The licence, plainly stated

These terms are an agreement between you (the person or organisation using an image or this website) and ProvenCloud ("we", "us"). By launching an image, or by using this site, you accept them. If you are accepting on behalf of an organisation, you confirm you have the authority to do so.

For each image you obtain from us, we grant you a non-exclusive, non-transferable licence to run it on instances within cloud accounts or subscriptions that you control, for your own internal business purposes, for as long as your access to the image continues.

You may copy the image between regions of your own account, snapshot it, and build your own derived images from it for use within your organisation. You may not resell, sublicense, publish or otherwise redistribute an image or a derived image to any third party without a separate written agreement with us. Managed service providers and platform vendors who want to embed our images should contact us about a redistribution agreement.

Each image bundles software that we did not write. Every component is listed in the software inventory on the image's catalog page, together with its version. Those components are licensed to you by their respective authors under their own licences (for example the GPL, Apache 2.0, MIT or BSD licences), which govern your use of them and take precedence over these terms for those components. We do not claim ownership of any of them; our work is the clean-room build, configuration, hardening and documentation around them.

Where you obtain an image through AWS Marketplace or Azure Marketplace, the marketplace's own customer agreement and the listing's end-user licence terms also apply, and billing for the image is handled by that marketplace. If the marketplace terms and these terms conflict for a marketplace purchase, the marketplace terms prevail to the extent of the conflict.

You are responsible for what runs on your instances and for complying with the laws that apply to you, including export control and sanctions law. You may not use an image to attack, probe or disrupt systems you are not authorised to test, to distribute malware, or to infringe anyone else's rights. You may not remove or obscure the notices, inventory files or documentation that ship inside an image.

We publish patched revisions of each image on the cadence described on its catalog page, each with release notes and an updated software inventory. Critical CVEs in shipped software get a published revision within 72 hours of the upstream fix. We do not modify instances you have already launched; upgrading is your action, taken on your schedule.

Support is provided as described on the support page, and security vulnerabilities are handled as described on the security page. Neither page creates a contractual service level unless we have signed a support agreement with you that says so.

We warrant that each image is built from official sources, ships with no baked-in credentials, and matches the software inventory and security posture published on its catalog page at the time of release. Beyond that, images and this website are provided "as is", without any other warranty, express or implied, including fitness for a particular purpose or non-infringement. No image is warranted to be free of every vulnerability; the bundled software is maintained by its upstream authors.

To the fullest extent permitted by law, we are not liable for indirect, incidental, consequential or punitive damages, or for loss of data, revenue or profit, arising from your use of an image or this site. Our total liability for any claim is limited to the amount you paid us for the image concerned in the twelve months before the claim arose. Nothing in these terms limits liability that cannot lawfully be limited.

You may stop using an image at any time by terminating your instances. We may end your licence if you materially breach these terms and do not remedy the breach within 30 days of our written notice. On termination, your right to launch new instances from the image ends; the licences of the third-party components continue under their own terms.

We may update these terms. The date at the side of this page shows when they last changed, and material changes are announced in the release notes of the next image revision. Continuing to launch images after a change means you accept the updated terms for those launches.

These terms are governed by the laws of India, and the courts of India have exclusive jurisdiction over any dispute arising from them, without prejudice to any mandatory consumer protections that apply where you are located.

Questions about these terms go to support@provencloud.io. A real engineer reads them, and we would rather clarify a term than argue about it.