Plain terms for a read-only service.

1. What Cloudblame is

Cloudblame reads cost and usage data from an AWS account through a read-only IAM role and writes back a one-page scan report and, on request, an investigation: a finding that names what caused an unexplained cost movement, with an evidence id for every claim and a fix you can apply yourself. Everything is read-only. We never create, change or delete anything in your account and we never hold write access.

2. Your account

• You need an email address and a password. Keep the password to yourself; what happens under your account is your responsibility until you tell us it was compromised.
• The service is for businesses and the people who run their cloud. By creating an account you confirm that you are at least 18 and act for yourself or for an organisation that allows you to.
• One account per person. Several AWS accounts can be connected to it.

3. Connecting an AWS account

• You may only connect an AWS account you own or are authorised to connect, which includes permission to create an IAM role in it.
• You connect it by creating the cloudblame-readonly CloudFormation stack with the external ID generated for you. We assume the role only to run the scans and investigations you start, including re-runs you start from the console.
• You can revoke access at any time by deleting the stack. Nothing else is needed.

4. What you get, and what we do not promise

• Scan reports and findings describe what the data shows; they are not advice to change anything. You decide what to change, and you run every fix and brake yourself in your own account.
• A finding leaves the engine only after our verifier has re-fetched every evidence id (grade A; grade B when partially verified), and the console shows the grade. Even so, a finding can be wrong or incomplete. Check it against your own systems before you act.
• Dollar figures in reports and findings are estimates at AWS on-demand list prices; they are not a bill and not a forecast. The only source of truth for money is your own Cost and Usage Report.
• We do not promise that a scan finds savings, that an investigation reaches a verified finding, or that the service is available at any given time. It is an early product and it will change.

5. Fair use

The service is rate-limited to keep it available for everyone: from the wizard, 5 scan starts per address and 3 per email an hour; from the console, 3 scans per connected account an hour and 10 per user a day; 5 investigations per user a day. We may change these limits. Do not try to work around them, to access another customer's data, to scrape the service, or to resell it without a written agreement.

6. Price

Today the scan, the console and investigations are free, and we collect no payment details. Paid plans will be offered under a separate written agreement with the published model: a fee only on net savings verified on your Cost and Usage Report, measured by the measurement annex. Nothing on this site, in the console or in an email creates a payment obligation until you sign that agreement.

7. Your data

What we read, keep and delete is written in the privacy policy. In short: for your account data we are the controller; for data read from your AWS account you are the controller and we process it only to produce your report and findings, on infrastructure in Frankfurt, with identities pseudonymised before any model sees them.

8. Liability, in plain words

• The free service is provided as it is, without warranties of any kind beyond what the law requires.
• To the extent the law allows, we are not liable for indirect loss, lost profit, lost savings, or for decisions you take on the basis of a report or a finding. Our total liability for the free service is limited to the amount you paid for it in the last twelve months, which is nothing while it is free.
• Nothing here limits liability that the law does not allow to be limited, such as for intent or gross negligence.

9. Ending

• You can stop at any time: delete the stack to revoke access, and email hello@cloudblame.com to have the account deleted (there is no self-service deletion yet).
• We can suspend or close an account that breaks these terms or abuses the limits; we tell you why, unless the law or an ongoing abuse prevents it.
• We can change or discontinue the free service. If we discontinue it, we announce it by email to account holders in advance where we can.

10. Disputes and law

If you disagree with something, write to us first; we aim to resolve it directly and in good faith. The governing law and the competent courts for the paid service will be stated in the paid-service agreement. The mandatory consumer and data-protection law of your country applies regardless of these terms.

11. Changes to these terms

We update the version and date at the top. Material changes are announced by email to account holders before they apply; continuing to use the service after that date means you accept the new version.

12. Contact

hello@cloudblame.com