.

14. Changes to These Terms

We may update these Terms from time to time. The updated version will be posted on this page with a revised date. Continued use of CertLocker after an update means you accept the updated Terms.

15. Contact

Questions about these Terms can be sent to info@certlocker.io.