Terms of Service

These Terms of Service (the "Terms") govern access to and use of SafeRouter, a confidential-computing large language model (LLM) API gateway operated by Sumplus, a company organized in the British Virgin Islands ("Sumplus", "we", "us", or "our"). The SafeRouter product is available at https://router.sumplus.xyz. By creating an account, accessing, or using the Service, you agree to be bound by these Terms.

These Terms should be read together with the SafeRouter Privacy Policy and, where applicable, the SafeRouter Data Processing Addendum, each of which is incorporated by reference.

1. Definitions

"Service" means the SafeRouter platform, including its OpenAI-compatible API, the routing of requests to Upstream Providers, the confidential-computing runtime, the transparency log, associated dashboards, documentation, and any related software and services made available by Sumplus.

"Customer" (also "you" or "your") means the individual or entity that registers for or uses the Service. If you use the Service on behalf of an entity, you represent that you are authorized to bind that entity to these Terms.

"Content" means the prompts, inputs, files, parameters, and other data that the Customer submits to the Service, together with the completions and outputs returned to the Customer in response.

"Credits" means the prepaid, USD-denominated balance that a Customer maintains with the Service and that is consumed by metered usage of the Service.

"Upstream Provider" means a third-party artificial intelligence model provider to which the Service routes a Customer request in order to fulfill it and from which model outputs originate.

2. Acceptance and Eligibility

By accessing or using the Service, you acknowledge that you have read, understood, and agree to these Terms. If you do not agree, you must not access or use the Service.

You must be at least the age of majority in your jurisdiction and legally capable of entering into a binding contract. The Service is intended for developers and businesses integrating LLM capabilities into their own applications and workflows. You may not use the Service if you are barred from doing so under applicable law or under the terms of any Upstream Provider.

3. Description of the Service

The Service exposes an OpenAI-compatible API and routes each Customer request to a selected Upstream Provider on the Customer's behalf. To fulfill a request, the Customer's prompt is transmitted to the selected Upstream Provider, and the Upstream Provider's output is returned to the Customer.

The Service runs inside a hardware Trusted Execution Environment (AMD SEV-SNP) with remote attestation. Customers can cryptographically verify which build of the Service is running. The Service records a cryptographic hash of each API call into an append-only transparency log and periodically anchors a Merkle-tree root of that log to a public transparency log (Sigstore Rekor). The records comprise hashes and call metadata, including timestamp, model name, token or unit counts, computed cost, and the Upstream Provider, and do not include the plaintext content of prompts or completions.

4. Accounts, Authentication, and API Keys

To use the Service you must register for an account. Account identity may be established through an email address and password, through a linked OAuth identity (such as Google or GitHub), or through a cryptocurrency wallet address used as a login credential, in which case you authenticate by signing a challenge. Passwords are stored only in hashed form. Sessions are maintained using a Secure cookie.

You are responsible for safeguarding your account credentials and your API keys. Any activity conducted through your API keys or account is your responsibility. You must keep your API keys confidential, must not share them, and must promptly notify us at support@sumplus.xyz of any suspected unauthorized use. We are not liable for loss or damage arising from your failure to protect your credentials or API keys.

5. Acceptable Use

You agree that you will not, and will not permit any third party to:

• (a) use the Service for any unlawful purpose or in violation of any applicable law or regulation;
• (b) abuse, overload, or attempt to disrupt the Service or its infrastructure, including through denial-of-service activity, excessive automated requests beyond published limits, or interference with other Customers' use;
• (c) violate the terms, policies, or usage restrictions of any Upstream Provider;
• (d) attempt to access another Customer's data, account, Content, or Credits, or attempt to access, extract, or interfere with the internals of the Trusted Execution Environment or its confidential state;
• (e) circumvent, tamper with, or interfere with metering, billing, rate limiting, or Credit accounting;
• (f) reverse engineer, decompile, or disassemble the Service except to the extent expressly permitted by applicable law; or
• (g) use the Service to generate or distribute material that infringes the rights of others or that you are otherwise not permitted to generate or distribute.

We may investigate suspected violations and may take appropriate action, including suspension or termination as described in these Terms.

6. Billing, Payment, and Credits

The Service operates on a prepaid Credits model. Credits are denominated in USD and are consumed by metered usage. Usage is metered per token for chat and embeddings and per unit for media, including per image and per second of video, charged at the rates published for the Service. The Service reserves funds against your Credit balance before a call and adjusts the reservation to actual usage after the call completes.

