Terms of Service

Version 2026-09-25 · Effective September 25, 2026

These Terms of Service ("Terms") are an agreement between Interlock MDR ("MDR", "we", "us") and the company on whose behalf you use the service ("Company", "you"). By registering, by accepting these Terms in the application, or by using MDR, you agree to them on behalf of your Company and confirm that you have the authority to do so. The Privacy Policy, the Data Processing Addendum (where it applies) and the trial and billing terms in Section 11 are part of these Terms.

1. Your data, your contracts, our role

This section states the basis of the whole agreement. If anything else in these Terms appears to conflict with it, this section controls.

  1. You are responsible for your own data. Everything a Company connects, defines, maps, offers, requests or transfers through MDR is that Company's data and that Company's responsibility — its accuracy, its completeness, its lawfulness, its fitness for the purpose a Partner puts it to, and the rights needed to share it.
  2. MDR is the transfer service. MDR moves data from a sending Company's system to a receiving Company under a contract the two of them built and approved. MDR does not inspect, verify, correct, enrich or vouch for the data. Data sent incorrectly, sent to the wrong Partner, sent under the wrong controls, or accepted by a receiver that should not have accepted it is not the responsibility of MDR.
  3. MDR does not store the data and does not manage it. Business records pass through MDR in memory during a transfer and are not retained. Any handling of personal information or other regulated or sensitive data — including deciding whether it may be shared, under what lawful basis, how it is secured once received, and how long it is kept — is the responsibility of the two connecting Companies, between themselves. Although consumer data may be transmitted through MDR, it is the responsibility of the sending and the receiving Company to ensure that what is sent and what is received is managed in accordance with all applicable consumer protection and privacy regulations. MDR's service to both is a business-to-business transfer.
  4. You set the terms of each transfer. A Company is responsible for attaching its data transfer terms to the products it offers — the sharing agreement, the controls, and any conditions a Partner must meet — and each Company is required to adhere to the terms of every contract it enters on MDR. Those terms are an agreement between the two Companies. MDR is not a party to it.
  5. MDR facilitates the contract and executes it as built. Our obligation is to carry out a transfer exactly as the contract the Partners approved describes it: the product they defined, the controls they froze, the schedule they set, delivered whole or not at all. Whether that contract was the right one to make, and what each Company does with what it sends or receives, is for the Companies.

2. Definitions

"User" is a person who uses MDR on a Company's behalf. "Partner" is another Company with which your Company has a partnership on MDR. "Product" is a data product a Company defines on MDR. "Contract" is an approved request between two Companies to deliver a Product, together with its frozen controls and the transfer terms attached to the Product. "Customer Data" is all data a Company provides to MDR or causes MDR to process, including data transferred to or from a Partner. "Partner API" is the programmatic interface, credentials and developer tools through which a Partner receives deliveries.

3. Business use, eligibility and accounts

MDR is a business-to-business service and not a consumer product. Every account is held by a Company, every User acts for a Company, and every transaction conducted on or through MDR — including registration, partnerships, contracts, transfers and payments — is a business transaction between companies. Consumer protection laws that apply only to consumers do not apply to it. MDR is for use by people 18 or older acting for a Company. The first User to register a Company becomes its administrator and may invite others, assign roles, and delete the Company. A User may belong to several Companies and always acts as exactly one of them at a time; what a User may do is determined by the entitlements of their role in that Company. Each Company is responsible for who it invites, the roles it grants, and everything done under its Users' credentials. Keep credentials confidential, use a verified email address, and tell us promptly if you believe an account has been compromised.

4. The service

MDR lets a Company connect its business systems, define Products from them, share Products with Partners, and deliver data under Contracts. Transfers are complete-or-fail: a delivery that cannot be completed as contracted is stopped and reported rather than delivered in part. We may change, add or retire features; where a change materially reduces the service you pay for we will give reasonable notice. We aim for high availability but do not guarantee uninterrupted service.

5. Customer Data

As between the parties, you own your Customer Data. You grant MDR a non-exclusive licence to process it solely to provide the service to you and your Partners, to secure and operate the platform, and as these Terms allow. You represent that you have every right, consent and lawful basis needed to connect a system to MDR, to offer a Product, and to deliver its data to each Partner you deliver it to. You are responsible for the content of Customer Data and for your compliance with the laws that apply to it, including privacy, data protection, export and sector-specific rules. Do not transfer data you are not permitted to transfer.

