Acceptable Use Policy

This policy applies to rowattest.com, app.rowattest.com, the RowAttest API and the RowAttest MCP server, operated by RW Digital Ventures LLC. It is part of the Terms of Service. If this policy and the Terms differ, the Terms apply.

1. Test only what you are allowed to test.

Connect only Supabase projects you own or control, and only where you have the right to authorize security testing. If an employer, client or partner owns part of the system, you need their permission too.

2. Staging only.

Do not connect production databases that hold real customer data. RowAttest creates and deletes test rows during a run.

3. Do not attack RowAttest.

Do not probe, scan or test RowAttest's own systems, try to bypass access controls or rate limits, or interfere with the service for other users.

4. Use the API and MCP server as documented.

Keep your API keys private. Do not share keys between organizations, resell access, or run automated traffic that goes beyond the documented allowances.

5. Do not misrepresent reports.

A signed report describes one run against one project on one date. Do not alter a report, present it as covering tables or systems it did not evaluate, or present an unsigned run as a signed report. The public verify link is the record of what was signed.

6. Lawful use.

Do not use RowAttest to break any law or to handle data you have no right to handle.

7. Enforcement.

We may suspend or close accounts that break this policy, and we may notify affected parties when the law requires it.

8. Contact.

Questions about this policy: info@rowattest.com.

← Back to RowAttest