The agreement between you and Canopy for using our platform, written plainly. These terms cover who can use the Services, how accounts and billing work, what each side is responsible for, and the limits of our liability.
What this agreement is and who it binds.
These Terms of Service ("Terms") are a binding agreement between Canopy Identity Inc. ("Canopy", "we", "us") and the individual or organization that accesses the Services ("you", "Customer").
By creating an account, accessing our applications or API, or otherwise using the Services, you agree to these Terms. If you're agreeing on behalf of an organization, you represent that you're authorized to bind it. If you don't agree, don't use the Services.
Enterprise customers may instead sign a negotiated Master Services Agreement; where one exists, it governs over these Terms to the extent of any conflict.
What Canopy provides, and what we may change.
Canopy provides hierarchical identity and access-management infrastructure: applications, an API, and related tools for managing organizations, roles, permissions, identities, and authentication.
We may improve, modify, or discontinue features over time. For material reductions to a paid feature you rely on, we'll give reasonable notice. Beta or preview features are offered "as is" and may change or be withdrawn.
Your responsibilities for the account and its security.
How the Services may and may not be used.
You agree not to, and not to permit others to:
We may suspend access to address material violations or active threats, with notice where practicable.
Adult content, exploitation, and trafficking are not permitted on the platform.
In addition to the Acceptable Use restrictions above, you may not use the Services, including our authentication, identity, and access-control infrastructure, to build, host, operate, support, or provide access to any application, website, or service that:
These restrictions apply regardless of whether the underlying activity is lawful in any particular jurisdiction. If we become aware that any application, website, or customer using the Services engages in the foregoing, we reserve the right to suspend or terminate the Services immediately, with or without notice, and to disable access to the offending content. We may also report apparent illegal content or activity, including child sexual abuse material, to law enforcement and the appropriate authorities, including the National Center for Missing & Exploited Children (NCMEC), as permitted or required by law.
Who owns what, and how we handle the data you put in Canopy.
You own your data. As between you and Canopy, you retain all rights to the identities, configuration, and content you submit ("Customer Data"). You grant us a limited license to process it solely to provide and secure the Services.
You're responsible for the lawfulness of your Customer Data and for having any necessary rights and consents from your end users. Security practices are described on our Security page. For end-user personal data, we act as your processor under our Data Processing Addendum; our handling of personal data is described in our Privacy Policy.
Plans, payment, and what happens on non-payment.
See our Pricing page for current plans.
What stays ours, and what you may give us.
The Services, including all software, documentation, and trademarks, are owned by Canopy and our licensors and are protected by law. We grant you a limited, non-exclusive, non-transferable right to use the Services during your subscription, subject to these Terms.
If you send us suggestions or feedback, you grant us a perpetual, royalty-free license to use it to improve the Services, without obligation to you.
The limits of what we promise.
We provide the Services with reasonable skill and care and aim for the availability described on our status page and any applicable SLA. Except as expressly stated, the Services are provided "as is" and "as available."
To the fullest extent permitted by law, we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We don't warrant that the Services will be uninterrupted or error-free.
Caps and exclusions on damages.
To the fullest extent permitted by law, neither party is liable for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data.
Our total liability arising out of or related to the Services is limited to the amounts you paid to Canopy for the Services in the 12 months before the event giving rise to the claim. These limits don't apply to liabilities that cannot be excluded by law.
How the agreement starts, ends, and what happens to your data.
These Terms apply for as long as you use the Services. You may stop and close your account at any time. Either party may terminate for the other's material breach not cured within a reasonable notice period.
On termination, your right to use the Services ends. You may export your Customer Data for a limited window, after which we delete it per our retention practices, subject to backup-rotation windows and legal requirements. Terms that by their nature should survive (fees owed, intellectual property, disclaimers, and liability limits) survive termination.
How we'll tell you when this changes.
We may update these Terms as our Services and the law evolve. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify account admins by email or an in-product notice. Continued use of the Services after a change means you accept the updated Terms.
How to reach us.
Questions about these Terms, or need a Master Services Agreement, DPA, or signed order form? Reach our team through the Company page. Enterprise customers can request our MSA, DPA, and security documentation under NDA.