Last updated 2026-09-28
Pending legal review. This version was written by SemantiqWall and is being reviewed by a lawyer. Where it conflicts with a signed contract, the contract prevails.
These terms govern the use of SemantiqWall: the website, the public vendor lookup, the vendor verification program and the platform (web panel, API and SDKs). By using any of them you accept these terms.
1. Who provides the service
SemantiqWall is provided by:
ZapBrabo Technology
Goiânia, Goiás, Brazil
Contact: contato@semantiqwall.com.
2. The service
- Platform: records the AI agents, tools and credentials a customer declares; decides, according to rules the customer configures, whether each action an agent asks about may proceed, must be approved by a person or is denied; keeps an append-only, tamper-evident audit trail; manages security cases, reports and repository analysis. Optional features: AI-assisted explanations and fix proposals, pull requests through the SemantiqWall GitHub App and approvals via WhatsApp.
- Public vendor lookup: shows what can be learned about a software vendor from public signals, free of charge.
- Vendor verification program: vendors can prove domain ownership and answer published criteria; a reviewer checks the evidence.
- "My vendors": a private list to follow vendors and receive alerts.
3. Accounts and security
- There is no public sign-up. Platform accounts are created by us or by the owner of a customer organization.
- Multi-factor authentication is mandatory and cannot be turned off.
- You must keep your password, authenticator and recovery codes safe, not share accounts, and tell us at once at contato@semantiqwall.com if you suspect unauthorized use.
- We may suspend an account to protect the service or other customers, telling the organization owner why.
4. Customer responsibilities
Security is shared. The customer is responsible for: choosing who has access and at which role; protecting API keys; routing every sensitive action of its agents through the SDK or API and not executing actions that are denied or pending approval; configuring and testing its policies; reviewing approvals, AI suggestions and pull requests before relying on them; sending only the data needed for each decision (no sensitive personal data or secrets); and complying with privacy laws as controller of the data its agents send. The full split is in the Shared Responsibility Model in our Trust Center.
5. Acceptable use
You must not:
- use the service for anything illegal or to harm others;
- try to access other organizations' data, bypass authentication, rate limits or tenant isolation, or disrupt the service (security research is welcome only under our responsible disclosure policy);
- scrape the site or the vendor lookup in bulk, or use it to harass, defame or extort a vendor;
- upload malware or content you have no right to share;
- resell the service without a written agreement.
6. Customer data
- Customers keep all rights to their data. We process it only to provide, secure and support the service, following the customer's instructions, as described in our Privacy Policy.
- Where the law requires, we sign a data processing agreement with the customer.
- AI features only suggest. Nothing they produce is applied without a person's action, and we never merge pull requests in a customer's repository.
7. Vendor lookup: public signals, not a certification
- Lookup results come only from public information found at the time of the lookup (for example, the vendor's website). They may be incomplete, out of date or wrong, and a missing signal does not prove a missing control.
- A result is not a certification, an audit, legal advice or a recommendation to hire or not hire a vendor. The decision is yours.
- Vendors who believe a result is wrong can write to contato@semantiqwall.com; we check and correct when appropriate.
8. Vendor verification program
- The criteria, levels and independence rules are published on the criteria page and are part of these terms for participating vendors.
- The vendor is responsible for the truth of its answers and evidence and must tell us of material changes. A verification expires and returns to review; we may suspend or revoke it, and the badge, if information proves false or requirements stop being met.
- Verification means that a reviewer checked the evidence against the criteria on a given date. It is not a certification or a guarantee of the vendor's security.
- SemantiqWall and ZapBrabo share the same founder. A reviewer never reviews a vendor they are linked to, and that includes ZapBrabo.
- The badge may only be displayed while the verification is valid, as provided by SemantiqWall.
9. Availability
- We work to keep the service available, but no uptime level (SLA) is promised unless it is written in a signed contract.
- We may perform maintenance and change features. Changes that break existing integrations will be announced in advance, except for urgent security fixes.
- When the platform cannot be reached, the SDKs deny actions by default, except low-impact actions the customer has explicitly allowed to proceed during an outage. Customers should plan for this.
10. Fees
The public lookup and "My vendors" are free. Platform plans and the verification program are charged as set out in the commercial proposal or contract.
11. Intellectual property
The software, SDKs, criteria, texts and brand belong to us or our licensors. The SDKs are licensed to customers only for use with the service. Suggestions you send us may be used to improve the service, without obligation.
12. Confidentiality
Each party keeps confidential the non-public information of the other that it receives in connection with the service, and uses it only for the service.
13. Warranties and limitation of liability
- The service is provided as it is and as available. We do not guarantee that it will stop every harmful action of an AI agent, which also depends on the customer's integration and policies (section 4).
- To the extent permitted by law, we are not liable for indirect damages, lost profits or lost data caused by the customer's integration or configuration, and our total liability is limited to the amounts paid by the customer for the service in the 12 months before the event.
- Nothing in these terms limits rights that cannot be limited under consumer protection law or liability for intent or gross negligence.
14. Termination, data export and deletion
- The customer may stop using the platform at any time; we may end the service for serious breach of these terms, with notice.
- After termination, the customer's data remains available for export for 30 days and is then deleted within 90 days, except the audit trail, which is kept for up to 5 years as evidence, as described in the Privacy Policy. Owners and administrators download the full organization export in JSON from the Organization page.
15. Changes to these terms
We publish changes here with a new date. Material changes are announced to platform users by e-mail at least 30 days before they take effect, except when required sooner by law or for security.
16. Governing law and forum
These terms are governed by the laws of Brazil. The courts of Goiânia, Goiás, Brazil have jurisdiction, except where consumer protection law gives you the right to go to court where you live.