Accounts and authority
Create an account using an email address you control. You must have authority to create the workspace and submit its information. Keep your password and MFA recovery material secure. Workspace owners control membership and billing.
No secret custody
Submit credential lifecycle metadata only. Do not put passwords, API keys, tokens, private keys, certificate bodies or recovery codes into inventory fields. Continue to store and rotate credentials in the provider or vault that issued them.
Plans and payment
Free includes 25 credential records and two members. Starter is USD 39 per workspace per month for 250 records and ten members. Growth is USD 129 per workspace per month for 2,000 records and unlimited members. Paid plans renew monthly until canceled. Stripe Checkout shows the subscription amount, applicable taxes and billing frequency before you authorize payment. Creating a Free account does not authorize a charge.
Only currently described capabilities are included. Planned integrations or features are not a commitment to deliver them by a particular date. Any future price change will be communicated before it affects a renewal.
Cancellation and billing questions
You can cancel future renewals through Plan & billing. Cancellation takes effect at the end of the paid period, with paid access continuing until then. Voluntary cancellation does not automatically refund unused time. Contact support@keyguardrail.com for a billing error, duplicate charge, refund request, or help canceling. Refund decisions are reviewed individually; any rights required by applicable law remain available.
Plan changes are available only where the workspace interface offers them; otherwise contact support. Cancellation does not itself delete your account or records. Free limits apply after paid access ends; excess records remain subject to access and retention controls rather than being erased because of cancellation.
Unpaid renewals
If a renewal remains unpaid, inventory editing becomes read-only 24 hours after the original failed renewal, and credential alerts stop after five days. Authorized sign-in, viewing, export and payment recovery remain available. Payment recovery within the original period preserves the renewal date. Nonpayment alone does not delete the workspace. Contact support if you need help returning after that period ends.
Your data and privacy
You retain rights to workspace information and authorize us to process it to provide, secure and support the service. See the privacy notice and deletion policy for rights requests, verification, retention exceptions and residual backup copies. Necessary financial records can be retained separately from an operational workspace.
Acceptable use
Do not disrupt the service, bypass access controls, introduce malicious material, use the service unlawfully or access another workspace without authorization. Report security issues to security@keyguardrail.com. We may restrict access when needed to protect users or investigate misuse.
Service boundaries
KeyGuardRail monitors lifecycle metadata and records your team’s work. It does not replace your vault, provider controls, incident response or independent security judgment. Maintain your own operational safeguards; no service can guarantee that every deadline or notification will be delivered without interruption. The service continues to improve, and no specific uptime or support-response guarantee is included unless separately agreed in writing.
Contact
For account or service questions, contact hello@keyguardrail.com. These terms do not exclude rights or remedies that cannot lawfully be excluded.