Terms of service

1. Acceptance of terms

By accessing or using Veridu ("the Service"), you agree to be bound by these Terms of Service. If you do not agree, do not use the Service. These terms apply to all users, including individual accounts, organization members, and any automated agent (CLI, MCP client, or CI job) acting under a user's credentials.

2. Description of service

Veridu is a hosted multi-reviewer code review service. Users submit a public GitHub pull request URL; Veridu fetches the diff, dispatches it to two or more third-party AI reviewer models in parallel, reconciles the findings into agreements and disputes, and returns a structured result with a verdict. The Service is operated by T3 Interactive.

3. Accounts

You must provide a valid email address when registering. You are responsible for maintaining the confidentiality of your bearer token and for all activity performed under your account, including activity by any agent, CLI, MCP client, or CI job to which you have delegated your credentials. Notify us immediately if you suspect unauthorized access.

We reserve the right to suspend or terminate accounts that violate these terms, engage in abuse, or remain inactive for an extended period.

4. Acceptable use

You agree not to:

• Submit source code, patches, or repository contents that you do not own or that you are not authorized under a written license, employment agreement, or other lawful basis to disclose to the reviewer models listed in Section 8.
• Use the Service to review code that is subject to a nondisclosure agreement, government classification, HIPAA-covered health information, export-controlled material, or any other legal restriction inconsistent with disclosure to a US-based automated processing pipeline and its AI subprocessors.
• Submit content that contains secrets, credentials, API keys, private certificates, personally identifiable information not otherwise required by the code under review, or other material whose disclosure to a third-party AI vendor would create a legal or security incident. You are responsible for scrubbing such material from your diffs prior to submission.
• Use the Service to review malware, exploit code, or code designed to circumvent the security or safety controls of any system without the documented authorization of that system's owner.
• Attempt to circumvent free-tier quotas by rotating email addresses, using disposable inboxes, sharing an account across multiple users, or re-registering after a suspension.
• Reverse-engineer, scrape, or abuse the API in a manner that degrades service for other users, attempt to extract prompts or system instructions from the reviewer pipeline, or attempt to access data belonging to other accounts.
• Use the Service to generate content intended for harassment, defamation, or the harm of an identifiable third party, or to produce reviews attributed to Veridu that are then presented as a formal security audit, code certification, compliance attestation, or expert legal opinion.

We reserve the right to suspend or terminate accounts, void unused review attempts, and refuse processing for any submission that violates this section, with or without prior notice and without refund of fees paid for the affected processing.

5. Your content

You retain ownership of all source code, diffs, pull requests, comments, and other content you submit to the Service ("Your Content"). By submitting Your Content, you grant T3 Interactive a limited, non-exclusive, royalty-free, worldwide license to fetch, host, transmit, process, and analyze Your Content solely to provide the Service to you and to any organization members you have designated as collaborators on the affected review.

You represent and warrant that, with respect to each submission:

• you have the right to submit the referenced pull request and its underlying diff to the Service and to the reviewer subprocessors listed in Section 8;
• the content does not infringe any third party's intellectual property, confidentiality, or contractual right;
• the content does not contain secrets, credentials, or private data of a kind whose disclosure to an AI subprocessor would constitute a security or compliance incident; and
• you will not instruct the Service to perform any analysis that would result in a violation of the clauses above.

We do not use Your Content to train AI models. We do not share Your Content with any third party except (i) the reviewer subprocessors and hosting subprocessors listed in Section 8 and the Data Handling page and (ii) where disclosure is compelled by law or a valid legal process.

6. Intellectual property in the Service

The Service, including its software, prompts, discovery pipeline, reconciliation logic, design, and documentation, is owned by T3 Interactive and protected by intellectual property law. You may not copy, modify, or distribute any part of the Service without written permission. Findings produced by the Service and returned to your account are yours to use in your development workflow, subject to the limitations in Section 9.

