Arbiter

Terms of Service

Last updated October 1, 2026

1. Who we are and what these Terms cover

Arbiter is a service at arbiterid.com operated by Grayhaven Labs LLC, an Oklahoma limited liability company (“Grayhaven”, “we”, “us”). These Terms cover the Arbiter website, the dashboard, the Arbiter API and any software development kit or example code we provide (together, “the Service”).

“You” means the organization that creates an Arbiter workspace, and each person who signs in on its behalf.

The Service is for business use only. You must be 18 or older and able to bind your organization to these Terms. If you accept these Terms for an organization, you confirm that you can bind it.

If your organization and Grayhaven have signed a separate agreement for the Service, that agreement wins where it conflicts with these Terms.

2. What Arbiter does

Arbiter makes authorization decisions about consequential actions. Your software asks Arbiter whether a person, agent or automated client may take a specific action for a specific account. Arbiter checks the authority on record, the exact action and the evidence you supply. It returns a decision, such as allow, deny, hold or ask for confirmation. It records that decision and, where you use them, the approval, execution and receipt that follow.

Arbiter is a tool that helps you make these decisions. You remain responsible for the decisions your business makes and for the actions your systems take.

3. Limits of the Service

These limits are part of what the Service is. They are not defects.

  1. Arbiter protects only what you connect to it. A decision has effect only where your system enforces it before the action commits. Arbiter cannot protect an endpoint you have not integrated. It cannot stop a compromised server of yours that skips the check.
  2. Arbiter does not identify every AI actor. It cannot reliably tell from ordinary traffic whether a person or an AI agent is acting. When no agent is declared, that does not mean a human is acting.
  3. Arbiter does not prove human intent. A valid credential shows control of that credential at one time. An identity check shows identity at one time. Neither proves that the right person controls the current session or meant to approve a specific action.
  4. Arbiter relies on the evidence you give it. If you send false or incomplete evidence, decisions will be wrong.
  5. Arbiter does not replace your other systems. It is not your login provider, identity verification vendor, fraud team, payment processor or sandbox.
  6. Some features are experimental. Arbiter runs some model-based reviews in “shadow” mode. A shadow review is recorded for evaluation only. It does not change a decision. We will label experimental features in the product.
  7. An authorized person can still approve fraud. Arbiter can require a narrow, exact approval. It cannot stop a person who has been persuaded to approve a harmful request, or an administrator who deliberately weakens your policies.

4. Accounts and workspaces

  • You sign in through our authentication provider, Clerk. You must give accurate sign-up information and keep your sign-in methods secure.
  • Each account can create one personal workspace. Creating one requires a Cloudflare Turnstile bot check and is rate limited.
  • A workspace belongs to one organization. People can see and change a workspace only when they have a membership in it.
  • You are responsible for everything done under your account and your workspace’s credentials, including API keys you create. API keys are shown once. We store only a digest of each key and cannot show it to you again.
  • Tell us promptly at tyler@grayhavenindustries.com if you believe an account or key has been compromised.

5. Sandbox environments and price

Every workspace starts with a sandbox environment. A sandbox cannot move real money or change real external systems. Demo payments, invoices and keys in a sandbox are simulated.

The sandbox is free while it is offered. We may add paid plans later. We will not charge you without your agreement to a paid plan.

We may change the sandbox offering. Before we end it, we will give you 30 days’ notice where we reasonably can.

6. Live use

A live environment is for real actions. Its decisions can let your systems move money or change real accounts.

  • Live use requires a signed agreement with Grayhaven or our written approval. Ask for it at tyler@grayhavenindustries.com. We record who approved it and when.
  • Going live adds a separate live environment to your workspace. Your sandbox stays as it is, and stays free.
  • A live environment has its own API keys. Sandbox keys never work in it, and its keys never work in the sandbox.
  • In a live environment, a policy for money movement, credential or administrative actions must hold or ask for confirmation when no risk result is available.
  • Live use has no service level agreement. What section 10 says applies to it too, unless your signed agreement says otherwise.

7. Your data

  • Customer Data means the data you or your systems send to the Service, and the records the Service creates from it. This includes decisions, evidence, grants, approvals, passkey public keys, sessions, session assertions, pending actions, scheduled executions, notice channel references, receipts, notes and labels.
  • You own your Customer Data. You give us permission to host, process and transmit it only to run, secure and support the Service for you, and as the Privacy Policy describes.
  • If you need a data processing addendum, contact us at tyler@grayhavenindustries.com.
  • We keep each workspace’s data separate. Every tenant record is keyed to one organization and environment, and access checks run on those keys.
  • We do not train models on your raw Customer Data, and we do not correlate your data with other customers’ data, unless you agree in writing to a specific arrangement. Shadow reviews send limited decision data to a model provider to get a judgment about that one decision. The Privacy Policy says exactly what is sent.
  • You are responsible for having the right to send us any personal data about your own users, and for giving them any notice or getting any consent the law requires.

