Terms of Service
Ferrule
1. These terms, and who they apply to
These terms cover your use of Ferrule, A metered, logged gateway through which a customer's agents perform actions in the customer's own connected tools, each one risk-scored by a model before it runs.. They are a contract between Ferrule, of Sveavägen 44, 6 tr, 111 34 Stockholm, Sweden (“Ferrule”, “we”) and the company that signs up (“Customer”, “you”).
The service is for businesses only, not consumers. By signing up you confirm that you are acting for your business and that you have the authority to commit your company.
The person who accepts these terms accepts them for the company, not for themselves. If you don’t have that authority, please don’t go ahead.
If documents disagree. This order applies: (1) a signed order form or agreement between us, (2) the data processing agreement, (3) these terms, (4) our Privacy Policy, (5) anything else on our website.
2. What the service is
Ferrule authorizes, prices, executes and records actions. Each action is scored by a risk classifier and quoted against the published rate card before it runs, and each one produces a log entry a customer can export.
3. What the service is not
These limits are deliberate, and they are part of what you are buying. They are not defects.
Not a planner. We do not plan or generate. An agent decides what to do; we are what it calls to do it. The models we run score risk and flag anomalies, and neither can make an action happen.
Not a memory. We keep no knowledge graph and no long-term picture of your work. Our records exist to prove what happened, not to inform what happens next.
Not an automation builder. There is no rule editor and no trigger canvas. Something else decides when to act; we are the thing that acts.
Not a monitoring agent. We hold no read credential we were not handed, and we run nothing against your tools on a schedule of our own. Anomaly detection reads the gateway's own log.
4. What you need to do, and why it matters
What you get from the service depends a lot on things only you control. Please read this section carefully, because sections 9 and 10 build on it.
Your credentials. You connect the tools and you own the grants. Revoking one in the third party's console is effective immediately whether or not you tell us.
Your agents. You are responsible for what your agents ask for. We enforce your limits and score each action's risk, and a score that lets an action through is not a judgment that it was a good idea.
Your spend limits. Per-agent and per-month ceilings are yours to set, and so is the risk ceiling. An action above a spend ceiling is refused rather than queued; an action above the risk ceiling is refused or held for the person you name.
Your people. You decide which humans may authorize an agent and which actions need a human on the request.
Lawful use. You may not use the gateway to reach a system you are not entitled to reach, whatever your agent proposes.
5. Getting started, and what is free
The first 10,000 actions are free and require no card. They are metered and logged the same way paid actions are, so the invoice you would have received is visible before you owe it.
6. Fees
Per action. €0.004 per executed action. A refused action, a rate-limited action and a failed third-party call are not charged.
No platform fee. There is no seat price, no minimum commitment and no annual prepayment. A month with no actions costs nothing.
Volume. Above two million actions in a month the rate falls to €0.0028, applied automatically and stated on the invoice.
What is never billed. Connecting a tool, revoking a grant, exporting a log and reading the metering record are not actions and carry no price.
7. Delivery, availability and support
Availability. 99.9% monthly, measured on gateway responses. A month below it is credited automatically against the next invoice.
Latency. Gateway overhead stays under 40ms at the 95th percentile, excluding the third-party call we are waiting on and the risk scoring, whose duration is recorded against each action in the log.
Export. Action logs and metering records export as JSONL and CSV at any time, including after termination.
Support. Support is by email at [email protected]. We aim to reply within one business day. That is a target, not a guarantee.
8. Records you can take with you
The action log. Every call, its risk score, its price, its authorizer, its result and its trace id, exportable for the full retention window.
The metering record. The billable line behind every invoice, itemised per agent and per connected tool.
The grant register. Which tools are connected, by whom, with what scope, and when each grant was last used.
9. What we promise, and what we don’t
We promise to provide the service with reasonable skill and care, and that we have the right to provide it.
We do not warrant the behavior of the third-party tools you connect. If a connected API changes its schema or refuses a call, the gateway reports that faithfully and does not pretend the action succeeded.
Beyond that we give no other warranty. As far as the law allows, we exclude all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.
10. Liability
10.1 Neither of us limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else the law says can’t be limited.
10.2 Losses neither of us covers. Neither of us is liable for lost profit, revenue, expected savings, business, goodwill or reputation, or for any indirect or consequential loss, however it arises.
10.3 Specific exclusions. We are not liable for what your agents decide to do, for business decisions taken on the strength of an action's result, or for loss arising from a credential you granted us and did not revoke.
10.4 Cap. Our aggregate liability is capped at the fees you paid us in the twelve months before the claim. Given the rate card that is a small number, and it is printed here rather than buried.
10.5 You accept that the limits in sections 9 and 10 are a fair way to share risk, given the price and your part under section 4, and that we could not offer the service at this price without them.
11. Confidentiality and data
Action payloads, responses and logs are your confidential information. We do not read them except to operate the service or when you ask us to help with an incident, and we do not use them to train anything. The risk classifier reads an action request to score it, under zero data retention, and keeps nothing.
How we handle personal data is set out in our Privacy Policy and in the data processing agreement between us, which forms part of these terms. If the DPA and these terms disagree about personal data, the DPA wins.
12. Who owns what
You own your data, your logs and anything your agents produce through the gateway. We own the gateway.
The rate card, the schema catalog and the documentation are ours and are published so that you can hold us to them.
You may not use our name or logo in public, and we may not use yours, without written permission first.
13. How long this lasts, and how it ends
13.1 The contract starts when you sign up and runs until one of us ends it.
13.2 You can end it. Cancel at any time. It takes effect at the end of the current billing month, unless section 6 sets a minimum term.
13.3 We can end it. We can end it with 30 days’ notice. We can end it immediately if you seriously break these terms and don’t fix it within 14 days of being told, if you become insolvent, or if your use exposes us to legal risk.
13.4 What happens then. We stop delivering and stop billing. You keep everything already delivered to you, and your right to use it continues. We delete or return our working copies as the DPA says. Sections 9, 10, 11 and 12 continue to apply.
14. Changes to these terms
We may update these terms. A change that matters takes effect 30 days after we email you about it. If you don’t accept it, you can end the contract before then. Using the service after that date means you accept the change.
15. Contact
Ferrule, Sveavägen 44, 6 tr, 111 34 Stockholm, Sweden
[email protected]