Terms of Service
The rules that apply when you use Trustack. Written to be readable, not to hide anything.
Last updated: 10 August 2026
1. Who you are contracting with
Trustack is operated by Freesc, Door 1b, First Floor, Nags Corner, Wiston Road, Colchester, CO6 4LT, United Kingdom ("we", "us"). By creating an account you accept these terms.
2. What the service does
Trustack reads a copy of a source code repository you own or are authorised to submit, runs automated checks against the TPRS control catalogue, and produces a readiness score, a list of findings with evidence, and a report. The analysis is automated and evidence-based; we do not invent or estimate findings.
- Quick Check — free, uses conservative default assumptions about your application's criticality and returns a summary result.
- Production Readiness Assessment — USD 490 per assessment. Full findings, evidence, PDF report and software bill of materials.
- Re-Check — USD 149. A new run on the same application to confirm what has been fixed.
- Build Ready / Keep Ready — remediation and ongoing monitoring engagements, sized from your assessment result and confirmed in writing before any work starts.
3. Access to your repository
You provide a read-only access token. We use it only to list your repositories, resolve a commit and download a copy of the code for analysis. We never write to your repository, never open pull requests and never use your code to train models. The downloaded copy is analysed in memory and discarded at the end of the run.
You are responsible for having the right to submit the code you submit, and for revoking the token when you stop using the service.
4. Payment and activation
There is no automated checkout today. Paid services are requested from inside the application; we confirm the scope and price by email, invoice you, and activate the service on your account. Prices are shown in US dollars and exclude any applicable taxes.
5. What the report is — and is not
A Trustack report describes what the automated checks could observe in the code at a given commit. It is not a penetration test, not a legal or regulatory certification, and not a guarantee that your application is secure or that it will not fail. A high score means the checks we ran found no evidence of the problems they look for; it does not prove the absence of every problem.
You remain responsible for the decision to release your application to production.
6. Acceptable use
Do not submit repositories you do not control, do not attempt to disrupt the service or extract other customers' data, and do not resell the reports as your own product. We may suspend an account that breaks these rules.
7. Liability
To the extent permitted by law, our total liability for any claim connected to the service is limited to the amount you paid us for the service in question during the twelve months before the claim. We are not liable for indirect losses such as lost profit, lost data or business interruption. Nothing here limits liability that cannot lawfully be limited.
8. Termination
You can stop using Trustack and ask us to delete your account at any time by writing to contact@freesc.uk. Deleting the account removes your applications, assessments and stored reports.
9. Changes and governing law
We may update these terms; the date at the top shows the current version, and material changes will be announced by email. These terms are governed by the laws of England and Wales, and the courts of England and Wales have exclusive jurisdiction.