1. Access Grant & Endpoint Agent License
Subject to an executed Order Form and timely payment of applicable subscription fees, DeviceTrust Inc. (“DeviceTrust”) grants Customer a non-exclusive, worldwide, non-transferable right during the Subscription Term to access the DeviceTrust cloud control plane and deploy the signed DeviceTrust endpoint agent across Customer’s authorized workforce and contractor fleet.
2. Customer Data Ownership
Customer retains all right, title, and interest in and to all endpoint posture records, custom SQL check definitions, identity federation claims, and audit logs submitted by or on behalf of Customer (“Customer Data”). DeviceTrust never sells Customer Data or uses Customer Data to train machine-learning models shared across unrelated tenants.
3. Service Level Agreement (SLA)
DeviceTrust commits that its OIDC and SAML 2.0 authentication posture assertion endpoints will maintain a Monthly Uptime Percentage of at least 99.95% on Business plans and 99.99% on Enterprise plans. Furthermore, Customer may configure fail-open or cached-attestation grace policies inside Okta, Microsoft Entra ID, or Google Workspace to ensure uninterrupted workforce sign-in continuity.
4. Acceptable Use Restrictions
Customer shall deploy the DeviceTrust agent solely on endpoints owned by Customer or operated by authorized personnel and contractors with transparent notice. Customer may not reverse engineer proprietary cloud orchestration components, conduct uncoordinated load testing against shared multi-tenant endpoints, or use the platform to process unlawful surveillance data.
5. Security Incident Notification
DeviceTrust maintains an ISO/IEC 27001:2022 certified security program and will notify Customer without undue delay, and in no event later than 48 hours, upon confirming any unauthorized access to Customer Data stored within the DeviceTrust control plane.
6. Legal Notices
Contractual notices, redline requests for enterprise Order Forms, and Data Processing Addendum countersignatures may be sent to legal@devicetrustportal.com.