Skip to content
Halo by OmniTrust

Legal

Terms of Use

Last updated: May 1, 2026 · Effective: May 1, 2026

These Terms of Use (“Terms”) are a contract between you and OmniTrust Security LLC (“OmniTrust,” “we,” “us,” or “our”) and govern your access to and use of the Halo control plane at app.omnitrusthalo.com, our marketing site at omnitrusthalo.com, and our APIs, software, agent runtimes, gateways, and related services that link to these Terms (collectively, the “Services”).

By creating an account, accessing, or using the Services, you agree to these Terms, our Acceptable Use Policy, and our Privacy Policy. If you do not agree, do not use the Services. If you are an individual, “you” refers to you personally. If you accept these Terms on behalf of an entity formed under the laws of any jurisdiction (“Organization”), “you” refers to that Organization.

For Team and Enterprise customers: If you have signed a separate Master Subscription Agreement, Order Form, or Data Processing Addendum with OmniTrust, that document controls and supersedes these Terms to the extent of any conflict.

1. Eligibility and accounts

You must be at least 18 years old to use the Services. You must provide accurate, current, and complete account information and keep it up to date. You are responsible for safeguarding your credentials and for all activity under your account. Notify us immediately at support@omnitrusthalo.com if you suspect unauthorized access.

If you use a business email address, your account may be linked to your organization’s Halo workspace, and your employer’s administrators may control, monitor, and access your account, including content you submit and agents you deploy.

2. The Services

Halo is an enterprise control plane for governing AI agents. It includes a secure agent runtime, API/MCP/Model gateways, policy-based access control, budgets and cost analytics, in-app chat (“Halo Chat”), and managed and bring-your-own-key model routing. We may add, remove, or change features at any time, with notice for material changes. Beta or preview features are clearly identified, may be discontinued at any time, and are provided subject to the Disclaimer in Section 10.

3. Your content and Customer Data

Definitions

“Customer Data” means anything you, your authorized users, or your deployed agents submit to or generate through the Services, including:

  • Prompts, messages, files, attachments, and other inputs (“Inputs”)
  • Model responses, tool-call results, agent actions, and other outputs (“Outputs”)
  • Configuration, secrets, policies, and credentials you provide
  • Logs of gateway decisions, agent execution traces, and audit evidence

Ownership

As between you and OmniTrust, you retain all rights in your Customer Data. Subject to your compliance with these Terms, OmniTrust assigns to you any right, title, and interest it may have in Outputs generated by your use of the Services.

License to OmniTrust

You grant OmniTrust a worldwide, non-exclusive, royalty-free license to host, transmit, process, display, and otherwise use Customer Data solely as needed to (a) provide and improve the Services for you, (b) prevent and investigate violations of these Terms or the AUP, (c) comply with law, and (d) generate de-identified, aggregated analytics that cannot reasonably be used to identify you or any individual.

Model training

OmniTrust does not use Customer Data to train foundation models. Halo-managed models are operated by third-party model providers (via AWS Bedrock); their handling of Inputs and Outputs is governed by the agreements OmniTrust holds with those providers, which today contractually prohibit training on customer prompts and outputs.

Your representations

You represent and warrant that (i) you have all rights, consents, and permissions necessary for OmniTrust to process your Customer Data as described above, (ii) your Customer Data and use of the Services do not violate any law, contract, or third-party right, and (iii) you have a lawful basis to provide any personal data of others to the Services.

4. Agents, gateways, and Actions

Agents you deploy through Halo are software actors that you configure, you authorize, and you direct to take actions on third-party systems through Halo’s API, MCP, and Model gateways using credentials you supply (BYOK secrets, OAuth tokens, app-connect bindings, and similar).

You are solely responsible for (i) the agents you deploy, (ii) the policies and budgets you assign them, (iii) the third-party systems and data they access, (iv) the Outputs they produce, and (v) the Actions they take. Halo’s gateways, policy enforcement, and budget controls are tools to help you reduce risk; they are not a guarantee that an agent will not produce inaccurate, harmful, or unintended results.

Outputs from large language models may be inaccurate, incomplete, biased, or otherwise unsuitable for your purpose, even when they appear authoritative. You must independently verify Outputs and Actions before relying on them, especially for any high-stakes use (legal, medical, financial, safety-critical, or regulated). Do not use the Services as the sole basis for decisions that materially affect health, safety, finances, employment, housing, credit, or legal rights.

Your use of the Services, and the use of any agent you deploy, must comply with our Acceptable Use Policy, which is incorporated into these Terms by reference.

