Legal
Terms of Service
1. Service
Liminal Keys provides cloud-hosted virtual certificates and related APIs so enrolled macOS devices can sign using CryptoTokenKit while private keys remain in cloud HSM custody. Liminal Console is the administrative interface for tenants, identities, devices, policy rules, and audit.
2. Operator
The service is operated by Liminal. Production hosting runs on a cloud infrastructure provider.
3. Accounts and access
Console access uses organization directory SSO (Microsoft work account). You are responsible for your tenant’s users, devices, enrollment codes, and policy decisions. Device credentials must not be shared across tenants.
4. Acceptable use
- Do not attempt to extract, export, or reverse private key material from the service
- Do not probe, overload, or disrupt the API, Console, or other tenants
- Do not use the service to violate applicable law or third-party rights (including Apple agreements)
- Do not upload malware or unrelated bulk content through import or enrollment paths
5. Custody and limitations
Signing private keys are intended to remain non-exportable in cloud HSM custody. Availability depends on the hosting region and platform status. The service does not guarantee that any particular Apple or third-party review (for example TestFlight) will accept a signed artifact.
6. Fees
Commercial pricing, if any, will be agreed separately in writing or on an order form. Early design partner use may be provided without a public price list.
7. Confidentiality and security
You must protect enrollment secrets and device credentials. We apply security measures appropriate to a custody-oriented signing service, but no method of transmission or storage is perfectly secure.
8. Disclaimer
To the fullest extent permitted by applicable law, the service is provided “as is” without warranties of uninterrupted availability, merchantability, or fitness for a particular purpose, except where such exclusions are not allowed for consumers or other protected parties under Spanish or EU law.
9. Limitation of liability
To the fullest extent permitted by law, the operator’s aggregate liability arising from the service is limited to the fees you paid for the service in the three months before the claim (or zero if the service was provided without charge). Nothing in these terms excludes liability that cannot be limited under Spanish or EU mandatory law.
10. Termination
Either party may stop use or provision of the service subject to any written agreement. We may suspend access for security incidents, abuse, or non-payment. After termination, signing may stop and tenant data may be deleted after a retention window.
11. Governing law
These terms are governed by the laws of Spain, without prejudice to mandatory consumer protections that may apply in your EU member state. Courts of Spain have jurisdiction, subject to mandatory venue rules for consumers.
12. Contact
Legal and commercial notices: legal@liminalkeys.com. Product inquiries: contact@liminalkeys.com. See Contact and Privacy Policy.