Sign in Start free

This English version is a courtesy translation: in case of any discrepancy, the Italian version prevails. Read the Italian version

Terms of Service — GuardrailX

These Terms govern the use of GuardrailX (the "Service"), provided by WebbergatePlus+ s.r.l., Strada Farnesiana 45, 29122 Piacenza (PC), Italy, VAT no. IT03871830166, share capital € 10,000 ("we"), to whoever creates an account (the "Customer"). The Customer accepts these Terms and the Data Processing Agreement (DPA), which is part of them, by ticking the relevant box when creating the account, and declares to have read the Privacy Policy. The clauses listed in §16 require a second, specific approval. We record the date, the version of the Terms accepted, the IP address and the browser of every acceptance.

1. Who may use the Service

The Service is intended for businesses and professionals who use it for their own business. It is not aimed at consumers. Whoever accepts these Terms on behalf of an organisation declares that they are able to bind it.

2. What the Service does

The Service is an intermediary (proxy) between the Customer's software agents and the artificial intelligence providers chosen by the Customer (for example OpenAI, Anthropic, Google Gemini, Mistral AI, DeepSeek, OpenRouter). It records costs and usage, applies spending limits, blocks calls repeated in a loop, reports anomalous spending, can route calls to other models according to the Customer's rules and compare the answers of different models. With Autopilot, if the Customer turns it on, the Service tries cheaper models of the same provider on its own on a sample of the calls, estimates their quality compared with the model in use, also with a judge model, proposes a plan and, once approved (or automatically, if the Customer chooses so), gradually moves the calls to the chosen models, going back to the previous model if the measured quality or latency fall below the goals. If the Customer indicates it in the calls, it attributes spend to the Customer's end customers and, depending on the plan, applies limits and pause to them, computes their margin and prepares a monthly report. With Privacy Guard, if the Customer turns it on, it replaces the personal data it recognises in the calls with placeholders before forwarding them to the provider and puts the data back in the response, or blocks the calls that contain it. With uniqueness rules the Customer decides when two calls are the same and how many times they may go through. The Service also estimates the energy, CO₂e emissions and water that its features have avoided (environmental impact).

Site API. If we enable it at the Customer's request, a management interface lets the Customer register its own users as end customers, assign them a prepaid balance, request quotes and receive on its own site signed events about the outcome of calls and the balance.

The relationship with the providers is the Customer's. The Customer uses its own API keys, accepts the providers' terms, pays their costs directly and remains responsible for them. We are not a party to that relationship and are not liable for the providers' services (availability, quality of answers, prices, changes).

3. Account and security

The Customer provides true data, keeps safe the credentials and the gr_… keys generated by the Service and informs us immediately of any unauthorised use. It is responsible for what happens with its account and its keys.

Collaborators. The Customer can invite colleagues to its projects, read-only or with edit rights, within the limits of its plan. Each collaborator logs in with their own account and accepts these Terms; the Customer's plan and limits apply to the Customer's projects, and the Customer is responsible for the actions of the collaborators it invited and can remove them at any time. Changes made from the dashboard to the projects (who changed what) remain visible in the activity log for 180 days.

Login credentials are personal and not transferable. Sharing a single user or collaborator credential among several natural persons is strictly forbidden. Each collaborator must access the Service exclusively through their own individual account.

Pause links. Email alerts may contain a link to pause a project, an agent or an end customer without logging into the dashboard. The link is valid for 24 hours and works for anyone who has it: the Customer keeps safe the emails that contain it.

4. Limits, estimates and responsibility for costs

The name 'GuardrailX' has a purely commercial meaning and is not a guarantee of infallible or timely blocking. The Customer expressly acknowledges that, because of network latency, unilateral changes to the providers' APIs or sudden traffic peaks, the Service might not intercept or block anomalous, redundant or looping calls in time. The Customer remains solely and exclusively responsible for continuously monitoring its budgets and its accounts with the AI providers.

Spending limits, alerts and blocks are based on estimates made before the call and on the prices in the Service's price list, updated automatically from public sources. The real cost applied by the provider may differ: changed prices, discounts or surcharges, models not in the price list, interrupted calls, calls repeated after an error. Limits reduce the risk but do not guarantee that spending with the provider stays below a given amount. The Customer remains solely responsible for the costs charged by the providers. For an independent check we recommend also setting spending limits in each provider's console.

