PingTraceSSH Legal

PingTraceSSH uses information to:

• Authenticate users
• Connect to AWS through STS AssumeRole
• Discover AWS network configuration
• Build network snapshots
• Detect network changes
• Evaluate Critical Paths
• Perform Terraform pre-change assurance
• Deliver HCP Terraform Run Task results
• Deliver alerts
• Manage subscriptions
• Provide customer support
• Secure and troubleshoot the service
• Improve product reliability

PingTraceSSH does not sell customer personal information or use customer infrastructure data for advertising.

PingTraceSSH uses a customer-created PingTraceSSHReadOnlyRole, AWS STS AssumeRole, a customer-specific External ID, temporary credentials, and read-only network-discovery permissions.

PingTraceSSH does not require or store customer IAM access-key pairs for AWS scanning.

These providers process information under their own terms and privacy practices.

PingTraceSSH uses Google Analytics to measure site visits and selected interactions, such as page, product-demo, and free-tool activity. PingTraceSSH does not use third-party advertising trackers.

Necessary authentication and session storage is used to keep users signed in and operate account features. The interface and browser-based tools may also store preferences or local state, such as sidebar state, display preferences, or game progress.

PingTraceSSH retains account information, infrastructure history, network snapshots, Terraform analysis history, billing metadata, and alert history as needed to provide the service and maintain historical change context.

Canceled subscriptions may retain historical configuration and analysis records unless the customer requests account or data deletion, subject to legitimate legal, security, fraud-prevention, or accounting requirements.

Retention controls may evolve as the service matures.

Users may contact hello@pingtracessh.com to request account or personal-data deletion. PingTraceSSH does not promise an automated deletion timeline.

• Removing PingTraceSSHReadOnlyRole from AWS immediately prevents future AWS AssumeRole access.
• Deleting or disabling an AWS connection in PingTraceSSH stops future scanning for that connection.
• Some billing or accounting records may need to be retained where legally required.

PingTraceSSH uses read-only AWS access, temporary STS credentials, External ID confused-deputy protection, server-side handling of secrets, authenticated customer-scoped records, and signature verification for HCP Terraform and Stripe webhooks.

PingTraceSSH is intended for professional and business users and is not directed to children. PingTraceSSH does not ask users to provide their age as part of ordinary account use.

Depending on location, users may have rights to request access, correction, deletion, or information regarding personal data PingTraceSSH maintains. Direct requests to hello@pingtracessh.com .

This policy may be updated as the service evolves. When it changes, the “Last updated” date at the top of this page will be revised.

PingTraceSSH Cloud provides network change assurance and related infrastructure tooling, including:

• AWS network discovery
• Network snapshots
• Change detection
• Critical Path validation
• Terraform pre-change assurance
• HCP Terraform Run Task integration
• Alerts
• Network topology visualization
• Browser-based networking tools

Features may change as the service evolves.

Users may connect, scan, analyze, or test only AWS accounts, networks, infrastructure, and systems they own or are authorized to access.

Users may not use PingTraceSSH for unauthorized scanning, intrusion, exploitation, credential theft, malicious disruption, illegal activity, or attempts to bypass service security. Free browser-based networking tools must also be used only on systems the user is authorized to test.

Customers are responsible for:

• Maintaining AWS account security
• Controlling access to their PingTraceSSH account
• Reviewing infrastructure changes before deployment
• Choosing appropriate HCP Run Task enforcement settings
• Validating changes for their own environment
• Ensuring they are authorized to connect AWS environments

PingTraceSSH assists with network-change analysis but does not replace customer change management, testing, or operational review.

PingTraceSSH may classify proposed Terraform network changes as:

SAFE

No configured Critical Path becomes newly unreachable based on the modeled change.

REGRESSION

At least one currently healthy Critical Path would fail after the modeled change.

INCONCLUSIVE

PingTraceSSH cannot safely prove the proposed network result.

FAILED

The analysis or required processing did not complete successfully.

Results are based on the infrastructure data and product capabilities available at analysis time. Mandatory HCP Terraform enforcement may block a Terraform run when PingTraceSSH returns a failing result. PingTraceSSH does not guarantee detection of every possible outage or configuration issue.

Billing is handled by Stripe. Subscriptions renew monthly unless canceled. Customers may cancel through the Stripe Customer Portal, and cancellation typically remains effective through the paid billing period. Plan access may stop after the subscription becomes inactive. Historical service data may be preserved as described in the Privacy Policy.

The Founding Pilot includes:

• 1 AWS account
• 1 HCP Terraform workspace or integration
• Up to 10 active Critical Paths
• 15-minute scheduled AWS scans

Pricing and plan limits may change for future customers. Founding Pilot customers retain the $299/month price for 12 months from the date their subscription begins.

PingTraceSSH may provide browser-based networking and diagnostic tools at no charge. These tools are provided for convenience and informational purposes.

Users remain responsible for validating generated configurations, calculations, commands, or diagnostic results before production use.

PingTraceSSH may modify, improve, suspend, or discontinue features as the service evolves. PingTraceSSH does not promise uninterrupted availability or provide a formal service-level agreement through these Terms.

The service and free tools are provided on an “as available” basis. Network and cloud environments are complex, and PingTraceSSH cannot guarantee uninterrupted service, complete detection of every configuration issue, prevention of every outage, correctness of every third-party system, or that every Terraform or AWS configuration can be modeled conclusively.

To the extent permitted by applicable law, PingTraceSSH is not responsible for indirect, incidental, special, consequential, or punitive losses, or for lost profits, revenue, data, goodwill, or business interruption arising from use of the service or free tools.

To the extent permitted by applicable law, PingTraceSSH’s total liability for claims relating to the paid service will not exceed the amount the customer paid PingTraceSSH for that service during the 12 months before the event giving rise to the claim. These limitations do not apply where applicable law does not permit them.

Users may not perform unauthorized network scanning; attack PingTraceSSH; bypass account, security, or service limits; scrape or automate abusive traffic; resell access without permission; or use the service to violate applicable law.

PingTraceSSH may suspend accounts involved in abuse or security threats.

Customers may cancel billing through Stripe. PingTraceSSH may suspend or terminate access for nonpayment, abuse, security threats, or violations of these Terms. Account and data handling after termination follows the Privacy Policy.

Integrations such as AWS, HCP Terraform, Stripe, and Slack operate under their own terms and availability. PingTraceSSH is not responsible for outages or failures originating solely from those third-party services.

PingTraceSSH software, branding, site content, and proprietary platform components remain the property of PingTraceSSH and its licensors.

Customers retain ownership of their AWS configuration, Terraform configuration, infrastructure data, and other customer-provided content. Customers grant PingTraceSSH only the rights needed to process that content to provide, secure, support, and maintain the service.

For legal, privacy, security, or service questions, contact hello@pingtracessh.com .