Legal

Terms of service

These terms govern your use of Bulkhead, a certification service for AI agents operated by Graylark Technologies Limited (company number 15528848), registered in England and Wales (“we”, “us”, “Bulkhead”). They apply from the moment you register an agent, run a dry-run, or buy a certificate. Last updated 18 September 2026.

1. Who these terms are for

Bulkhead is sold to businesses. By accepting these terms you confirm you are acting for purposes related to your trade, business, craft or profession, and that you have authority to bind the organisation you name at registration. If you are a consumer, these terms are not offered to you and you should not register.

Where you register on behalf of an organisation, “you” means that organisation, and the person accepting these terms warrants they are authorised to do so.

2. What we provide

Bulkhead operates the AgentSurety certification suite. Depending on the level you choose, the service consists of some or all of:

• A protocol suite of deterministic scenario messages sent to a certification endpoint you expose, with the replies recorded.
• A judged adversarial suite of frozen prompts whose replies are graded by our evaluation fleet under a published protocol.
• A named engineer’s review, at the Assessed level only.
• A seal, certificate and badge, a listing in the public directory, and an offline verifier by which anyone may check a seal against a published key.
• Continuous re-checking: the protocol suite on a monitoring cycle for the life of the seal, and, at judged levels, re-judging at the stated interval.

We re-run every probe ourselves before issuing a seal. Results you report to us are not trusted and are not a substitute for our own run. The methodology is published on the rubric page and is versioned; a seal records the suite version it was issued against.

3. What a certificate means, and what it does not

A certificate is a statement of fact about a measurement. It says: on this date, this registered agent, reachable at this endpoint, responded to this published suite in a way that met the stated bar, and here is the evidence. Nothing more is claimed and nothing more should be represented to your customers.

In particular, a certificate does not mean and must not be described as meaning:

• that your agent is safe, secure, accurate, lawful, or fit for any particular purpose;
• that your agent will behave in production as it behaved under test, including where your model, prompts, tools, dependencies or configuration change;
• that we have audited your code, your infrastructure, your security posture or your organisation;
• that any regulator, standards body or insurer recognises the seal;
• that we insure, indemnify or otherwise stand behind your agent’s conduct.

Misrepresenting the scope of a seal is a material breach of these terms and grounds for immediate revocation under clause 8.

4. Your obligations

• Authority to test. You warrant that you own or are authorised to operate the endpoint you nominate, and that our sending synthetic probes to it, at certification, renewal and on the monitoring cycle, is permitted by you and by anyone whose systems it touches. You are responsible for obtaining that permission where the endpoint is hosted or operated by a third party.
• Accurate declarations. The agent identity, agent type and authority bound you declare are used to generate the test and are printed on the certificate. They must be true. An agent that declares a bound it does not hold is not certifiable, and a declaration later found to be false is grounds for revocation.
• No gaming. You must not configure an agent to detect our probes and behave differently from how it behaves for your users; to hard-code, memorise or replay expected answers; or otherwise to obtain a seal for behaviour your agent does not have. This is the one thing that makes the whole scheme worthless, and we treat it accordingly.
• A test endpoint, not production data. The endpoint you nominate must not return personal data, credentials, or anything you would mind being recorded. Our probes are synthetic; your replies are stored as evidence.
• Keep it reachable. Seals depend on continuing checks. An endpoint that stops answering will cause the seal to be suspended.
• Lawful use. You must not use the service to test an agent whose operation is unlawful, nor to obtain a seal for an agent you do not control.

5. Fees, renewal and cancellation

• Current levels and prices are shown on the certify page. The Conformant level is free. Paid levels are billed annually in advance.
• Prices are exclusive of VAT and any other applicable tax, which will be added where due.
• Payment is taken by Stripe. Card details are handled by Stripe and never reach us.
• Renewal. Paid subscriptions renew annually unless cancelled before the renewal date. We will give you at least 14 days’ notice before a renewal charge.
• Cancellation. You may cancel at any time, effective at the end of the paid period. Your seal remains valid until then and is not renewed.
• Refunds. Once a run token has been issued the work has effectively been done, so fees are not refundable except: where we cancel under clause 9; where we are unable to complete a certification run for reasons attributable to us; or where a refund is required by law. If you think a charge is wrong, write to us and we will look at it properly.
• Price changes apply from your next renewal, never mid-term, and we will tell you before they take effect.

6. The badge and our marks

While your seal is valid and in good standing, we grant you a non-exclusive, non-transferable, revocable licence to display the Bulkhead badge and to state that the named agent holds the level of certification it actually holds. The licence is limited to the certified agent and ends the moment the seal expires, is suspended or is revoked, at which point you must stop using the badge and remove it from your site and materials within five working days.

You may not alter the badge, imply a level you do not hold, apply it to a different agent or product, or suggest that Bulkhead endorses your company generally. We keep all rights in our marks, methodology, suites, scenarios, software and documentation. You keep all rights in your agent, your endpoint and your own materials.

7. Publication, and what we make public

Certification is a public statement, so the following are published and you agree to their publication: the fact and level of certification, the agent name and type, the declared authority bound printed on the certificate, the suite version, the issue and expiry dates, the seal’s current status, and - where a seal is suspended or revoked - that fact and its date.

We do not publish the contents of your replies, your endpoint address, or the detail of a failed run, except with your consent or where clause 8 applies and publication is necessary to correct a public claim about a seal.