7. Free tier, review attempts, and billing

Each account is provisioned with a lifetime allocation of free-tier review attempts. A "review attempt" is defined as one invocation of the reviewer pipeline against one pull request URL, whether initiated through the web app, the CLI, the MCP tool, or the HTTP API. Re-running a review against a force-pushed or updated commit consumes a new attempt. Attempts consumed against a submission that fails validation (invalid URL, private repo not supported, quota exhausted) are not charged.

Paid plans, when introduced, will be billed in advance on a monthly or annual cycle. All fees will be non-refundable except where required by law. We reserve the right to change pricing with at least 30 days' notice; continued use after a price change constitutes acceptance. If a payment fails, access to paid features may be suspended until the balance is resolved.

8. Third-party subprocessors

The Service transmits Your Content to third-party AI vendors to perform review. The current reviewer subprocessors are:

• OpenAI, L.L.C. - reviewer model provider.
• Anthropic, PBC - reviewer model provider.

Each vendor publishes its own API data-handling policy governing retention and training use of API traffic. Under the vendors' current published policies, neither vendor uses API traffic for training. If a user selects additional or alternative reviewer models on a paid plan, that selection routes Your Content to the corresponding vendor and extends the license in Section 5 to that vendor for the duration of the review.

Hosting, storage, email, and observability subprocessors are listed on the Data handling page. That page is incorporated into these terms by reference.

9. Review outputs are advisory

Findings, agreements, disputes, and verdicts returned by the Service are the output of automated AI reviewers and are provided for informational purposes only. They are not a security audit, penetration test, code certification, compliance attestation, formal verification, fitness-for-purpose determination, or legal opinion. Reviewer models may produce incorrect, incomplete, hallucinated, or misleading findings, including findings that reference files, lines, or symbols that do not exist.

You are solely responsible for evaluating each finding on its merits before acting on it, for merging or not merging any pull request under review, and for the correctness, security, and licensing of code you ship. The "PASS", "REVIEW OPTIONAL", "HUMAN REVIEW REQUIRED", and "CONTEXT" verdicts are reconciliation signals, not warranties.

10. Disclaimer of warranties

The Service is provided "as is" and "as available" without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, non-infringement, and any warranty arising out of course of dealing or trade usage. We do not warrant that the Service will be uninterrupted, timely, secure, or error-free, or that reviewer output will be accurate.

11. Limitation of liability

To the maximum extent permitted by law, T3 Interactive shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, use, goodwill, or other intangible loss, arising from or related to your use of the Service, including any loss resulting from reliance on reviewer output. Our aggregate liability for any claim arising from these terms or the Service shall not exceed the greater of (i) the amounts paid by you to us in the twelve months prior to the event giving rise to the claim, or (ii) one hundred United States dollars.

12. Indemnification

You will defend, indemnify, and hold harmless T3 Interactive, its officers, employees, and subprocessors from and against any claim, demand, loss, or damage (including reasonable attorneys' fees) arising out of or related to (a) Your Content, (b) your violation of these terms, or (c) your violation of any third-party right by way of your use of the Service.

13. Termination

You may terminate your account at any time by requesting account deletion from the account settings page (or by emailing the address in Section 15 while self-service deletion is being finalized). We may suspend or terminate your access to the Service at any time for violation of these terms, for non-payment of a paid plan, or for any reason on at least 30 days' notice. Sections 5 (Your Content, to the extent of your representations and warranties), 6, 9, 10, 11, 12, and 14 survive termination.

14. Changes to these terms and governing law

We may update these terms from time to time. We will notify you of material changes by email or in-app notice at least 14 days before the changes take effect. Continued use of the Service after that period constitutes acceptance of the revised terms. These terms are governed by the laws of the State of New York, United States, without regard to conflict of law principles. Any dispute arising out of or related to these terms or the Service will be brought exclusively in the state or federal courts located in New York County, New York, and you consent to the jurisdiction of those courts.

15. Contact

Questions about these terms? Email legal@veridu.io. For data-handling questions, see the Data handling page.