Break Glass Business

Terms of Service

Last updated 6 September 2026

Draft — not yet reviewed by counsel. These terms are written to be accurate about how the product actually behaves, which is the part engineering can get right. They have not been reviewed by a qualified lawyer and should be before the product is sold. Do not treat this as legal advice.

1. Who is agreeing

These terms are between Break Glass Business (“we”) and the organisation that creates an account (“you”). The person who signs up warrants that they are authorised to bind that organisation. Individual users of your organisation act under your authority, not ours.

2. What the service does

We store encrypted material you upload, deliver notifications you send, and record what happened. We provide the mechanism. We do not provide security advice, incident response, or any assurance that your emergency procedures are adequate.

3. What we cannot do, and what follows from it

Team secrets are encrypted on your devices under keys we do not hold. We cannot read them, recover them, or reset them. If enough of your key holders lose their passwords, the affected material is permanently unrecoverable, by us and by you.

This is a deliberate property and not a defect. You accept it as a condition of using the service, and you are responsible for configuring quorums with enough margin that ordinary staff turnover does not strand your own credentials.

4. Your responsibilities

  • Keeping your key holders’ passwords secure, and re-keying when someone leaves.
  • Ensuring you have a lawful basis to send messages to the contacts you upload. Where you record consent as resting on an employment relationship, you warrant that such a policy exists.
  • Not using emergency notification channels for routine or marketing messages.
  • Testing your configuration. An untested procedure is not a capability.

5. Availability

Business and Enterprise plans carry an uptime commitment set out in your order. Free and Team plans are provided without one. No plan guarantees delivery of any individual message: email, SMS and voice depend on carriers and providers outside our control, which is precisely why the product uses multiple channels, escalates, and reports delivery status rather than assuming it.

6. Payment

Paid plans are billed per responder seat. Seat count follows your active membership. Recipients are free on every plan.

Non-payment does not suspend the emergency path. A failed payment restricts administrative functions — adding members, authoring new documents. It does not stop an escalation in progress, a decryption quorum, a running playbook, or a release plan. We consider disabling those over an invoice to be indefensible, and we commit to it here rather than only in our documentation.

7. Data and termination

You own your data. You may export audit logs and evidence packs at any time, and your secrets as ciphertext plus your key shares — which your holders can decrypt exactly as they do inside the product. On termination we retain your data for 30 days and then delete it. We cannot decrypt it for you at any point, including during termination.

8. Liability

To the extent permitted by law, our aggregate liability is limited to the fees you paid in the twelve months preceding the claim. We are not liable for losses arising from a message that was not delivered by a third-party carrier, from material you could not recover because your own key holders were unavailable, or from decisions your people made while following a procedure you authored.

9. Changes

We will give at least 30 days’ notice of material changes, by email to your organisation’s owners. See also our Privacy Policy and Trust & compliance pages.