Skip to main content

Platform Terms of Use

These Terms of Use (the Terms) govern access to and use of the Zation FinOps Platform (the Platform). Registration requires explicit acceptance of both these Terms and the General Terms and Conditions (GTC). No account is created without this dual confirmation. By using the Platform, you confirm that you have read, understood, and accepted both documents on behalf of your organisation.

Binding version

This online page is the binding version of the Platform Terms of Use. Where these Terms and the GTC conflict, the GTC prevails unless these Terms state otherwise.

1. Scope​

These Terms apply to all users of the Platform — including IT administrators, procurement teams, and FinOps personnel — who access the Platform under a trial, contract, or demo arrangement with Zation AG.

2. Access and account management​

Zation grants the customer a non-exclusive, non-transferable right to access the Platform for internal business purposes.

Zation may suspend or restrict access immediately and without prior notice in the following cases:

  • Payment default or breach of the underlying service agreement
  • Violation of these Terms
  • Expiry of a trial period without renewal or extension
  • Misuse as described in Section 4

No compensation is owed for access suspension under these circumstances.

3. Permitted use​

The customer may use the Platform and its outputs (reports, exports, dashboards) for internal business purposes only.

  • Internal sharing: data and reports may be shared within the customer's organisation and with its affiliated companies.
  • Third parties: data, reports, and insights generated by the Platform may not be shared with, sold to, or disclosed to third parties without Zation's prior written consent.
  • Tenant connection: the customer may only connect Microsoft tenants belonging to their own organisation or directly affiliated entities. Using the Platform as a managed service or reselling access to third-party customers under a single account is not permitted — in such cases, Zation invoices the applicable fees for each end customer separately.

4. Prohibited use​

The following are prohibited and may result in immediate account suspension, legal action, and a contractual penalty of CHF 250'000 per incident, in addition to full compensation for damages. Where prohibited activities constitute a criminal offence under Swiss law, Zation files a criminal complaint.

Security and integrity​

  • Circumventing or undermining security mechanisms, authentication, or usage limits
  • Reverse engineering, decompiling, disassembling, or unauthorised extraction of Platform logic or data structures
  • Accessing areas for which you have no authorisation, or attempting to access another customer's data
  • Load testing or penetration testing without our explicit written consent (to report a vulnerability, see our Vulnerability Disclosure policy)

Misuse of access​

  • Sharing logins or API keys with third parties outside your organisation
  • Using stolen, fake, or someone else's credentials
  • Creating multiple accounts to bypass limits or suspensions
  • Impersonating another user or organisation

Load and performance​

  • Automated scraping of the Platform or its APIs
  • Automated scans that generate disproportionate load
  • Denial-of-service or similar attacks
  • Exceeding documented API limits without coordination with us

Content and data​

  • Uploading or processing illegal content
  • Uploading personal data without an appropriate legal basis
  • Uploading malware, viruses, or malicious code
  • Using the Platform to distribute spam or phishing
  • Storing or processing data you are not authorised to handle

Intellectual property and competition​

  • Copying, duplicating, or distributing our software, algorithms, or content beyond what is contractually permitted
  • Building a comparable or competing service based on the Platform
  • Bypassing licence restrictions
  • Any use that violates applicable Swiss or international law
  • Violating the rights of third parties (personality rights, copyrights, trademarks)
  • Activities that violate applicable sanctions or export controls

5. Data processing and privacy​

Roles. The customer acts as controller. Zation acts as processor on behalf of the customer for all personal data processed through the Platform.

Data processed. The Platform connects to the customer's Microsoft 365 and Azure environments via Microsoft APIs. Data processed may include Azure resource and cost data, Microsoft 365 user activity data (including usernames, email addresses, and usage metrics), and licence and subscription information. By default, user-level data is processed in identifiable form. The customer may activate anonymisation mode in Platform settings, in which case user identifiers are pseudonymised. The customer is responsible for configuring this setting in accordance with their own data protection obligations.

Data Processing Agreement. Processing is governed by our Data Processing Agreement (DPA), which is binding in its online form. The current Sub-Processors list forms part of that agreement.

Audit trail. Your actions in the Platform — including security-relevant actions such as scheduling or approving optimisations — are recorded per user in the audit trail for security and accountability (see Security & Trust).

API credentials and secret expiry. The customer is solely responsible for the validity of all API credentials (client secrets, service principal certificates) used to connect their Microsoft tenants. If credentials expire, Zation cannot access or refresh the customer's data. Any data loss, sync failures, or gaps in reporting resulting from expired or invalid credentials are the customer's sole responsibility. Zation provides automated expiry alerts as a courtesy but bears no liability for consequences arising from credential expiry.

6. Recommendations disclaimer​

The Platform generates cost-optimisation recommendations based on available data and industry best practices (Recommendations). Recommendations are indicative only. They are based on the data available through Microsoft APIs and do not account for dependencies on third-party providers, internal organisational constraints, change-management requirements, contractual obligations, or information not accessible through the connected APIs.

The customer must independently evaluate all Recommendations before taking any action. Zation expressly disclaims all liability for damages, costs, or disruptions arising directly or indirectly from the implementation of any Recommendation. Recommendations do not constitute professional IT, financial, or legal advice.

7. Data completeness​

The availability and completeness of data displayed in the Platform depends on the Microsoft Graph API and Azure Cost Management API (subject to Microsoft's own availability, latency, and data-retention policies), the permissions granted to the Platform's service principal, and the configuration of the customer's Microsoft tenant. Zation does not guarantee the completeness, accuracy, or timeliness of data retrieved from Microsoft's APIs. Data gaps or delays are outside Zation's control and do not constitute a Platform defect.

8. Platform availability​

Zation makes reasonable efforts to keep the Platform available and functional. However, no specific uptime guarantee or service level is provided under these Terms; planned and unplanned maintenance may cause temporary unavailability; and the Platform relies on Microsoft Azure infrastructure (Switzerland North), so outages affecting Microsoft's services may affect Platform availability. These Terms create no warranty of uninterrupted or error-free service. Our technical and organizational measures are described under Security & Trust.

9. Intellectual property​

The Platform, including all software, logic, design, and documentation, is the exclusive intellectual property of Zation AG. These Terms grant no transfer of ownership. The customer receives a limited, non-exclusive, non-transferable licence to use the Platform during the term of the underlying service agreement.

10. Changes to these Terms​

Zation may update these Terms at any time. Customers are notified of material changes via the Platform or by email. If the customer does not object within 20 days of notification, the updated Terms are deemed accepted. Continued use of the Platform after the 20-day period also constitutes acceptance.

11. Governing law and jurisdiction​

These Terms are governed by Swiss law (Swiss Code of Obligations). The courts of the Canton of Zug have exclusive jurisdiction for any disputes arising from or relating to these Terms.

12. Contact​

Zation AG, Suurstoffi 18b, CH-6343 Rotkreuz, Switzerland — info@zation.io.

Last updated: June 27, 2026