# Terms of Use | TenuVault Terms of Use for TenuVault: licensing of TenuVault Desktop, plans, trials, payment through Polar, cancellation, your responsibilities, disclaimers and limitation of liability. Canonical: https://www.tenuvault.com/terms **Legal**Terms for TenuVault # Terms of Use Last updated: 10 November 2026 These Terms of Use ("Terms") govern your access to and use of TenuVault, including the TenuVault Desktop app, the website tenuvault.com and the TenuVault web portal (together, the "Service"). By using the Service, you agree to these Terms. ## Service provider The Service is operated by: Ugurlabs UG (haftungsbeschränkt) Fährstraße 217 40221 Düsseldorf Germany Managing Director: Ugur Koc Email: [support@tenuvault.com](mailto:support@tenuvault.com) References to "we", "us", or "our" in these Terms refer to Ugurlabs UG (haftungsbeschränkt). ## Access and eligibility - You must have authority to access your Microsoft tenant and its Intune configuration, and to make changes to it where you use restore, revert or baseline features. - You are responsible for complying with your organization's policies and applicable laws. - The Service is intended for professional use by IT administrators and service providers. ## Desktop app TenuVault Desktop for Windows and macOS (the "Desktop App") backs up, compares and restores Microsoft Intune configuration from your own computer. These Terms apply to it together with the following conditions. - **License grant:** within the limits of your plan, we grant you a non-exclusive, non-transferable, non-sublicensable right to install and use the Desktop App to manage Microsoft Intune tenants. For Pro and MSP, this right applies while your subscription or trial is active. MSP plans may be used to manage the tenants of your customers as part of services you provide to them. The signed installers and updates we publish are also subject to the [TenuVault Desktop End User License Agreement](https://www.tenuvault.com/eula), which you accept when you install the Desktop App. - **Source code:** the source code of the Desktop App is licensed under the [Business Source License 1.1](https://github.com/ugurkocde/TenuVault/blob/main/LICENSE). It allows free use for tenants owned by your own organization. Managing the tenants of customers or other third parties, or offering the Desktop App or a derivative to others, requires an MSP plan or another commercial license from us. - **Organization licenses:** the holder of a Pro or MSP license key may share the license with the other administrators of a tenant. Administrators who sign in to that tenant through the same app registration are then licensed without a key of their own, and each of their installations counts toward the limits of the plan. ## Plans and limits - **Community:** free of charge, covers one Microsoft Entra tenant owned by your organization and needs no license key. - **Pro plan:** a paid subscription that covers 2 Microsoft Entra tenants owned by your organization and up to 5 installations per tenant. - **MSP plan:** a paid subscription that covers the number of tenants in your subscription, at least 3, and up to 5 installations per tenant. - **Unused installations:** an installation that has not checked its license for 30 days may be released when a new installation of the same tenant would otherwise exceed the limit. It activates again the next time it is used, if the tenant has a free slot. - **Features:** the features included in each plan are listed on the [pricing page](https://www.tenuvault.com/pricing) and in the [documentation](https://docs.tenuvault.com/licensing/). - **Limits:** the Desktop App enforces tenant and installation limits through our licensing service. Tenants count across every installation that uses the same license key. You may not share license keys outside your organization or attempt to bypass these limits. You can free an installation by deactivating it in the app or in the Polar customer portal, and free a tenant's place by removing the tenant in the app. ## Trial and payment - **Free trial:** you can try Pro for 14 days by connecting a new tenant in the app, without email or a payment card. The trial ends automatically and nothing is charged. Subscriptions bought through a checkout link that includes a trial are not charged until that trial ends. - **Payment:** for purchases through the online checkout, Polar Software Inc. is the merchant of record and processes payments, invoices, and taxes. Your purchase is also subject to Polar's terms. Prices are shown in EUR and may be subject to applicable taxes. - **Purchase by invoice:** yearly Pro and MSP plans can also be bought by invoice. In that case Ugurlabs UG (haftungsbeschränkt) is the seller and invoices you directly, payment is by bank transfer, and the conditions in our written quote, including term, renewal and cancellation, take precedence over this section and the Cancellation section where they differ. - **Renewal:** subscriptions renew automatically until cancelled. - **License key:** your license key is sent by email after checkout. The free Pro trial starts automatically when you connect a new tenant, without a key or email address. ## Cancellation You can cancel or change your subscription at any time in the [Polar customer portal](https://polar.sh/ugurlabs/portal). Cancellation takes effect at the end of the current billing period, and the Desktop App stays licensed until then. If you bought by invoice, cancel by email to [support@tenuvault.com](mailto:support@tenuvault.com). Where your written quote sets a different notice period or term, the quote applies. Payments are non-refundable, including for partial billing periods. The 14 day free trial is there to evaluate the Desktop App before you buy. Statutory rights that cannot be excluded by contract remain unaffected. When a subscription ends or a license is revoked, an affected tenant owned by your organization falls back to Community, provided no other tenant on that installation already uses the free plan. Tenants of customers or other third parties are no longer covered. Your existing backups remain available. ## License checks and updates - The Desktop App checks your license with our licensing service periodically. If it cannot reach the service, active tenants keep working for up to 14 days after their last successful check. - The Desktop App downloads updates automatically and installs them when you quit the app. You can turn this off in Settings or by policy on managed devices. - We may add, change, or remove features to improve the Desktop App. ## Your responsibilities - You create and control the Entra app registration the Desktop App signs in with, and you are responsible for the permissions and consent you grant to it and for who may sign in through it. - The Desktop App acts with the delegated permissions of the signed in administrator. You are responsible for the Intune and Azure roles you assign to the administrators who use it. - Restores, drift reverts and baseline deployments change your tenant. Review