Terms of Service

1. Acceptance of Terms

By downloading, installing, or using Deva (“the Application”), you agree to these Terms of Service (“Terms”). If you do not agree, do not use the Application.

2. Description of Service

Deva is an AI-assisted secure coding platform built for classified, air-gapped, and other controlled environments. It catches insecure and non-compliant code as it is written, maps findings to code-level compliance controls, and generates fixes. In the default air-gapped configuration, scanning, compliance mapping, and fix generation run against a local model (Deva Coder) inside the customer's environment with no code egress.

3. Accounts

You must create an account to use Deva IDE. You may sign in with email/password, Google, or GitHub. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

4. Permitted Use

You agree to use the Application only for lawful purposes. You may not:

• Use the Application to scan, test, or exploit systems you do not own or have written authorization to test
• Use AI features to generate malicious software, harmful content, or content that violates applicable law
• Attempt to access other users' accounts or data
• Interfere with or disrupt the Application's services or infrastructure
• Redistribute, resell, or sublicense the Application in whole or in part

5. AI Features

The Application includes AI-powered features such as chat, code analysis, and fix generation. The default AI path uses Deva Coder, a local model that runs on the developer's machine or an on-premises inference node inside the customer's environment. In this configuration, prompts and code context do not leave the customer boundary.

In non-air-gapped deployments, the operator may optionally enable third-party AI providers (Anthropic, OpenAI, Google). When an operator explicitly enables those providers, prompts and relevant code context for that request are sent to the selected provider and are subject to that provider's terms. Air-gapped and controlled-environment deployments do not use third-party AI providers.

• AI-generated output (code suggestions, security analysis, recommendations) is provided as-is and does not constitute professional advice
• You are responsible for reviewing and validating any AI-generated code before use

6. Privacy

Your use of the Application is also governed by our Privacy Policy, which describes what data we collect, how it is used, and how it is protected. The Privacy Policy is incorporated into these Terms by reference.

7. Intellectual Property

The Application and its original content, features, and functionality are owned by DevSecCode and are protected by applicable intellectual property laws. You may not copy, modify, distribute, reverse engineer, or create derivative works of the Application. Content you create using the Application remains yours.

8. Third-Party Services

The Application integrates with third-party services including Google Cloud Platform, Firebase, and GitHub. Optionally, operators may enable third-party AI providers (Anthropic, OpenAI, Google). Your use of these services is subject to their respective terms. We are not responsible for the availability, accuracy, or conduct of any third-party service.

9. Disclaimer of Warranties

The Application is provided “as is” and “as available,” without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and noninfringement.

Security scan results are informational and do not guarantee that your code is free of vulnerabilities. The Application does not replace professional security audits or accreditation processes (such as ATO, CMMC certification, or FedRAMP authorization).

10. Limitation of Liability

To the maximum extent permitted by law, DevSecCode and its contributors shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of the Application, including but not limited to loss of data, loss of profits, or business interruption.

11. Termination

We may suspend or terminate your access to the Application at any time for violation of these Terms. You may stop using the Application at any time. Sections 9, 10, and 12 survive termination.

12. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to conflict of law principles.

13. Changes to These Terms

We may update these Terms at any time. Material changes will be communicated through the Application or our website. Continued use after changes are posted constitutes acceptance of the revised Terms.

14. Contact

For questions about these Terms, contact us at: admin@devseccode.com