Terms of Service

Last updated: 13 July 2026

These terms (the "Terms") form the agreement between the provider identified in Section 1 ("TerraSov", "we", "us") and the person or company placing an order ("you", the "Customer") for access to the TerraSov subscription service. By placing an Order you accept these Terms.

1. Provider identity

The service is provided by Héctor Cruz Aranda, a sole trader (trabajador autónomo) established in Spain, operating under the trade name TerraSov. Contact: support@terrasov.dev. Further provider details required by Spanish law are published in the imprint.

2. The service

TerraSov provides subscription access to a private GitHub repository (the "Library") containing: hardened Terraform modules for AWS, a custom Checkov policy pack, the terrasov-gate CI workflow, and per-framework auditor evidence documentation. Access includes all releases of the Library published while your subscription is active.

The Library is delivered as source code through GitHub. You are responsible for the environment in which you run it, including your AWS accounts and CI systems.

3. Ordering and billing

Orders are processed by Paddle.com Market Ltd or Paddle Payments Ltd (together, "Paddle"), acting as merchant of record. Paddle is the seller of record for your purchase: it charges you, collects and remits applicable VAT or other transaction taxes, and issues your invoice. Paddle's buyer terms govern the payment transaction itself; these Terms govern your use of the Library.

Prices are as displayed on the pricing page at the time of the Order, exclusive of VAT. VAT is calculated and added by Paddle at checkout based on your country and, where applicable, your VAT ID.

4. License

While your subscription is active, we grant you a non-exclusive, non-transferable, worldwide license for the benefit of one legal entity — the company (or sole trader) named at checkout (your "Organisation") — to use the Library to build, deploy and operate infrastructure for that Organisation. Anyone working within your Organisation may work with the Library internally; direct repository access is limited to the engineer accounts in your plan (Section 5).

Using the Library to deliver services to other organisations — for example as a consultancy, agency or managed service provider running the Library across client engagements — requires a Consultancy plan agreed with us in writing: support@terrasov.dev. Infrastructure you have already deployed for a client remains the client's, regardless of plan.

You may not, and may not permit any third party to:

• redistribute, resell, sublicense, publish or otherwise make the Library, the policy pack or the evidence documentation available to anyone outside your Organisation;
• use the Library to create a product or library that competes with it; or
• remove or circumvent license or access controls.

Infrastructure you have deployed using the Library remains yours and is not affected by cancellation or expiry of your subscription. What ends with the subscription is access to the Library source, updates, policies and evidence documentation.

5. Engineer accounts and plan eligibility

An "engineer account" is one named GitHub account with read access to the Library. The Startup plan includes 5 engineer accounts; the Company plan includes 15. Accounts are assigned on the activation page and may be reassigned to replace a team member a reasonable number of times (fair use). If you need more accounts than your plan includes, contact support@terrasov.dev.

The Startup plan is available to Organisations with up to 20 employees (including contractors working for the Organisation). Larger Organisations require the Company plan. We may ask you to move to the appropriate plan at the next renewal if your Organisation has outgrown its current one.

6. Term, renewal and cancellation

Subscriptions run annually and renew automatically at the end of each period unless cancelled. You can cancel at any time through the link in your Paddle receipt email or by contacting support@terrasov.dev.

Cancellation takes effect at the end of the current paid period. Access to the Library continues until the end of that period plus a 7-day grace window, after which repository access is revoked automatically.

7. Refunds and withdrawal

Refunds, the EU consumer right of withdrawal and how to exercise it are set out in the Refund & Cancellation Policy, which forms part of these Terms.

8. Acceptable use

You must not:

• use the Library or the service in violation of applicable law;
• attempt to gain access to Library content beyond your assigned engineer accounts, or probe, interfere with or disrupt the systems that deliver the service; or
• remove, alter or obscure proprietary notices or license controls.

We may suspend access on material breach of this section or of Section 4, after notice where practicable.

9. Intellectual property

The Library — including module source, the policy pack, workflows, control annotations and evidence documentation — and the TerraSov name and marks are and remain the property of the provider. These Terms grant the license in Section 4 and no other rights. Feedback you choose to provide may be used to improve the service without obligation to you.

10. No compliance guarantee

The Library implements technical controls and documents their mapping to ISO 27001:2022, BSI C5:2020, ENS and GDPR. It does not by itself make your organisation certified or compliant, and does not constitute legal advice. Certification decisions belong to your auditor or certification body.

11. Warranties and liability

The Library is provided "as is" and "as available", without warranties of any kind beyond those that cannot be excluded by law, including any implied warranty of merchantability, fitness for a particular purpose or non-infringement.

To the extent permitted by law, our aggregate liability arising out of or in connection with these Terms is limited to the fees you paid for the service in the 12 months preceding the event giving rise to the claim, and neither party is liable for indirect or consequential loss, loss of profits or loss of data.

Nothing in these Terms excludes or limits liability that cannot be excluded or limited under Spanish law, including liability for wilful misconduct (dolo) or for death or personal injury caused by negligence, nor does anything in these Terms restrict the statutory rights of consumers.

12. Changes to these Terms

We may amend these Terms. For material changes we will give at least 30 days' notice by email to the address associated with your subscription before the change takes effect. If you do not accept a material change, you may cancel before it takes effect; continued use after the notice period constitutes acceptance. The date at the top of this page reflects the latest revision.

13. Governing law and venue

These Terms are governed by Spanish law. Disputes are subject to the jurisdiction of the Spanish courts. If you are a consumer, this does not deprive you of the protection of mandatory provisions, or of the competent courts, of your country of habitual residence.