Subscription terms

Version 0.1 · Effective October 31, 2026 · Draft pending counsel review

These terms cover how customers buy and pay for TrustBox. They're part of our terms of service, and they apply alongside your order: the plan, price and dates you see at checkout or in a quote from us. If your order and these terms disagree, your order wins. Questions: legal@trustbox.dev.

What every plan includes

Every plan includes everything a FedRAMP Certification Data Sharing rule asks a trust center to do, for one FedRAMP offering. We never hold back a feature one of those rules requires so we can sell it separately.

Automation is separate. When we offer it, features such as drafted notices, escalations and submitting on your behalf through channels FedRAMP sanctions are a paid add-on, available on any plan.

Plans

• Month-to-month: billed every month. Cancel any time; the plan ends when the month you've paid for ends.
• 12-month plan: a 12-month commitment, billed every month. You can't cancel before the 12 months are up, and you owe each monthly payment in that time.
• Annual prepaid: billed once a year, in advance.
• Turnkey: a one-time fee. We build your trust center for you, and the fee includes your first year of service. A year after you pay, your subscription renews on the annual prepaid plan.

Prices

• Prices rise as the CR26 deadline nears. We set each plan's price for a window of time, and later windows cost more. The price you pay is the one for your plan at the time you buy, as shown at checkout.
• Price locks. When you start signing up, we may confirm a price lock to you by email. A price lock holds the price it names for 24 hours.
• Turnkey quotes. We may give you a written turnkey quote, which holds its price for the period it states, between 14 and 30 days. Turnkey has limited build capacity each week, so it can sell out, and we stop selling it once a build can no longer finish before FedRAMP's 2027-08-01 trust center date for existing Rev5 offerings.
• The add-on's price is fixed. It doesn't rise with the deadline.
• Taxes. Prices don't include taxes. Where we have to collect tax, it's added to your invoice.
• Nothing you send us in a form or a request sets a price. The price always comes from our current price list, your price lock or your quote.

Your first year, and renewal

• You keep the price you bought at for your first year.
• After that, each renewal is at the price of your plan at the time it renews. We email you the renewal price at least 30 days before a renewal at a higher price.
• Month-to-month and the 12-month plan renew every month; annual prepaid and the turnkey renewal renew every year. After its 12 months, the 12-month plan continues month to month at the plan's price at the time, and you can cancel it any time.
• Turnkey renews on the annual prepaid plan at its price at renewal time.

Paying

• By card: we charge your card when each payment is due, through our payment processor. We don't store your card number.
• By invoice: where we agree to invoice you, each invoice states its payment terms (the number of days until it's due).

If a payment is late

We never switch off a trust center automatically. Your agencies depend on it, so your public page and your agencies' access keep working while a payment is late.

1. Grace period. By card, you have 14 days from the first failed charge on an invoice, and we email you when the charge fails. By invoice, you have until the invoice's due date, and we email you 3 days before it's due.
2. Read-only. If the invoice is still unpaid when the grace period ends, your account becomes read-only. Your public trust center page, its FedRAMP JSON, agency sign-in and agency access keep working. You can't publish, edit or push documents. You can still manage the people on your account, so you can add whoever will pay. We email you when this happens. Paying the invoice ends it, and we email you to confirm.
3. Disabling. After an account has been read-only, TrustBox staff may disable it by hand, after telling you. Nothing disables an account automatically.

Cancelling and changing plans

• Month-to-month: cancel any time, effective at the end of the month you've paid for.
• 12-month plan: cancel effective at the end of the 12 months, or any month after that.
• Annual prepaid and the turnkey renewal: cancel effective at the end of the year you've paid for.
• What happens to your data when your subscription ends is in the terms of service: you have 30 days to export it, and records FedRAMP's rules make us keep stay for their retention period.

Refunds

Payments aren't refundable, except where these terms or your order say otherwise or the law requires it. If we can't deliver a turnkey build you've paid for, we refund the turnkey fee.

Changes

We may change these terms. Each version has a number and an effective date, and earlier versions stay published at trustbox.dev/subscription-terms with their numbers. We email customers at least 30 days before a change takes effect. A change never alters a price you've already locked, been quoted or paid for.