6. Partnerships and Contracts between Companies

A partnership, a shared Product and a Contract each require an action by both Companies. A receiving Company decides what to request and accept; a sending Company decides what to offer, what controls to apply, and whether to approve. Once approved, a Contract's controls are frozen and MDR executes it exactly as approved until it is cancelled, expires, or is changed by a new approval. The transfer terms a Company attaches to a Product, and the sharing agreement the Partners accept, bind those Companies to each other. MDR is not a party to that agreement, does not mediate disputes under it, and has no obligation to enforce it beyond executing the Contract as built. If a Company edits a Product in a way that breaks a Contract's controls, the Contract is cancelled and the Partner is told; re-approval is required to continue.

7. Connected systems

Connecting a third-party system (for example QuickBooks, Salesforce, BigQuery or your own API) is subject to that provider's terms. You authorise MDR to use the credentials the provider issues solely to read the data your Products and Contracts require. You may revoke that authorisation at any time, in MDR or with the provider; Contracts that depend on it will then stop. MDR is not responsible for changes, outages, rate limits or data quality in a connected system.

8. Partner API and developer tools

Partner API credentials, access keys, tokens and webhook secrets are confidential to the Company that registers them; secrets are shown once. You are responsible for storing them securely, rotating them when advised, and for every request made with them. You are responsible for the systems into which you land delivered data, including verifying that a delivery completed before relying on it and verifying webhook signatures. You will not probe, reverse engineer, overload or circumvent the API or its limits, or use it to access data outside the Contracts your Company is a party to.

9. AI features

Hot Sauce AI offers suggestions for designing Products and mapping fields. Suggestions are recommendations only; a User decides what to accept and remains responsible for the result. Each Company controls, through its AI preferences, whether AI features are on and what information they may see, as described in the Privacy Policy. AI output may be incomplete or wrong and is provided without warranty.

10. Acceptable use

You will not, and will not allow anyone acting under your Company to:

11. Trial, fees and billing

11.1 The free trial

Every new Company starts a 60-day free trial on the day the Company is created. During the trial the Company may hold up to three partner connections at no charge, and every feature — including Hot Sauce AI — is available. No payment method is required to start the trial.

11.2 Partner connections

A partner connection is an approved partnership between your Company and another Company. A pending invitation is not a connection and is never billed. Each Company in a partnership counts the connection as one of its own and is billed for its own connections.

11.3 Pricing after the trial

When the trial ends, every partner connection is billed at $250 per connection per month. A connection is billed for a calendar month if it was active at any point in that month. A connection removed during a month is billed for that month and not for the following month. There is no proration.

11.4 Professional

Professional is an optional plan charged at $100 per month in addition to the per-connection charge. It includes Hot Sauce AI after the trial and unlimited data sources. A plan switch takes effect for billing from the first day of the following month and may be made from My Profile → Billing. Hot Sauce AI is included on every plan during the trial.

11.5 Partners beyond the trial allowance

During the trial, a fourth or later partner connection may be added only once a payment method is on file, and is billed at the monthly rate from the month it is added.

11.6 Payment method, invoices and suspension

A payment method must be on file before the trial ends. Payment details are collected and stored by Stripe; MDR never stores card numbers. Invoices are issued on the first day of each month for the month just ended and charged automatically to the payment method on file; each invoice lists the connections it covers and is available in My Profile → Billing. If the trial ends with no payment method on file, or a charge fails, the account is suspended — Users can sign in but cannot make changes — until the payment method is added or updated and any open invoice is paid. No data is deleted while an account is suspended. Fees are exclusive of taxes, which you are responsible for where they apply. Fees paid are non-refundable except where the law requires otherwise.

11.7 Partner budget and discount codes

A Company administrator may set a partner budget; MDR will not allow partner connections beyond it, and lowering it below the current number removes nothing. A discount code applies a percentage reduction to the monthly invoice for the number of months stated or indefinitely; its terms are fixed when redeemed, and a Company holds one active discount at a time.

11.8 Price changes

We may change prices with at least 30 days' notice by email to Company administrators. A change applies from the first invoice issued after the notice period. Changes never apply to a month already invoiced.

12. Suspension and termination

You may stop using MDR at any time; a Company administrator may delete the Company, and a User may delete their account, from the application. We may suspend or terminate access if you breach these Terms, fail to pay, put the service or other customers at risk, or where the law requires. When a Company is deleted or terminated its partnerships end, its Contracts are cancelled, its connected credentials are deleted, and its Partners are told; a non-identifying record remains for the Partners' history and the audit trail. Sections 1, 5, 6, 13 through 19 survive termination.

