Legal

Legal center

All the paperwork in one place. Plain language wherever the lawyers permit it.

Documents

Terms of service

The agreement for using OpenVLAN — plans, obligations, limitations.

Read →

Privacy policy

What we collect (metadata), what we never see (your traffic), how long we keep it.

Read →

Data processing agreement

GDPR-aligned DPA with standard contractual clauses. Self-serve for Premium and above.

Read →

Subprocessors

The current list of vendors that touch service data, kept current with 30-day notice for additions.

Read →

Acceptable use

What you can't run over the coordination layer: spam, abuse, illegal content. Payload is yours — this covers the service.

Read →

Master service agreement

The framework agreement for Enterprise subscriptions: ordering, warranties, liability.

Read →

Service level agreement

Uptime targets for coordination, relay, and DNS — with service credits.

Read →

Special terms

Order-specific deviations: gov/edu pricing, nonprofits, promotions, residency addenda.

Read →

Channel partner agreement

Reseller obligations, margin, deal registration, and brand usage.

Read →

Partner exit node terms

Separate terms for metered partner exit nodes — privacy posture and no-logs commitments.

Read →

Free trial offer terms

Eligibility, duration, and no-surprise-conversion commitments for Premium trials.

Read →

RSAC promotion terms

Eligibility and redemption rules for promotions offered at the RSA Conference.

Read →

KubeCon EU promotion terms

Terms for trial credits and promotional pricing from KubeCon + CloudNativeCon Europe.

Read →

California privacy notice

CCPA/CPRA rights for California residents: access, deletion, correction, and non-discrimination.

Read →

Cookie notice

The few cookies we set, why they exist, and the trackers we don't use.

Read →

DSA notice

Single point of contact and notice-and-action information per EU Regulation 2022/2065.

Read →

Google Workspace limited use

Our compliance with Google's Services Specific Terms for Workspace-authenticated customers.

Read →

Patent notice

Virtual patent marking for products in the listed families.

Read →

Compliance documents

SOC 2 Type II report

Under NDA, current annual report.

Compliance →

ISO 27001 certificate

Certificate and statement of applicability.

Compliance →

Security overview

Architecture and control summary for reviews.

Trust Center →

Fine print, briefly

Which law governs the terms?

The governing law and venue are stated in the terms — customer location versions exist for EU and UK entities.

How do you handle legal requests for data?

We require valid legal process, notify customers where permitted, and publish a transparency report twice a year. Coordination metadata is the only thing we could have.

Can we get custom terms?

Enterprise agreements regularly include custom DPA terms, data residency, and uptime commitments.

Need something signed?

Legal inbox is monitored business hours, worldwide — same-day replies on standard requests.