Terms of Service

1. Agreement and order of precedence

These Terms govern access to and use of the Nahar website, platform, software, documentation, and related products and services (collectively, the "Services").

The Services may be purchased under an order form, statement of work, or other written agreement executed by Customer and Nahar (each, an "Order Form"). Each Order Form is incorporated into these Terms. In the event of a conflict, the Order Form will control with respect to its subject matter, followed by these Terms.

2. Eligibility and authority

You must be at least 18 years of age and legally capable of entering into a binding agreement to use the Services. If you use the Services on behalf of an organization, references to Customer include that organization.

Customer is responsible for ensuring that its employees, contractors, and other users authorized to access the Services (collectively, "Authorized Users") comply with these Terms.

3. The Services

Nahar lets humans and agents collaborate on security work: investigating, planning, and remediating.

The features, usage rights, subscription term, support, and other commercial terms applicable to Customer are specified in the applicable Order Form. Nahar may modify and improve the Services from time to time.

4. Access rights and accounts

Subject to Customer's compliance with the Agreement, Nahar grants Customer a limited, non-exclusive, non-transferable, non-sublicensable right during the applicable subscription term to permit its Authorized Users to access and use the Services solely for Customer's internal business purposes.

Customer is responsible for all activity occurring through its accounts and for maintaining the confidentiality and security of its account credentials. Customer will maintain accurate account information, implement appropriate authentication controls, and promptly notify Nahar at connor@usenahar.com of any suspected unauthorized access to or use of the Services.

5. Customer systems, integrations, and credentials

The Services may permit Customer to connect third-party systems, applications, or services ("Connected Services"). Customer represents and warrants that it has all rights, permissions, and lawful bases necessary to connect each Connected Service and authorize Nahar to access and process information made available through that connection.

Customer controls the scope of credentials and permissions granted to Nahar and is responsible for configuring such credentials and permissions appropriately. Nahar will use connection credentials solely as necessary to provide, secure, maintain, support, and troubleshoot the applicable connection.

Connected Services are governed by the applicable third party's terms and privacy practices. Nahar does not control and is not responsible for the availability, functionality, modification, or acts or omissions of a Connected Service.

6. Customer Data, Inputs, and Outputs

"Customer Data" means data, content, records, prompts, instructions, files, credentials, and other information submitted to the Services by or on behalf of Customer, accessed through a Customer-authorized connection, or generated for Customer through use of the Services. "Input" means information submitted to an artificial intelligence feature, and "Output" means information generated by such feature in response to an Input.

As between the parties, Customer retains all right, title, and interest in and to Customer Data and Inputs. Customer grants Nahar a limited, non-exclusive right to host, copy, transmit, process, and otherwise use Customer Data and Inputs solely as necessary to provide, secure, maintain, and support the Services, perform Nahar's obligations under the Agreement, and comply with applicable law.

To the extent permitted by applicable law, as between the parties, Customer owns Output generated for Customer from its Input.

Nahar may collect and use aggregated or de-identified information derived from operation of the Services, provided that such information does not reasonably identify Customer, an Authorized User, or a Connected Service.

7. Agent permissions and approvals

Customer controls the systems and information agents may access, the tools agents may use, and the Authorized Users permitted to initiate or approve work.

The Services are designed to require approval by an Authorized User before a proposed agent action is transmitted to a Connected Service. Customer is responsible for reviewing proposed actions and for all decisions, approvals, and instructions provided by its Authorized Users.

8. Acceptable use

Customer will not, and will not permit any Authorized User or third party to:

• Use the Services in violation of applicable law or the rights of any person.
• Connect any system, submit any information, or use any credential without sufficient authorization.
• Probe, scan, test, attack, or otherwise interfere with the security, integrity, or operation of the Services, except pursuant to a security-testing program expressly authorized by Nahar in writing.
• Circumvent or disable any access control, usage restriction, approval requirement, or security measure.
• Reverse engineer, decompile, disassemble, copy, or otherwise attempt to derive the source code or underlying components of the Services, except to the extent a restriction is prohibited by law.
• Sell, resell, sublicense, distribute, or otherwise make the Services available to a third party except as expressly authorized in an Order Form.
• Upload malicious code or use the Services in a manner that materially degrades or disrupts the Services for others.

