Draft for review. This text is not yet in effect.
The agreement
These terms are between [Company legal name] ("we") and the organization that signs up for Overwatch Console ("you"). Using the service means you accept them on your organization's behalf.
The service
Overwatch Console connects to your Microsoft Sentinel workspace and uses AI agents to triage incidents, review that triage, tune and deploy detection rules, and hunt for threats.
Agent output is analysis to support your security team. It can be wrong. Changes to your workspace wait for a person's approval unless your administrator turns on auto mode for an action, which you do at your own risk.
Your responsibilities
Keep sign-in details private, give access only to people who need it, and grant the service only the Azure permissions it asks for.
Only connect data you are allowed to process, and do not use the service to attack, probe or monitor systems you are not authorized to.
Trials and fees
Trials last 14 days from your first successful Sentinel connection. Paid plans, fees and billing terms are set out in your order form.
Your data
You own your data. We use it only to provide and support the service, as the privacy policy describes.
Availability and changes
We work to keep the service available but do not promise it will be uninterrupted. We may change the service and these terms, and will tell administrators before material changes take effect.
Liability
The service is provided as is. To the extent the law allows, we are not liable for indirect or consequential losses, or for security incidents the service did not detect, and our total liability is limited to the fees you paid in the 12 months before the claim.
Ending the agreement
Either side can end the agreement with notice. When it ends, access stops and your data is deleted as the privacy policy describes.
Law and contact
These terms are governed by the laws of [jurisdiction]. Questions go to [contact email].