the preview and the selected items before you confirm a change, and check the result in your tenant afterwards. - Make regular backups of your tenant configuration, and test recommended settings and other changes in a non-production tenant or with a pilot group before you apply them to production. - Keep your backup recovery key safe. Without it, backups stored on your computer or a network share cannot be read on another computer or after a reinstall, and we cannot recover it for you. - Backups and exports can contain sensitive values from your configuration. You are responsible for where you store them and who can access them. ## OpenIntuneBaseline content The OpenIntuneBaseline section and Framework coverage load policy content from the public OpenIntuneBaseline repository on GitHub. This content is third party open source material, published by its authors under its own license. We do not author or control it and provide it without warranty of any kind. Review baseline policies before you deploy them to your tenant. ## CIS Benchmarks content On Pro and MSP, the Desktop App downloads CIS Benchmarks content from tenuvault.com to assess and remediate your Intune configuration. Ugurlabs provides this content under its CIS SecureSuite Product Vendor membership with the Center for Internet Security, Inc. ("CIS"). - You may use the CIS content only within TenuVault and in the reports and exports it produces, for the tenants your license covers. You may share those reports and exports within your organization, with your auditors and advisers for your own compliance work and, on MSP, with the customer whose tenant a report covers. You may not publish, redistribute, sell or sublicense CIS content, or extract it for any other use. - TenuVault is CIS Benchmarks Certified for Assessment and Remediation. The certification covers only the CIS Microsoft Intune for Windows 11 Benchmark v5.0.0 (Level 1), CIS Microsoft Intune for Microsoft Defender Antivirus Benchmark v1.0.0 (Level 1 and Level 2) and CIS Apple macOS 26 Tahoe Intune Benchmark v1.0.0 (Level 1 and Level 2). TenuVault remediates only the recommendations it assesses automatically through Intune policy settings. It lists Manual and not assessed recommendations with their CIS guidance for manual action. - CIS assessments and reports in TenuVault compare your Intune configuration with a benchmark. They are not an audit, and they do not certify that your tenant, devices or other systems comply with a CIS Benchmark. - Remediation changes your tenant. The Your responsibilities section above applies to it as to any other change. - We may update, replace or withdraw CIS content, for example when CIS publishes a new benchmark version or when the terms of our membership require it. - CIS, CIS Benchmarks and CIS Controls are trademarks of the Center for Internet Security, Inc. ## Web portal The TenuVault web portal at tenuvault.com/portal remains available for existing users. It is a hosted web application that runs backup jobs and stores backups in your own Azure subscription, using an app registration and client secret that you create in your own tenant. - You are responsible for the app registration, its permissions and client secret, and for the Azure resources in your subscription, including their cost and access control. - Restores started in the web portal change your tenant. Review what you restore before you start it. - The Disclaimer and Limitation of Liability sections below apply to the web portal. We may change or discontinue the web portal. ## Acceptable use Do not misuse the Service, for example by attempting to bypass security or license checks, by reverse engineering the licensing service, or by overloading it. ## Privacy Your use of the Service is also governed by our [Privacy Policy](https://www.tenuvault.com/privacy), which explains what we access and how we handle data. ## Disclaimer For Community and any other use free of charge, the Service is provided on an "as is" and "as available" basis without warranties of any kind, to the extent permitted by applicable law. In particular, we do not warrant that backups, restores, comparisons, CIS assessments, remediation or reports are error free, complete, or suitable for any particular purpose. The CIS certification of TenuVault covers only the benchmarks listed in the CIS Benchmarks content section and does not certify your systems. For paid plans, the statutory rights for defects apply, and claims for damages are governed by the Limitation of liability section below. Validate results against your tenant as needed. ## Limitation of liability You use the Service at your own risk. We are not liable for any damages caused by the Service or by its use, including damage to or loss of tenant configuration, devices, data, access, profits or revenue, except as follows: - **Free use:** for Community and any other use free of charge, we are liable only for intent and gross negligence, and for defects only if we fraudulently concealed them. - **Paid plans:** we are liable without limitation for intent and gross negligence. For slight negligence, we are liable only for breaches of an essential contractual obligation, meaning an obligation whose fulfillment makes the proper performance of the contract possible in the first place and on whose fulfillment you may regularly rely. That liability is limited to the damage that was foreseeable and typical for this type of contract when it was concluded. Any other liability for slight negligence is excluded. - **Loss of data:** where we are liable for loss of data only because of a slightly negligent breach of an essential contractual obligation, our liability is limited to the effort that would have been needed to restore it had you made regular backups and tested changes as described in these Terms. - **Mandatory liability:** nothing in these Terms limits liability for injury to life, body or health, under the German Product Liability Act, under a guarantee we have expressly given, for fraudulently concealed defects, or any other liability that cannot be limited or excluded by law. These limitations also apply to the personal liability of our managing directors, employees, agents and subcontractors. ## Governing law These Terms are governed by the laws of the Federal Republic of Germany, excluding the UN Convention on Contracts for the International Sale of Goods. If you are a merchant, a legal entity under public law or a special fund under public law, the exclusive place of jurisdiction is Düsseldorf, Germany. Mandatory consumer protection rules of your country of residence remain unaffected. ## Changes We may modify these Terms to reflect improvements or changes to the Service. If we make material changes, we will update the date above. Continued use constitutes acceptance of the updated Terms. ## Contact Questions about these Terms? Contact us at [support@tenuvault.com](mailto:support@tenuvault.com). You can also reach us by post: Ugurlabs UG (haftungsbeschränkt), Fährstraße 217, 40221 Düsseldorf, Germany.