1. Acceptance of terms
By creating a Vericto account or using any of the services of Vericto S.A.S. ("Vericto", "we"), you accept these Terms of Service in full. If you act on behalf of an organisation, you represent that you have authority to bind that organisation to these terms.
If you do not agree with any of these terms, do not use the service.
2. Service description
Vericto provides a TCP proxy service that intercepts SQL queries between applications and databases, analyzes the abstract syntax tree (AST) of each query, and blocks destructive operations based on configurable rules. The service includes:
- TCP proxy for PostgreSQL and MySQL with deterministic AST analysis
- Web dashboard for visualization of intercepted queries and metrics
- Configurable rules system (standard and custom)
- Audit trail of all blocking decisions
- SDK/CLI for integration in CI/CD pipelines (Team and Enterprise plans)
- Alerts via Slack and webhooks (Builder, Team and Enterprise plans)
Vericto is an additional security layer, not a substitute for good database security practices. The user is responsible for correctly configuring their database permissions and keeping their credentials secure.
3. Acceptable use
You may use Vericto to protect databases in production, staging and development environments of your organization. You may not use Vericto to:
- Intercept or analyze queries from third-party databases without the explicit authorization of the owner.
- Attempt to circumvent or disable the proxy's security mechanisms.
- Reverse-engineer the AST parser or the proxy wire protocol.
- Use the service for illegal activities or activities that violate the rights of third parties.
- Generate artificial load on the service (DDoS attacks, mass scraping, etc.).
- Share account credentials across multiple unrelated organizations.
- Resell access to Vericto's proxy as your own service without a reseller agreement.
Vericto reserves the right to suspend accounts that violate these conditions without prior notice.
4. Accounts and workspaces
You are responsible for keeping your access credentials secure. You must notify us immediately at security@vericto.com if you suspect unauthorised access to your account.
Each workspace has an Owner with full control. The Owner can invite members with limited roles (Admin, Member, Viewer). The limits on databases and queries per month depend on the contracted plan.
Vericto may suspend inactive accounts (no intercepted queries in 90 days) on the Free plan, with 14 days' prior notice.
5. SLA and service availability
Availability commitments vary by plan:
| Plan | Availability SLA | Credits for breach |
|---|---|---|
| Free | No SLA (best effort) | Not applicable |
| Builder | 99.5% monthly | Proportional service credit |
| Team | 99.9% monthly | Proportional service credit |
| Enterprise | 99.9% monthly (configurable) | Per contract |
The 99.9% SLA equates to a maximum of 43.8 minutes of monthly downtime. Downtime is calculated as the time during which the TCP proxy does not respond to client connections, excluding scheduled maintenance notified 48 hours in advance.
Service credits for an SLA breach must be requested within 30 days of the incident at support@vericto.com. Credits are applied as a discount on the next invoice and are not refundable in cash.
6. Billing and payments
Paid plans are billed in advance for the cycle you choose (monthly or annual). By subscribing to a paid plan, you authorise the recurring charge of the corresponding amount to your registered payment method.
Payments are processed by Paddle.com Market Ltd, acting as merchant of record: Paddle is the authorised reseller of the service to you, issues the invoice in its own name, and is responsible for collecting and remitting the applicable indirect taxes (VAT, GST, sales tax) based on your location. Subscriptions started before this migration continue to be processed through Stripe, Inc. until they renew; in that case the invoice is issued by Vericto S.A.S.
In either case Vericto never receives or stores your full card details: the payment method is captured and held by the processor directly. You can see which applies to your account in Settings > Billing, and the charge appears on your statement as PADDLE.NET* VERICTO or as Vericto accordingly.
Prices may change with 30 days' notice by email. Price changes do not affect billing cycles currently in progress.
If a payment fails, Vericto will retry the charge for 7 days. If the payment is not completed within that period, the account may be downgraded to the Free plan until the payment is settled.
Applicable indirect taxes (VAT, GST, sales tax or others) are added to the price based on your location and shown before you confirm payment. When Paddle processes the payment as merchant of record, Paddle determines, collects and remits those taxes to the relevant authority. If you are purchasing as a business and provide a valid tax identification number, the tax treatment may differ depending on your jurisdiction.
7. Cancellation
You can cancel your subscription at any time from your account settings (Settings > Billing > Cancel subscription). Cancellation takes effect at the end of the current billing period.
