Terms of Service | BlackShield

Commercial framework

Terms for an Irish-operated security SaaS, with explicit shared responsibility.

BlackShield is delivered by Chaplau as a business security platform, not a consumer app. These terms are meant to explain how the company operates the managed service, what customers control inside their own environments, and where both sides share responsibility for secure and effective use.

Effective date

March 18, 2026

Last updated

March 18, 2026

Operator

Chaplau, Ireland

BlackShield is operated as an Irish business for commercial, privacy, support, and customer contracting matters.

Service type

B2B security SaaS

The service aggregates security findings, asset context, and remediation workflows for business customers and authorized operators.

Default hosted region

AWS us-east-1

The managed control plane is delivered from AWS us-east-1, with dedicated EU regional storage partitions in eu-west-1 and ap-south-1 and us-west-1 and ap-southeast-2 and ca-central-1 and sa-east-1 and eu-central-1 and us-east-2 and us-west-2 and eu-west-2 and eu-west-3 and eu-north-1 and ap-southeast-1 and ap-northeast-1 and ap-northeast-2 and ap-northeast-3 available for strict residency compliance.

Primary contract path

Order form plus platform terms

Commercial specifics such as plan, price, invoicing, DPA, and enterprise security addenda are finalized in the applicable commercial documents.

Shared responsibility model

BlackShield responsibilities

Operate the hosted service, authentication controls, tenant isolation, logging, and managed infrastructure hardening for the SaaS control plane.
Protect managed data stores with encryption, access controls, and platform-level monitoring and incident response workflows.
Maintain the product, core integrations, and trust-review materials that support customer due diligence.

Customer responsibilities

Approve users, manage tenant roles, protect credentials and API keys, and decide which assets, environments, or repositories are in scope for scanning.
Supply and govern Bring-Your-Own-Key (BYOK) credentials when enabling upstream AI Gateway model providers (OpenAI, Anthropic, Azure OpenAI, Google, Groq, Mistral) and alerting webhooks.
Harden customer-owned identities, endpoints, scanners, cloud accounts, and external systems connected to the platform.
Review findings, make remediation decisions, and validate that any operational action is appropriate for the customer's environment and risk tolerance.

Shared outcomes

Incident coordination, compliance evidence exchange, procurement review, and customer offboarding require cooperation from both BlackShield and the customer.
Regional, privacy, and contractual requirements must be raised early enough to be reflected in deployment or contracting decisions.
Availability and security outcomes depend on both the managed platform and the customer's connected systems, policies, and internal operating discipline.

Company and Service Scope

BlackShield is delivered by Chaplau as a business security SaaS, with final commercial scope defined by the active order form and related customer agreements.

The service is intended for authorized business security workflows rather than consumer use.
Negotiated enterprise commitments take precedence where a signed agreement says something more specific.
The default managed hosting posture uses AWS us-east-1 unless another deployment arrangement is agreed.

Accounts, Access, and Shared Responsibility

BlackShield operates the hosted platform, while customers remain responsible for access governance, scanner scope, and action taken in their own environments.

Each user must use individual credentials and approved authentication methods.
Customers manage tenant-level permissions, account lifecycle actions, and prompt credential rotation.
Customers may only scan or ingest data from assets and systems they own or are authorized to assess.

Billing, Suspension, and Termination

Paid plans follow the applicable subscription or invoicing terms, and misuse or material breach may result in suspension or termination.

Billing terms, renewal mechanics, and commercial pricing are defined in your order form or billing flow.
Customers may cancel according to plan-level policy and contractual commitments.
Service termination includes access revocation and offboarding aligned with documented retention and deletion processes.