TITO AGENTE AUDITOR — TERMS OF USE
Develone LLC — https://develone.com

1. WHAT THIS PROGRAM IS

TITO Agente Auditor is a read-only diagnostic tool. It ships as two
components, each with its own executable and its own promise; you choose
which ones to install:

  - Database audit (SQL Server): tito-auditor.exe. It connects to a SQL
    Server database in read-only mode, runs a published set of queries, and
    writes the result to a local file.

  - AWS account audit: aws\tito-auditor-aws.exe. It reads the configuration
    of an AWS account through the AWS API, in read mode, and writes the
    result to a local file.

Neither component installs services or scheduled tasks. Each runs only when
you run it.

2. DATABASE AUDIT (SQL SERVER): WHAT IT DOES AND DOES NOT DO

  - Read-only. It issues no INSERT, UPDATE, DELETE or data definition
    statements. Any non-read statement is rejected by the program before it
    is sent to the server.

  - It does not interfere with your operation. It runs under READ
    UNCOMMITTED isolation and takes no locks on your tables.

  - It makes no outbound connections. It transmits nothing to Develone or
    to any third party. The result stays exclusively on the machine where
    the program was run.

  - The queries are not hidden inside the program: they ship as readable
    .sql files in the packs\ folder. You may read them, edit them, or
    remove any you do not wish to run.

3. AWS ACCOUNT AUDIT: WHAT IT DOES AND DOES NOT DO

  - It connects only to the AWS API (*.amazonaws.com). It transmits nothing
    to Develone or to any other third party. The result stays exclusively on
    the machine where the program was run.

  - Read mode. It creates, modifies and deletes no resource or setting in
    the account.

  - It only invokes the configuration-read operations declared in
    aws\packs\aws-account\pack.yml; the minimal IAM policy it must run with
    is in aws\docs\tito-auditor-aws-policy.json. It reads no S3 objects,
    secrets, parameters, table rows, logs or function code. Cost Explorer is
    optional, off by default, and billed by AWS.

  - It asks for no access keys: it uses the AWS profile already configured
    on the machine where it runs.

4. YOUR DATA

Develone LLC receives no data from you merely because you run this program.
If you choose to send us the result file, that transmission is your own
deliberate act, taken after you have had the opportunity to review the
file's contents.

By default the database audit result contains no business data rows: it
contains structural metadata and aggregate values. The --include-samples
option, which is off by default, is the only way to include rows with real
data. The AWS audit result contains only the configuration fields declared
in the pack.

5. CREDENTIALS

The database audit reads connection credentials from a configuration file
that you create and control on your own machine, or from an environment
variable. The AWS audit uses your machine's AWS profile and accepts no
credentials on the command line. In no case are they written to the output
or transmitted. We recommend using a dedicated read-only login or role.

6. LICENSE

Develone LLC grants you a limited, non-exclusive, non-transferable license
to run this program against systems you own or are expressly authorized to
access. Redistribution, and use against third-party systems without those
third parties' authorization, are not permitted.

7. NO WARRANTY

The program is provided "as is", without warranty of any kind. Although it
is designed not to modify data or interfere with operations, you are
responsible for running it with appropriate credentials and at an
appropriate time. Develone LLC is not liable for damages arising from its
use.

8. CONTACT

Develone LLC
https://develone.com
contact@develone.com
WhatsApp +54 11 4917 0138
