AuthMargin
Terms of Service

Clear operating terms for a security product.

Effective August 9, 2026. These terms govern access to and use of AuthMargin. If you use AuthMargin on behalf of an organization, you represent that you are authorized to accept these terms for that organization.

Service

What AuthMargin provides

Security evidence

AuthMargin collects customer-authorized Microsoft 365 configuration and security evidence, evaluates supported controls, and presents findings, history, remediation guidance, and related reporting.

Retention windows

Customer-visible audit history is plan-scoped: 30 days on Business and 365 days on Pro/MSP. Underlying evidence may be retained for up to 400 days under the production evidence lifecycle for integrity, recovery, security investigation, and service-record purposes, unless a different contractual or legal requirement applies. Cancellation stops new scheduled evidence collection but does not bypass that existing-data lifecycle.

Audit by default

Audit Mode is designed for read-only collection. Protect Mode is separate, optional, and limited to supported remediation actions that require the applicable Microsoft permissions and AuthMargin approval workflow.

Customer responsibility

You are responsible for the Microsoft tenant, accounts, administrators, licenses, configuration decisions, approvals, and the accuracy of information you provide to the service.

No certification

AuthMargin may provide technical evidence and readiness mappings, but it does not itself issue SOC 2 attestations, ISO certifications, legal opinions, or guarantees that a customer satisfies a regulatory framework.

Accounts + authorization

Use only tenants you are authorized to administer.

You must protect your AuthMargin and Microsoft credentials, use accurate account information, and connect only Microsoft tenants for which you have authorization. You may not attempt to bypass tenant isolation, plan limits, security boundaries, rate limits, or approval controls.

Billing

Subscriptions renew until canceled.

Paid plans are billed through Stripe at the price presented at checkout. Unless a checkout or written order states otherwise, subscriptions renew for successive billing periods until canceled. Cancellation takes effect according to the billing settings presented in the customer portal. Fees already due remain payable.

Acceptable use

Do not use AuthMargin to attack, deceive, or exceed authorization.

You may not use the service to access a tenant without permission, interfere with the service, probe for vulnerabilities outside an authorized security-testing program, distribute malware, violate applicable law, or use Protect functionality for actions you are not authorized to perform.

Availability + changes

Third-party service changes can affect product behavior.

Microsoft and other service providers may change APIs, licensing, availability, or behavior. AuthMargin may update, suspend, or discontinue features to preserve security, reliability, legal compliance, or compatibility. Material changes to these terms are reflected by an updated effective date on this page.

Warranty + liability

Security findings support decisions; they do not replace professional judgment.

To the extent permitted by applicable law, the service is provided on an “as available” basis without a guarantee that every security issue will be detected or that every recommendation is appropriate for every tenant. Customers remain responsible for reviewing and approving changes before applying them.

Suspension + termination

Access can be restricted when necessary to protect the service.

AuthMargin may suspend or terminate access for nonpayment, material violation of these terms, security risk, abuse, or unlawful use. You may stop using the service and cancel a paid subscription through the available billing controls.

Privacy and data handling

Use of the service is also subject to the AuthMargin privacy information. Review it before connecting production tenant data.

Questions about these terms?

Contact admin@authmargin.com. For organization-specific legal, regulatory, procurement, or data-processing requirements, obtain appropriate professional review before production use.