Risk belongs with the party who can control it. That's us.

01The entry is guarantee-backed

If a Health Check doesn't surface at least one material risk you didn't already know about, you don't pay. We can only afford this guarantee because we're confident in the finding rate — which tells you something before you've spent a cent.

02SLA credits pay out automatically

Miss a committed response time and 10% of the month is credited per incident, up to 50% — no claim form, no negotiation, no "please hold". An SLA that costs the provider nothing when broken is decoration.

03Fail-closed by default

In ambiguous situations we take the action that cannot destroy anything, and ask. The risky migration waits; your data doesn't gamble. Slow is recoverable. Gone is not.

04Capacity limits protect existing clients

When the roster is full, the intake says so. We don't sell response times we can't staff — growth that breaks the SLA is borrowing from every existing client, and we don't borrow from clients.

05Leaving is easy, on purpose

Cancel to the end of any month: credentials returned and rotated, runbook and architecture notes included, 30 days of questions free. A provider you can leave cheaply is a provider who has to stay good.

Honesty cuts both ways. We don't promise 100% uptime, don't sell 24/7 coverage we can't reliably staff, and don't operate apps handling medical records, self-custodied payment data, gambling, or regulated financial services. The full list of refusals is on the front page — stated before you pay, not discovered after.