Terms of Service

The service

RealmSSO is single sign-on infrastructure for business software: it lets you connect your customers' identity providers to your application and gives their administrators a portal to configure that connection themselves. It is provided by Peasy Services (“we”). By creating a dashboard account or using a hosted instance you agree to these terms. If you have a signed enterprise agreement with us, that agreement wins wherever the two differ.

Two ways to run it

• Self-hosted. You run the software on your own infrastructure. It is free to use, you are responsible for operating it, and we make no availability or support commitment for it beyond the documentation on this site.
• Managed and Enterprise. We operate it, or support your operation of it, under a written agreement that sets out the service levels, support hours and fees. Those commitments live in that agreement, not on this page.

Your account and your customers

You are responsible for the people you give access to your dashboard and for the administrators you invite on your customers' behalf. Keep sign-in links and portal invitations to yourself: they are single use and short-lived precisely because anyone holding one can act as the person it was issued to. Tell us promptly at support@realmsso.com if you believe an account has been misused.

You represent that you are entitled to connect each identity provider you configure and to receive the directory data a customer's provider pushes to you, and that you will handle that data in line with your own obligations to that customer.

Acceptable use

Do not use RealmSSO to attack, impersonate or gain unauthorised access to anyone; do not attempt to break the isolation between accounts; do not resell a hosted instance without our written agreement; and do not use it for anything unlawful. We may suspend an account that does any of these, and we will tell you why.

Data and security

What we collect and why is in the Privacy Policy. How the product isolates one customer from another, what it encrypts and what it does not, and what is still open is documented — deliberately without gloss — under Security. Read it before you rely on it.

What we do not promise

Except as written in an enterprise agreement, the service is provided as it is, without warranties of any kind, and our total liability to you for anything arising from it is limited to the amount you paid us for the service in the twelve months before the claim — which for the self-hosted tier is nothing. Nothing here limits liability that cannot lawfully be limited.

Ending it

You can stop using the service and delete your account at any time; deleting an account deletes its configuration and the identity realm behind it. We can end these terms for a hosted instance with thirty days' notice, or immediately for a breach of the acceptable-use section, and we will give you a reasonable opportunity to export your configuration first.

Changes

When these terms change in substance, the effective date at the top changes with it and, for hosted instances, we will notify the dashboard's account owners. The current version is always at this address.