Terms of Service

1. Scope and Provider

Code:Sniper (the “Service”) is an AI-assisted service for automated security analysis of source code. The provider is greenhats® GmbH(opens in new tab), Buchenweg 22, 35096 Weimar (Lahn), Germany, represented by its managing director Arwid Carlo Zang (“Provider” or “we”).

These Terms of Service apply exclusively to use of the Service by entrepreneurs within the meaning of Sec. 14 of the German Civil Code (BGB) (“Customer”). The Service is not available to consumers. The provisions on general terms and conditions vis-à-vis entrepreneurs (Sec. 310 BGB) apply. A statutory right of withdrawal (Sec. 312c, 312g BGB) does not apply.

2. Subject Matter

The Service performs automated static analysis (SAST), secret and dependency scans, and AI-assisted evaluation of source-code artefacts submitted by the Customer (ZIP archives, code pastes) and produces security reports with remediation guidance.

Analysis results are non-binding indications and guidance. They do not replace a manual security review by qualified professionals and do not constitute a certification, audit statement, or warranty as to the security, quality, or legal compliance of the analysed code.

3. Registration and Account Access

Use of the Service requires an account. Registration is performed via OAuth using GitHub, Google, or Microsoft. The Customer represents that it is a registered company or a person authorised to act on behalf of the company.

Access credentials must be kept confidential and protected from third-party access. The Customer is responsible for all use made through its account.

4. Conclusion of Contract, Prices, Term and Termination

The prices displayed at the time of booking apply. Payment processing is handled via the payment service provider Stripe (PCI DSS Level 1). Current prices: Pro 49 €/month or 499 €/year; Enterprise 499 €/month or 5,090 €/year; Expert Review 1,000 € (one-time per project). Individually agreed terms (e.g. Enterprise licences) take precedence.

Subscriptions renew automatically unless cancelled before the end of the respective billing period. Cancellation is possible at any time with effect from the end of the current billing period. Services already provided (completed scans, expert reviews) are non-refundable.

5. Availability of the Service

The Service is provided without any warranty of uninterrupted or error-free availability. The Provider is entitled to modify, restrict, temporarily suspend, or permanently discontinue the Service at any time, in particular for maintenance, infrastructure, or operational reasons. Planned maintenance windows will be announced in advance where reasonably possible. No refund or damage claim arises solely from outages or restrictions.

6. Rights in Uploaded Source Code and Data Processing

The Customer remains the owner of all rights in the source code it submits. The Customer warrants that it holds the rights required for the analysis and that submission does not infringe any third-party rights.

Source code is processed exclusively for the purpose of security analysis. Zero Data Retention applies: the Provider does not use customer data to train or improve its models. Processing takes place exclusively within the European Union (EU regional restrictions of the AI services used). Submitted source code is fully deleted within 24 hours of completion of processing. Details are set out in the Privacy Policy.

7. Prohibited Use

In particular, the Service must not be used to:

• analyse or optimise malware, exploits, or other harmful code,
• test third-party IT infrastructure without their consent,
• target the Service itself as an attack vector,
• violate applicable law or third-party rights.

In the event of violations, the Provider may suspend or terminate access without prior notice and without refund of any fees already paid.

8. Fair Use

The Service is subject to a fair-use policy. Use that substantially exceeds the average use of comparable customers – such as mass or automated uploads, access via scripts without prior written consent, or circumvention of limits through multiple accounts – may be throttled, paused, or terminated.

9. Liability

The Provider is liable without limitation for damages arising from injury to life, body, or health, in the case of intent and gross negligence, under the German Product Liability Act, and in the case of any express warranty or fraudulent concealment.

In the case of ordinary negligence, the Provider is liable only for the breach of material contractual obligations (cardinal obligations) and, in that case, limited to the contractually typical, foreseeable damage. The Service is provided “as is”; no liability is accepted for the accuracy or completeness of analysis results, for security incidents occurring notwithstanding or after an analysis, or for data loss. In addition, to the extent permitted by law, liability is capped at the amount actually paid by the Customer in the twelve months preceding the event giving rise to the damage.

10. AI Transparency (EU AI Act, Regulation (EU) 2024/1689)

Code:Sniper is an AI-assisted system. Parts of the submitted source code are processed by AI language models as part of the analysis. The generated reports contain AI-generated content and must be reviewed by qualified persons before security decisions are relied upon. There is no entitlement to the accuracy or completeness of AI-generated content.

11. Changes to these Terms of Service

The Provider may amend these Terms of Service at any time. Material changes will be announced to the Customer by email or by notice within the Service at least 14 days before they take effect. Continued use of the Service after the changes take effect is deemed acceptance. If the Customer objects to the changes, the Provider may terminate the contract as of the date the changes take effect.

12. Final Provisions

The laws of the Federal Republic of Germany apply. The place of jurisdiction is, to the extent permitted by law, the registered seat of the Provider. Should individual provisions of these Terms of Service be or become invalid in whole or in part, the validity of the remaining provisions shall remain unaffected.