Terms of Service

By accessing or using Drel ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, do not use the Service.

These Terms apply to all users of the Service, including free-tier users, paid subscribers, and enterprise customers. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

Data controller. The Service is operated by Atela Capital S.L. ("Drel", "we", "us"), registered in Madrid, Spain. For data protection purposes, Atela Capital S.L. is the data controller. Contact: hello@drel.ai.

Drel is an AI-native security assessment platform that generates structured AI Security Reviews for AI, RAG, and agentic systems. The Service includes the web application, API, and any related documentation.

The Service is provided "as is" for informational and planning purposes. Outputs generated by Drel are AI-generated and should be reviewed by qualified security professionals before being used as the sole basis for security decisions.

Registration. Some features require an account. You must provide accurate information when registering and keep it up to date.

Security. You are responsible for maintaining the confidentiality of your credentials and for all activity that occurs under your account. Notify us immediately at security@drel.ai if you suspect unauthorized access.

Eligibility. You must be at least 18 years old to use the Service. By using the Service, you represent that you meet this requirement.

Termination. We reserve the right to suspend or terminate accounts that violate these Terms, engage in fraudulent activity, or pose a security risk to the Service or other users.

You agree not to use the Service to:

• Violate any applicable law or regulation • Infringe the intellectual property rights of others • Upload or transmit malicious code, viruses, or harmful content • Attempt to gain unauthorized access to the Service or its infrastructure • Scrape, crawl, or systematically extract data from the Service without permission • Resell or sublicense access to the Service without a written agreement • Use the Service to generate security assessments for systems you do not have authorization to assess • Interfere with the availability or performance of the Service for other users

We reserve the right to investigate and take appropriate action against violations, including account suspension and referral to law enforcement.

Drel IP. The Service, including its software, design, trademarks, and underlying AI models, is owned by Drel and protected by intellectual property laws. You may not copy, modify, distribute, or create derivative works without our written permission.

Your content. You retain ownership of the system descriptions and other content you submit to the Service ("Your Content"). By submitting content, you grant Drel a limited license to process it for the purpose of providing the Service and, unless you opt out, improving our AI models (see our Privacy Policy).

Assessment outputs. AI Security Reviews generated by the Service are provided to you for your use. You may use, share, and modify them for your internal security purposes. You may not resell or redistribute them as a standalone product.

Subscriptions. Paid plans (Professional and Team) are billed in advance on a monthly or annual basis. Prices are listed in USD and are subject to change with 30 days' notice.

Evaluation tier. The Evaluation tier is provided without charge, limited to 3 new AI systems within a 30-day window. It may be modified or discontinued at any time.

Paid tiers. Professional ($149/month or $1,490/year) and Team ($499/month or $4,990/year) plans include AI system entitlements as described on our pricing page. Entitlement limits, features, and pricing are subject to change with 30 days’ notice.

Cancellation. You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. We do not provide refunds for partial periods, except where required by law.

Taxes. Prices do not include applicable taxes. Stripe Tax is applied automatically based on your billing address where required by law.

How analysis works. When you submit a system description for AI Security Review, Drel sends your input to large language models hosted on AWS Bedrock to generate findings, recommendations, and risk assessments.

Data processing location. AI processing occurs in the European Union (AWS eu-central-1 region, Frankfurt). Your assessment inputs and outputs are not stored by AWS after processing is complete.

No training on your data. AWS Bedrock does not use your inputs or outputs to train, improve, or fine-tune its foundation models. Drel does not run any model-training pipeline on customer data.

Data minimization. Only the system description and questionnaire responses you provide are sent for AI processing — not your account details, billing information, or usage history.

Sub-processors. For current AI processing, we use Amazon Web Services (AWS Bedrock) as a sub-processor under a Data Processing Agreement. A full list of sub-processors is available on request at hello@drel.ai.

AI-generated content. AI Security Reviews are generated by AI models and may contain errors, omissions, or outdated information. They are intended to assist qualified security professionals, not replace them. Drel makes no warranty that outputs are complete, accurate, or suitable for any particular purpose.

No security guarantee. Using Drel does not guarantee that your AI system is secure. Security is a continuous process that requires human judgment, testing, and ongoing monitoring.

Service availability. We aim for high availability but do not guarantee uninterrupted access. The Service may be unavailable due to maintenance, outages, or circumstances beyond our control.

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, DREL SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING LOSS OF PROFITS, DATA, OR GOODWILL, ARISING FROM YOUR USE OF OR INABILITY TO USE THE SERVICE.

IN NO EVENT SHALL DREL'S TOTAL LIABILITY TO YOU EXCEED THE GREATER OF (A) THE AMOUNT YOU PAID FOR THE SERVICE IN THE 12 MONTHS PRECEDING THE CLAIM, OR (B) $100 USD.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF CERTAIN WARRANTIES OR LIMITATION OF LIABILITY, SO SOME OF THE ABOVE MAY NOT APPLY TO YOU.

If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, the following additional terms apply:

Legal bases for processing. We process your personal data on the following legal bases under Article 6 GDPR: • Performance of contract (Art. 6(1)(b)): account provision, assessment generation, billing • Legitimate interest (Art. 6(1)(f)): analytics, security, product improvement • Consent (Art. 6(1)(a)): marketing emails (you can withdraw consent at any time) • Legal obligation (Art. 6(1)(c)): tax records, fraud prevention

International transfers. Your data is primarily processed within the EU. Where data is transferred outside the EEA (e.g., to US-based sub-processors), we rely on EU Standard Contractual Clauses or equivalent safeguards.

Data Protection Officer. For GDPR inquiries, contact hello@drel.ai with subject line "GDPR Request". We will respond within 30 days as required by law.

Supervisory authority. You have the right to lodge a complaint with your local data protection authority. In Spain, this is the Agencia Espanola de Proteccion de Datos (AEPD).

These Terms are governed by the laws of Spain. Any disputes arising from these Terms or your use of the Service shall be resolved in the courts of Madrid, Spain.

If you are a consumer located in the European Union, you retain any mandatory consumer protection rights afforded by the laws of your country of residence that cannot be waived by contract. You may also use the EU Online Dispute Resolution platform at https://ec.europa.eu/consumers/odr.

We may update these Terms from time to time. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Your continued use of the Service after changes take effect constitutes acceptance of the updated Terms.

If you do not agree to the updated Terms, you must stop using the Service and may cancel your subscription.