DRAFT — pending legal review. Not yet in force. Last updated 2026-10-14.

Terms of Service

These terms govern use of Greenlight Scan (greenlightscan.com), operated by [COMPANY NAME – TO BE CONFIRMED], org. nr. [ORG. NR. – TO BE CONFIRMED], [ADDRESS – TO BE CONFIRMED], Norway (“we”). Contact: [support@greenlightscan.com – TO BE CONFIRMED].

1. The service

Greenlight Scan is a fully automated security scanning service. No human reviews your site, code or report. Reports, fix prompts and the Launch Audit (including its AI code review and automated verification pass) are generated by software and AI models and may contain errors, false positives or omissions.

2. Authorized use only

You may only submit websites, domains and repositories that you own or are explicitly authorized in writing to test. Deep checks run only after automated ownership verification. You must not use the service to test third-party systems, circumvent verification, or attempt to access data you are not entitled to. Unauthorized testing may be illegal (including under Norwegian Penal Code §§ 201 and 204). We may suspend accounts and cooperate with authorities in case of misuse.

3. What our checks do

Checks are read-only and rate-limited. We request publicly served files, send unauthenticated requests to endpoints referenced by your app, and query database APIs with your app’s public (anon) key using row counts only. We do not exploit vulnerabilities, write data, or download database rows.

4. No guarantee

The service is provided “as is”. A clean result or “Greenlit” badge means only that our automated checks found no critical, high or medium issue at the time of the scan; it is not a certification, a penetration test or a guarantee of security or regulatory compliance. You remain responsible for securing your application and for any fix you apply, including AI-generated fix prompts.

5. Payments, re-scans and refunds

Prices are shown in USD excluding VAT; applicable VAT (e.g. Norwegian MVA) is added at checkout and processed by Stripe. The Full Scan includes re-scans of the same domain for 30 days from purchase. As the service is digital content delivered immediately, you agree to immediate delivery and acknowledge that the 14-day right of withdrawal under the Norwegian Cancellation Act (angrerettloven) / EU Consumer Rights Directive lapses once the scan has been delivered. If a paid scan fails for technical reasons and we cannot deliver it, we refund you in full.

6. Liability

To the extent permitted by mandatory law, our total liability is limited to the amount you paid for the scan in question, and we are not liable for indirect losses, lost profits or data breaches. Nothing limits liability that cannot be limited under Norwegian law, including for gross negligence or intent.

7. Badge

You may embed the badge only for the verified domain and only while it reflects the latest scan. We may revoke a badge if a later scan finds issues.

8. Governing law

Norwegian law applies. Disputes go to the ordinary courts, with [Oslo tingrett – TO BE CONFIRMED] as agreed venue, without prejudice to consumers’ rights to sue in their home country.