By creating an account or using the FIPSign service (fipsign.dev, api.fipsign.dev, app.fipsign.dev), you agree to be bound by these Terms of Service. If you do not agree, do not use the service.

By registering an account, you also agree to receive service-related emails (authentication codes, account notices, service updates) and occasional product announcements from FIPSign. You may opt out of non-transactional communications at any time via the unsubscribe link included in every such email.

FIPSign is a public, permissionless, self-service SaaS platform for post-quantum digital signing. It provides an API and SDK to sign, verify, and revoke tokens using ML-DSA-65 (NIST FIPS 204). No prior approval, sales call, or contract is required to create an account and start using the service.

The service is operated by an independent developer and is not affiliated with NIST, Cloudflare, or any other organization referenced in the documentation.

Free tier: Every registered account receives 10,000 free tokens per calendar month at no cost. Free tokens reset on the 1st day of each month (UTC) and do not accumulate — unused free tokens from one month do not carry over to the next.

Token packs: Additional tokens may be purchased as non-expiring packs. Pack tokens do not expire and accumulate across multiple purchases. Pack tokens are consumed after the monthly free tokens are exhausted.

Each API operation (/sign, /verify, /revoke) costs 1 token. Failed requests due to invalid input or authentication errors do not consume tokens.

You agree to use FIPSign only for lawful purposes and in compliance with these Terms. You may not:

• Use the service to sign, certify, or distribute content that is illegal, fraudulent, or harmful.
• Attempt to circumvent rate limits, quotas, or access controls.
• Reverse engineer, decompile, or attempt to extract the underlying cryptographic keys or infrastructure.
• Resell or sublicense access to the API or SDK without prior written consent.
• Use automated tools to create multiple accounts in order to exploit the free tier.
• Use the service in any way that could damage, disable, or impair the service or interfere with other users.

We reserve the right to suspend or terminate accounts that violate these terms, without prior notice and without refund of any purchased token packs.

You are solely responsible for:

• Keeping your API keys confidential. Anyone with access to your API key can consume your tokens and sign payloads on your behalf.
• The content and legality of the payloads you sign using the service.
• How you use, store, and distribute the tokens generated by FIPSign in your own applications.
• Revoking compromised API keys promptly via the dashboard.

FIPSign is a signing infrastructure provider. We are not responsible for the applications or systems you build using the service, nor for any legal or regulatory obligations that may apply to your use of digital signatures in your jurisdiction.

We strive to maintain high availability but provide no uptime guarantee. The service is provided on a best-effort basis.

We reserve the right to:

• Modify, update, or discontinue any feature of the service at any time.
• Change free tier limits, token pack prices, or token costs per operation with reasonable prior notice to registered users via email.
• Perform maintenance that may temporarily affect service availability.
• Discontinue the service entirely, with at least 30 days' prior notice to registered users, during which time you may export any data associated with your account.

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT.

WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR FREE OF SECURITY VULNERABILITIES. YOU USE THE SERVICE AT YOUR OWN RISK.

FIPSign implements ML-DSA-65 as standardized by NIST FIPS 204. We make no representation that this implementation satisfies any specific regulatory, legal, or compliance requirement in your jurisdiction. It is your responsibility to verify that use of the service meets any applicable legal standards.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, FIPSIGN AND ITS OPERATOR SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, BUSINESS, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU EXCEED THE AMOUNT YOU PAID FOR TOKEN PACKS IN THE 12 MONTHS PRECEDING THE CLAIM, OR USD $100, WHICHEVER IS GREATER.

Some jurisdictions do not allow the exclusion or limitation of certain damages. In such jurisdictions, our liability is limited to the maximum extent permitted by law.

The FIPSign name, logo, dashboard, API, and SDK are the intellectual property of the operator. The underlying ML-DSA-65 algorithm is a public standard published by NIST.

You retain ownership of all payloads and data you submit to the service. By using the service, you grant FIPSign a limited, non-exclusive license to process your data solely for the purpose of providing the service.

You may delete your account at any time by contacting us at [email protected]. Upon deletion, your email address and account data will be removed within 30 days. Purchased token pack balances are forfeited upon account deletion and are not refundable.

We reserve the right to terminate or suspend accounts that violate these Terms, without notice and without refund.

These Terms of Service are governed by and construed in accordance with the laws of the Argentine Republic, without regard to conflict of law principles. Any disputes arising from these Terms or your use of the service shall be subject to the exclusive jurisdiction of the courts of Argentina.

We reserve the right to update these Terms of Service at any time. If we make material changes, we will notify registered users by email at least 14 days before the changes take effect. Your continued use of the service after that date constitutes acceptance of the updated Terms.

The effective date at the top of this page always reflects the most recent version.

For any questions about these Terms, contact us at [email protected].