The routing features and Model comparisons do what the Customer configures: the choice to replace a model, and the assessment of the quality of the answers, are up to the Customer. The "Suggestions" are estimates based on the data and are not a guarantee of results. The same applies to anomalous spending alerts, which may arrive late or not arrive at all.

Autopilot acts within the goals set by the Customer (minimum quality, latency, spend for trials, excluded agents). The quality shown is a statistical estimate of equivalence with the answers of the model in use, on a sample and with an automatic judge: it is not a check of the correctness of the answers and does not guarantee that every answer of the cheaper model is adequate. Trial and judge calls are made with the Customer's keys and charged by the provider; the chosen monthly cap is based on the same estimates as the spending limits. By activating the plan, or the automatic activation option, the Customer authorises the Service to change the model used by its agents in the cases indicated; it can roll back a change or turn Autopilot off at any time.

End customers. Spend per end customer, margin (computed in euro with the exchange rate published by the European Central Bank, and therefore indicative) and monthly reports are based on the same estimates and on the information sent by the Customer's agents. The Customer checks their data before using them towards its own customers and remains solely responsible for its relationship with them, including what it bills.

Privacy Guard recognises data with automatic rules and checks: it does not guarantee to find all of it (for example names written in the text without clues) and does not process images, PDFs, audio and attached files, which go through as they are. It is pseudonymisation, not anonymisation: the provider receives the rest of the text. The model may change or make up a placeholder, which in that case does not go back to the real data. The Customer chooses the mode suited to its data, including the one that blocks calls, and remains responsible for the legal basis of the data it sends (see the DPA). The entries of the project dictionary are visible to all members of the project.

The environmental impact is an estimate computed from the calls' tokens and the model's class, with a public, versioned methodology: it is not a measurement, it is not a certified environmental claim and it does not replace the providers' data. A Customer that uses it in a report or towards third parties presents it as an estimate, with the methodology version, and remains responsible for it.

End customers' balance (Site API). The balance is a unit of account, in euro of provider cost, that the Service uses to decide whether a call may go out and to charge it the estimated and then the real cost: it is not money, it is not held by us and it does not give any right to refunds from us. Top-ups, prices and collections towards the Customer's users are managed by the Customer, which is responsible for them towards those users. Quotes and charges are based on the same estimates as the spending limits.

Delivery of notifications via Webhook depends on the correct configuration and availability of the Customer's systems. WebbergatePlus+ s.r.l. is not liable for alerts not received or received late because of malfunctions, blocks or unavailability of the endpoints provided by the Customer.

5. Acceptable use

The Customer may not use the Service for unlawful activities, to breach the providers' terms, to circumvent the limits of its plan or to overload the Service. The Customer is responsible for the content its agents send to the providers and for its legal basis, including any personal data (see the DPA).

6. Plans, prices and payments

  • Free (free of charge, without a credit card and without expiry): the plan every new account starts with. The features of the Base plan with 5,000 requests per month, a single project and no collaborators, detailed call log for 90 days; once the cap is reached, calls are blocked until the following month. To go beyond these limits the Customer moves to Base or Agency. The Free plan is reserved for those who have never subscribed: once a paid subscription ends, the account does not go back to Free and the Service stops forwarding calls until the Customer chooses a plan again; the dashboard remains available for consultation.
  • Free trial (only for accounts registered before the Free plan was introduced): 14 days with the features of the Base plan and up to 250,000 requests per month; when the trial ends without a subscription, the account moves to the Free plan.
  • Base (€69/month or €690/year): 250,000 requests per month, up to 5 projects, 3 collaborators per project, detailed call log for 90 days.
  • Agency (€199/month or €1,990/year): 1,000,000 requests per month, unlimited projects and collaborators, detailed log for 365 days and Customers tab (limits, pause, margin and report per end customer).
  • For yearly subscriptions the included requests apply to the whole year (12 times the monthly ones). Beyond the included requests, €5 per 100,000 additional requests are paid, charged based on usage.
  • Enterprise (installation on the Customer's servers): terms and price in a separate contract.
  • Prices are exclusive of VAT, computed at payment according to the Customer's country.
  • Payments are handled by Stripe. The subscription renews automatically at the end of each period until cancelled.
  • Cancellation: at any time from the billing portal; it takes effect at the end of the period already paid. No refunds are provided for partial periods, except as provided by law.
  • Plan change: it applies immediately. Stripe computes pro rata the difference over the remaining days of the period: it charges it immediately if the new plan costs more, or deducts it from the following invoices as credit if it costs less.
  • Failed payment: after the charge attempts provided by Stripe the subscription ends and the Service stops forwarding calls, as at the end of any subscription, until the Customer chooses a plan again.
  • We may change prices with at least 30 days' notice; the change applies from the following renewal.