Nahar may restrict access to the Services as reasonably necessary to enforce these Terms, protect the Services or Connected Services, or comply with applicable law.

9. Confidentiality

"Confidential Information" means non-public information disclosed by or on behalf of one party (the "Disclosing Party") to the other party (the "Receiving Party") that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and circumstances of disclosure. Customer Data constitutes Customer Confidential Information.

The Receiving Party will: (a) use Confidential Information solely to perform its obligations or exercise its rights under the Agreement; (b) protect Confidential Information using at least the same degree of care it uses to protect its own information of a similar nature, and no less than reasonable care; and (c) disclose Confidential Information only to personnel, contractors, and advisers who have a need to know and are bound by confidentiality obligations.

Confidential Information does not include information that the Receiving Party can demonstrate: (a) is or becomes publicly available without breach of the Agreement; (b) was lawfully known without restriction before receipt; (c) is received lawfully from a third party without a duty of confidentiality; or (d) is independently developed without use of the Confidential Information.

The Receiving Party may disclose Confidential Information to the extent required by law, provided that, where legally permitted, it gives the Disclosing Party prior notice and reasonable assistance in seeking confidential treatment.

10. Security and privacy

Nahar will maintain reasonable technical and organizational safeguards designed to protect Customer Data against unauthorized access, acquisition, loss, misuse, alteration, and disclosure. Customer is responsible for securing its own systems, accounts, endpoints, and credentials.

Nahar's Privacy Policy describes how Nahar processes Personal Information as an independent controller or business. To the extent Nahar processes Personal Information contained in Customer Data on behalf of Customer, Nahar will process such information in accordance with Customer's documented instructions and the Agreement.

11. Nahar intellectual property

Nahar and its licensors retain all right, title, and interest in and to the Services, including all software, interfaces, documentation, models, methods, designs, improvements, modifications, and related intellectual property rights. Except for the limited access rights expressly granted under the Agreement, no rights are granted to Customer by implication, estoppel, or otherwise.

12. Disclaimers and allocation of risk

Any warranties, service levels, indemnification obligations, limitations of liability, and other negotiated allocations of risk set forth in an applicable Order Form will govern.

Except as expressly provided in the Agreement and to the maximum extent permitted by law, the Services are provided “as is” and “as available,” and Nahar disclaims all implied warranties.

13. Term and termination

The subscription term, renewal, suspension, termination, and the consequences of termination will be governed by the applicable Order Form. These Terms remain in effect for so long as Customer accesses or uses the Services.

Provisions that by their nature should survive termination will survive, including provisions concerning ownership, confidentiality, disclaimers, and general terms.

14. Changes to these Terms

Nahar may update these Terms from time to time to reflect changes in the Services or applicable law. Nahar will provide notice of material updates as required by applicable law.

15. General

Governing Law; Venue. The Agreement and any dispute arising out of or relating to it are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. The state and federal courts located in Delaware will have exclusive jurisdiction, and each party irrevocably consents to the personal jurisdiction and venue of such courts.

Force Majeure. Neither party will be liable for delay or failure to perform caused by circumstances beyond its reasonable control, except for payment obligations.

Notices. Notices must be in writing and may be delivered by email to the business contact identified in the applicable account or Order Form. Legal notices to Nahar must be sent to connor@usenahar.com.

Entire Agreement; Severability; Waiver. The Agreement constitutes the entire agreement between the parties concerning the Services and supersedes prior or contemporaneous communications concerning its subject matter. If any provision is held unenforceable, it will be modified to the minimum extent necessary and the remaining provisions will remain in effect. Failure to enforce a provision is not a waiver.

Relationship; Third-Party Beneficiaries. The parties are independent contractors. The Agreement does not create a partnership, franchise, joint venture, agency, fiduciary, or employment relationship. There are no third-party beneficiaries.

16. Contact

Questions concerning these Terms may be directed to: