Terms of Service

These terms are between you and Veristria, a Norwegian aksjeselskap (AS) under incorporation (24 August 2026), based in Norway, which operates RowShield. “We” and “us” mean that company; “the service” means rowshield.dev and everything on it.

Using the service means you accept these terms. If you are agreeing for a company, you are confirming you are allowed to.

RowShield tests row-level security, detects schema drift, and monitors a Supabase backend’s catalog for the kind of change that quietly reopens a table. The free Instant Check needs no account: give it a URL or a project reference and it reports what an anonymous caller carrying the public anon key can already reach. Paid plans add a connected project, scheduled scans, drift alerts and history.

It is a metadata scanner. It does not read the contents of your tables, does not run inside your application, and does not modify your database.

By running the Instant Check against a URL, or by connecting a project with a connection string, you confirm that you own it or have permission from the owner to have it tested. You are responsible for that permission and for the consequences of testing something you were not entitled to test.

Our tools are deliberately narrow — the public check issues only GET, HEAD and OPTIONS requests, and the connected scanner runs a fixed set of read-only catalog statements with no path to a user table — so using them is impolite at worst, never harmful to the target. That is a constraint on us, not a license for you.

We may refuse or stop a check where we believe this is being broken, and we will cooperate with a project owner who reports unauthorized use against their infrastructure.

Unlike a connected scan, a free Instant Check is not saved. The result is returned only to the browser that requested it; there is no report page, no persistent link, and nothing for us to hand to a third party, because nothing is written down. If you want a record you can return to, connect a project instead.

Everything you connect stays yours. We claim no ownership over your schema, your data or your findings, and the reports we generate are yours to keep, export and share.

We own the service, the detection rules and the brand. You get a license to use them while your account is in good standing, and nothing more. We may use aggregate, de-identified statistics about scans — rule hit rates, timings, counts — to improve detection.

You are responsible for what happens under your account and for keeping access to it secure. Tell us promptly if you think someone else is in your account. Invite colleagues to your organization rather than sharing one login.

Paid plans are billed through Stripe — or, where enabled, through a Revolut payment link for manual invoicing — and renew at the price shown when you subscribed, monthly or annually, until you cancel. Taxes are added where they apply.

Cancel any time from the billing portal in your settings — no email, no retention conversation. Cancelling stops the next renewal; you keep the plan until the end of the period you have paid for, and the account then continues on the free tier with the free tier’s limits. If a price changes we tell you before it applies to you.

Payments are not automatically refundable, but we will not argue with you over a period you did not use. If the product did not work, if you were billed after cancelling, or if you subscribed by mistake and have not used it, email us and we refund it. Where consumer law gives you a right of withdrawal, that applies on top of this.

Do not use the service to:

• scan a site, or connect a project, you do not own or have permission to test;
• work around the rate limits, overload our infrastructure, or use the probe as a relay to reach a third party;
• resell, white-label or redistribute the service, or scrape it to build a competing dataset of findings;
• break the law or infringe anyone else’s rights.

We can suspend an account doing any of this. Where the situation allows, we will tell you first and give you a chance to fix it.

Finding nothing means we found nothing against the rules we run. It is not a certificate, an audit, or a statement that your database is secure. Detection compares your live catalog — tables, columns, policies, indexes, storage bucket settings — against documented patterns of misconfiguration; a policy that is syntactically present but wrong for your application’s logic can still pass a rule that only checks whether a policy exists. We do not provide legal, financial or compliance advice, and nothing we produce is a compliance certification.

The service is provided as it is, without warranties beyond those the law gives you and does not let us exclude. We work hard on uptime; we do not promise a specific availability level.

If we cause you loss, what we owe is capped at what you paid us in the twelve months before the event — or nothing, if you have paid us nothing. We are not liable for indirect losses: lost profit, lost revenue, lost data, or a breach that a scan did not catch.

This does not limit liability we are not allowed to limit — death or personal injury caused by negligence, fraud, or anything mandatory law reserves. If you are a consumer, your statutory rights come first.

You can stop using the service and delete your account at any time. We can end this agreement with reasonable notice, or immediately if you break the acceptable-use rules. If we end it for our own reasons, we refund the unused part of what you paid.

We update this page as the product changes and move the date at the top with it. For a change that materially affects a paying customer we give notice by email before it takes effect, and you can cancel if you do not accept it.

Norwegian law governs this agreement and the Norwegian courts have jurisdiction. If you are a consumer in the EEA you keep the protection of the mandatory law of the country you live in, and you can bring a claim there.