In case of a plan downgrade, call log data older than the limits of the new plan (e.g. beyond 90 days) are automatically aggregated into monthly totals and deleted in detail starting from the night after the plan change.

7. Availability of the Service

The Service is provided "as is" and "as available".

We do our best to keep it available and secure but, except as mandatorily provided by law or expressly agreed in writing, we do not guarantee a minimum service level (SLA), continuity, uninterrupted availability, absence of errors, compatibility with third-party services or fitness of the Service for a specific purpose of the Customer.

Interruptions may occur due, among other things, to maintenance, updates, failures, network problems, unavailability of providers or other third-party services, security events or causes beyond our reasonable control.

It is the sole and exclusive responsibility of the Customer to implement in its agents and systems fault-tolerance logic (including, by way of example, fallback and fail-open directly to the AI providers). WebbergatePlus+ s.r.l. is in no way liable for outages, technical blocks, loss of data or economic damage suffered by the Customer or its end users arising from the failure to put such redundancy measures in place.

8. Data and confidentiality

Data processed on behalf of the Customer is governed by the DPA. The content of the calls is not stored, except the texts of the Model comparisons the Customer turns on, stored encrypted and deleted 30 days after the end of the comparison, and the texts collected by Autopilot, stored encrypted and deleted 30 days after collection. With Privacy Guard, the entries the Customer adds to the project dictionary are stored encrypted until it removes them or deletes the project; for conversations that the provider rebuilds by itself (OpenAI Responses API, Gemini Interactions API) the mapping between placeholders and data stays encrypted and in memory only, for 24 hours after the last turn. The detailed call log is kept according to the plan (90 days with Free, in trial and with Base, 365 with Agency), after which only the monthly totals remain; until then it can be exported to CSV. We may use aggregated and anonymous data about the use of the Service to improve it.

WebbergatePlus+ s.r.l. reserves the right to collect, process and use aggregated, statistical and anonymised technical metadata arising from the calls (by way of example: latency, token usage, outcome and response times of the providers) for analysis, public benchmarking, algorithm optimisation, security and improvement of the Service, without time limits and without this giving the Customer any economic or proprietary right.

9. Intellectual property

The Service, the software and the trademarks remain ours. The Customer receives a non-exclusive and non-transferable right of use for the duration of the contract. The Customer's data and content remain the Customer's.

10. Suspension and closure

We may immediately suspend, in whole or in part, access to the Service, to an account, project, agent or to the related keys where this is reasonably necessary to:

  • prevent or stop breaches of the law, of these Terms or of the providers' terms;
  • counter abusive, fraudulent or unauthorised use;
  • protect the security, integrity or availability of the Service, of our systems, of the providers or of other customers;
  • act in case of compromise or suspected compromise of accounts, credentials or keys;
  • prevent damage, overloads or uses that may compromise the Service;
  • comply with legal obligations or legitimate requests from the authorities;
  • act in case of failed payment as provided in point 6.

Where reasonably possible, we will inform the Customer of the suspension and of its reasons. The suspension will last for the time reasonably necessary to remove its cause.

The Customer can close the account at any time from the Account page ("Delete account"). The subscription is cancelled and the active data associated with the account are deleted or made inaccessible in the production systems within 30 days of the request. Backup copies, kept in restricted-access environments and, for the off-site copy, encrypted, keep the data only for the time needed to complete the backup rotation cycle (at most 60 days), after which they are permanently deleted or overwritten. This does not affect data that WebbergatePlus+ s.r.l. is required to keep under legal obligations (e.g. invoicing and accounting) for the period required by applicable law.