You may add Credits by top-up through a third-party cryptocurrency payment processor (using USDC and similar cryptocurrencies) or by applying a gift or redemption code. Trial Credit, where offered, may be zero.

Credits are prepaid amounts used solely to offset usage fees for the Service. Credits are not a deposit, do not constitute a stored-value or banking instrument, and do not bear interest. Credits have no cash value except as required by applicable law. Except where required by applicable law, or at our sole discretion, Credits and amounts paid are non-refundable. You are responsible for any taxes associated with your use of the Service other than taxes based on our net income.

We may change published rates on a prospective basis with notice as described in Section 15.

7. Third-Party Outputs

Model outputs returned through the Service originate from Upstream Providers. Such outputs may be inaccurate, incomplete, offensive, or otherwise unsuitable for your purposes. Sumplus does not author, control, endorse, or warrant any output, and the Service acts as a routing gateway. You are solely responsible for evaluating outputs and for any reliance on or use of them. Your use of outputs may be subject to the terms and restrictions of the applicable Upstream Provider.

8. Intellectual Property

As between the parties, you retain all rights in your Content. You grant Sumplus a limited license to process, transmit, and route your Content, and to compute and record the metadata and hashes described in these Terms and the Privacy Policy, solely as necessary to provide, secure, meter, and support the Service.

Sumplus and its licensors retain all rights, title, and interest in and to the Service, including its software, confidential-computing runtime, transparency log design, documentation, and all related intellectual property. No rights are granted to you other than the limited right to use the Service in accordance with these Terms.

9. Confidentiality

Each party may receive information of the other that is confidential. Each party will protect the other's confidential information using at least reasonable care and will use it only as necessary to perform under these Terms. This section does not limit the confidential-computing and data-handling commitments described in the Privacy Policy and the Data Processing Addendum.

10. Warranty Disclaimer

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE", WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR SECURE, OR THAT ANY OUTPUT WILL BE ACCURATE OR SUITABLE. NO ADVICE OR INFORMATION OBTAINED FROM THE SERVICE CREATES ANY WARRANTY NOT EXPRESSLY STATED IN THESE TERMS.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL SUMPLUS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR EXEMPLARY DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE TOTAL AGGREGATE LIABILITY OF SUMPLUS ARISING OUT OF OR RELATING TO THESE TERMS OR THE SERVICE WILL NOT EXCEED THE GREATER OF (A) THE TOTAL FEES PAID BY YOU FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE LIABILITY, OR (B) ONE HUNDRED U.S. DOLLARS (USD 100).

12. Indemnification

You will defend, indemnify, and hold harmless Sumplus and its officers, directors, employees, and agents from and against any claims, damages, liabilities, losses, and expenses, including reasonable legal fees, arising out of or relating to your Content, your use of the Service, your violation of these Terms, your violation of any Upstream Provider terms, or your violation of applicable law or the rights of any third party.

13. Term and Termination

These Terms apply from your first access to the Service and continue until terminated. You may stop using the Service and close your account at any time.

We may suspend or terminate your access to the Service, in whole or in part, if you materially breach these Terms, if your account is delinquent or a payment or top-up fails or is reversed, if required by law or by an Upstream Provider, or if your use poses a security or operational risk to the Service or other Customers. Where practicable and not prohibited, we will provide notice.

Upon termination, your right to use the Service ceases. Sections concerning intellectual property, confidentiality, warranty disclaimer, limitation of liability, indemnification, governing law, and any provisions that by their nature should survive will survive termination. Handling of your data following termination is described in the Privacy Policy and the Data Processing Addendum.

14. Suspension

In addition to termination, we may temporarily suspend all or part of your access to protect the Service, comply with law or Upstream Provider requirements, address a security incident, or respond to non-payment or suspected abuse. We will seek to limit the scope and duration of any suspension to what is reasonably necessary.

15. Changes to These Terms

We may update these Terms from time to time. We will post the updated Terms and update the "Last updated" reference. Where changes are material, we will provide reasonable notice through the Service or by email. Your continued use of the Service after the effective date of an update constitutes acceptance of the updated Terms.

16. Governing Law and Dispute Resolution

These Terms and any dispute arising out of or relating to them or the Service are governed by the laws of the British Virgin Islands, without regard to conflict-of-laws principles. The courts of the British Virgin Islands will have jurisdiction over any dispute, and you consent to that jurisdiction and venue.

17. Contact

For all notices, questions, and requests relating to these Terms, contact us at support@sumplus.xyz.