Terms of service

Effective October 31, 2026

1. Agreement

These terms cover the hosted IdRa service at idra.team, offered by IdRa Corp. (US) (“we”). The person who creates an organization accepts them for it, and confirms they may do so. People given an account by an organization use it under that organization’s rules.

Running the software yourself is governed by its MIT license, not by these terms.

2. The service

IdRa provides single sign-on, MFA, a directory, SCIM and related identity features for an organization’s workforce. An organization is created after its admin confirms an emailed link, valid for 24 hours.

3. Price

The hosted service is free up to 100 users, apps and servers per org. Above that, the plans on the pricing page apply. No feature is ever held back on any plan. Services you connect, such as an SMS provider, bill you directly. We’ll email admins before a price change affects them.

4. Limits

We may set limits per organization on people, apps, API requests and admin-sent email, to keep the service healthy. Requests over a limit are refused. Email hello@idra.zone if one blocks a legitimate rollout.

5. Your responsibilities

You’re responsible for:

• who you give access to, and the apps and policies you configure;
• having the right to put people’s data in the service, and telling them about it;
• keeping admin credentials, API tokens and recovery methods safe;
• services you connect, since data you send to them leaves our control.

You must not:

• break the law or others’ rights through the service;
• attack, probe or overload the service or another organization’s data, except with our written agreement;
• use it to send unsolicited email, or for phishing;
• evade limits, or resell access without our written agreement.

6. Your data

You keep your data. We use it to run the service as our privacy policy describes.

7. Availability

We don’t promise any particular uptime. The service may be interrupted for maintenance or by failure, and an identity provider being down stops people signing in, so keep a plan for that. Backups exist, but restoring one loses changes made after the point restored to.

8. Security statements

SOC 2 Type I audit in progress. Don’t read anything here as a promise of compliance with a law or standard.

9. Compatibility and third-party names

We don’t promise compatibility with any third-party product or version. Other product names belong to their owners, and IdRa isn’t affiliated with or endorsed by them.

10. Ending this

You can stop whenever you like. To delete your organization, email hello@idra.zone from its admin email. Deletion drops the organization’s database and can’t be undone, and its address is never reused.

Export what you need first. A super administrator can download a JSON copy of the organization under Settings → Privacy, available to them for 24 hours. It leaves out passwords and other secrets, and it can’t be imported back or used as a backup. If your organization is over the 100 MB export limit, email hello@idra.zone.

We may suspend or delete an organization that breaks these terms, or threatens the service or others. A suspended organization’s requests are refused, so where we reasonably can, we’ll warn you first and give you time to export before any suspension. If we shut the service down, we’ll give notice in advance.

11. Disclaimers and liability

The service is provided as is and as available, without warranties of any kind, to the extent the law allows.

To the extent the law allows, we aren’t liable for indirect, incidental or consequential damages, or for lost profits or data, and our total liability is limited to what you paid us for the service in the 12 months before the claim.

12. General

We’ll email admins about material changes before they take effect, and continuing to use the service after that accepts them. Contact: hello@idra.zone.