Legal
The paperwork, in plain sight.
Everything you would otherwise have to email us for. Each document opens with a short plain-language version, and the long form is underneath it for whoever needs the long form.
These are drafts. Every document below is complete and specific, and none of them has been through legal review yet. They are published so they can be read and corrected. If you are evaluating Rutba and need agreed terms in front of a lawyer, ask us and we will tell you exactly where the review stands.
- Terms of service
- The contract: what we provide, what you agree to, how billing and cancellation work, and where liability stops.
- Privacy policy
- What personal data we hold about you and your staff, why, how long, and what you can ask us to do with it.
- Acceptable use
- What may not be done with the platform — and, so suspension is never arbitrary, what happens when it is.
- Data processing agreement
- The GDPR Article 28 terms under which we process your customers’ data on your instructions. Signable as it stands.
- Sub-processors
- Every third party that touches customer data, what they do, and where they do it. Dated, and honest about what is still unconfirmed.
- Service level agreement
- The availability we commit to for generally available services, how it is measured, and what you get when we miss it.
- Accessibility statement
- What we build to, where we currently fall short, and how to tell us when something is unusable.
- Cookies
- What this site stores in your browser, why, and how to change your mind. Nothing is set until you agree.
Who you would be contracting with
- Legal entity
- Rutba
- Registered address
- Registered address available on request
- Legal contact
- legal@rutba.io
- Document set
- Version 1.0-draft, last updated 1 September 2026
Documents we send on request
These exist as artefacts rather than web pages, because each one is either negotiated, countersigned, or specific to what you are buying. Ask and a person answers — there is no form to fill in first.
- A countersigned data processing agreement, on your paper or ours
- A completed security questionnaire
- An architecture and data-flow description for your security review
- Insurance certificates
- A signed order form or master services agreement for annual commitments
Looking for how we secure the platform rather than how we contract for it? The trust centre has the security posture, the compliance position and the sub-processor summary.