Email Security Posture Management (ESPM)ESPMBack to home

Terms of Service

Last updated: 2026

These terms govern use of ESPM (Email Security Posture Management), operated by NullFortis ("ESPM," "we," "us"). They're written to match how the product actually works — have them reviewed by qualified legal counsel before relying on them as your organization's official terms.

1. Acceptance of terms

By creating an account, using Demo Mode, or otherwise accessing ESPM, you agree to these Terms of Service and our Privacy Policy. If you're accepting on behalf of an organization, you confirm you have the authority to bind that organization.

2. What ESPM does

ESPM is a platform for monitoring and improving your domains' email authentication posture: parsing DMARC aggregate reports, computing SPF/DKIM/DMARC compliance grades, running live DNS lookups, surfacing threat intelligence on sending IPs, and generating AI-assisted explanations of authentication failures. It is a monitoring and reporting tool — it does not send, filter, or deliver your organization's email.

3. Accounts and eligibility

  • You must be at least 18 years old and able to form a binding contract to create an account.
  • You’re responsible for maintaining the confidentiality of your credentials and for all activity under your account.
  • You must provide accurate registration information and verify your email address before signing in.
  • You’re responsible for managing who has access to your organization and what role they hold.

4. Acceptable use

You agree not to:

  • Add, monitor, or run DNS lookups against a domain you don’t own or aren’t authorized to assess.
  • Use the API, DNS tools, or any other feature to scan, probe, or attack infrastructure that isn’t yours.
  • Attempt to circumvent rate limits, reverse-engineer the platform, or interfere with other organizations’ isolated data.
  • Upload files to the Reports feature that aren’t genuine DMARC aggregate reports.
  • Use the service in any way that violates applicable law.

5. Demo Mode

"Continue with Demo Mode" logs you into a single, shared demonstration account pre-populated with sample data, intended purely for evaluating the product. Don't rely on it to store real organizational data — treat anything entered there as non-private and non-persistent for your purposes.

6. Third-party integrations

ESPM lets you connect third-party services (Cloudflare, Slack, PagerDuty, SendGrid, Microsoft 365, Google Workspace, AWS Route 53, Amazon SES, and IMAP mailboxes). Your use of those services remains subject to that provider's own terms. We're not responsible for outages, rate limits, or changes on the provider's side that affect an integration's behavior.

7. Plans and limits

Organizations operate under a plan that may cap the number of domains or other resources you can create, as shown in your account. We may introduce, change, or retire plans and limits; where a change materially affects a paid plan, we'll provide reasonable notice.

8. AI-generated content

Explanations, root-cause summaries, and suggested fixes generated by our AI features are provided for informational purposes only. They may be incomplete or inaccurate and are not a substitute for your own security judgment or professional advice — you remain responsible for decisions made about your domains' DMARC policy.

9. Intellectual property

ESPM and its underlying software remain our property. You retain all rights to the domain, report, and organization data you submit — we only use it to provide the service to you, as described in our Privacy Policy.

10. Disclaimer of warranties

ESPM is provided "as is" and "as available." We don't guarantee the service will be uninterrupted, error-free, or that it will catch every authentication failure or threat — DMARC monitoring is one layer of a broader email-security program, not a complete guarantee against spoofing or phishing.

11. Limitation of liability

To the maximum extent permitted by law, ESPM and NullFortis won't be liable for indirect, incidental, or consequential damages arising from your use of the service, including losses resulting from a domain-spoofing or phishing incident that our monitoring did not prevent or catch.

12. Termination

You may stop using ESPM and delete your organization at any time. We may suspend or terminate access for violation of these terms, non-payment on a paid plan, or activity that risks the security or integrity of the platform.

13. Changes to these terms

We'll update the "last updated" date above whenever these terms change, and will make reasonable efforts to notify account owners of material changes.

14. Contact us

Questions about these terms can be sent to [email protected].