Terms of Service

Last Updated: 29 July 2026

1. Agreement to These Terms 

1.1    These Terms of Service (these “Terms”) are an agreement between Approov Limited, a company registered in Scotland (No. SC224237) with its registered office at Scotiabank House, 6 South Charlotte Street, Edinburgh, EH2 4AW United Kingdom (“Approov”, “we” or “us”), and the customer using the Services (“Customer” or “you”). They govern your access to and use of the Approov mobile app and API security service, including the Approov SDKs, portals, CLI, APIs and related services described on our website (together, the “Services”),

1.2    You accept these Terms by clicking “Subscribe” (or a similar button), by executing an order form or agreement that references them, or by using the Services. If you accept on behalf of a company or other entity, you represent that you are at least 18 years of age and have authority to bind that entity, and “you” means that entity. If you sign up with a corporate email address, you will be deemed to represent that organisation.

1.3    Enterprise agreements and order of precedence. If you and Approov have entered into a separate signed agreement for the Services (including a master services or licence agreement, order form or enterprise plan) (an “Enterprise Agreement”), the Enterprise Agreement governs to the extent of any conflict with these Terms, including as to fees, payment, term and liability. These Terms apply to the extent they are incorporated into, or not inconsistent with, the Enterprise Agreement.

1.4    Incorporated documents. The following are incorporated into these Terms by reference and are available in the Approov Trust Center (approov.trust.site) or on our website: the Approov Data Processing Addendum (the “DPA”), which exclusively governs the processing of personal data in connection with the Services; the Approov Service Level Agreement (the “SLA”); and the Approov Privacy Policy (approov.com/privacy), which governs personal data we handle as an independent controller, such as website visitor and business contact data.

2. Definitions 

“Monthly Active User (MAU)” means the unit by which use of the Services is measured for billing: a mobile device on which a Registered App receives at least one successful Approov attestation during a Billing Period. Each unique Registered App on a device counts separately; different versions of the same Registered App on one device count once; installed apps that make no attestation request are not counted. MAU counts are typically substantially lower than download counts.

“Registered App” means a mobile application (or SDK integration) that you have registered with the Approov Service.

“Billing Period” means each monthly period beginning on the date the Services were first provided to you (or, where that day does not exist in a month, the last day of that month).

“Pricing Plan” means the self-serve subscription plan you select as described at approov.io/pricing, including the number of MAUs in its base allowance.

“Subscription Term” means the period for which you have subscribed to the Services: month-to-month, one year, or a multi-year committed term (such as three years), as stated in your Pricing Plan or Enterprise Agreement, together with any renewal periods in accordance with Section 9. A committed term is a fixed commitment for its full duration.

“Service Data” means the technical data generated or collected by the Services when Registered Apps interact with the Approov cloud service, comprising IP addresses and anonymised attestation signals, identifiers, metrics and runtime event data, in each case as described in the DPA. Service Data does not include personal data other than as described in the DPA.

“Confidential Information” means non-public information disclosed by one party to the other in connection with the Services that is identified as confidential or that a reasonable person would understand to be confidential, including our software and security information and your Service Data and app information.

“Force Majeure” means an event beyond a party's reasonable control, not caused by that party's negligence or misconduct, that the party could not reasonably avoid or remedy. 

3. The Services and Licences

3.1    Licence to you. Subject to these Terms and payment of applicable fees, Approov grants you a worldwide, non-exclusive, royalty-free licence during the Subscription Term to: (a) embed the Approov SDK in your Registered Apps and copy and distribute it solely as embedded in those apps; (b) use the Approov portals, CLI and APIs to manage your use of the Services; and (c) display Approov’s name and logo solely to state that your apps are protected by Approov, in accordance with any brand guidelines we publish. You may permit your affiliates and contractors to exercise these rights on your behalf, and you remain responsible for their compliance.

3.2    Ownership. Approov and its licensors retain all right, title and interest in and to the Services, the Software, and all related intellectual property. You and your licensors retain all right, title and interest in and to your applications, your data and your intellectual property. Neither party acquires any rights in the other’s technology except as expressly granted in these Terms.

