Terms of use

Last updated: 30 October 2026

This English translation is provided for convenience. Only the French version is legally binding.

Article 1 · Purpose and acceptance

These terms govern the use of CheckOps, an online service published by ClearCloud (see the legal notice). Creating an account means accepting these terms. They are intended for professionals.

Article 2 · Description of the service

CheckOps receives the component inventories (SBOMs) and security scanner results you send it, compares them with public vulnerability databases, alerts you when one of your products is affected, and helps you prepare the notifications and reports required by Regulation (EU) 2024/2847 (Cyber Resilience Act).

CheckOps is a support tool. It replaces neither your own analysis nor your legal obligations: you remain responsible for your products, your decisions (for example a VEX statement "not affected") and the notifications you send to the authorities.

Article 3 · Account

Access requires a personal account. You keep your credentials and API tokens confidential and notify us without delay of any unauthorised use. API tokens can be revoked at any time from the customer area.

Article 4 · Acceptable use

You agree to send only data you are authorised to process, not to try to bypass the limits of your plan or access another organisation's data, and not to disrupt the service.

Article 5 · Plans and billing

Plans and their limits are described on the pricing page. The Free plan has no time limit. Prices of paid plans are shown excluding VAT, per month, with no commitment. Beyond a limit, nothing extra is charged: further uploads are refused until the next month or until you change plan.

Article 6 · Availability

ClearCloud uses reasonable means to keep the service available, without guaranteeing results. Interruptions may occur for maintenance; they are announced in advance whenever possible.

Article 7 · Data and ownership

You remain the owner of the data you send (SBOMs, scanner results, VEX decisions, reports). ClearCloud processes it only to provide the service, as a processor within the meaning of the GDPR when it contains personal data (see the DPA). It is hosted in France and is neither sold nor used to train an artificial intelligence model.

Article 8 · Liability

The vulnerability databases used are public and may be incomplete or published late. ClearCloud cannot be held liable for a vulnerability not yet published, poorly described by its source, or missing from the components you declared. ClearCloud's total liability, for all causes combined, is limited to the amounts paid over the last twelve months.

Article 9 · Termination and account deletion

You can delete your account at any time. Deletion erases the organisation, its products, SBOMs, findings, alert channels, tokens and the sign-in account. ClearCloud may suspend an account that breaches Article 4, after informing you except in an emergency.

Article 10 · Changes to these terms

These terms may change. Any significant change is announced by email at least 30 days before it takes effect.

Article 11 · Governing law

These terms are governed by French law. Failing an amicable settlement, the competent courts of Dijon have exclusive jurisdiction.