Terms of Service

Enji Guard provides AI-code audit workflows, reports, runbooks, and related software designed to help teams identify security, maintainability, testing, dependency, and production-readiness risks in software projects.

Selected actions are executed by Enji Fleet, the agents orchestrator that handles agent execution, runbooks, tasks, schedules, artifacts, authentication, and permissions. In these terms, “the Service” means Enji Guard together with the Enji Fleet agents orchestrator.

The Service may be provided as a hosted product, private deployment, self-hosted deployment, implementation support, or a combination of those options depending on your agreement. Enji Guard is provided by Enji.ai; you can reach us at [email protected].

You may connect, audit, or test only repositories, organizations, projects, websites, domains, and systems that you own or have permission to use for these purposes.

If you use Enji Guard on behalf of a company, agency, client, or other organization, you represent that you are authorized to accept these terms for that organization.

You retain ownership of your code, repositories, project data, credentials, policies, reports, and other materials you provide to the Service.

You grant Enji Guard the limited rights needed to operate the Service, run audits, generate reports, provide support, troubleshoot issues, and maintain security and reliability.

You are responsible for removing or limiting access to data that should not be submitted to the Service, unless your deployment and written agreement explicitly permit that data.

You are responsible for protecting your account access, API keys, repository permissions, deployment credentials, and administrative users.

Do not submit production secrets, regulated personal data, or client-confidential materials unless the relevant deployment, permissions, and contractual safeguards are in place.

If you believe your account, keys, or deployment have been compromised, notify us promptly so we can help reduce risk.

Enji Guard relies on AI and automated agents. Their output can be incomplete, inaccurate, unsafe, or outdated, and should not be treated as a substitute for professional engineering, security, legal, or compliance judgment.

You remain responsible for reviewing findings, validating fixes, testing changes, approving releases, and complying with laws, contracts, and security requirements.

Unless a feature clearly states otherwise, the Service does not merge pull requests or deploy code automatically.

When you connect a repository, Enji Guard works through a GitHub App with access to the repositories you select. It may read code and metadata to run audits and, where enabled, open issues, open pull requests and pull-request branches with proposed changes, and comment on issues and pull requests.

By default, Enji Guard does not merge pull requests, deploy code, scan repositories you have not selected, or use repository access for unrelated accounts. You can revoke access at any time in your GitHub settings, which stops future access.

Some features run active checks against websites, APIs, and web resources (for example, runtime checks and Auto-pentest). Active checks run only with your explicit consent and only against targets you own or are authorized to test.

By enabling active checks, you confirm that you have authority over the target, that your organization and hosting providers permit the testing, and that the target is in scope. Prohibited testing includes denial-of-service or load testing, credential attacks, data exfiltration, malware or destructive payloads, and scanning unrelated or out-of-scope systems.

Active checks can produce temporary errors, higher request volume, or security alerts on the target. See the Authorized Testing page for the full conditions.

Enji Guard reports are decision-support tools. They are not a guarantee that software is secure, compliant, defect-free, or production-ready.

The Service may produce false positives, false negatives, incomplete findings, or recommendations that require engineering judgment before implementation. You remain responsible for your security, compliance, and release decisions.

You may not use Enji Guard to attack systems, evade security controls, extract third-party secrets, violate laws, infringe rights, or process data you are not authorized to access.

You may not misuse agents or prompts to cause unauthorized actions, run unauthorized scanning, violate a provider’s terms, interfere with the Service, bypass rate limits, reverse engineer hosted components except where allowed by law, or use the Service to build a competing product from confidential or non-public features.

You are responsible for your use of the Service. To the extent permitted by law, you will defend and indemnify Enji.ai against third-party claims, losses, and expenses arising from your use of the Service in breach of these terms — including active testing or data submission you were not authorized to perform.

Free checks, trials, pilots, and demos may be limited by repository count, duration, audit scope, deployment type, or usage volume.

Paid subscriptions, implementation work, private and self-hosted deployments, and enterprise terms are governed by the applicable order form, invoice, statement of work, or written agreement. Preview, beta, or evaluation features may change or be removed at any time.

We may pause, suspend, or limit access to protect the Service or others — for example, in cases of abuse, suspected compromise, risk to a provider limit, legal or security risk, non-payment, or violation of these terms.

We may improve, modify, suspend, or discontinue parts of the Service. We aim to avoid unnecessary disruption, but we do not promise uninterrupted or error-free operation unless a separate written agreement says otherwise.

Scheduled audits and recurring checks run on a best-effort basis and are not an uptime or coverage commitment.

To the maximum extent permitted by law, the Service is provided without warranties of merchantability, fitness for a particular purpose, non-infringement, or uninterrupted operation.

To the maximum extent permitted by law, Enji Guard will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, including lost profits, lost revenue, loss of data, business interruption, or security incidents not directly caused by our breach of a written obligation.

Signed customer-specific agreements may contain additional or different terms, including data processing terms, governing law, and dispute resolution. Where such an agreement applies, it controls over these terms for that customer.

We may update these Terms of Service as the product, deployments, or legal requirements change. The updated version will be posted on this page with a new effective date.

Continued use of Enji Guard after an update means you accept the revised terms.