The agreement and who it binds
These Terms of Service form an agreement between YTT SECUNET PRIVATE LIMITED, a private limited company incorporated in India with CIN U46599TN2026PTC198461 (YTT Secunet, we), and the organisation that creates a console account or signs an order form (the customer, you). The person accepting confirms they have authority to bind that organisation.
The agreement consists of these terms, any order form, the Data Processing Agreement (DPA), the Business Associate Agreement (BAA) where one is signed, and the service level terms for your plan. If they conflict, the order form prevails, then the DPA or BAA on data protection matters, then these terms.
The service and the plans
YTT Secunet is a sovereign AI inference gateway. You point an OpenAI or Anthropic compatible SDK at a YTT Secunet regional base URL. The gateway evaluates your policy, masks personal data where the policy requires it, routes the request to an endpoint the policy admits, and returns the response with a signed residency receipt. YTT Secunet does not host foundation models. It routes to provider endpoints and self-hosted runtimes that you select and connect.
- Growth: $799 per month, or $679 per month billed annually. Includes 1M requests per month in the EU, UK and US zones and 90 days of receipt retention.
- Enterprise Sovereign: $2,499 per month, or $2,124 per month billed annually. Includes 10M requests per month in all zones (EU, UK, CH, GCC, APAC, US), custom Rego policies and 7 years of receipt retention.
- Sovereign Dedicated: an isolated deployment in your VPC or on premises, including air-gapped installations, priced by order form, typically $45,000 to $150,000 per year.
- We improve features over time, but we will not materially reduce the core functions of your plan during a paid term.
The 14-day free production trial
Growth and Enterprise Sovereign each come with one 14-day free production trial per organisation. Trial traffic can be real production traffic: zero data retention, residency enforcement and signed receipts work exactly as they do on a paid plan. Usage is capped at the monthly request allowance of the plan you are trialling.
Service level commitments and service credits do not apply during a trial. When the trial ends, the account moves to the paid plan you select. If you select none, routing stops and we delete your configuration and trial receipts 30 days later, unless you subscribe before then.
Fees, overage and taxes
Subscription fees are billed in advance, monthly or annually. A request is one API call to a YTT Secunet gateway endpoint, as metered in the console. Requests above your allowance are billed monthly in arrears at $0.60 per 1,000 requests on Growth and $0.25 per 1,000 requests on Enterprise Sovereign. Unused requests do not roll over.
Fees exclude taxes. You pay applicable sales, use, value added, goods and services and withholding taxes, other than taxes on our income. Invoices are due within 30 days. If an undisputed invoice is more than 30 days overdue, we may suspend the service after 10 days' written notice.
Model provider charges are separate. You connect providers with your own accounts and credentials, and they bill you under their own terms. We may change list prices with at least 30 days' notice, effective from your next renewal.
Acceptable use
You must not use the service, or let anyone else use it, to do any of the following.
- Break any law, including export control and sanctions law, or route data in breach of an obligation you owe to someone else.
- Send a model provider content that breaches that provider's usage policies.
- Try to bypass policy evaluation, rate limits or receipt signing, or load test or scan the gateway without our written approval. Good-faith vulnerability reports to security@yttsecunet.com are welcome.
- Reverse engineer the service except where law permits it, or use it to build a competing gateway.
- Send protected health information unless a BAA is in place and the traffic is restricted to US-only routes as that agreement describes.
- Share console credentials or API keys outside your organisation.
Suspension
We may suspend traffic that threatens the security or availability of the service, or that we reasonably believe breaks the acceptable use terms. We will tell you why, limit the suspension to the affected tenant or key where we can, and restore service once the issue is resolved.
Your data and zero data retention
You own your data: the prompts and completions you route, your policies and configuration, and the receipts generated for your traffic. You grant us only the rights we need to process it to provide the service.
Prompts and completions stream through memory in the regional data plane. They are never written to disk and never used to train any model, ours or anyone else's. Receipts and configuration are encrypted with AES-256 at rest, and traffic uses TLS 1.3 in transit. Receipts are retained for 90 days on Growth and 7 years on Enterprise Sovereign; on Sovereign Dedicated you control retention.
