Legal
Terms of Service
Effective date: 15 January 2026
These Terms of Service ("Terms") govern your access to and use of the Pennrows platform operated by Pennrows Ltd ("Pennrows", "we", "us", or "our"). By registering, accessing, or using our services, you agree to these Terms.
1. Acceptance
By creating an account or using Pennrows, you confirm that you have authority to bind your organisation to these Terms, that you are at least 18 years of age, and that you accept these Terms in their entirety. If you do not agree, do not use our services.
2. Description of Service
Pennrows provides an AI-powered enterprise security platform that:
- Scans source code for vulnerabilities using reasoning AI (Claude), with findings, exploit scenarios, and remediation suggestions
- Monitors designated executive email accounts for phishing, business email compromise, and AI-generated threats via read-only access
AI-generated findings are advisory in nature and do not constitute guarantees of security. You remain responsible for your own security posture and remediation decisions.
3. Account Registration
You must provide accurate account information and keep it current. You are responsible for all activity under your account and for maintaining the confidentiality of your credentials. Notify us immediately of any unauthorised access.
4. Acceptable Use
You agree not to:
- Use the service for any unlawful purpose
- Scan code or monitor email you do not have rights to access
- Attempt to circumvent security controls or rate limits
- Resell or sublicense the service without our written consent
- Use the service to harm, harass, or infringe others' rights
5. Intellectual Property
Pennrows retains all rights in the platform, software, and documentation. You retain ownership of your code, data, and content. We process your code ephemerally and do not store raw source code. By using the service, you grant us a limited licence to process your data solely to provide the service.
6. Payment Terms
We offer three tiers:
- Pay As You Go: Usage-based billing; you are charged monthly for AI tokens consumed during scans.
- Business: Fixed monthly or annual fee with compliance features, SSO, and role-based team management.
- Enterprise: Custom pricing for organisations with advanced scale and compliance requirements.
Fees are due as invoiced. Failure to pay may result in suspension. Refunds are at our discretion unless required by law.
7. Data Processing
Our processing of personal data is governed by our Privacy Policy and Data Processing Agreement (DPA). Where you act as a data controller, our DPA applies. You can request a signed DPA at legal@pennrows.com.
8. Confidentiality
Each party agrees to keep the other's confidential information secure and to use it only for the purpose of these Terms. This obligation survives termination for five years.
9. Warranties & Disclaimers
We warrant that the service will perform materially in accordance with our documentation. EXCEPT AS EXPRESSLY STATED, THE SERVICE IS PROVIDED "AS IS". WE DISCLAIM ALL IMPLIED WARRANTIES INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. AI-generated findings are advisory and do not guarantee the absence of vulnerabilities.
10. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY LAW, OUR AGGREGATE LIABILITY FOR ANY CLAIMS ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE FEES PAID BY YOU IN THE TWELVE MONTHS PRECEDING THE CLAIM. NEITHER PARTY SHALL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES.
11. Indemnification
You agree to indemnify and hold Pennrows harmless from claims arising from your use of the service, your breach of these Terms, or your violation of any third-party rights.
12. Term & Termination
These Terms remain in effect while you use the service. You may terminate at any time from your account settings. We may suspend or terminate for breach, non-payment, or as required by law. Upon termination, your right to access the service ceases. Provisions that by their nature should survive (including confidentiality, indemnification, and limitation of liability) will survive.
13. Governing Law
These Terms are governed by the laws of England and Wales, without regard to conflict of law principles.
14. Dispute Resolution
Any dispute shall first be addressed through good-faith negotiation. If unresolved within 30 days, disputes shall be submitted to the exclusive jurisdiction of the courts of England and Wales.
15. General Provisions
These Terms constitute the entire agreement. We may amend them with notice; continued use after changes constitutes acceptance. If any provision is held invalid, the remainder remains in effect. Our failure to enforce any right does not waive that right.
Contact
For legal enquiries: legal@pennrows.com