Policies Overview

PolicyWhat Is It?Version
Individual Terms of ServiceThe individual Service terms and conditions; applicable to all individual users of the service.20220623
Individual Privacy PolicyThe individual Service privacy policy, which explains how data is collected processed and used; applicable to all individual users of the service.20220623
Corporate Terms of ServiceThe corporate Service terms and conditions; applicable to organisations, and users that are managed by an organisation.20220623
Corporate Data Processing TermsThe corporate Service data processing terms, which explains how data is collected processed and used; applicable to organisations, and users that are managed by an organisation.20220623
Standard Contractual ClausesThe Standard Contractual Clauses ensures compliance with the General Data Protection Regulation (GDPR) rules specified by the EU.20220623
UK International Data Transfer AddendumThe UK International Data Transfer Addendum to the EU SSCs provides a mapping between UK and EU law for acting within the General Data Protection Regular (GDPR) rules.20220623
Security PolicyThe Service security policy, which explains how we operate to secure the service and protect your data.Latest
Notification of Breach PolicyThe Service notification of breach policy, which explains how we handle security/data breaches, and the timeframes plus process for disclosure.Latest
Service Level Agreement (SLA)The Service level agreement policy, which explains service guarantees provided for different tiers of users and organisations.Latest
Support Escalation PolicyThe Service support escalation policy, which explains how to escalate critical issues, for users that pay for priority support.Latest
Open-Source Hosting PolicyThe Service open-source hosting policy, which explains the terms and conditions of hosting OSS projects on Cloudsmith for free. Plus attribution and how to acquire formal sponsorship.Latest
Contributor License AgreementThe Service contributor license agreement, for external users that contribute to Cloudsmith projects.Latest
Bug Bounty ProgrammeThe Service bug bounty programme, which invites security researchers to submit exploit disclosure information to Cloudsmith, in return for a variable bounty.Latest

Cloudsmith is the new standard in Package / Artifact Management and Software Distribution

With support for all major package formats, you can trust us to manage your software supply chain.


Start My Free Trial Now
Cookie Declaration (Manage Cookies)