Legal
These documents govern the use of Xavier. The Subscription Agreement is the main contract; it incorporates the Service Level Agreement, Support Policy, Data Processing Addendum, and Acceptable Use Policy, so accepting it at signup accepts them too. No separate signature is needed.
| Document | What it covers |
|---|---|
| Subscription Agreement | The contract: fees, your data, device management responsibilities, liability, and termination. |
| Service Level Agreement | Our 99.5% monthly uptime commitment, service credits, and backups. |
| Support Policy | How to get help, support hours, and response targets. |
| Data Processing Addendum | GDPR, UK, Swiss, and US state privacy terms for personal data we process for you, including standard contractual clauses. |
| Subprocessors | The providers that process Customer Data for us, and where. |
| Privacy Policy | How we handle information about website visitors, customers, and managed device users. |
| Acceptable Use Policy | What the Service must not be used for. |
| Security Overview | How we protect the Service today, and how to report a vulnerability. |
Contract FAQ
Plain-language answers to the questions procurement teams ask most. If anything here differs from the documents above, the documents govern.
How is Xavier priced and billed?
Per managed device per month, at the same rate on every platform. We count your devices daily, so you pay for the days each device is managed and a partial month costs a partial fee. Invoices are issued monthly in arrears in US dollars. Cards are charged when the invoice is issued; otherwise invoices are due in 30 days.
Is there a contract term or auto-renewal?
No minimum term. Subscriptions run month to month until you cancel, and cancellation takes effect at the end of that month. Price changes require 30 days’ notice.
What does the free trial include?
Every feature, within the device and user limits shown at signup, with no card required. If you do not choose a plan, management is removed from your devices when the trial ends and your data is deleted after the grace period shown at signup.
Who owns our data, and what happens when we leave?
You own your data. For 30 days after a paid subscription ends we will export it for you on request. We delete it from the Service within 90 days, and remaining copies in our backups expire within 12 months.
What uptime do you commit to?
99.5% each month for paid subscriptions, with service credits of 10% to 50% of the monthly fee if we miss it. Our internal objective is 99.9%, and we will raise the commitment as our infrastructure supports it.
What is your liability cap?
Mutual, and limited to the fees paid in the 12 months before the claim, with standard exceptions such as indemnities and gross negligence.
Do you sign a DPA? What about international transfers?
Our Data Processing Addendum applies automatically and includes the EU standard contractual clauses, the UK addendum, and Swiss provisions. Data is stored in the United States, unless you choose another storage region or your own database.
Can our data be stored in Europe?
Yes, on request. We can store your organization’s database and its backups in another region, such as the EU or the UK, instead of the United States; the region is set in your Order. The Service itself runs in the United States, so your data is still processed there and the DPA’s transfer terms apply. Account and billing records stay in the United States.
Can we keep our data in our own database?
Yes. Your organization’s data can live in a MongoDB database you provide, either self-hosted or in your own MongoDB Atlas account, in the location you choose. In that case you are responsible for that database’s backups and uptime: Xavier does not back it up, and the uptime commitment does not cover outages of your database. See the documentation.
Can we store health or payment card data?
No. Xavier is not designed for protected health information or payment card data, and we do not sign HIPAA business associate agreements.
Do you have SOC 2 or ISO 27001?
Not yet. Our Security Overview describes the measures in place today, and we answer security questionnaires on request.
Does Xavier send our data to AI models?
No. Xavier does not send your data to any AI model provider. If you connect an AI assistant to Xavier’s read-only MCP server, that assistant receives the data it queries, under your agreement with its provider.
Who is responsible for telling employees about device management?
You are. Before enabling features such as location, app usage, or network logs, you must give the people whose devices you manage the notices and obtain the consents your local laws require.
How will we hear about changes to these terms?
We give 30 days’ notice of material changes by email. If a change materially reduces your rights, you can cancel with immediate effect before it applies. Because you are billed in arrears, you only pay for usage up to the day you cancel.
Which law applies?
Delaware law, with disputes heard in the state or federal courts in Delaware.