8. Acceptable use

You must not use the Service to:

  1. Monitor, track, profile or surveil an individual, other than to make authorization and fraud decisions about actions on accounts you operate.
  2. Submit evidence, approvals, identities or session assertions you know are fabricated or false, or build a system that does.
  3. Present an Arbiter decision as proof that a specific human acted or intended an action, or as proof that an actor was or was not an AI.
  4. Make decisions with legal or similarly significant effects on individuals without the human review and notices the law requires.
  5. Break the law, including privacy, consumer protection, anti-discrimination and financial services law.
  6. Probe, scan or test the security of the Service without our written permission, or bypass its rate limits or bot checks.
  7. Access another customer’s workspace or data, or try to.
  8. Send malware, or point webhooks at systems you are not authorized to send to.
  9. Resell or give third parties access to the Service, except your own staff and contractors working for you.
  10. Use the Service to build a competing product using our non-public materials.

We may suspend access that breaks these rules. See section 12.

9. Your integration and webhooks

  • You choose where Arbiter sends webhooks, such as alert events and action-trust notices. You are responsible for the systems at those addresses. Webhooks are signed so you can verify they came from us.
  • Arbiter does not send email, SMS or push messages to your users. A notice channel in Arbiter is only a reference that your own systems resolve.
  • You are responsible for enforcing Arbiter’s decision in your own code path before an action commits.

10. Our responsibilities

We will operate the Service with reasonable care and apply reasonable security measures, as the Privacy Policy describes.

We do not offer a service level agreement. The Service may be unavailable at times. Any performance or availability targets we describe are engineering goals, not promises.

11. Records, export and closing a workspace

Several kinds of record in Arbiter are append-only by design, so that they can serve as an audit trail. For example:

  • Decision notes cannot be deleted. The author can edit a note’s text only within 15 minutes of creating it.
  • Session signals, session revisions, research annotations and security-change receipts reject any update or deletion at the database level. Many other decision, grant, approval and outcome records are protected by database triggers that block deletion or limit which fields can change.
  • Revoked passkeys and notice channels are marked revoked, not deleted.

You can export decision records as CSV or JSON Lines from the dashboard. The Service has no self-service workspace deletion and no full data export today.

We keep your Customer Data while your workspace exists. After a workspace is closed, we delete or de-identify the data the system allows. We keep append-only audit records only as long as we need them for security, legal and dispute purposes. We answer requests about your data within 30 days.

12. Suspension and termination

  • You may stop using the Service at any time. To close a workspace, email us at tyler@grayhavenindustries.com. We will then disable access to it. Section 11 describes what happens to its data.
  • We may suspend your access immediately if you breach these Terms, if you abuse the Service, if your use creates a security risk for the Service or others, or if the law requires it.
  • Either of us may end these Terms at any time. You do this by closing your workspace. We do this by closing your access and telling you.
  • If we decide to end the Service for everyone, we will give 30 days’ notice where we reasonably can.
  • Sections that by their nature should survive termination will survive.

13. Warranties

We provide the Service as is and as available. To the fullest extent the law allows, we make no warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, title and non-infringement. We do not promise that the Service will be uninterrupted, error-free or secure.

The Service is provided to help you make better authorization decisions. It does not guarantee that every unauthorized or fraudulent action will be stopped, or that every legitimate action will be allowed.

14. Limitation of liability

To the fullest extent the law allows:

  • We are not liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if we were told they were possible.
  • Our total liability for all claims about the Service is limited to the greater of the fees you paid us for the Service in the 12 months before the claim and US $100.

15. Indemnity

You will defend Grayhaven against any third-party claim that arises from your Customer Data, your end users, your use of Arbiter’s decisions, or your breach of section 8. You will pay the damages, settlements and reasonable legal costs that result.

16. Intellectual property

We own the Service, including its software, documentation and design. These Terms do not transfer any of it to you. You own your Customer Data.

If you send us feedback or suggestions, we may use them freely, without any duty to you.

We will not name you as a customer in public without your permission.

17. Governing law and disputes

The laws of the State of Oklahoma govern these Terms, without regard to conflict-of-law rules.

If a dispute arises, the party raising it will first send the other a written description of it. We will both try in good faith to resolve it informally for 30 days. If it is not resolved in that time, either of us may bring it only in the state or federal courts located in Oklahoma County, Oklahoma. Those courts have exclusive jurisdiction, and each of us consents to it.

18. Changes to these Terms

We may update these Terms. Before a material change takes effect, we will give you 30 days’ notice by email or in the product. For other changes, we will post the new version here with a new “Last updated” date. If you keep using the Service after a change takes effect, the new Terms apply.

19. Other terms

You must comply with US export control and sanctions laws. You may not use the Service if you are in, or ordinarily resident in, a country or region under comprehensive US sanctions, or if you are on a US government list of restricted parties.

If a court finds part of these Terms unenforceable, the rest still applies. These Terms and the Privacy Policy are the whole agreement between us about the Service, unless we have signed a separate agreement with your organization, as section 1 describes.

20. Contact

Grayhaven Labs LLC
tyler@grayhavenindustries.com