11. Limitation of liability

To the maximum extent permitted by applicable law, WebbergatePlus+ s.r.l. does not guarantee that the Service is uninterrupted, error-free or suitable to achieve a specific commercial, economic or technical result of the Customer.

GuardrailX operates as a technical intermediation infrastructure towards providers and third-party services chosen or configured by the Customer. WebbergatePlus+ s.r.l. does not control and does not guarantee availability, continuity, performance, security, prices, limits, conditions, models, outputs or changes of the services provided by such parties.

WebbergatePlus+ s.r.l. is not responsible for content, outputs, answers, omissions, errors, inaccurate information, unexpected results or other content generated by the artificial intelligence models used by the Customer. The Customer is responsible for checking the outputs before using them and for the decisions or actions taken on their basis.

Spending limits, blocks, alerts, anti-loop systems, uniqueness rules, anomaly detection, routing, cost estimates, Comparisons, Autopilot and the related quality and savings estimates, Privacy Guard, environmental impact estimates and other control features of the Service are support and risk-mitigation tools and do not guarantee that a cost, a call, an error, an anomaly or an unwanted behaviour will always be detected, prevented or reported.

The Customer remains responsible for the costs applied by the providers and for checking the related accounts and billing systems.

To the maximum extent permitted by law, WebbergatePlus+ s.r.l. is not liable for indirect, consequential, incidental or special damages, loss of profits or revenue, loss of business opportunities, customers, reputation, expected savings or data, business interruption or claims brought by third parties against the Customer.

The Customer is responsible for the data, content, documents, instructions, configurations and credentials entered, transmitted or used through the Service, for the lawfulness of the related processing, for the use of the outputs and for compliance with applicable law and with the conditions of the providers used.

Except where liability cannot be excluded or limited under applicable law, the total liability of WebbergatePlus+ s.r.l., on any ground and for any event or series of events connected with the Service, shall not exceed the total amount paid by the Customer for the Service in the twelve (12) months preceding the event that gave rise to the liability.

The exclusions and limitations provided in this article do not apply in case of wilful misconduct or gross negligence or in the other cases where liability cannot be excluded or limited under applicable law.

12. Indemnity

To the extent permitted by law, the Customer undertakes to hold harmless and indemnify WebbergatePlus+ s.r.l. against claims, demands, actions, damages, liabilities, costs and reasonable expenses arising from third-party claims resulting from:

  • the data, content, documents or instructions transmitted by the Customer through the Service;
  • the Customer's breach of third-party rights;
  • the absence of a valid legal basis or of the necessary formalities for the processing of personal data carried out by the Customer;
  • the use of the outputs produced by the artificial intelligence providers;
  • the Customer's breach of the providers' terms or conditions;
  • the Customer's use of the Service in breach of the law or of these Terms;
  • the activities of collaborators, software agents or systems operating through the Customer's account or credentials.

The indemnity does not apply to the extent that the claim arises from a fact directly attributable to WebbergatePlus+ s.r.l. for which liability cannot be excluded or limited under applicable law.

The Customer will promptly inform WebbergatePlus+ s.r.l. of third-party claims relevant under this article and will reasonably cooperate in handling them.

13. Changes to the Terms

We may change these Terms by notifying the Customer at least 30 days in advance (by email or in the dashboard). At the first login after they come into force the dashboard asks to accept the new version. If the Customer does not agree, it can cancel before the changes take effect.

14. Governing law and jurisdiction

These Terms are governed by Italian law. The Court of Piacenza has exclusive jurisdiction over any dispute.

15. Contacts

support@guardrailx.ai — PEC (certified email): webbergateplussrl@legalmail.it

16. Specific approval of clauses

Pursuant to Articles 1341 and 1342 of the Italian Civil Code, the Customer, by means of a separate box, declares to have read and specifically approves the clauses:

  • 4 (limits, estimates and responsibility for costs);
  • 6 (limits of the Free plan and blocking at the end of the subscription, automatic renewal, failed payment and price changes);
  • 7 (availability of the Service and exclusion of SLA);
  • 10 (right to suspend the Service and closure);
  • 11 (exclusions and limitations of liability);
  • 12 (indemnity obligations);
  • 13 (changes to the Terms);
  • 14 (governing law and exclusive jurisdiction of the Court of Piacenza).

Last updated: 26 October 2026