5. Subscriptions, Halo Credits, and payment

Plans and fees

Plan tiers, prices, and included features are listed at omnitrusthalo.com/#pricing and in your account billing settings. Fees are stated in U.S. dollars and are exclusive of taxes, which you are responsible for paying (except taxes on OmniTrust’s income).

Auto-renewal

Paid plans renew automatically each billing period (monthly or annual) at the then-current rate until canceled. By providing a payment method, you authorize OmniTrust (and its payment processor, Stripe) to charge that method on each renewal. You may cancel at any time from your billing settings; cancellation takes effect at the end of the current billing period and you retain access through that date. No refunds are provided for partial periods or unused features, except where required by law.

Halo Credits

Halo Credits are a prepaid stored-value mechanism used solely to pay for Halo-managed model inference and certain other usage-priced features inside the Services.

  • Purchased Halo Credits represent a prepaid, dollar-denominated balance allocated to your account.
  • Each paid plan includes a monthly allotment of credits that does not roll over between billing periods and is forfeited if unused.
  • Above-allotment credits may be purchased on Professional, Team, and Enterprise plans.
  • Credits have no cash value, are not refundable, cannot be transferred between accounts, and cannot be redeemed for cash except where required by law.
  • Credits do not expire while your account is in good standing. If your account is closed, any remaining purchased credit balance will be handled in accordance with applicable law.
  • We may change credit pricing or per-model debit rates with at least 30 days’ notice for prospective use; changes do not apply retroactively to credits already debited.

Budget controls

The budget warn / block / stop controls in Halo are designed to help you manage spend but rely on usage signals from third-party providers that may arrive with delay. You remain responsible for charges incurred for actual model usage, even when usage briefly exceeds a configured threshold before enforcement takes effect.

Failed payments and plan changes

If a charge fails, we may suspend the Services after notice and a reasonable cure period. Continued failure to pay may result in termination and forfeiture of remaining credit balances to the extent permitted by law. Upgrades take effect immediately and are pro-rated; downgrades take effect at the next renewal.

6. Bring-your-own-key (BYOK) providers

If you provide credentials for a third-party model or tool provider (a “BYOK Secret”) to the Services, you authorize OmniTrust to store the BYOK Secret encrypted at rest and to use it solely to make calls on your behalf through Halo’s gateways, subject to the policies and budgets you configure. Your relationship with the third-party provider is between you and them; their terms, fees, rate limits, and data practices apply to those calls. OmniTrust is not responsible for outages, billing, or content moderation by third-party providers.

7. Intellectual property

The Services and their underlying intellectual property are owned by OmniTrust and its licensors, including the Halo brand, software, models we host, documentation, and all related intellectual property.

License

Subject to your payment for the Services and your acceptance and compliance with these Terms, our Acceptable Use Policy, and our Privacy Policy, OmniTrust grants you a non-exclusive, non-transferable, and revocable license (“License”) to use the Services. If you are an individual, this License applies only to you, personally. If you are an Organization, your License applies only to you, your employees, and your independent contractors while they are performing services for you. You shall not use the Services to create a competing service, benchmark the Services, sub-license the Services, or create time-sharing or resource-sharing access to the Services.

Additional restrictions

You may not (and may not permit any third party or any agent you deploy to):

  • Copy, modify, distribute, publicly display, sublicense, or sell the Services.
  • Reverse engineer, decompile, or disassemble the Services, except where applicable law expressly permits.
  • Use the Services to train any machine-learning model that competes with Halo or the foundation models powering Halo-managed models.
  • Scrape, crawl, or use any data-mining technique against the Services other than through documented APIs.
  • Remove or obscure proprietary notices.
  • Bypass, disable, or circumvent rate limits, gateways, policy enforcement, billing controls, or other technical protections.

Feedback

The Services and their underlying intellectual property are owned by OmniTrust. All suggestions, bug reports, or other feedback shall be considered as derivative works of OmniTrust’s underlying intellectual property. User makes no claim of ownership with respect to any suggestion, bug report, or other feedback.

Trademarks

“Halo,” “OmniTrust,” and our logos are our trademarks. You may not use them without our prior written permission.

8. Security and confidentiality

We implement reasonable administrative, technical, and physical safeguards to protect Customer Data, including encryption in transit and at rest, role-based access controls, and audit logging. No system is perfectly secure, and we do not guarantee that the Services or Customer Data will be free from compromise. Notify support@omnitrusthalo.com of any actual or suspected security incident affecting your account.