7.1 Right of withdrawal (14 days)
You have 14 calendar days from the first payment for a plan to withdraw and receive a full refund of that payment, with no need to give a reason. Just request it from Settings > Billing or email support@vericto.com; refunds are processed within 5-10 business days to the original payment method.
This 14-day window is deliberately longer than the minimum required by Colombian consumer protection law (5 business days for distance sales, Ley 1480 of 2011) and matches what European law grants. You do not waive this right by starting to use the service: even if you have run queries during those 14 days, the full refund still stands.
Withdrawal applies to the first payment for each plan, not to subsequent renewals, and does not apply to individually negotiated Enterprise contracts, which are governed by the terms agreed in writing. After the 14 days, the cancellation terms described below apply.
After the withdrawal period, on monthly plans there is no prorated refund for the unused days of the current month: you keep access until the end of the period already paid for.
After the withdrawal period, on annual plans, if you cancel before the year ends we refund the full unused months, excluding the current month. Refunds are processed within 5-10 business days to the original payment method.
Upon cancellation:
- Your account moves to the Free plan at the end of the billing period.
- Audit trail data exceeding the Free plan limits (7 days) is automatically deleted.
- The proxy continues operating in Free mode (500K queries/month, 1 database).
If you wish to delete your account entirely, you can do so from Settings > Account > Delete account. All data is permanently deleted within 30 days, except billing data that we must retain for legal obligations.
Vericto may cancel your account for violation of the acceptable use terms, with 7 days' prior notice (except in cases of serious abuse, where cancellation may be immediate).
8. Intellectual property
Vericto and its components (including the AST parser, TCP proxy, dashboard, and rules system) are the property of Vericto S.A.S. and are protected by intellectual property rights.
The standard AST rules engine (the 28 predefined rules) is open-source under the MIT license. The TCP proxy and dashboard are proprietary software.
By using Vericto, you do not acquire any ownership rights to the software. Vericto grants you a limited, non-exclusive, non-transferable license to use the service under these terms.
The custom rules you define in your workspace are yours: you can export them at any time.
9. Limitation of liability
Vericto provides the service "as is" and "as available". To the maximum extent permitted by applicable law:
- Vericto does not warrant that the service will be uninterrupted, error-free, or that it will detect 100% of destructive queries in all possible cases.
- Vericto is not liable for indirect, incidental, special, consequential or punitive damages, including loss of data, loss of profits, or business interruption.
- Vericto's total liability for any claim related to the service shall not exceed the amount paid by the customer in the 12 months preceding the incident.
Vericto cannot guarantee detection of destructive queries that use advanced obfuscation techniques, unsupported SQL dialects, or that exploit unknown vulnerabilities in the underlying parsers. Vericto is a defense-in-depth layer, not the only line of defense.
10. Modifications to the terms
Vericto may modify these terms with 15 days notice for material changes, sent by email to the address associated with your account and published on this page together with the effective date. Changes are material when they affect your rights or obligations, the price, or the scope of the service. Minor changes (typographical corrections, clarifications with no impact on rights or obligations, or adjustments required by law or by a provider) may be published without notice.
If you disagree with a material change, you may cancel your account without penalty before the effective date and we will refund the unused pro-rata portion of any period already billed. Continued use of the service after that date constitutes acceptance of the new terms.
We retain previous versions of these terms and the date on which you accepted each one, so you can always verify which version applies to you. Nothing in this clause limits the rights applicable law grants you as a consumer.
11. Governing law and jurisdiction
These terms are governed by Colombian law, in particular Law 527 of 1999 (electronic commerce), Law 1480 of 2011 (Consumer Protection Statute) and Law 1581 of 2012 together with Decree 1377 of 2013 (personal data protection and habeas data). For any dispute relating to these terms, the parties submit to the competent courts of Bogotá D.C., Colombia.
If you contract as a consumer and reside outside Colombia, this clause does not deprive you of the protection of the mandatory rules of your country of habitual residence, nor of the right to bring proceedings before the courts of that country where applicable law grants it. For users in the European Economic Area and the United Kingdom, the processing of personal data is additionally governed by the GDPR as set out in the Privacy Policy, with the international transfer safeguards described there.
For Enterprise customers with specific contracts, the governing law and jurisdiction may differ as agreed in the contract.
For questions about these terms, contact legal@vericto.com.