13. Confidentiality

Each party will protect the other's confidential information with at least reasonable care and use it only for the purposes of these Terms. Customer Data is your confidential information; the design and non-public details of the service are ours. Information disclosed to a Partner under a Contract is governed by the terms the two Companies set.

14. Intellectual property

MDR and everything that makes it up — software, interfaces, the Partner API, documentation and the Hot Sauce process — are owned by MDR or its licensors. You receive a limited, non-exclusive, non-transferable right to use them under these Terms. Your Customer Data, your Products and your mappings remain yours. If you send us feedback we may use it without obligation.

15. Disclaimers

The service is provided as is and as available. To the fullest extent the law allows, MDR disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose and non-infringement. Without limiting Section 1: MDR does not warrant the accuracy, completeness, legality or suitability of any data transferred through the service, the conduct of any Partner, the availability of any connected system, or the output of any AI feature.

16. Limitation of liability

To the fullest extent the law allows, MDR will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue, data or goodwill, arising from or related to these Terms or the service, however caused. MDR's total liability for all claims arising from or related to these Terms or the service will not exceed the fees your Company paid to MDR in the twelve months before the event giving rise to the claim. These limits apply even if a remedy fails of its essential purpose. Some jurisdictions do not allow certain limitations; in those, the limits apply to the greatest extent permitted.

17. Release of liability for breaches at a sending or receiving Company

MDR does not store or hold Customer Data or transferred data. Before a transfer the data exists only on the sending Company's systems; after a transfer it exists only on the receiving Company's systems; during a transfer it passes through MDR in memory and is not retained. Because of this, each Company releases and forever discharges MDR, its affiliates, and their officers, directors, employees, contractors and agents from any and all claims, demands, liabilities, damages, losses, costs and expenses (including regulatory fines and reasonable legal fees) arising from or relating to any data breach, unauthorised access, loss, alteration, disclosure or misuse of data that occurs on, from, or through the systems, networks, credentials, personnel, contractors or service providers of a sending Company or a receiving Company — including a breach of a connected source system MDR reads from, a breach of the systems into which a receiving Company lands delivered data, the compromise or misuse of a Company's MDR credentials or Partner API secrets, and any breach occurring after MDR has delivered the data. This release applies regardless of the legal theory and regardless of whether the breach resulted from the negligence of the Company concerned. Each Company agrees that its remedy for such a breach lies against the Company on whose side it occurred, under the transfer terms and Contract between them, and not against MDR.

This release does not apply to a breach of MDR's own systems that results from MDR's failure to meet the security obligations in the Data Processing Addendum; liability for that is governed by Section 16.

18. Indemnification

You will defend and indemnify MDR against claims, losses and expenses (including reasonable legal fees) arising from your Customer Data, your Products and Contracts, your use of the service, your Partners' use of what you deliver to them, your connected systems, or your breach of these Terms or of law. MDR will defend and indemnify you against third-party claims that the service, used as permitted, infringes that third party's intellectual property, and may resolve such a claim by modifying or replacing the service or, failing that, terminating the affected part and refunding prepaid fees for it.

19. Governing law and disputes

These Terms are governed by the laws of the United States and of the state in which Interlock MDR is organised, without regard to conflict of law rules. The state and federal courts located in that state have exclusive jurisdiction over any dispute arising from these Terms, and each party consents to their jurisdiction. Before filing a claim, each party will give the other written notice and 30 days to resolve it. Nothing here prevents either party from seeking injunctive relief to protect its confidential information or intellectual property.

20. Changes to these Terms

These Terms carry a version. When we change them materially, we will update the version and effective date and ask Users to accept the new version in the application before continuing; where a change affects fees, Section 11.8 applies. Continued use after a non-material change constitutes acceptance.

21. General

These Terms, with the documents they incorporate, are the entire agreement between MDR and your Company about the service and replace any prior agreement on the subject. If a provision is unenforceable, the rest remains in effect. Neither party is liable for delay or failure caused by events beyond its reasonable control. You may not assign these Terms without our consent, except to a successor of your whole business; we may assign them to an affiliate or successor. Notices to us go through interlockmdr.com/contact; notices to you go to a Company administrator's email address. No waiver is implied by delay.

Questions about these Terms or about billing: contact us.