trustbox
Get your box

Terms of service

Version 0.1 · Effective October 24, 2026 · Replaced by version 0.2

These terms are an agreement between you and TrustBox LLC of Chicago, Illinois ("we"). They cover trustbox.dev and the trustbox service: the trust centers we host at tbox.page addresses and on customers' own domains, and their API. If you accept them for a company, you confirm you're allowed to. Questions: legal@trustbox.dev.

Who they cover

Your plan

Your plan, price, term, renewal and any refunds are set out in the order we agree with you when you sign up. A month-to-month plan can be cancelled any time and ends when the month you've paid for ends. Prices don't include taxes. If your order and these terms disagree, your order wins.

Your content

You own everything you put into trustbox: your FedRAMP data, documents, reports and settings. You let us store, process, back up and display it only to run the service for you, which includes publishing what you make public and showing agency-only content to the users your trust center grants access. We don't sell your content, use it to train AI models, or use it for anything else.

You decide what to upload, what's public and what's agency-only. Under FedRAMP's rules a trust center grants verified federal users access without manual approval, so you're responsible for what you upload, how it's marked, and having the right to share it.

Your FedRAMP obligations

trustbox gives you the tools for FedRAMP's Certification Data Sharing rules. You stay responsible for your FedRAMP authorization and everything it requires of you, including what you publish, when, and the notices you owe FedRAMP. We aren't affiliated with FedRAMP, GSA or any agency, and using trustbox doesn't guarantee any FedRAMP outcome.

What we do

We run the service with reasonable care, keep it on infrastructure separate from your offering, encrypt your content in transit and at rest, and tell you promptly if we learn of a security incident that affects it. Any availability commitment is in your order; otherwise we don't promise the service will be uninterrupted.

Agency access

Agency-only content is for the federal user who was granted access, for official use. Don't share sign-in links or API credentials. Access is logged, and access logs go to the provider whose trust center you use, who may give them to FedRAMP.

Acceptable use

Don't use trustbox to break the law or anyone's rights; upload malware; get around sign-in, access controls or rate limits; sign in as someone else; or test the service's security or load without our written permission (to report a vulnerability, see security.txt). Don't resell the service without an agreement with us.

Ending the service

You can cancel as your plan allows. We may suspend or end an account that doesn't pay or seriously breaks these terms, with notice first where we reasonably can. When a subscription ends, you have 30 days to export your content and access records; after that we delete them from the service, and backups expire on their normal schedule.

Warranties and liability

Except as these terms or your order say, the service is provided as is. As far as the law allows, neither of us is liable to the other for indirect, incidental, special or consequential damages or lost profits, and each party's total liability is limited to the fees you paid us in the 12 months before the claim. These limits don't apply to fees you owe, or to fraud, gross negligence or wilful misconduct.

US government users

If you use trustbox for a US federal agency, these terms apply to you only as far as federal law allows: federal law governs them, and any clause an agency can't accept, such as indemnification or a choice of state law or courts, doesn't apply to you.

Law and disputes

Illinois law governs these terms, setting aside its conflict-of-laws rules. Disputes go to the state or federal courts in Cook County, Illinois.

Changes

We may update these terms. We'll change the date above and, for changes that affect customers, email them at least 30 days before the changes take effect.

Other versions