Agreements & privacy

Operator Agreement

Version 1.2 · Published 23 October 2026

Download

Operator Agreement - development preview

UNREVIEWED DEVELOPMENT DRAFT.

DevGrail is not live yet. This document is a placeholder for testing the operator agreement flow. Accepting it records a development test action only.

Installation heartbeat

Accepting this agreement starts the installation's heartbeat: a report to the DevGrail site the installation was installed from, sent each time the DevGrail server starts and then about once a day, together with this acceptance. It cannot be turned off.

A heartbeat contains random installation, instance, run and report IDs, a sequence number, the DevGrail release, the operating system and the CPU architecture, plus entitlement_sha256 (a checksum of the plan document it received) and entitlement_applied (which part of that document applies now). It contains nothing about users, workspaces or usage. The Privacy Notice describes each field, why it is sent and how long it is kept.

As the operator, you tell the people who use this installation that it sends the heartbeat, and the usage report when its plan is billed by usage. DevGrail also shows them on its Agreements & privacy page.

Plans and limits

The installation runs on its assigned plan, including any custom terms. The plan's limits, features, end date and any plan that follows are shown in Settings -> Plan. No particular plan name, limit or price is fixed by this agreement. DevGrail may change which plan is the default for new subscriptions and for installations whose subscription ends or lapses.

When a time-limited subscription ends, a scheduled follow-up takes effect; if none is scheduled, the installation moves to the current default plan. When a subscription otherwise ends or lapses, it moves to that default. Custom terms end with the subscription unless expressly carried into another term. Existing users, workspaces and running work are not disabled, deleted or stopped because of reduced limits. The installation refuses new actions that would exceed a hard limit, including adding or enabling users, creating workspaces or starting additional stopped workspaces.

You must not circumvent the installation's plan or limits, including by altering its stored entitlement document or blocking the heartbeat to retain an earlier plan. A received plan document remains valid for 30 days. Without a newer document after that time, the installation uses the last default plan it received. A temporary outage does not stop existing work.

Plans billed by usage

A plan can be billed by usage, for example per enabled user account. On such a plan the installation sends a usage report after each heartbeat, as part of this agreement: for each completed day, the highest count of each meter the plan bills on, counted every hour. Settings -> Plan says which counts are sent and when. A plan that is not billed by usage sends no usage report.

The charge for a billing period is based on the highest daily count in it. A day without a report counts as the last day reported before it in the same period. You must not prevent, alter or falsify usage reports, for example by blocking them or editing the counts the installation keeps.

Supported releases and plan checks

DevGrail may mark a release outdated or retired, for example after a security fix. An outdated release asks administrators to upgrade. A retired release runs under the default plan's limits until upgraded; the subscription itself is not changed and existing work is not stopped. Administrators can see the release status and upgrade destination in the dashboard.

The heartbeat's entitlement checksum and applied-part fields let DevGrail check whether an installation applies the plan document it was sent. Repeated mismatches may be flagged for review, and DevGrail may contact the operator about them. A flag alone does not change a subscription or stop work. The Privacy Notice describes the purpose, proposed legal basis and retained records.

Review before launch

Reviewed terms will replace this notice before launch. This minor version is intended to require operators to accept again under the normal renewal rules. A lawyer must review these plan, usage billing, release and anti-circumvention clauses together with Privacy Notice 1.3.0, especially the purpose and legal basis of mismatch checks and of usage reports. Nothing in this draft establishes that production processing is lawful.

Technical details

operator-agreement.v1.2.0.en.md · version 1.2.0 · en

SHA-256: 5b5c19d6c6f32f220da2044b1d8b0aa543ec6a379110ed6a9b877cd8d867c4f1

Permanent link to this version