Terms and Conditions — AAA Sentinel

1. Purpose

These Terms and Conditions govern access to and use of the AAA Sentinel platform (hereinafter "the Platform"), offered by Yenia Roman Bu as a natural person until the company that will provide it is incorporated (contact: compliance@aaa-sentinel.com), a multi-cloud SaaS for FinOps, account posture and AI-spend governance on Amazon Web Services (AWS), Microsoft Azure, Google Cloud Platform (GCP) and, if you connect them, AI-provider APIs. The provider’s details, including tax ID and address, are in the Legal notice.

2. Acceptance

By registering and using the Platform, you accept these Terms in their entirety. If you disagree, you must not use the service. Continued use after any modification implies acceptance of the updated terms. The Platform is intended exclusively for businesses and professionals: by registering you declare that you contract it for your business or professional activity and not as a consumer.

3. Registration and account

You must provide accurate information and keep your access credentials secure.
You are responsible for all activity carried out under your account.
You must immediately notify us of any unauthorized use at compliance@aaa-sentinel.com.
We reserve the right to suspend accounts that breach these Terms.

4. Free trial, plans and pricing

When you create an account you get a 30-calendar-day free trial with all the features of the Pro plan, with no payment details required. The trial is one per organization: it does not restart or renew. During the trial a limit of 2 scans a day per account applies, including the automatic one. If the 30 days end without a plan being contracted, the organization moves to the Free plan, with no expiry date: one cloud account, one user, 3 scans a week, 7 days of history, up to 10 findings and 3 monitors; no alerts, no AI spend tracking, no API and no security add-on. Anything generated during the trial beyond those limits remains viewable and exportable. A paid subscription that is cancelled switches to read-only mode at the end of the paid period, as set out in section 6. The available paid plans are:

Pro (€49/month): 5 cloud accounts included (+€5/extra account), 1 AI connection included (+€10/extra connection), 2 daily scans per account, detection rules, advanced reports, read-only API access (150,000 requests/month included, overage at €10/100,000 extra requests). Posture add-on: €20/month per activated account. The add-on is not part of the free trial.
Business (€249/month): 20 accounts included (+€10/extra), 10 MSP clients and 10 team members included (+€10/extra unit), 5 AI connections included (+€10/extra), agent with optional write actions if you grant the write role, full API (1,500,000 requests/month included, same overage), same posture add-on at €20 per activated account.

The €49 and €249 amounts (and published extras) are what we charge, taxes included. Stripe may show billing locale details on your Stripe account; AAA Sentinel does not add a tax surcharge on those amounts.

Launch price: anyone who confirms their waitlist sign-up before 15 January 2027 receives by email, on opening day, a code giving a 20 % discount on a Pro or Business subscription for its first 12 months. The code is entered on the Stripe payment page and cannot be combined with other codes.

5. Billing and payments

Billing is monthly and processed via Stripe.
Additional charges (extra accounts, extra clients, extra members, extra AI connections and the posture add-on per activated account) are calculated on a pro-rata basis.
If payment fails, we will notify you by email. After 7 days without payment being settled, the account will switch to read-only mode.
We do not offer refunds for partially consumed periods, with the sole exception of the savings guarantee in the next point.
Savings guarantee. If, during the 60 calendar days following the first payment of a Pro or Business plan, the highest monthly potential savings detected by a scan, summed across the connected accounts, does not reach the lower of these two amounts: ten times the monthly fee of the base plan, or 10 % of the analysed monthly spend, the customer may request through support, until day 75 from that first payment, a refund of the fees invoiced in that period. Conditions: at least one cloud account connected and scanned on 30 distinct days within the period, and an analysed monthly spend of at least €100. The guarantee applies once per organization; after the refund the organization moves to the Free plan. What is measured is the potential savings detected, not the savings achieved nor the actions the customer decides to run.

