Welcome to Arcol™. Arcol is a platform for engineering teams to manage their digital authentication credentials, including passwords, API keys, certificates, tokens, and encryption keys across all of their environments, tools, and processes.
These Terms of Service (“Terms”) define your rights and our rights in relation to the use of the services provided by Arcol Technologies, Inc. (“Arcol”, “we”, “us”, “the Company”) through the website at Arcol.com (the “Arcol Website”), through any applications and/or through any Command Line Interfaces (the “Arcol CLI”). The Arcol Website and applications, the Arcol CLI and the services provided by or through the Arcol Website and applications and the Arcol CLI are collectively known in these Terms as the “Services”.
By accessing or using the Services or any part thereof, you, the user (“you”, “user”) agree to be bound by, and access the Services in accordance with, these Terms and all terms, guidelines and policies incorporated by reference in these Terms, including but not limited to our standard documentation for the Services currently located here (“Arcol Documentation”) and Arcol’s Privacy Policy (collectively, the “Agreement”). If you do not agree to this Agreement, you may not use, access, or submit information to the Services. (collectively, the “Agreement”). If you do not agree to this Agreement, you may not use, access, or submit information to the Services.
1. The Services
Arcol is constantly modifying and improving the Services. We may introduce new products and features, change existing products and features, or discontinue products and features from the Services at any time. Currently we offer the following products:
1.1 Secrets Manager. Secrets Manager vaults and manages your secrets and configurations (“Secrets”). It includes access controls, logs, versioning and can also be installed for use in a local development environment using the Arcol CLI.
Projects and Environments: You can create projects on Secrets Manager to manage your Secrets. Each project holds a list of configurations that live in an environment and support user access control and versioning of changes. The environments currently supported in a project are development, staging and production.
User Access: Arcol currently offer 3 levels of user access for Secrets Manager – owner, admin and member. Owners have access to everything in the Arcol workplace. Admins have access to the entire Arcol workplace except the Team, Settings, and Billing dashboards. Members are individual contributors. They do not have access to Secrets Manager projects initially and must be added by an owner or admin. You can add users to your workplace through manual invites, email Single-Sign-On, and SAML Single-Sign-On. Note that Arcol may continue to modify/add access controls.
Additional Features: Secrets Manager supports combining Secrets with a straightforward pattern and has a few special secrets you can use which make it easier to track where you are in your CI/CD pipeline. A logging and versioning system is also built into Secrets Manager. Every action within a configuration, like adding a Secret, is logged.
1.2 Radar. Radar is a continuous monitoring tool that connects to GitHub and scans your repositories in real-time for accidentally committed Secrets, including API keys, database connection strings, credentials, certificates, and other sensitive data. This is intended to curb Secrets sprawl, fraudulent use of and unauthorized access to Secrets. Some of the use cases that Radar is designed to tackle with continuous usage are: (i) preventing new Secrets from entering your codebase, (ii) detecting attempts to bypass policies, (iii) tracking migration Secrets from codebase to Secrets manager over time, (iv) educating engineers on next steps and best security practices, and (v) detailing a disaster relief plan for rotation.
1.3 Arcol CLI. The Arcol Command Line Interface (CLI) provides a consistent experience when developing locally to production. It is a lightweight binary that comes provided in a number of package managers and Docker images.
2. Creating an Account
2.1 If you sign up for an account on the Services, you agree to (a) provide accurate, current and complete information as may be prompted by account setup forms on the Services (“Registration Data”); (b) maintain the security of your password and account information; (c) maintain and promptly update the Registration Data, and any other information you provide to Arcol, and keep it accurate, current and complete. You are responsible for all activity on your Arcol account, and for all charges related to your Arcol account. Note that the Services are not intended for, and should not be used by, anyone under the age of 16.2.2 Logging In. You can login to your Arcol account using (i) your Arcol credentials, (ii) your Google account or (iii) Single Sign-On (SSO) authentication (provided through third parties such as Okta, Azure Active Directory and Onelogin).