9. Suspension and termination

We may suspend or terminate your account (in whole or in part) immediately if (a) you materially breach these Terms or the AUP, (b) we are required to do so by law or by a model or infrastructure provider, (c) your use of the Services creates a security or stability risk, or (d) your account is more than 30 days delinquent on payment.

You may close your account at any time from billing settings. Upon termination:

  • Your right to use the Services ends.
  • We will retain Customer Data for up to 90 days to allow export, after which it may be permanently deleted (subject to legal-hold requirements and aggregated, de-identified analytics that no longer identify you).
  • Sections that by their nature should survive (the last paragraph of Section 3, and Sections 5 (for accrued fees), 7, 10, 11, 12, 13, and 14) survive termination.

10. Disclaimers

The Services and all Outputs are provided “AS IS” and “AS AVAILABLE” without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, non-infringement, accuracy, or that the Services will be uninterrupted, secure, or error-free.

OmniTrust does not warrant that any agent, policy, gateway decision, classifier output, or model response is accurate, current, complete, safe, lawful, or fit for any particular purpose. You assume all risk for your use of and reliance on the Services and any Outputs or Actions. Some jurisdictions do not allow the exclusion of certain warranties; in those jurisdictions, the exclusions above apply to the maximum extent permitted by law.

11. Limitation of liability

To the maximum extent permitted by law:

  • No indirect damages. Neither party will be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost data, or business interruption, even if advised of the possibility of such damages.
  • Cap on direct damages. Each party’s total cumulative liability arising out of or related to these Terms or the Services will not exceed the greater of (a) the amounts you paid to OmniTrust for the Services in the 12 months immediately preceding the event giving rise to the claim, or (b) US$100.
  • Carve-outs. The cap above does not apply to your payment obligations, your indemnification obligations, your breach of Section 7 (Intellectual Property) or the AUP, or either party’s gross negligence, willful misconduct, or fraud.

12. Indemnification

You will defend, indemnify, and hold harmless OmniTrust and its officers, directors, employees, and agents from and against any third-party claim, loss, damage, fine, or expense (including reasonable attorneys’ fees) arising out of or related to (a) your use of the Services, (b) your Customer Data, (c) any agent you deploy and any Action it takes, (d) your violation of these Terms, the AUP, or any law, or (e) your violation of any third party’s rights.

13. Disputes; governing law

These Terms are governed by the laws of the Commonwealth of Virginia, without regard to conflict-of-law principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Any dispute arising out of or related to these Terms will be brought exclusively in the state or federal courts located in Loudoun County, Virginia, and each party consents to personal jurisdiction there.

14. General

  • Notices. Notices to you may be sent by email to the address on your account or by in-product notice. Notices to us must be sent to legal@omnitrusthalo.com.
  • Assignment. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of all or substantially all of our assets.
  • Force majeure. Neither party is liable for failure to perform due to events beyond its reasonable control.
  • Waiver / Severability. The failure to enforce any provision of these Terms by OmniTrust, or the failure by OmniTrust to act in response to a breach of any provision of these Terms by you, shall not operate or be construed as a waiver of any other provision or a waiver of a subsequent breach of the same provision. If for any reason a court of competent jurisdiction finds any provision of these Terms, in whole or in part, to be unenforceable, that provision of the Terms will be enforced to the maximum extent permissible by the court so as to effect the intent of the parties, and the remainder of the Terms will continue in full force and effect.
  • Government end users. The Services are “commercial computer software” under FAR 12.212 and DFARS 227.7202.
  • Export. You will comply with all applicable U.S. and foreign export-control and sanctions laws.
  • Precedence. These Terms, the AUP, and the Privacy Policy take precedence over any competing or inconsistent term in any other document (including but not limited to terms attached to a purchase order) that you may send to OmniTrust.
  • Amendments to these Terms. OmniTrust may update these Terms from time to time. Material changes will be announced at least 30 days in advance by email or in-product notice. Continued use after the effective date constitutes acceptance. These Terms, the AUP, and the Privacy Policy may only be otherwise amended in a writing signed by an authorized representative of OmniTrust.
  • Entire Agreement. These Terms, together with the AUP and Privacy Policy (and any signed MSA / DPA / Order Form for Team and Enterprise customers), constitute the entire agreement between you and OmniTrust regarding the Services and supersede all prior agreements, representations, and understandings between the parties regarding its subject matter.
  • Authority. If you are an individual, you represent and warrant that you have authority to bind yourself to a legal contract. If you are accepting these Terms on behalf of an Organization, you represent and warrant that you are authorized to bind your Organization to these Terms, the AUP, and the Privacy Policy.