Terms and Conditions

These Terms and Conditions (“Terms”) govern your access to and use of the CDK Insights software, website, services, and associated products (collectively, the “Services”), operated by Instance Labs Ltd(“Company”, “we”, “our”, “us”).

Registered Address: 66 Paul Street, London, EC2A 4NA, United Kingdom

Company Number: 17053174 (registered in England & Wales)

By accessing or using our Services, you agree to be bound by these Terms. If you do not agree, do not use the Services.

1. Services Overview

CDK Insights is a SaaS platform that provides automated code analysis for AWS Cloud Development Kit (CDK) infrastructure-as-code stacks. The Services include static analysis checks, AI-powered recommendations, best-practice scoring, and actionable guidance to help you build more secure, cost-effective, and well-architected cloud infrastructure.

The Services are provided on an “as is” and “as available” basis. We do not guarantee uninterrupted or error-free operation. We may modify, suspend, or discontinue any part of the Services at any time, with reasonable notice where practicable.

CDK Insights is an independent tool and is not affiliated with, endorsed by, or associated with Amazon Web Services (AWS), Amazon.com, Inc., or any of their subsidiaries or affiliates. AWS and CDK are trademarks of Amazon.com, Inc. and are used for identification purposes only.

2. Eligibility

You must be at least 18 years old to use the Services. CDK Insights is a professional tool intended for use by software developers, infrastructure engineers, and organisations. By creating an account, you represent and warrant that you are at least 18 years of age or the age of majority in your jurisdiction, whichever is greater.

If you are using the Services on behalf of an organisation (such as your employer or a client), you represent that you have the authority to bind that organisation to these Terms, and the terms “you” and “your” shall refer to that organisation.

3. Account Registration

3.1 Registration

You must provide a valid email address to create an account. You are responsible for ensuring that all information you provide during registration is accurate, complete, and kept up to date.

3.2 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You must notify us immediately at support@cdkinsights.dev if you believe your account has been compromised. We are not liable for losses caused by unauthorised use of your account where you have failed to safeguard your credentials.

3.3 One Account Per Person

Each person may only maintain one account. Creating multiple accounts to circumvent restrictions, bans, or usage limits is prohibited.

4. License and Restrictions

Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable, revocable licence to access and use the Services for your internal business or personal development purposes.

You agree not to:

• Reverse-engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Services or any underlying algorithms
• Use the Services for any unlawful purpose or in violation of any applicable law or regulation
• Sublicense, resell, redistribute, or commercially exploit access to the Services without our prior written consent
• Upload malicious content, viruses, trojans, or any code designed to disrupt, damage, or compromise the Services or their infrastructure
• Attempt to gain unauthorised access to the Services, other user accounts, or our servers, databases, or infrastructure
• Scrape, crawl, or use automated tools (including bots, spiders, or data miners) to extract data from the Services without our written consent
• Impersonate another person, entity, or organisation
• Circumvent or attempt to circumvent usage limits, rate limits, or feature restrictions associated with your subscription plan
• Use the Services to build, train, or improve a competing product or service that performs substantially similar CDK analysis functionality
• Share, publish, or disclose your account credentials, API keys, or licence keys to any third party
• Use the Services in any way that could damage, disable, overburden, or impair our infrastructure or interfere with other users' use of the Services
• Remove, alter, or obscure any proprietary notices, labels, or branding from the Services

We reserve the right to investigate and take appropriate action against anyone who, in our sole discretion, violates these restrictions, including suspending or terminating their account without notice.

5. Subscriptions and Billing

5.1 Plans

The Services offer multiple subscription tiers. Pricing consists of a base subscription fee plus usage-based overage charges for resources analysed beyond your plan's included allowance. Feature availability and resource limits for each plan are detailed on our Pricing page.

5.2 Free Trial

Paid subscriptions may include a 14-day free trial. You will not be charged during the trial period. If you do not cancel before the trial ends, your subscription will automatically convert to a paid subscription and you will be charged the applicable fee.

5.3 Payment

All payments are processed securely by Stripe. By subscribing, you authorise us to charge your payment method on a recurring basis at the then-current subscription price. Prices are listed in your local currency where available, or in GBP.

