Terms of Service
Effective: September 11, 2026
These terms cover the website, the assessment, and the Three Gates platform. If your organization has a signed agreement with us, a design partner agreement or an order form, that agreement wins wherever the two differ. Using the services means you accept these terms; if you act for an organization, you are confirming you may.
What Three Gates is
Three Gates is a runtime governance control plane for AI use in regulated organizations. On supported paths it detects sensitive data in a request, tokenizes detected values before a model is invoked, checks the request against a declared purpose, routes it to a permitted destination, and records the decision. The platform is early and pre-general-availability. Things will change, and we will tell account holders when something material does.
Your account
Keep your credentials private, keep your details accurate, and tell us if something looks wrong.
What you may not do
Do not break the law, try to reach things you are not authorized for, introduce malicious code, disrupt the service, or send spam through it. Do not send protected health information to the platform unless a Business Associate Agreement is in place between your organization and us.
HIPAA
If your organization is covered by HIPAA, we sign a Business Associate Agreement before any PHI moves. The signed agreement, not this page, defines those obligations. Our BAA page explains how that works.
Your data
It is yours. We use it to provide the service to you, keep it secure, comply with the law, and enforce these terms, and for nothing else. We do not train models on your data. We may use usage statistics that do not identify anyone to understand and improve the service.
Fees
If there are fees, they are in your signed agreement. The website and the assessment are free.
Support and availability
We are a small team. Email support@threegates.ai and we will get back to you as quickly as we can. Any uptime or response-time commitment lives in a signed agreement; without one, there is none.
Confidentiality
We keep what you share with us confidential and expect the same in return, with the usual exceptions for information that is already public or independently known.
No warranty, limited liability
The services are provided as is, without warranties of any kind. Detection of sensitive data is probabilistic; we do not promise that every identifier will be found. To the extent the law allows, our total liability to you is limited to what you paid us in the twelve months before the claim, and neither of us is liable to the other for indirect or consequential damages. A signed agreement may set different terms.
Ending things
Either of us can end the relationship for a material breach that is not fixed within thirty days of notice. You can export your data for thirty days afterward, and PHI is handled as the Business Associate Agreement says.
Law
Tennessee law and Tennessee courts.
Notices
Hearth and Alloy, Inc., Attn: Legal, c/o Northwest Registered Agent Inc., 116 Agnes Rd Ste 200, Knoxville, TN 37919, USA, with a copy to legal@threegates.ai.
Changes
We will post updates here with a new date.