[Ferrule]

Terms of Service

Ferrule

Last updated: 18 July 2026 · Version 1.0

1. These terms, and who they bind

These terms govern your use of Ferrule, A metered, logged gateway through which a customer's agents perform actions in the customer's own connected tools, each one risk-scored by a model before it runs.. They form a contract between Ferrule, of Sveavägen 44, 6 tr, 111 34 Stockholm, Sweden (“Ferrule”, “we”) and the company that signs up for the service (“Customer”, “you”).

The service is offered to businesses only. It is not offered to consumers, and by signing up you confirm you are acting for purposes within your trade or profession and that you are authorised to bind your company.

The person clicking through these terms is agreeing on behalf of the company, not personally. If you do not have that authority, do not proceed.

Order of precedence. Where documents conflict: (1) a signed order form or agreement between us, (2) the Data Processing Agreement, (3) these terms, (4) our Privacy Policy, (5) anything on our website.

2. What the service is

Ferrule authorizes, prices, executes and records actions. Each action is scored by a risk classifier and quoted against the published rate card before it runs, and each one produces a log entry a customer can export.

3. What the service is expressly not

These limits are deliberate and are part of what you are buying. They are not defects.

Not a planner. We do not plan or generate. An agent decides what to do; we are what it calls to do it. The models we run score risk and flag anomalies, and neither can make an action happen.

Not a memory. We keep no knowledge graph and no long-term picture of your work. Our records exist to prove what happened, not to inform what happens next.

Not an automation builder. There is no rule editor and no trigger canvas. Something else decides when to act; we are the thing that acts.

Not a monitoring agent. We hold no read credential we were not handed, and we run nothing against your tools on a schedule of our own. Anomaly detection reads the gateway's own log.

4. Your responsibilities, and how they affect the outcome

What the service delivers depends materially on things only you control. Read this section carefully; sections 9 and 10 follow from it.

Your credentials. You connect the tools and you own the grants. Revoking one in the third party's console is effective immediately whether or not you tell us.

Your agents. You are responsible for what your agents ask for. We enforce your limits and score each action's risk, and a score that lets an action through is not a judgment that it was a good idea.

Your spend limits. Per-agent and per-month ceilings are yours to set, and so is the risk ceiling. An action above a spend ceiling is refused rather than queued; an action above the risk ceiling is refused or held for the person you name.

Your people. You decide which humans may authorize an agent and which actions need a human on the request.

Lawful use. You may not use the gateway to reach a system you are not entitled to reach, whatever your agent proposes.

5. Getting started, and what is free

The first 10,000 actions are free and require no card. They are metered and logged the same way paid actions are, so the invoice you would have received is visible before you owe it.

6. Fees and what is extra

Per action. €0.004 per executed action. A refused action, a rate-limited action and a failed third-party call are not charged.

No platform fee. There is no seat price, no minimum commitment and no annual prepayment. A month with no actions costs nothing.

Volume. Above two million actions in a month the rate falls to €0.0028, applied automatically and stated on the invoice.

What is never billed. Connecting a tool, revoking a grant, exporting a log and reading the metering record are not actions and carry no price.

7. Delivery, availability and support

Availability. 99.9% monthly, measured on gateway responses. A month below it is credited automatically against the next invoice.

Latency. Gateway overhead stays under 40ms at the 95th percentile, excluding the third-party call we are waiting on and the risk scoring, whose duration is recorded against each action in the log.

Export. Action logs and metering records export as JSONL and CSV at any time, including after termination.

7.3 Support. Support is by email at [email protected], with a target first response of one business day. That is a target, not a guarantee.

8. Records you can take with you

The action log. Every call, its risk score, its price, its authorizer, its result and its trace id, exportable for the full retention window.

The metering record. The billable line behind every invoice, itemised per agent and per connected tool.

The grant register. Which tools are connected, by whom, with what scope, and when each grant was last used.

9. Warranties, and their limits

We warrant that we will provide the service with reasonable skill and care, and that we have the right to provide it.

We give no other warranty. To the fullest extent permitted by law we exclude all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

We do not warrant the behavior of the third-party tools you connect. If a connected API changes its schema or refuses a call, the gateway reports that faithfully and does not pretend the action succeeded.

10. Liability

10.1 Neither party limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

10.2 Excluded losses. Neither party is liable for loss of profit, revenue, anticipated savings, business, goodwill or reputation, or for any indirect or consequential loss, however arising.

10.3 Specifically excluded. We are not liable for what your agents decide to do, for business decisions taken on the strength of an action's result, or for loss arising from a credential you granted us and did not revoke.

10.4 Cap. Our aggregate liability is capped at the fees you paid us in the twelve months before the claim. Given the rate card that is a small number, and we would rather say so than write a cap nobody reads.

10.5 You acknowledge that the limits in sections 9 and 10 are a reasonable allocation of risk given the price and your responsibilities under section 4, and that we would not offer the service at this price without them.

11. Confidentiality and data

Action payloads, responses and logs are your confidential information. We do not read them except to operate the service or when you ask us to help with an incident, and we do not use them to train anything. The risk classifier reads an action request to score it, under zero data retention, and keeps nothing.

Processing of personal data is governed by our Privacy Policy and by the Data Processing Agreement between us, which is incorporated into these terms. Where the DPA and these terms conflict on personal data, the DPA governs.

12. Intellectual property

You own your data, your logs and anything your agents produce through the gateway. We own the gateway.

The rate card, the schema catalog and the documentation are ours and are published so that you can hold us to them.

You may not use our name or logo publicly, and we may not use yours, without prior written consent.

13. Term and termination

13.1 The contract starts when you sign up and continues until either party ends it.

13.2 By you. Cancel at any time, effective at the end of the current billing month, subject to any minimum term stated in section 6.

13.3 By us. We may terminate on 30 days’ notice, or immediately if you materially breach these terms and do not cure within 14 days of notice, if you become insolvent, or if your use exposes us to legal risk.

13.4 What survives. On termination we stop delivering and stop billing. You keep everything already delivered to you, and your licence to it survives. We delete or return our working copies as set out in the DPA. Sections 9, 10, 11 and 12 survive.

14. Changes to these terms

We may update these terms. Material changes take effect 30 days after we notify you by email, and if you do not accept them you may terminate before they take effect. Continuing to use the service after that date means you accept them.

15. Contact

Ferrule, Sveavägen 44, 6 tr, 111 34 Stockholm, Sweden
[email protected]

← Back

Your request has been received.

Expect a message from Ferrule. It goes to the address you gave.