3.3    Restrictions. Except as expressly permitted, you shall not (and shall not permit any third party to): (a) copy, modify, or create derivative works of the Services or Software; (b) reverse engineer, decompile or disassemble the Software except to the extent such restriction is prohibited by applicable law; (c) sell, resell, rent, lease, sublicense or provide the Services to third parties as a standalone offering, or use them to provide a competing service; (d) circumvent or interfere with any security mechanism, usage limit or access control of the Services; (e) access the Services with credentials other than your own or share management tokens outside your organisation, affiliates and contractors; (f) use the Services to violate applicable law or third-party rights, or to interfere with or disrupt the integrity or performance of the Services; or (g) use automated means to access the Services other than through the documented SDKs, CLI and APIs.

3.4    Changes to the Services. We may modify and improve the Services and release new versions from time to time. You may be required to adopt a current version of the SDK to maintain functionality. We will not materially degrade the core functionality of the Services during a Subscription Term you have paid for.

4. Your Responsibilities 

4.1    Registration and account. You agree to provide accurate, current and complete registration information and keep it up to date, including a valid administrative email address. You are responsible for maintaining the confidentiality of your Approov management tokens and credentials and for all activity under your account, and you agree to notify us promptly of any unauthorised use. We may communicate with you by email regarding the administration and operation of the Services; we will not send you marketing communications without the consent required by applicable law.

4.2    Your applications and platforms. You are responsible for your applications, their content, and their compliance with applicable laws and with the terms and developer policies of the platforms and app stores through which you distribute them. The Approov SDK is designed and maintained to operate within the published technical and policy guidelines of the major mobile platforms and app stores.

4.3    Your data responsibilities. You represent that you have all rights, consents and permissions necessary to use the Services with your applications and to permit the processing of Service Data described in these Terms and the DPA, including providing any legally required notices to your end users.

4.4    Compliance verification. On reasonable request, you agree to provide information reasonably necessary for us to verify your compliance with these Terms (such as confirming which of your apps are Registered Apps). We may monitor use of the Services for security, operational and billing purposes.

5. Service Data, Privacy and Security

5.1    Processing of personal data. To the extent Service Data includes personal data processed by Approov on your behalf, Approov processes it exclusively in accordance with the DPA, which is incorporated into these Terms. In summary, and as further described in the DPA: the Services are designed on data-minimisation principles; the only personal data processed on your behalf is limited technical data (such as IP addresses, anonymised before logging); Approov does not use personal data for its own purposes, including the training of AI or machine-learning models; and personal data is processed only in the United Kingdom and the European Economic Area, with operational logs retained for no more than 60 days.

5.2    Anonymised data. Approov may generate and use anonymised, aggregated data and security telemetry derived from the operation of the Services for the purposes, and subject to the safeguards, set out in the DPA: improving and developing the Services; security research and threat intelligence, including training machine-learning models used to detect threats for the benefit of all customers; and publishing aggregated statistics and research. Approov will not attempt to re-identify anonymised data, and no published output will identify you, your applications or your end users without your prior written consent. Anonymised data is not personal data, and Approov may retain it, including after termination, for these purposes and for customer support, billing and record-keeping.

5.3    Security. Approov maintains appropriate technical and organisational security measures for the Services, as described in the DPA, and maintains SOC 2 Type II attestation, available through the Approov Trust Center.

5.4    Usage metrics. You may access usage statistics for your Registered Apps through the Approov portals during your Subscription Term. Usage metrics are retained in anonymised, aggregated form for as long as reasonably necessary for reporting, billing, customer support and record-keeping purposes.

6. Feedback and Publicity

6.1    Feedback. If you provide suggestions, feature requests or other feedback about the Services, you grant Approov a perpetual, irrevocable, worldwide, royalty-free licence to use that feedback to improve and develop its products and services, without obligation or attribution. Feedback does not include your Confidential Information or your data.

