Terms of Service

By creating an account, accessing, or using the ThreatSpire service, you agree to these Terms of Service. If you are using the service on behalf of an organization, you represent that you have authority to bind that organization to these terms.

You must be at least 18 years old and legally able to enter into contracts. You may not use the service if you are barred under the laws of the United States or any other applicable jurisdiction.

ThreatSpire is a multi-tenant cyber threat intelligence platform that helps security teams collect, analyze, and act on threat intelligence. Features include actor tracking, evidence timelines, intelligence requirements management, IOC management, AI-assisted drafting, and reporting. We may add, modify, or remove features from time to time.

The service is provided over the internet. You are responsible for obtaining and maintaining your own network connections and compatible devices.

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must use strong passwords and, where available, multi-factor authentication (MFA).

You may only grant access to authorized users within your organization. You are responsible for managing those users, including removing access promptly when an individual no longer needs it. You must notify us immediately of any unauthorized access or security incident related to your account.

You agree not to, and not to allow others to:

• Use the service for any unlawful purpose or in violation of any applicable law or regulation.
• Interfere with or disrupt the integrity or performance of the service, including by transmitting malware, denial-of-service attacks, or excessive automated requests.
• Attempt to access, tamper with, or use data or accounts belonging to other tenants or users.
• Reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code or underlying structure of the service, except where expressly permitted by law.
• Abuse AI features, including by submitting content designed to exploit, manipulate, or extract training data from the underlying models, or by using outputs in ways that violate laws or third-party rights.
• Remove, alter, or obscure any proprietary notices or labels on the service.

We reserve the right to suspend or terminate access for violations of this section.

You retain all ownership rights in the data you submit to the service, including intelligence requirements, evidence, indicators, assessments, and organization context ("Customer Data").

You grant ThreatSpire a limited, non-exclusive license to host, process, and use Customer Data solely to provide, maintain, secure, and improve the service for you. This license continues only for as long as you use the service or as required by law. Our handling of personal data within Customer Data is described in our Privacy Policy and, where applicable, our data processing agreement.

ThreatSpire owns all rights, title, and interest in the platform, software, documentation, brand, and all improvements thereto. These terms do not grant you any license to our trademarks, logos, or trade dress except as necessary to identify the service in ordinary use.

MITRE ATT&CK is a registered trademark of The MITRE Corporation. ThreatSpire's use of the ATT&CK framework and references to it do not imply endorsement by MITRE.

Access to the service is provided on a subscription basis. Fees, billing frequency, payment terms, and the number of authorized users are set out in the order form, online checkout, or other agreement between us (the "Order"). In the event of a conflict between these terms and the Order, the Order prevails.

Subscriptions automatically renew for successive periods equal to the initial term unless either party gives notice of non-renewal before the end of the current term. We may change fees for renewals with advance notice.

All fees are non-refundable except where required by law or as expressly stated in the Order.

Each party may disclose confidential information to the other in connection with the service. The receiving party agrees to use the disclosing party's confidential information only for the purpose of exercising rights and performing obligations under these terms, and to protect it with at least the same degree of care it uses to protect its own confidential information of like importance, but no less than reasonable care.

This obligation does not apply to information that is or becomes publicly available through no breach of these terms, was already known to the receiving party without confidentiality obligations, or is independently developed without use of the disclosing party's confidential information.

We use commercially reasonable efforts to make the service available, but we do not guarantee uninterrupted access. Scheduled maintenance, security updates, and unforeseen issues may result in downtime.

We may change, deprecate, or replace features over time. Where reasonably practicable, we will provide advance notice of material changes that affect how you use the service.

Beta features are provided "as is" for evaluation and may be changed or withdrawn without notice. They are not covered by any service-level commitment.

To the fullest extent permitted by applicable law, the service is provided "as is" and "as available" without warranties of any kind, whether express, implied, statutory, or otherwise. ThreatSpire expressly disclaims all implied warranties, including merchantability, fitness for a particular purpose, non-infringement, and quiet enjoyment.

AI-generated outputs are drafts for analyst review. We do not guarantee their accuracy, completeness, or suitability for any specific decision. You are responsible for reviewing and validating AI output before acting on it.

To the fullest extent permitted by applicable law, neither ThreatSpire nor its suppliers, directors, employees, or agents will be liable for any indirect, incidental, special, consequential, or punitive damages, including lost profits, lost data, or business interruption, arising out of or related to these terms or the use of the service, even if advised of the possibility of such damages.

Our total aggregate liability for all claims arising out of or relating to these terms will not exceed the total amount you paid us in the 12 months preceding the event giving rise to the liability, or $100 if you have not paid.

You agree to indemnify and hold harmless ThreatSpire and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys' fees) arising out of or in any way connected with your access to or use of the service, your violation of these terms, or your infringement of any third-party right.

These terms remain in effect until terminated. Either party may terminate for convenience by providing notice in accordance with the applicable Order or, if no term is specified, by providing at least 30 days' written notice.

We may suspend or terminate your access immediately if you breach these terms, and where practicable we will provide notice of the breach and an opportunity to cure.

On termination, all licenses granted by ThreatSpire terminate and you must cease using the service. We will return or delete your Customer Data in accordance with our data processing practices and the applicable data processing agreement (see /legal/dpa). We may retain copies as required by law or for legitimate business purposes such as backups, audit records, and dispute resolution.

These terms are governed by and construed in accordance with the laws of the State of North Carolina, United States, without regard to its conflict of laws principles.

Any dispute arising out of or relating to these terms will first be addressed through good-faith negotiation. If the dispute cannot be resolved within 30 days, either party may bring suit in the state or federal courts located in Dover, Delaware. Both parties consent to the personal jurisdiction of those courts.

We may update these terms from time to time. Material changes will be posted on this page with an updated "Last updated" date, and where appropriate we will also notify you through the application or by email. Your continued use of the service after the effective date of the revised terms constitutes acceptance.

If you do not agree to the revised terms, you must stop using the service and terminate your account.

Questions about these terms can be sent to legal@threatspire.com.

ThreatSpire LLC
Dover, Delaware
United States