Agreements
The following agreements govern your use of Forged Codes services, including the Forged Codes Registry. By using our services, you agree to the applicable agreements listed below.
1. Terms of Service
Our Terms of Service govern your use of the Forged Codes platform, including account registration, acceptable use policies, and service availability commitments. This is the primary agreement between you and AWFixer Enterprising Inc, OSS Division.
2. Privacy Policy
Our Privacy Policy describes how we collect, use, and protect your personal data when you use our services. This includes information about data retention, deletion rights, and international data transfers.
3. Data Processing Agreement (DPA)
For customers subject to GDPR or other data protection regulations, we offer a Data Processing Agreement that covers:
- Scope and purposes of data processing
- Data subject rights assistance
- Sub-processor obligations and oversight
- Data breach notification procedures (72-hour window)
- Data transfer safeguards (SCCs, adequacy decisions)
To request a signed DPA, contact legal@forged.codes.
4. Service Level Agreement (SLA)
Our Service Level Agreement covers availability and performance commitments:
- Uptime commitment: 99.99% monthly availability (see our Stability page)
- Support response: P1 incidents addressed within 15 minutes, 24/7
- MTTR target: Less than 30 minutes for critical failures
- Credits: Service credits for failure to meet SLA targets, outlined in the full agreement
5. Contributor License Agreement (CLA)
For open-source contributions to Forged Codes projects, we require agreement to our CLA, which:
- Grants us a license to use, modify, and distribute your contributions
- Confirms you have the rights to submit the contribution
- Ensures contributions are compatible with our project licenses
- Does not transfer ownership of your contributions
6. Acceptable Use Policy
All users must adhere to our Acceptable Use Policy, which prohibits:
- Distribution of malware or malicious code through the registry
- Trademark squatting or cybersquatting on package names
- Spam or abuse of the platform's communication features
- Using the platform for unauthorized scraping or data mining
- Impersonation of other users or organizations
- Any activity that could damage, disable, or impair the platform
7. Security Agreement
Our security commitments are detailed on our Security page and include:
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- Zero-knowledge architecture for credential management
- SOC 2 Type II and ISO 27001 certification
- Responsible disclosure and bug bounty program
- Immutable audit logging with 7-year retention
8. Revisions & Notifications
Agreements may be updated from time to time. Material changes will be communicated via email and a notice on our website at least 30 days before taking effect. Continued use of the service after changes become effective constitutes acceptance.
9. Contact
- Legal inquiries: legal@forged.codes
- DPA requests: legal@forged.codes
- Security: security@forged.codes
- General: hello@forged.codes