6.2    Publicity. Neither party will use the other’s name or logo publicly, or identify the other as a customer or supplier, without prior written consent, except that you may state that your apps are protected by Approov as permitted in Section 3.1.

7. Fees and Payment 

7.1    Enterprise customers. If you have an Enterprise Agreement, the fees, invoicing, payment terms and billing structure in that agreement and its order forms apply, and the remainder of this Section 7 applies only to the extent your Enterprise Agreement does not address the relevant subject.

7.2    Self-serve plans. For self-serve Pricing Plans: fees are as described at approov.io/pricing and are based on your plan’s base MAU allowance plus any additional MAUs used, measured per Registered App as defined in Section 2. Fees for each Billing Period (including any additional MAU fees from the previous Billing Period) are charged at the start of the Billing Period to the payment method on file, which is processed by our third-party payment providers; Approov does not store your full card details. You can manage your plan, payment details and cancellation through the subscription portal.

7.3    Taxes. Fees are exclusive of taxes. You are responsible for applicable sales, use, value-added, GST and similar taxes, which will be added to invoices where required; each party is responsible for taxes on its own income.

7.4    Currency and billing queries. Fees are charged in the currency stated in your Pricing Plan or Enterprise Agreement. Usage reporting is available through the Approov portals, and billing queries or disputes should be raised in good faith within thirty (30) days of the relevant invoice; undisputed amounts remain payable when due.

7.5    Plan changes. You may upgrade your Pricing Plan at any time (effective as described at approov.io/pricing). Downgrades take effect at the end of the current Subscription Term; fees already paid are non-refundable except as expressly stated in these Terms or required by law.

7.6    Price changes. We may change self-serve Pricing Plan fees on at least thirty (30) days’ notice by email; changes take effect at your next renewal. If you do not accept a fee change, you may cancel before it takes effect. Fees under an Enterprise Agreement change only as provided in that agreement.

7.7    Late payment. If payment of undisputed fees fails or becomes overdue, we will notify you by email and work with you in good faith to resolve the issue. If fees remain unpaid fourteen (14) days after notice, we may suspend the Services until payment is made, and may terminate in accordance with Section 9 if non-payment continues.

8. Free Trials

8.1    We may offer free trials of the Services to new customers for a limited period. Trials are for evaluation only, may be modified, limited or withdrawn by us at any time, and are provided “as is” without any service level commitment. You may not register multiple accounts to obtain additional trials. Unless you subscribe to a paid plan before the trial ends, your access and any associated data may be deactivated at the end of the trial. 

9. Term, Termination and Transition 

9.1    Term and renewal. These Terms apply from the date you accept them and continue for the Subscription Term, renewing for successive terms unless either party gives notice of non-renewal before the renewal date (through the subscription portal, or as stated in your Enterprise Agreement).

9.2    Cancellation and committed terms. You may cancel the Services at any time through the subscription portal or by contacting us at sales@approov.io. What cancellation means depends on your plan: (a) for month-to-month plans, cancellation stops the automatic renewal of your subscription and takes effect at the end of the current monthly Billing Period; and (b) for plans with a committed term — including annual plans and multi-year (for example, three-year) commitments, which are offered at reduced pricing in consideration of that commitment — cancellation stops renewal at the end of the committed term but does not terminate the committed term early or relieve you of your obligation to pay the fees for the full committed term. If you elect to stop using the Services before the end of a committed term (a termination for convenience), the fees for the remainder of the committed term become immediately due and payable, and your obligation to pay them survives that termination. This Section does not limit your rights to terminate for cause under Section 9.3 or your rights under Section 15 if you do not accept a material change. Except as expressly stated in these Terms or required by law, fees already paid are non-refundable, and fees accrued or committed up to and for the remainder of the applicable term remain payable.

9.3    Termination for cause. Either party may terminate these Terms if the other party: (a) materially breaches them and fails to cure the breach within thirty (30) days of written notice (or the breach is incapable of cure); or (b) becomes insolvent, enters bankruptcy, liquidation, receivership, administration or any analogous proceeding in any jurisdiction, or ceases to carry on business.

