Terms of service
What Vigía offers you, what it does not promise you, and what is expected of you.
What Vigía is
Vigía analyses the security configuration of a Google Workspace domain and of its public DNS records, and produces a report with what is worth reviewing. It is operated by Diego Fariña in a personal capacity.
Read-only by design. Vigía has never requested Gmail, Drive or any other restricted permission, so it cannot read the content of messages or files: Google's own API prevents it, not just our policy.
What you need in order to use it
- Being a super administrator of the domain you are going to analyse, or having express authorisation from somebody who is. Analysing somebody else's domain without permission is not an acceptable use of this service.
- Connecting the account through Google's consent. You can withdraw it whenever you want.
What is NOT promised
Vigía points out configuration problems that are detectable from Google's read APIs and from public DNS. It is not a complete security audit, nor a guarantee that your organisation is secure, nor a certificate of regulatory compliance. A high score means that the controls that were checked are properly set, not that no other risks exist.
When Vigía cannot check something with certainty, it says so: it marks it as 'Not verified' or asks you for a manual check, instead of taking it as fine. Relying on a control Vigía has not been able to verify is a risk you take on yourself.
Availability
The service is offered 'as is' and with no availability commitment. There may be interruptions for maintenance, because of Google API limits or for reasons outside our control. The free plan includes no service level agreement.
Acceptable use
- Analysing domains you are not authorised over.
- Attempting to access another organisation's data, or to circumvent the access controls.
- Automating requests at a rate that degrades the service for everybody else.
- Using the reports to attack an organisation instead of to protect it.
Failure to comply may mean immediate suspension of access.
Your data and your content
Your organisation's data remains yours. Its processing is governed by the privacy policy, which forms part of these terms. You can delete all of it at any time from Your data.
End of the service
You can stop using Vigía whenever you want by pressing 'Disconnect', which deletes your data and revokes access. If the service were to stop being offered, reasonable advance notice would be sent to the connected administrator address, with time to export your reports.
Liability
To the extent permitted by applicable law, Diego Fariña is not liable for indirect damages arising from the use of the service, nor for decisions taken on the basis of a report. None of the above limits liabilities that the law does not permit to be excluded.
Governing law and contact
These terms are governed by Spanish law, without prejudice to the rights you have as a consumer in your country of residence. For any question: diego@diegofarina.com.