5.4 Cancellation & Refunds

You may cancel your subscription at any time through the billing management page. Upon cancellation:

• You will retain access to paid features until the end of your current billing period
• Your account will revert to the free tier (if available) at the end of the billing period
• No refunds are provided for unused portions of a billing period
• Usage-based overage charges are not refundable as these resources have been consumed

You have a 14-day refund window from the start of your paid subscription (trial periods do not count towards this window). Within this period, you may request a refund of your base subscription fee only. See our Refund Policy for full details.

5.5 Your Statutory Rights (UK Consumers)

If you are a consumer in the United Kingdom, you have statutory rights under the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013. For digital services purchased online, you have a 14-day cooling-off period from the date of purchase during which you may cancel for any reason.

If you request that we begin providing the Services immediately (before the 14-day cooling-off period ends), you acknowledge that you may lose your right to cancel once the Services have been fully performed. Nothing in these Terms affects your statutory rights under the Consumer Rights Act 2015.

5.6 Price Changes

We may change subscription prices with at least 30 days' notice. Price changes take effect at the start of your next billing cycle. Continued use after a price change constitutes acceptance of the new price.

6. License Validation

We validate licence usage regularly to ensure compliance with your subscription plan. If we detect that a licence key is being shared, used on more accounts than authorised, or is otherwise invalid, we may suspend or revoke access to the Services. We will make reasonable efforts to notify you before taking action, except in cases of obvious abuse.

7. Intellectual Property

The Services, including their design, code, analysis rules, scoring algorithms, documentation, features, and branding, are owned by Instance Labs Ltd and protected by copyright, trademark, and other intellectual property laws. These Terms do not grant you any right to use our trademarks, logos, or branding without our prior written consent.

You retain full ownership of any CDK code, configuration files, or other content that you submit to the Services for analysis (“Your Code”). By submitting Your Code, you grant us a limited, non-exclusive licence to process it solely for the purpose of providing the Services to you. This licence terminates when you delete your account or remove the relevant content.

AWS, CDK, CloudFormation, and related service names are trademarks of Amazon.com, Inc. and are used for identification purposes only.

8. Data Usage

Your use of the Services is also governed by our Privacy Policy, which describes how we collect, use, and protect your personal data.

CDK code non-retention: We do not permanently store your CDK source code. Code submitted for analysis is processed transiently to generate results and is not retained after analysis is complete, unless you explicitly opt in to a feature that requires storage (such as historical trend tracking). Analysis results and metadata (such as scores and rule violations) may be stored to provide you with dashboards and historical comparisons.

We do not sell, share, or provide your code or analysis data to any third party, except as required to operate the Services (for example, processing code through our AI analysis pipeline).

9. AI-Powered Features

The Services include AI-powered features that use machine learning models to analyse your CDK code and provide recommendations. You acknowledge and agree that:

• AI-generated analysis and recommendations may not be 100% accurate, complete, or suitable for your specific use case — you should review and validate all recommendations before implementing them in production environments
• Code submitted for AI analysis is processed transiently by our AI infrastructure and is not stored after the analysis is complete
• Your code is not used to train, fine-tune, or improve any AI or machine learning models
• AI features may be subject to usage limits based on your subscription plan
• We are not liable for any decisions made, actions taken, or infrastructure deployed based on AI-generated recommendations
• The accuracy and availability of AI features may vary as the underlying models evolve

10. Confidentiality

Each party agrees to keep confidential any non-public information received from the other party in connection with the Services (“Confidential Information”). Confidential Information includes, but is not limited to, your CDK code, infrastructure configurations, analysis results, and our proprietary technology, algorithms, and business information.

Neither party shall disclose the other party's Confidential Information to any third party without prior written consent, except: (a) as required by law, regulation, or court order; (b) to employees, contractors, or agents who need to know and are bound by equivalent confidentiality obligations; or (c) as necessary to provide or use the Services.

This obligation of confidentiality does not apply to information that is publicly available, already known to the receiving party, independently developed, or received from a third party without restriction.

11. Third-Party Services

The Services integrate with and rely upon third-party services, including but not limited to:

• Amazon Web Services (AWS) for cloud infrastructure and AI/ML processing
• Stripe for payment processing and subscription management
• Google Analytics for website usage analytics

Your use of these third-party services is subject to their respective terms of service and privacy policies. We are not responsible for the practices, availability, or content of any third-party services. If a third-party service experiences downtime or changes its terms, we will make reasonable efforts to minimise disruption but cannot guarantee uninterrupted operation of features that depend on third-party services.

