Legal · Terms of Use · Version 2.0 · Effective 19 August 2026

Terms of Use

These terms of use (the « Terms ») govern access to and use of the Servor service (the « Service »), published by BENODE, a simplified joint-stock company (société par actions simplifiée) registered with the Trade and Companies Register of Le Havre under number 934 272 030, whose registered office is at 113 boulevard de Strasbourg, 76600 Le Havre, France (« Servor », « we »). By creating an account or using the Service, the customer (« you ») accepts these Terms in full. This is a courtesy translation; in the event of a discrepancy, the French version prevails.

1. Definitions

• Service: the Servor platform at servor.benode.fr, its interfaces, its APIs, the agent installed on your machines, and the public status pages.
• Account: the named workspace granting access to the Service.
• Team: a group of Accounts sharing one environment, under the responsibility of an owner.
• Target infrastructure: any server, virtual machine or system you connect to the Service.
• Content: any data, configuration, command, command output, log or secret you transmit, generate or store through the Service.
• Agent: the program supplied by Servor, installed by you on a target infrastructure, which locally executes the commands you authorise.

2. Acceptance and changes

Use of the Service is conditional on full acceptance of these Terms. If you do not accept them, you must not use the Service.

Servor may amend these Terms. Material changes are notified by email or through the interface at least 30 days before they take effect. Continued use beyond that date constitutes acceptance. Otherwise, you may terminate without penalty before the effective date.

3. Account and access security

Creating an Account requires a valid email address and strong authentication.

• you provide accurate, complete and up‑to‑date information;
• you keep your credentials and multi‑factor authentication factors confidential, and inform us without delay of any unauthorised use;
• you are responsible for every action carried out from your Account, including by a third party to whom you granted access, whether deliberately or through negligence;
• you do not share an Account between several individuals: each user has their own Account.

4. Zero‑knowledge architecture — consequences

The Service relies on end‑to‑end encryption: your vault passphrase, the encryption key derived from it and the associated private key never leave your browser and are never transmitted to Servor.

As a result, Servor is technically unable to:

• reset, recover or bypass a forgotten vault passphrase;
• recover a lost recovery phrase;
• decrypt your secrets without action on your part;
• execute a command on a target infrastructure configured to require signed execution, absent an authorisation signed in your browser.

5. Target infrastructure — authorisation and responsibility

You represent and warrant, for each target infrastructure connected to the Service, that you own it or hold a written, valid and unrevoked mandate authorising you to perform administration operations on it.

You are solely responsible for ensuring your operations comply with the contracts, licences and policies applicable to that infrastructure, as well as with any obligations you may owe to your own customers or hosting providers.

You are the principal for every execution. Servor provides a transmission and execution tool; it exercises no editorial control over the commands you trigger and does not assess whether they are appropriate.

6. AI copilot — nature and limits

The Service includes a copilot based on language models, offering three approval modes (Ask, Plan, Auto). You expressly acknowledge:

• that the copilot's proposals are suggestions, which may contain errors, approximations or recommendations unsuited to your context;
• that they are in no way a substitute for the judgement of a qualified operator, and that no outcome is guaranteed;
• that the choice of approval mode is yours, and that using Auto mode — which executes commands not classified as destructive without individual validation — is your decision and your responsibility alone;
• that the safeguards implemented (prohibited command list, syntax analysis, risk classification, signed execution, logging) reduce risk without ever eliminating it, and do not constitute a warranty against incidents;
• that your requests and the associated technical context are transmitted to the inference provider identified in the privacy policy.

7. Backups

Servor is not a backup service. Snapshots that may be taken before a sensitive operation are technical conveniences, not a restoration guarantee. It is your responsibility to implement and test your own backup policy for your target infrastructure and its data, independently of the Service.

8. Acceptable use

You must not use the Service to:

• access, scan or modify any infrastructure without due authorisation, including for testing purposes;
• conduct any unlawful or fraudulent activity, or infringe third‑party rights;
• distribute malware, conduct an attack, a denial of service, unauthorised scanning or data exfiltration;
• circumvent the technical limits, quotas, access controls or security mechanisms of the Service;
• reverse engineer, extract the source code, or reconstruct all or part of the Service, except within the mandatory limits of article L.122‑6‑1 of the French Intellectual Property Code;
• resell, sublicense, pool or white‑label the Service without prior written agreement;
• submit particularly sensitive data to the Service (health data, third‑party banking data, data falling under article 9 GDPR) without first entering into a specific agreement with Servor.