9.4    Suspension. We may suspend the Services (in whole or in part) to the extent reasonably necessary where: (a) required by law; (b) your use poses a security risk to the Services or others; or (c) undisputed fees are overdue as described in Section 7.7. We will give notice and limit the scope and duration of any suspension to what is reasonably necessary, and will restore the Services promptly once the cause is resolved.

9.5    Transition Service. To avoid disruption to your published apps, upon termination or expiry (other than termination by us for your uncured material breach) Approov will, on your written request, continue to serve tokens to your existing Registered Apps for up to ninety (90) days from termination, provided your account was in good standing. During this transition period no new apps may be registered and attestation checks are not performed, so tokens are served without verification; the transition period is intended solely to give you time to release updated versions of your apps.

9.6    Effect of termination. Upon termination or expiry: your licences end (except during the Transition Service, to the extent needed to operate it); outstanding undisputed fees become payable; and personal data within Service Data is deleted or anonymised in accordance with the DPA (in any event within 60 days), while anonymised data and aggregated usage metrics may be retained as described in Section 5. Sections that by their nature should survive — including ownership, confidentiality, disclaimers, indemnities, limitations of liability and governing law — survive termination.

10. Confidentiality

10.1    Each party shall protect the other’s Confidential Information with at least reasonable care, use it only in connection with these Terms, and not disclose it except to its employees, affiliates, advisers and contractors who need to know it and are bound by confidentiality obligations at least as protective as this Section. These obligations do not apply to information that is or becomes public through no breach of these Terms, was lawfully known without restriction before disclosure, is lawfully received from a third party without restriction, or is independently developed without use of the other party’s Confidential Information. A party may disclose Confidential Information to the extent required by law or court order, with prompt notice to the other party where legally permitted. These obligations survive termination for five (5) years (or, for trade secrets, for as long as they remain trade secrets). If the parties have entered into a separate non-disclosure agreement, it continues to apply and prevails over this Section to the extent of any conflict.

11. Warranties and Disclaimers

11.1    Mutual warranties. Each party warrants that it has the legal power to enter into these Terms and will comply with applicable laws in performing them.

11.2    Approov warranties. Approov warrants that: (a) the Services will perform materially in accordance with their documentation; and (b) the Services will be provided in accordance with the SLA. Your exclusive remedies for breach of this Section are the remedies stated in the SLA and, where the breach is not remedied, termination under Section 9.3.

11.3    Disclaimer. EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICES ARE PROVIDED “AS IS” AND EACH PARTY DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. APPROOV DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT THEY WILL DETECT OR PREVENT ALL SECURITY THREATS; THE SERVICES ARE ONE LAYER OF A DEFENCE-IN-DEPTH SECURITY STRATEGY AND DO NOT REPLACE YOUR OWN SECURITY MEASURES.

11.4    Third-party platforms and services. The Services interoperate with third-party platforms, app stores and services that are outside Approov’s control. Approov is not responsible for the acts, omissions, policies, availability or technology of third parties, and your use of third-party platforms and services is governed by your agreements with them.

12. Indemnification 

12.1    By Approov. Approov shall defend you against any third-party claim alleging that the Services, as provided by Approov and used in accordance with these Terms, infringe that third party’s intellectual property rights, and shall indemnify you against damages, costs and reasonable legal fees finally awarded against you (or agreed in settlement) in respect of such claim. If such a claim arises or is likely, Approov may modify or replace the affected Services, procure the right for you to continue using them, or, if neither is reasonably available, terminate the affected Services and refund prepaid unused fees. Approov has no obligation under this Section to the extent a claim arises from your applications or data, combination of the Services with items not provided by Approov, modifications not made by Approov, or use in breach of these Terms. This Section states Approov’s entire liability, and your exclusive remedy, for third-party intellectual property claims.

12.2    By you. You shall defend Approov against any third-party claim arising from your applications, your data, your end users, or your use of the Services in breach of these Terms or applicable law, and shall indemnify Approov against damages, costs and reasonable legal fees finally awarded against Approov (or agreed in settlement) in respect of such claim.