12. Limitation of Liability

To the maximum extent permitted by law:

• No warranty. The Services are provided “as is” and “as available”, without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Services will be uninterrupted, secure, or error-free, or that analysis results will be accurate or complete.
• Limitation of damages. In no event shall Instance Labs Ltd, its directors, employees, or agents be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, business opportunity, or goodwill, arising from your use of or inability to use the Services.
• Liability cap. Our total aggregate liability for all claims arising from or relating to the Services shall not exceed the greater of one hundred pounds (£100) or the total amount you have paid us in the 12 months preceding the claim.
• Infrastructure decisions. We are not responsible for any infrastructure failures, security vulnerabilities, cost overruns, or other consequences arising from your implementation of recommendations provided by the Services. You are solely responsible for reviewing, testing, and validating any changes to your infrastructure.

Nothing in these Terms excludes or limits our liability for death or personal injury caused by our negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by law.

13. Indemnification

You agree to indemnify and hold harmless Instance Labs Ltd, its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, and expenses (including reasonable legal fees) arising from or relating to: (a) your use of the Services; (b) your violation of these Terms; (c) your violation of any applicable law or third-party rights; (d) any code or content you submit to the Services; or (e) any infrastructure you deploy based on the Services' recommendations.

14. Termination

14.1 Termination by You

You may cancel your subscription and delete your account at any time. If you have an active paid subscription, cancellation of your account will also cancel your subscription at the end of the current billing period. To delete your account, contact us at support@cdkinsights.dev.

14.2 Termination by Us

We may suspend or terminate your account immediately and without prior notice if you:

• Violate these Terms, including the licence restrictions in Section 4
• Engage in fraudulent, abusive, or illegal activity
• Attempt to hack, exploit, or compromise the security of the Services
• Fail to pay subscription fees when due
• Share or distribute your licence key or account credentials
• Create multiple accounts to evade bans, restrictions, or usage limits
• Are inactive for an extended period (we will provide reasonable notice before deleting inactive accounts)

14.3 Effect of Termination

Upon termination, your right to use the Services ceases immediately. We may delete your account data in accordance with our Privacy Policy. Any accrued obligations, including unpaid fees, shall survive termination. Sections that by their nature should survive termination (including Intellectual Property, Limitation of Liability, Indemnification, Confidentiality, and Governing Law) will survive.

14.4 Data Processing (Business Customers)

Where you are a business customer (a Controller processing personal data through the Services), our Data Processing Agreement is incorporated by reference into these Terms and governs our handling of your personal data as your processor under UK GDPR Article 28. Where the DPA and these Terms conflict on data-protection matters, the DPA prevails.

15. Dispute Resolution

If you have a dispute with us, we encourage you to contact us first at support@cdkinsights.dev so we can try to resolve it informally. We will make reasonable efforts to resolve any dispute within 30 days of receiving your notification.

If we are unable to resolve the dispute informally, either party may pursue the matter through the courts of England and Wales, subject to Section 16 below.

16. Governing Law

These Terms are governed by and construed in accordance with the laws of England and Wales. The courts of England and Wales shall have exclusive jurisdiction over any disputes arising from or relating to these Terms, except where you are a consumer residing in the European Union, in which case you may bring proceedings in your country of residence.

17. General Provisions

17.1 Entire Agreement

These Terms, together with our Privacy Policy and Refund Policy, constitute the entire agreement between you and Instance Labs Ltd regarding the Services.

17.2 Severability

If any provision of these Terms is found to be unenforceable or invalid by a court of competent jurisdiction, the remaining provisions will continue in full force and effect.

17.3 Waiver

Our failure to enforce any provision of these Terms does not constitute a waiver of that provision or our right to enforce it in the future.

17.4 Assignment

You may not assign or transfer your rights or obligations under these Terms without our prior written consent. We may assign our rights and obligations under these Terms without restriction, including in connection with a merger, acquisition, or sale of assets.

18. Changes to These Terms

We may update these Terms from time to time. If we make material changes, we will notify you by posting the updated Terms on this page and updating the “Effective Date” above. For significant changes that affect your rights or obligations, we will provide at least 30 days' notice via email or a prominent notice within the Services. Your continued use of the Services after changes take effect constitutes acceptance of the updated Terms.

19. Contact

For questions about these Terms, contact us at: