Terms of Service

The agreement between you and Growing Technologies LLC for use of SimpleSCEP.

Effective 27 August 2026.

1. Agreement

These Terms govern your access to and use of SimpleSCEP, a hosted public key infrastructure service operated by Growing Technologies LLC ("we", "us"). By creating an account, or by using the service, you agree to them. If you are accepting on behalf of an organization, you represent that you are authorized to bind it, and "you" means that organization.

2. The service

SimpleSCEP creates and operates certificate authorities on your behalf and issues X.509 certificates to devices and services you control, over SCEP, ACME, EST, and the web dashboard. It publishes revocation information for those certificates by CRL and OCSP.

Certificate authority private keys are generated inside a FIPS 140-2 Level 3 validated hardware security module, on every plan, and never leave it. We do not have the ability to export them — no interface exists for it, and none can be added without destroying and reissuing the key.

3. Your account

• You must provide accurate registration information and keep it current.
• Two-factor authentication is mandatory and cannot be disabled. You are responsible for maintaining access to your authenticator and recovery codes.
• You are responsible for all activity under your account, including actions taken by users you invite and by enrollment credentials you issue.
• You must notify us promptly at [email protected] of any suspected compromise.

4. Your obligations as a certificate subscriber

Because we issue certificates on your instruction, you agree that:

• You will request certificates only for domain names, IP addresses, and devices you own or are authorized to represent.
• You will generate and protect subscriber private keys, and will not share them. We never receive them for enrollments that generate keys on the device.
• You will request revocation promptly on any suspected key compromise, and you acknowledge we may revoke any certificate without notice where we reasonably believe it is compromised, misissued, or being used unlawfully.
• The certificates issued are for use within infrastructure you control. They chain to a private root, are not trusted by public browsers, and must not be represented as publicly trusted certificates.

5. Acceptable use

You will not use the service to issue certificates facilitating interception of communications without the consent of the parties, to impersonate a party you are not authorized to represent, to circumvent any plan limit, or in violation of any applicable law or export control.

6. Fees, billing, and renewal

• Plans are billed in advance, monthly or annually, through our payment processor.
• Subscriptions renew automatically for a further period unless cancelled before the end of the current period.
• We may change our prices. We will tell you by email at least 30 days before a change affects you, and a new price takes effect at your next renewal rather than partway through a period you have paid for. If you do not want to renew at the new price, cancel before that renewal.
• Fees are exclusive of taxes, which are added where applicable.
• Purchases are refundable in full within 7 days. How to request one is set out in the Refund Policy.
• Plan quantity is measured in distinct certificate subjects. Renewals and repeat enrollments for a subject already counted are not charged again.
• If payment fails, certificate issuance and renewal continue for 14 days while you update your payment method. After that we may suspend issuance. Existing certificates remain valid until they expire, and revocation information continues to be published throughout.

7. Term and termination

You may cancel at any time; cancellation takes effect at the end of the current billing period. We may suspend or terminate for material breach of these Terms, and will give you 30 days' written notice and an opportunity to put the breach right — except where continued use presents a security risk to the service or to another customer, where we may act immediately and will tell you why.

On termination you may export your certificate inventory and audit log for 30 days, after which your account data is deleted and your certificate authority key material is destroyed. Destruction of CA keys is irreversible and invalidates your ability to issue or to sign new revocation information. Certificate and revocation records are retained after that — see the Privacy Policy for why.

8. Availability and service credits

8.1 The commitment

We commit to monthly uptime of 99% for the enrollment endpoints (SCEP, ACME, and EST) and the dashboard. Monthly uptime is the total minutes in the calendar month less the minutes those services were unavailable to you, divided by the total minutes in that month.

Revocation information is served independently of the dashboard: published CRLs and OCSP responses remain retrievable and valid for their stated period even when the rest of the service is unavailable.

8.2 What is not counted

Unavailability does not include time attributable to:

• maintenance announced at least 48 hours in advance;
• factors outside our reasonable control, including failures of the public internet, of your network, or of a third party we do not control;
• your own configuration, your use of the service contrary to these Terms, or credentials or certificate authorities you have suspended, revoked, or deleted;
• suspension for non-payment or for material breach under sections 6 and 7;
• features identified as beta or preview.

8.3 Service credits

If we miss the commitment in a calendar month, you may claim a credit against future fees, calculated on what you paid for that month. On an annual subscription the monthly fee is one twelfth of the annual charge.

• Below 99% but at or above 98%: a credit of 10% of that month's fees.
• Below 98% but at or above 95%: a credit of 25% of that month's fees.
• Below 95%: a credit of 50% of that month's fees.

8.4 Claiming a credit

Credits are not automatic. Email [email protected] within 30 days of the end of the affected month, giving the dates and approximate times of the unavailability you experienced. We will respond within 30 days. A claim made after that window is not payable, and a claim cannot be made while any invoice on the account is overdue.

Credits are applied against future fees. They are not paid in cash, do not extend the term, and total credits for any month will not exceed 100% of that month's fees. If the subscription ends before a credit is applied, the credit lapses.

Service credits are your sole and exclusive remedy for any failure to meet the availability commitment in this section.

9. Warranties and disclaimers

We warrant that we will operate the service with reasonable skill and care. Except as expressly stated, the service is provided "as is", and we disclaim all other warranties, express or implied, including merchantability and fitness for a particular purpose.

We do not warrant that any certificate will be accepted by any particular relying party, or that the service will be uninterrupted or error free.

10. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, or for lost profits or lost data. Our total aggregate liability arising out of or related to these Terms will not exceed the amounts you paid us in the twelve months preceding the event giving rise to the claim.

That limit does not apply to:

• your obligation to pay fees you have incurred;
• your indemnity obligations under section 11;
• either party's fraud, gross negligence, or wilful misconduct.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. Where that is so, the exclusions and limits above apply to the greatest extent those laws permit, and nothing in these Terms limits liability for death or personal injury caused by negligence.

11. Indemnity

You will indemnify us against claims arising from your use of the service in breach of these Terms, including any claim that a certificate you requested infringed or misrepresented a third party's rights.

12. Changes

We may update these Terms. We will give notice of material changes by email and in the dashboard at least 30 days before they take effect. Continued use after that date is acceptance. If you do not accept a change, you may cancel before it takes effect and we will refund the unused part of any period you have already paid for.

13. Governing law

These Terms are governed by the laws of the State of Michigan, United States, without regard to conflict of laws rules, and the parties submit to the exclusive jurisdiction of the state and federal courts located in the State of Michigan.

14. Contact

Growing Technologies LLC, a Michigan limited liability company.
[email protected]

Our registered agent and registered office are on file with the Michigan Department of Licensing and Regulatory Affairs and can be found through its business entity search. Notices under these Terms may be sent by email to the address above.

Questions about this document: [email protected].