Our processing of personal data on your behalf is governed by the DPA, and of protected health information by the BAA where one is signed. We use aggregate service metrics, such as request counts, latency and error rates, to run and improve the service. They never contain prompt or completion content.
Providers and endpoints you connect
You choose the model providers and runtimes YTT Secunet routes to and connect them with your credentials, held in the YTT Secunet secret vault or your own key management service. Your use of each provider is governed by your contract with it. YTT Secunet routes only to endpoints your policy admits and records the endpoint that served each request, but we do not control providers and are not responsible for their outputs, availability or data practices.
Service levels and support
Enterprise Sovereign carries a 99.95% monthly gateway availability commitment, and Sovereign Dedicated a 99.99% commitment with in-jurisdiction failover, each measured and credited under the service level terms for the plan. Service credits are your sole remedy for a missed availability commitment. The availability of the model providers you connect is outside it. Growth has no financially backed availability commitment; it runs on the same infrastructure, and regional status is published on our status page.
Support responds within 1 business day on Growth and within 4 hours on Enterprise Sovereign. Sovereign Dedicated support terms are set in the order form.
What YTT Secunet is not
YTT Secunet is an infrastructure routing and technical compliance enforcement platform. It enforces technical data residency and generates cryptographic execution logs. It does not provide legal advice, and nothing in the product, the policy packs, our reports or our documentation is legal advice.
A policy pack such as eu-gdpr-strict or us-hipaa-only encodes our reading of the law at the version you deploy. You decide whether a pack fits your obligations. You remain responsible for your data protection impact assessments, transfer impact assessments, records of processing, notices to individuals and overall legal compliance. Evidence from YTT Secunet supports those documents; it does not replace them.
We reduce exposure to foreign government access by design. YTT SECUNET PRIVATE LIMITED is incorporated in India, and we do not claim that it, or any US-parented provider you connect, is beyond the reach of the US CLOUD Act or of Indian government access powers.
Confidentiality and intellectual property
Each party keeps the other's confidential information confidential, uses it only for this agreement and protects it with at least reasonable care. We own the service, the policy pack library and our documentation. You own your policies and your data. The offline verifier, ytt-verify, is published under its own open-source licence. If you send us feedback, we may use it without obligation to you.
Warranties and indemnities
We warrant that the service will perform materially as described in our documentation and that we will maintain the security measures set out in the DPA. If we breach this warranty, we will fix the problem; if we cannot within 30 days, you may terminate the affected subscription and receive a refund of prepaid fees for the remaining term. Otherwise, to the extent the law allows, the service is provided without other warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement.
We will defend you against third-party claims that the service, used as permitted, infringes their intellectual property rights, and pay the damages and costs finally awarded. You will defend us against third-party claims arising from your data or from your breach of the acceptable use terms. The party seeking defence must give prompt notice, control of the defence and reasonable cooperation.
Limitation of liability
Neither party is liable for indirect, incidental, special or consequential damages, or for lost profits, revenue or goodwill, even if advised they were possible. Each party's total liability arising out of this agreement is limited to the fees paid and payable by you in the 12 months before the event giving rise to the claim. These limits do not apply to your payment obligations, to either party's indemnity obligations, to breach of confidentiality, or to liability that the law does not allow to be limited.
Term, renewal and termination
Annual subscriptions renew for another year unless either party gives notice at least 30 days before the term ends. Monthly subscriptions can be cancelled in the console at any time, effective at the end of the billing month. Either party may terminate for a material breach not cured within 30 days of written notice, or immediately if the other party becomes insolvent.
On termination, routing stops. You have 30 days to export your configuration and receipts, after which we delete them within a further 30 days, except billing records we must keep by law. Merkle roots are published and ytt-verify runs offline, so exported receipts stay verifiable after your account closes.
Governing law and courts
This agreement is governed by the laws of India, without regard to its conflict of laws rules. The courts at Chennai, Tamil Nadu have exclusive jurisdiction over any dispute arising from it, and each party submits to those courts. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
General
Neither party may assign this agreement without the other's consent, except to a successor in a merger or a sale of substantially all its assets. Neither party is liable for delay caused by events beyond its reasonable control. We may update these terms by posting a new version, with at least 30 days' notice of material changes, which apply from your next renewal unless you accept them sooner. Legal notices go to legal@yttsecunet.com and to the address in your order form.