Terms of Service

← ratatouille.dev

Last updated: August 2026.

Draft — not yet reviewed by counsel

These terms describe how Ratatouille actually operates today, but they have not been reviewed by a lawyer, and the entity and governing-law details are placeholders. Have counsel review them before signing anything or relying on them for procurement.

These terms govern your use of ratatouille.dev, the demo core, the hosted console, and the Ratatouille agent and CLI (together, the “Service”), operated by [TODO: legal entity name]. Using the Service means you accept them. A separate signed agreement, where one exists, takes precedence over this page.

1. The demo core is a demo

The shared demo core at demo.ratatouille.dev is provided for evaluation. It offers no availability guarantee, no data durability guarantee, and no confidentiality guarantee against other evaluators. Do not enroll production systems and do not treat demo attestation records as audit evidence. We may reset it without notice. Run rat upgrade for a dedicated instance before you depend on anything.

2. What you’re responsible for

• The trustworthiness of your baseline. Attestation compares a machine against the policy you approved. If you enroll a compromised machine, you have approved a compromised state. This is the most important limitation of the entire system.
• Who can sign policies. Policy authority is the real control boundary. Keep your Sigstore signing identities and repository write access restricted accordingly.
• Acting on failures. We report attestation verdicts. Deciding what a FAILED verdict means for your environment, and responding to it, is yours.
• Lawful use. Don’t use the Service to attack systems you don’t control, don’t attempt to circumvent policy verification for machines you don’t own, and don’t resell the Service without a written agreement.

3. What Ratatouille is and isn’t

Ratatouille detects deviation from an approved baseline on Linux machines with TPM 2.0. It is not a preventive control, an antivirus, an EDR, or a guarantee that a machine is uncompromised — attacks above the measurement boundary are invisible to it. The full scope and limits are documented in the Remote Attestation Primer and What Ratatouille is not. Read them; they are part of using this product correctly.

Compliance material on this site (including the CJIS page) is our good-faith reading of published standards. It is not legal advice and it is not a certification. Your assessor’s interpretation governs.

4. Your data and your evidence

You own your policies, your attestation records, and your exported evidence. We claim no rights in them beyond what is needed to operate the Service. You can export your evidence at any time, in standard formats verifiable without us. Data handling is described in the Privacy Policy.

Signing a policy with Sigstore publishes the signature and signing identity to the Rekor public transparency log permanently. That is not reversible by us or by you.

5. Software licensing

The Ratatouille agent and CLI are distributed under the license included in their packages. Upstream components — Keylime, Cosign, and others — remain under their own licenses, and nothing here modifies them. [TODO: state the license for the Ratatouille-authored packages explicitly.]

6. Fees

Self-hosted use is free. Managed and enterprise pricing is agreed in writing before any charge. We will not bill you for something you did not agree to.

7. Availability and termination

The Service is provided as-is. We do not offer a uptime SLA except where one is in a signed agreement. You can stop using the Service at any time; we may suspend access for non-payment, abuse, or unlawful use, and will tell you why. On termination you have 30 days to export your data.

8. Warranties and liability

The Service is provided “as is”, without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. To the maximum extent permitted by law, our aggregate liability arising from the Service is limited to the greater of the fees you paid in the 12 months preceding the claim, or $100. We are not liable for indirect, incidental, or consequential damages, including losses arising from an undetected compromise.

Nothing here limits liability that cannot be limited by law.

9. Changes and governing law

We may update these terms; material changes will be announced to account holders before taking effect. These terms are governed by the laws of [TODO: state/jurisdiction], without regard to conflict-of-law rules.

Questions: logan@ratatouille.dev.