6. Cancellation, retention and deletion

You may cancel your subscription at any time from the billing panel.
Cancellation takes effect at the end of the billing period already paid; the account then switches to read-only mode.
We will retain your data for 3 months from the moment the account becomes read-only — whether through cancellation or the end of the trial — so that you can export it or reactivate the service without reconfiguring it.
During that period we will keep the read-only roles and credentials for your cloud accounts active, to allow reactivation without reconnecting them. You may disconnect them yourself at any time from the Platform.
After 3 months without reactivation, we will revoke that access and securely delete your credentials, results, history and your team’s users. We will notify you by email before proceeding. Billing data and security logs are excluded, being subject to the legal retention periods stated in the Privacy Policy.
Deleting the organization: the owner can delete it from their profile. The subscription is cancelled at that moment, with no further charges and no refund of the current period, and the organization becomes read-only. They have 14 days to cancel the deletion; after that we permanently delete its data and the users of the whole team, with the same billing and security exceptions.
A member leaving: when a member leaves the team or the owner removes them, their user is deleted immediately, unless they belong to another organization or own one with data. The organization’s data is not affected.
The owner can download the organization’s data at any time from their profile, as JSON and without credentials or secrets.
There is no minimum commitment or cancellation penalty.

7. Cloud account access

To analyze cost, posture and, if you connect them, AI APIs, the Platform needs read-only access by default to your accounts:

AWS: a read IAM role with ViewOnlyAccess and SecurityAudit (we read metadata and configuration, not the content of your data: no data in your databases and no Secrets Manager or Parameter Store values; the configuration of functions (Lambda, Cloud Functions, Cloud Run) includes the values of their environment variables, which we do not store), Cost Explorer and Pricing; plus only reading your FOCUS export files and, if you turn on monitoring flows, searching your logs for traces. Deployed with CloudFormation and a unique ExternalId. We do not ask for an organization-admin role.
Azure: Service Principal with Reader on the selected subscriptions.
GCP: Service Account with Viewer; the key is stored encrypted with AWS KMS.
AI providers: API keys you paste, encrypted at rest, used to read spend and governance; we do not use those keys to train models.

Agent write actions (Business plan) are optional: they exist only if you grant a write role, and each action goes through a configurable approval flow. A posture scan or a recommendation does not mean we close the finding or certify ISO or any other framework.

8. Acceptable use

You agree not to:

Use the Platform for illegal or unauthorized purposes.
Attempt to access other users' or tenants' data.
Reverse engineer, decompile or disassemble the Platform.
Intentionally overload the infrastructure (DoS, mass scraping).
Resell or redistribute the service without written authorization.
Share access credentials or API keys with unauthorized third parties.
Create multiple accounts for the purpose of chaining free trials and circumventing the trial period limits. We reserve the right to suspend the accounts involved.

9. Intellectual property

The Platform, including its code, design, brand, detection rules and AI models, is the exclusive property of AAA Sentinel. Your subscription grants you a limited, non-exclusive, non-transferable license to use it.

The data from your cloud accounts and generated reports are your property. You may export them at any time.

10. Availability and SLA

We strive to maintain 99.9% availability, although we do not guarantee a formal SLA during the trial period or on the Pro plan.
The Business plan includes priority support with a response time of less than 24 business hours.
We perform scheduled maintenance outside European business hours and notify at least 48 hours in advance.

11. Limitation of liability

The Platform issues cost recommendations, posture findings and AI-governance output from data and automated analysis. We do not guarantee specific savings, that a finding will be closed, or any certification. We are not responsible for decisions you make based on those recommendations.

In no event shall our total liability exceed the amount paid by the user in the last 12 months.

We are not responsible for indirect damages, loss of profits, business interruption or data loss resulting from the use or inability to use the Platform.

12. Modifications

We reserve the right to modify these Terms. We will notify substantial changes by email with at least 30 days' notice. Continued use after modification implies acceptance.

13. Governing law and jurisdiction

These Terms are governed by Spanish law, including Law 34/2002 on information society services and electronic commerce (LSSI). The processing of personal data is also governed by the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018. For any dispute, the parties submit to the courts of Toledo (Spain).

14. How the contract is concluded

In accordance with article 27 of the LSSI, this is how the contract is concluded:

Steps: you create the account and confirm your email; you use the trial without payment details; to subscribe, you choose the plan in the Platform and complete payment on Stripe’s secure page, which shows the plan, price and billing period before you confirm.
Correcting errors: until you confirm the payment on Stripe you can review and correct the data entered, or go back without being charged.
Contract document: the contract is these Terms together with the DPA. We record the version you accept and the date. The current version is always on this page, where you can save or print it; if you need the version you accepted, ask compliance@aaa-sentinel.com.
Languages: you can contract in Spanish, English, French or Portuguese. If the versions differ, the Spanish version prevails.
Confirmation: once payment is complete, the Platform shows the confirmation of the subscription on screen.

15. Contact

For any queries about these Terms: compliance@aaa-sentinel.com