Terms of service

Effective October 30, 2026

These terms are an agreement between Neftali Zarazua, doing business as AkraID, a sole proprietorship based in Omaha, Nebraska ("AkraID", "we", "us") and the company or organization that uses AkraID ("Customer", "you"). By signing an order, starting a pilot, or using the service, you agree to them. If you're accepting for a company, you confirm you're authorized to bind it. If you've signed a separate written agreement or order form with us, it takes precedence where it conflicts with these terms.

1. The service

AkraID is a hosted service for reviewing and removing user access to applications managed in your identity provider, and for producing evidence of those reviews (the "Service"). We may improve and change the Service over time, but we won't materially reduce its core functionality during a paid term.

Pilots. Free pilots and trials are provided as-is, for evaluation, for the period we agree, and either of us can end them at any time.

2. Your account and responsibilities

You're responsible for who you give access to AkraID, for the permissions you grant AkraID in your identity provider, and for activity under your account.
You make the access decisions. AkraID flags access based on rules you can configure and carries out the decisions your reviewers make. You're responsible for those decisions, including access removed or kept as a result. We recommend testing automatic removals before enabling them broadly.
Control mappings, risk flags and evidence packs are tools to help you. They're not legal, audit or compliance advice, and whether a review satisfies a particular requirement is for you and your auditor to decide.
You confirm you have the rights and notices needed for us to process the data you connect.

3. Acceptable use

You won't: use the Service for anything unlawful; try to access another customer's data or test the Service's security without our permission; interfere with or overload the Service; reverse engineer it except where the law allows; or resell it without our written agreement.

4. Your data

You own the data you connect to or create in AkraID ("Customer Data"). You give us permission to host, process and display it only as needed to provide, secure and support the Service for you. We don't sell Customer Data, use it for advertising, or use it to train AI models. Our privacy policy describes how we handle personal information. If you need a data processing agreement, ask us and we'll provide one.

5. Security

We use reasonable technical and organizational measures to protect Customer Data, as described on our security page. If we become aware of unauthorized access to your Customer Data, we'll notify you without undue delay and share what we know.

6. Fees and payment

Fees are based on the number of active people in your identity provider, at the prices on our pricing page or in your order. Monthly plans are billed monthly for that month's count. Annual plans are billed yearly in advance.
Invoices are due within 30 days. Fees don't include taxes, which you're responsible for (other than taxes on our income).
If an invoice is more than 30 days overdue, we may suspend the Service after giving you at least 10 days' written notice.
We may change prices with at least 30 days' notice. Changes apply from your next billing period, and never in the middle of a prepaid annual term.
Prepaid fees aren't refundable, except as stated in section 7.

7. Term, cancellation and termination

Monthly plans renew each month until canceled. Cancellation takes effect at the end of the current month.
Annual plans renew for another year unless either of us gives notice at least 30 days before the renewal date.
Either of us may terminate if the other materially breaches these terms and doesn't fix the breach within 30 days of written notice. If you terminate for our uncured breach, we'll refund any prepaid fees for the remaining term.
When the agreement ends, you'll have 30 days to export your evidence packs and audit trail. After that, we'll delete your Customer Data, with backup copies removed as they expire.

8. Confidentiality

Each of us will keep the other's non-public information confidential, use it only for this agreement, and protect it with at least reasonable care. This doesn't apply to information that's public through no fault of the recipient, already known to it, independently developed, or rightfully received from someone else. Either of us may disclose confidential information if the law requires it, after giving notice where allowed.

9. Warranties and disclaimers

We'll provide the Service with reasonable skill and care. Apart from that, and to the extent the law allows, the Service is provided "as is", and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. We don't promise the Service will be uninterrupted or error-free, or that it will detect every risky grant of access.

10. Limitation of liability

To the extent the law allows: (a) neither of us is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if told they were possible; and (b) each party's total liability arising out of or relating to these terms is limited to the fees you paid us in the 12 months before the event giving rise to the claim. These limits don't apply to your payment obligations or to liability that can't be limited by law.

11. Suspension

We may suspend access immediately if needed to prevent harm to the Service, other customers or the public, or if required by law. We'll tell you why and restore access as soon as the problem is resolved.

12. Changes to these terms

We may update these terms. We'll post the new version with a new effective date and, for material changes, email customers at least 30 days in advance. Changes don't apply to a prepaid annual term already underway unless you agree.

13. General

Governing law. These terms are governed by the laws of the State of Nebraska, without regard to conflict-of-law rules. The state and federal courts located in Douglas County, Nebraska have exclusive jurisdiction.
Assignment. Neither of us may assign this agreement without the other's consent, except to a successor in a merger, acquisition or sale of the business, with notice.
Publicity. We won't name you as a customer without your permission.
Notices. Notices to us go to hello@akraid.com. Notices to you go to the email of your account admin.
Everything else. These terms, with any order form, are the whole agreement on this subject. If a provision is unenforceable, the rest still applies. Not enforcing a provision isn't a waiver. Neither of us is liable for delays caused by events beyond reasonable control.

14. Contact

AkraID, Omaha, Nebraska, United States. hello@akraid.com