We may use aggregated, de-identified data from runs to improve the suite and in our published research. Nothing identifying you or your agent appears in that research without your consent.

8. Suspension and revocation

A seal is a live claim, not a certificate on a wall, and we will suspend or revoke it when it stops being true. We may suspend a seal where:

• a monitoring check fails, or your endpoint stops answering;
• payment fails or a subscription lapses;
• we have a reasonable basis to investigate a breach of clause 4.

We may revoke a seal where a breach of clause 4 is established, where a declaration proves false, where an agent is found to detect and game our probes, where the seal is misrepresented, or where a suspension is not cured within 30 days.

Revocation is public, because a private revocation would leave a false claim standing. We will tell you first, give you a reasonable opportunity to respond where the circumstances allow it, and state the fact and date of revocation without editorial comment. We apply this to our own agents on the same terms.

No refund is due on suspension or revocation caused by your breach.

9. Changes to the service and these terms

We improve the suite, and improvements change what it catches. A seal remains tied to the suite version it was issued against for its term; new versions apply at renewal or re-certification. Where a change to the methodology would materially reduce what your existing seal means, we will tell you and give you the choice of re-certifying at no extra charge or ending the subscription with a pro-rata refund.

We may change these terms. For material changes we will give at least 30 days’ notice by email to your registered address, and you may end the subscription before they take effect with a pro-rata refund of the unused period. We may withdraw a service level on the same notice.

10. Availability

Certification is deliberately not on your critical path: your agent serves your users whether or not Bulkhead is reachable, so an outage of ours cannot take your product down. It can delay a run or a check, and it can affect your badge. We do not offer a service-level agreement or availability credits, and we will not suspend a seal for a monitoring failure that was our fault.

11. Data protection

What we collect and why is set out in the privacy notice, and the technical picture is on the trust page. In summary: our probes are synthetic, we receive no personal data of your users, and we are a controller of ordinary business-contact and billing data rather than a processor acting on your behalf. If your endpoint returns personal data despite clause 4, you remain the controller of it and you must tell us so we can delete it.

12. Confidentiality

Each of us may receive information from the other that is marked confidential or would obviously be regarded as confidential. Each of us will keep it confidential, use it only for the purposes of these terms, and disclose it only to people who need it and are under equivalent obligations. This does not apply to information that is public through no breach, was already known, is independently developed, or must be disclosed by law or a regulator - in which case, where lawful, we will tell you first. The material in clause 7 is not confidential.

13. Warranties, and the limits of them

We warrant that we will provide the service with reasonable skill and care, that we will run the published suite as published, and that the evidence behind a seal is a true record of what we observed.

Beyond that, and to the fullest extent the law allows, the service is provided without warranty of any kind, express or implied, including any implied warranty of merchantability, satisfactory quality or fitness for a particular purpose. Specifically, we do not warrant that the suite detects every failure mode, that a passing agent is safe, or that the service will be uninterrupted or error-free. A test suite is evidence about what it tested, and silence about everything else.

14. Liability

Nothing in these terms limits or excludes either party’s liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited or excluded.

Subject to that:

• Neither party is liable for indirect or consequential loss, or for loss of profit, revenue, business, contracts, anticipated savings, goodwill, or data, however arising.
• Our total liability arising out of or in connection with these terms, whether in contract, tort (including negligence), breach of statutory duty or otherwise, is limited in aggregate to the greater of the fees you paid us in the twelve months before the event giving rise to the claim, or £1,000.
• We are not liable for any loss arising from your agent’s behaviour, from a decision you or anyone else took in reliance on a seal, or from a third party’s interpretation of a seal.

This allocation of risk is reflected in the price. It is the reason a certificate costs what it costs rather than what insurance costs.

15. Indemnity

You will indemnify us against claims, losses and reasonable costs arising from your breach of clause 4 (your obligations), from your misrepresentation of a seal, or from a third party’s claim that our testing of an endpoint you nominated was unauthorised.

16. Term and termination

These terms apply for as long as you hold an account, a seal or a subscription. Either party may terminate for material breach that is not cured within 30 days of written notice, or immediately if the other becomes insolvent. On termination your seals cease, the badge licence ends, and clauses 3, 6 (final paragraph), 7, 12, 13, 14, 15 and 18 survive.

We keep certification records and evidence bundles for as long as the privacy notice states, because a seal that cannot be checked afterwards is not worth issuing.

17. General

• Notices to you go to your registered email address; notices to us go to [email protected].
• Subcontractors. We use the third parties named on the trust page and remain responsible for their performance.
• Assignment. Neither party may assign without the other’s consent, except to a successor of substantially the whole business.
• Force majeure. Neither party is liable for delay caused by events outside its reasonable control, though a delay lasting over 30 days lets either party terminate.
• No waiver. Not enforcing a term is not a waiver of it.
• Severability. If a provision is unenforceable, the rest stands.
• Entire agreement. These terms, the privacy notice and the published rubric are the whole agreement, and replace any prior discussion. Neither party relies on any statement not set out in them, though this does not limit liability for fraudulent misrepresentation.
• Third parties. No one other than you and us may enforce these terms under the Contracts (Rights of Third Parties) Act 1999.

18. Governing law

These terms and any dispute arising from them are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction. Before starting proceedings, please write to us: most disagreements about a seal are about evidence, and we would rather show you the evidence.

Graylark Technologies Limited, company number 15528848, registered in England and Wales. Contact [email protected].