12.3    Procedure. The indemnified party must give the indemnifying party prompt written notice of the claim, sole control of its defence and settlement (provided any settlement fully releases the indemnified party without admission of fault by it), and reasonable cooperation at the indemnifying party’s expense.

13. Limitation of Liability 

13.1    TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, GOODWILL, OR DATA, ARISING OUT OF OR RELATING TO THESE TERMS, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE) OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

13.2    TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH PARTY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS SHALL NOT EXCEED THE FEES PAID OR PAYABLE BY YOU FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

13.3    Nothing in these Terms excludes or limits either party’s liability for: (a) death or personal injury caused by its negligence; (b) fraud or fraudulent misrepresentation; (c) your payment obligations; (d) either party’s indemnification obligations under Section 12; or (e) any other liability that cannot be excluded or limited under applicable law.

14. Compliance and Export 

14.1    Each party shall comply with applicable export control, sanctions and anti-corruption laws, including those of the United Kingdom, the European Union and the United States. You represent that you are not located in, or owned or controlled by a person in, a country or territory subject to comprehensive sanctions, and are not on any applicable restricted-party list, and you shall not use or permit use of the Services in violation of such laws.

15. Changes to These Terms

15.1    We may update these Terms from time to time, for example to reflect changes to the Services or the law. For material changes, we will give at least thirty (30) days’ notice by email or through the Services before the change takes effect. Changes apply from the effective date stated in the notice and do not apply retroactively. If a material change materially and adversely affects you and you do not accept it, you may terminate these Terms on notice given before the change takes effect and, as your exclusive remedy, receive a pro-rata refund of any fees you have prepaid for the period after the effective date of termination; termination under this Section does not otherwise relieve you of payment obligations for a committed term except to the extent of that refund. Your continued use of the Services after the effective date constitutes acceptance. Changes to an Enterprise Agreement are made only as provided in that agreement.

16. General

16.1    Entire agreement. These Terms (with the documents incorporated by reference and, where applicable, your Enterprise Agreement) are the entire agreement between the parties regarding the Services and supersede all prior agreements on that subject.

16.2    Assignment. Neither party may assign these Terms without the other party’s prior written consent, except that either party may assign them to an affiliate or in connection with a merger, reorganisation or sale of all or substantially all of its assets, with written notice to the other party.

16.3    Notices. Notices must be in writing. We may give notice by email to your registered email address or through the Services; you may give notice by email to legal@approov.io. Notices are effective on receipt.

16.4    Force Majeure. Neither party is liable for failure or delay in performance (other than payment obligations) to the extent caused by Force Majeure, provided it uses reasonable efforts to mitigate and resume performance.

16.5    Severability; waiver. If any provision of these Terms is held invalid or unenforceable, it will be modified to the minimum extent necessary and the remainder will remain in effect. A failure or delay in exercising a right is not a waiver; waivers must be in writing.

16.6    Relationship; third parties. The parties are independent contractors. These Terms do not create any partnership, joint venture, agency or employment relationship, and confer no rights on any third party, whether under the Contracts (Rights of Third Parties) Act 1999, the Contract (Third Party Rights) (Scotland) Act 2017, or any equivalent law of any jurisdiction.

16.7    Language. These Terms are drafted in English, which is the governing language; any translation is for convenience only.

17. Governing Law and Venue

17.1    If your principal place of business is in the United States: these Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules, and the state and federal courts located in Delaware have exclusive jurisdiction over any dispute arising out of or relating to these Terms, and each party consents to their jurisdiction and waives objections to venue.

17.2    In all other cases: these Terms are governed by the laws of Scotland, and the Scottish courts have exclusive jurisdiction over any dispute arising out of or relating to these Terms.

17.3    Nothing in this Section prevents either party from seeking injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property or Confidential Information.

18. Contact

Questions about these Terms: legal@approov.io  •  Approov Limited, 6 South Charlotte Street, Edinburgh, EH2 4AW, United Kingdom  •  US office: 165 University Avenue, Suite 200, Palo Alto, CA 94301, USA.