9. Intellectual property

The Service, its code, interfaces, trademarks and documentation remain the exclusive property of BENODE. These Terms transfer no intellectual property: they grant you a personal, non‑exclusive, non‑transferable and revocable right of use, limited to the term of your subscription and to your internal business needs.

You retain all rights in your Content. You grant Servor a non‑exclusive licence, strictly limited to what is necessary to provide, secure and maintain the Service, for the term of the contract.

You may send us feedback or suggestions. Where you do, you grant us a free, irrevocable and perpetual right to use them to improve the Service, without conferring any right in the Service upon you.

10. Availability — best‑efforts obligation

Servor is bound by a best‑efforts obligation and takes reasonable steps to ensure the availability and continuity of the Service. No availability rate is guaranteed on self‑service plans; service level commitments are entered into only under a negotiated Enterprise contract.

The Service may be interrupted for maintenance, upgrades, or due to a third‑party provider failure (hosting, inference, payment, network). Servor endeavours to announce planned maintenance.

11. Suspension and termination

Servor may suspend access, without notice where urgency or security so requires, in the event of:

• breach of these Terms, of the law, or infringement of a third party's rights;
• a threat to the security, integrity or availability of the Service or of its other users;
• abnormal use, in particular repeated breaches of rate limits or manifestly disproportionate consumption;
• non‑payment, under the conditions set out in the Terms of Sale.

You may terminate at any time from the interface or by writing to contact@benode.fr. On termination, you have 30 days to export your Content, after which it is deleted, subject to statutory retention obligations.

12. Liability

To the fullest extent permitted by applicable law, Servor is not liable for the following damages:

• indirect damages, including loss of business, loss of revenue, loss of customers, loss of data, loss of opportunity, reputational harm or commercial prejudice;
• the consequences of commands you triggered, approved or allowed to execute, including where suggested by the AI copilot;
• unavailability, malfunction or data loss affecting your target infrastructure;
• loss of secrets, passphrase or recovery phrase, and its consequences;
• compromise of your workstations or accounts, or breach of your own security obligations;
• failure of a third‑party provider, including hosting, inference, payment or notification services;
• use of the Service that does not comply with these Terms, the documentation or the state of the art.

In any event, Servor's total aggregate liability, on any basis whatsoever, is limited to the amount excluding tax actually paid by you over the twelve (12) months preceding the triggering event. For users of the free plan, that liability is limited to one hundred (100) euros.

Any claim must be brought within twelve (12) months of the triggering event, failing which it is time‑barred.

These limitations do not apply in cases of wilful misconduct, gross negligence, or personal injury, in accordance with mandatory provisions of French law.

13. Indemnity against third‑party claims

You shall indemnify Servor against any claim, action, judgment or demand brought by a third party arising from: your use of the Service, your Content, the operations you trigger on target infrastructure, or the absence of authorisation over it. This indemnity covers damages, legal costs and reasonably incurred attorneys' fees.

14. Confidentiality

Each party undertakes to preserve the confidentiality of the other's information designated as confidential or confidential by nature, for the term of the contract and for three (3) years thereafter. This obligation does not apply to information that is public, lawfully held beforehand, or whose disclosure is required by law or by an authority.

15. Force majeure

Neither party is liable for failure to perform its obligations in the event of force majeure within the meaning of article 1218 of the French Civil Code, including: large‑scale cyberattack, major failure of a telecommunications operator or cloud infrastructure provider, decision of a public authority restricting network access, natural disaster or armed conflict.

16. Subcontracting and assignment

Servor may use subcontractors to perform the Service, remaining responsible for their performance. Servor may assign the contract, in particular as part of a restructuring, provided the assignee assumes all commitments in full. You may assign your rights only with our prior written consent.

17. Miscellaneous

If any provision hereof is held void or unenforceable, it shall be deemed unwritten and the remaining provisions shall remain in full force. Failure to exercise a right shall not constitute a waiver thereof. These Terms, together with the Terms of Sale and the privacy policy, constitute the entire agreement between the parties.

18. Governing law and jurisdiction

These Terms are governed by French law, excluding its conflict‑of‑laws rules and the Vienna Convention on the International Sale of Goods.

Any dispute relating to their validity, interpretation or performance shall first be subject to an attempt at amicable resolution. Failing agreement within 60 days, the dispute shall fall within the exclusive jurisdiction of the courts within the jurisdiction of the Rouen Court of Appeal, including where there are multiple defendants, third‑party proceedings or urgent proceedings, in accordance with article 48 of the French Code of Civil Procedure.