Terms of Service

1. Scope

These terms govern the use of boring.tools ("the Service"), provided by Lars Hampe (see imprint). The Service is offered to businesses only (§ 14 BGB), not to consumers. By creating an organization or using the Service you agree to these terms on behalf of your organization. Conflicting terms of the customer do not apply.

2. The Service

boring.tools monitors software bills of materials (SBOMs) that you upload for known vulnerabilities, helps you record triage decisions (VEX) and keeps track of the reporting deadlines of Art. 14 of the EU Cyber Resilience Act. The current features are described in thedocumentation.

boring.tools is a tool. It does not make your products compliant with the Cyber Resilience Act and does not submit reports on your behalf. Decisions on vulnerabilities and reports to authorities remain your responsibility. Vulnerability data comes from public sources and may be incomplete or late. Suggestions made by AI are proposals that a person has to review.

3. Accounts and organizations

You need an account to use the Service. Organizations can invite any number of members. Keep sign-in links and upload keys confidential; you are responsible for activity under your organization's keys. Report suspected misuse to security@boring.tools.

4. Plans, trial and payment

The plans and their limits are listed on the pricing page. Every new organization can use Business free of charge for 14 days; it then moves to the free plan unless a paid plan is chosen.

Paid plans are sold through Polar Software, Inc. as merchant of record. Polar processes the payment, issues the invoice and handles VAT; itsbuyer termsapply to the purchase. Prices are per month and exclude VAT.

5. Term and cancellation

Paid plans renew monthly. You can cancel at any time in the customer portal; the plan stays active until the end of the paid month. If a plan ends or a smaller plan is chosen, no data is deleted: products beyond the plan's limit remain visible and monitored but accept no new SBOMs. Either party may terminate for good cause.

6. Acceptable use

You agree not to:

• use the Service for any unlawful purpose
• attempt to gain unauthorized access to any part of the Service
• interfere with or disrupt the integrity or performance of the Service
• upload malicious content or attempt to exploit vulnerabilities in the Service
• resell or sublicense access to the Service without our written consent

7. Your content

You keep all rights to the SBOMs, decisions and texts you upload or write. You grant us the right to process them to provide the Service. We process personal data according to our privacy policy; a data processing agreement is available on request.

8. Availability

We aim for high availability but do not guarantee a specific uptime. Planned maintenance is announced in advance where possible.

9. Liability

We are liable without limitation for intent and gross negligence, for injury to life, body or health, and under the Product Liability Act. For slight negligence we are liable only for breach of an essential contractual obligation, limited to the damage typical and foreseeable at the time the contract was made. Otherwise our liability is excluded. [TO FILL: optional cap, e.g. fees paid in the last 12 months — to be decided with legal review]

10. Changes to these terms

We may change these terms with at least 30 days' notice by email. If you do not object within that period, the changed terms apply; we will point this out in the notice. If you object, either party may terminate.

11. Governing law and jurisdiction

German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. Place of jurisdiction for all disputes is Göttingen.

12. Contact

Questions about these terms:legal@boring.tools.