Trust Layer Service — ArkForge
Last updated: March 6, 2026
These Terms of Service ("Terms") govern access to and use of Trust Layer, a certifying proxy for AI agent-to-agent transactions, available under Free, Pro, Enterprise, and Platform plans.
Trust Layer is infrastructure: it forwards requests to a target API and generates a cryptographic proof of the transaction. It is not a scanning, monitoring, or analytics SaaS.
By using the service, you agree to these Terms in full.
ArkForge
SIRET: 93208689500013
Email: [email protected]
Website: arkforge.tech
Trust Layer operates in two steps:
Generated proofs are immutable (write-once) and cannot be modified or deleted during their retention period.
mcp_plat_All prices are exclusive of applicable taxes. Prices may be modified with 30 days' notice.
The monthly quota resets on the 1st day of each calendar month. You may consume your entire monthly quota at any time during the month, including within a few hours, with no throughput restriction imposed by ArkForge.
You are solely responsible for your rate of quota consumption. ArkForge cannot be held liable for premature quota exhaustion, in particular in the event of a misconfigured autonomous agent, infinite loop, or configuration error on your side.
ArkForge sends an email alert when 80% of the monthly quota has been consumed. This alert is provided for informational purposes only; it does not constitute a contractual obligation of result. You are encouraged to implement your own monitoring mechanisms.
Once the monthly quota is exhausted, requests are rejected with HTTP 429. No additional charge is applied unless you have explicitly opted in to overage billing.
Access is via API keys in the Authorization header. The X-Agent-Identity header is optional.
You are responsible for the security of your API keys and must not share them with unauthorized third parties.
Proofs are write-once and cannot be modified or deleted during their retention period.
Retention periods:
You are encouraged to download and store your proofs locally. Each JSON proof is self-contained and verifiable independently of ArkForge.
The RFC 3161 TSA pool and Sigstore Rekor are independent services operating on a best-effort basis. If one TSA server is unavailable, the next one is tried automatically. If all TSA servers fail, the proof remains valid via Ed25519 and Sigstore Rekor.
ArkForge cannot guarantee the permanent availability of third-party services.
Proofs generated by Trust Layer have technical evidential value: they cryptographically attest that a transaction occurred at a given time with specific content.
This technical evidential value does not automatically constitute a legally qualified proof.
ArkForge does not provide legal advice. For use of proofs in contractual or litigation contexts, consult a qualified lawyer and contact [email protected] for a use-case assessment.
ArkForge is subject to a best-efforts obligation. ArkForge certifies the existence of a transaction, not its validity or legality.
ArkForge is not liable for: the content of forwarded requests, the availability or performance of target APIs, results returned by target APIs, your use of generated proofs, temporary unavailability of third-party witnesses, or any indirect damages (including loss of profit, data loss, business interruption, commercial harm, or reputational damage).
ArkForge's direct liability is limited to amounts paid by you during the 12 months preceding the event giving rise to the claim. These limitations apply regardless of the nature of the claim.
You agree to use the service lawfully, not to tamper with proofs, not to circumvent quotas or security mechanisms, and to keep your API keys secure.
Acceptable use of the proxy: You warrant that you have the necessary rights and authorizations to call the target API through Trust Layer. You agree not to use the proxy to: call services without authorization, circumvent access controls, scan or attack third-party systems, or exfiltrate unauthorized data.
Violations may result in immediate suspension and reporting to competent authorities.
Trust Layer is designed to minimize personal data collection: request and response bodies are not logged, SHA-256 fingerprints are not directly identifying personal data, and agent identity is optional.
Data processing: When personal data transits through the proxy, ArkForge acts as a Data Processor under Article 28 GDPR. You remain the Data Controller responsible for the lawfulness of transmitted data.
A Data Processing Agreement (DPA) compliant with Article 28 GDPR is available on request for Pro and Enterprise customers: [email protected]
See our Privacy Policy for details.
Paid plans are monthly subscriptions with no minimum commitment. You may cancel at any time from your Stripe customer portal; cancellation takes effect at the end of the current billing period.
Generated proofs remain accessible for 1 year. ArkForge may suspend access for Terms violations.
These Terms are governed by French law. The parties will seek an amicable resolution before any legal proceedings.
Consumer mediation: CNPM, 27 avenue de la Libération, 42400 Saint-Chamond — cnpm-mediation-consommation.eu
EU Online Dispute Resolution: ec.europa.eu/consumers/odr
Under Article L.221-28 of the French Consumer Code, the right of withdrawal does not apply to digital services that have begun execution with the consumer's express agreement. By subscribing to a paid plan, you agree to immediate service commencement and expressly waive your 14-day right of withdrawal.
ArkForge is not liable for failure to perform obligations due to force majeure events (hosting outage, cyberattack, natural disaster, governmental action, network outage). If the event persists beyond 90 days, either party may terminate without penalty.
Trust Layer may include automated technical reputation scores for target APIs based on objective data. These scores are provided for informational purposes only based on an automated technical method and do not constitute a definitive judgment on any provider's quality.
ArkForge may amend these Terms with 30 days' notice by email. Continued use of the service after amendments constitutes acceptance.
If any provision is found invalid, the remaining provisions continue in full force and effect.