# Terms of Service. Whisper.

> The agreement between you and us for using the Whisper platform — plainly
> stated, no surprises.

Effective date: 2 July 2026
Provider: viaGraph B.V. (dba Whisper Security), Amsterdam, the Netherlands
Contact: hostmaster@whisper.online
Privacy Policy: https://whisper.online/privacy

## 1. The agreement

These Terms of Service (the "Terms") are a binding agreement between you
and viaGraph B.V., doing business as Whisper Security, a company
established in Amsterdam, the Netherlands ("we", "us"). By creating an
account, obtaining an API key, or using the Service, you accept these
Terms. If you do not agree, do not use the Service.

## 2. Definitions

- "Service" — the Whisper platform: policy-aware DNS resolution, agent
  network identities, egress connectivity, the public registry and
  transparency records, the control APIs, the command-line tools and SDKs,
  and the websites at whisper.online and its subdomains.
- "Agent" — a program (typically an AI agent) that you register with, or
  connect through, the Service.
- "Identity" — a routable IPv6 address (a /128) allocated to an Agent,
  together with its DNS names and public registry records.
- "API key" — a credential issued to your account for authenticating to
  the Service.
- "You" — the person or organization accepting these Terms, including
  every Agent acting under your account.

## 3. Eligibility

You must be at least 16 years old to use the Service. If you accept these
Terms on behalf of an organization, you confirm you have authority to bind
that organization, and "you" then means that organization.

## 4. Accounts & API keys

- Keep your API keys secret. A key is a bearer credential: anything done
  with your key — by you, your software, or your Agents — is done under
  your account, and you are responsible for it.
- Tell us promptly at hostmaster@whisper.online if you believe a key is
  compromised; we will help you rotate it.
- Provide accurate account information and keep it current.

## 5. The Service

The Service provides:

- Policy-aware DNS resolution — resolvers your Agents can use, applying
  the resolution policies you configure;
- Agent identity — allocation of routable IPv6 addresses (/128s) from our
  address space (2a04:2a01::/32, announced by our autonomous system
  AS219419), published in reverse DNS, RDAP/WHOIS, and a public
  transparency log so anyone can verify them;
- Egress — optional connectivity that lets an Agent's traffic originate
  from its own allocated address.

Address allocations are assignments, not property. An allocated address is
assigned to you for use WITH the Service, for as long as your account and
the allocation are active. Addresses are not sold, and you may not
transfer, sublet, or announce them independently. When an allocation ends
— by your action, account closure, or revocation — the address returns to
us.

We may improve, extend, or change the technical form of the Service over
time; where a change materially reduces documented functionality you rely
on, we will give reasonable notice.

## 6. Acceptable use

The Service gives your Agents a real, attributable presence on the
internet. Use it accordingly. You must not use the Service — and must not
let your Agents use it — to:

- break any applicable law, or infringe anyone's rights;
- attack, probe, or disrupt networks or systems you are not authorized to
  test — including denial-of-service, unauthorized scanning, or
  exploitation;
- send spam or other unsolicited bulk communications;
- commit fraud, or misrepresent an identity — including using an Identity
  to impersonate another person, organization, or agent;
- evade or undermine the Service's policy, logging, attribution, or
  revocation mechanisms;
- violate generally accepted internet and DNS operational norms, or the
  registry policies published at https://nic.whisper.online/policy;
- resell the Service as such without our written agreement.

We may suspend or revoke an Identity, an API key, or an account that we
reasonably believe is being used in violation of this section. For
confirmed abuse we act quickly, and revocation is recorded in the public
transparency log. Where practical we will notify you; for active harm we
may act first and notify after. Abuse reports: hostmaster@whisper.online.

## 7. Fees

- A free tier is available, subject to fair-use limits (such as caps on
  the number of Agents, requests, or traffic) that we may adjust with
  notice.
- Paid plans are charged as stated at purchase or in a written order. Fees
  are exclusive of taxes unless stated otherwise; invoices are payable
  within the stated term.
- We may change prices with at least 30 days' notice; changes take effect
  at your next renewal.

## 8. Intellectual property

- We and our licensors retain all rights in the Service, its software,
  documentation, and branding. We grant you a limited, non-exclusive,
  non-transferable licence to use them as needed to use the Service under
  these Terms. Open-source components we publish (such as the command-line
  tool) are licensed under their own published licences.
- You retain all rights in your own data, your Agents, and their traffic.
  You grant us the limited licence to process them as needed to provide
  the Service.
- Public registry and transparency records are published under the data
  licence at https://nic.whisper.online/data-license.

## 9. Privacy

Our processing of personal data is described in the Privacy Policy
(https://whisper.online/privacy), which forms part of these Terms. Note in
particular that registry records for allocated Identities (RDAP/WHOIS,
reverse DNS, the transparency log) are public by design.

## 10. Disclaimers

The Service is provided "as is" and "as available", without warranties of
any kind, express or implied — including merchantability, fitness for a
particular purpose, and non-infringement — to the maximum extent permitted
by law. We do not warrant that the Service will be uninterrupted,
error-free, or secure. The free tier carries no service-level commitment.
Any service levels for paid plans are only those stated in a written
agreement with us.

## 11. Limitation of liability

To the maximum extent permitted by law: neither party is liable for
indirect or consequential damages, loss of profits, loss of data, or loss
of goodwill; and our total aggregate liability under these Terms is
limited to the fees you paid us in the twelve months before the event
giving rise to the claim (or EUR 100 if you paid none). Nothing in these
Terms excludes or limits liability that cannot be excluded or limited
under applicable law, including liability for intent or gross negligence
(opzet of bewuste roekeloosheid).

## 12. Indemnification

You will defend and indemnify us against third-party claims, and the
resulting damages and reasonable costs, arising from your (or your
Agents') use of the Service in violation of these Terms or of applicable
law.

## 13. Suspension & termination

- By you: you may stop using the Service and close your account at any
  time.
- By us: we may suspend or terminate the Service or your account for
  material breach of these Terms (including section 6), for non-payment,
  where required by law, or — for free-tier accounts — with reasonable
  notice.
- Effect: on termination, your API keys are deactivated and your Identity
  allocations are revoked and return to us. Provisions that by their
  nature survive (sections 8, 10, 11, 12, 15) survive.

## 14. Governing law & jurisdiction

These Terms are governed by the laws of the Netherlands. Any dispute
arising from or in connection with these Terms that cannot be resolved
amicably will be submitted exclusively to the competent courts of
Amsterdam, the Netherlands, without prejudice to mandatory consumer
protections that give you the courts of your residence.

## 15. Changes to these Terms

We may update these Terms. The current version is always at
https://whisper.online/terms (this document:
https://whisper.online/terms.md) with its effective date. For material
changes we will notify account holders with reasonable advance notice;
continued use after the effective date is acceptance.

## 16. Contact

viaGraph B.V. (dba Whisper Security), Amsterdam, the Netherlands.
Email: hostmaster@whisper.online