End User Terms — GobernIA

Versión en español: Términos de uso

Version: 1.0 · Effective date: November 6, 2026

1. Parties and acceptance

These terms govern the use of GobernIA («the App») between the organization that installs it («Customer») and Prodeo Innovation («Prodeo»): Prodeo Innovation S.A., corporate ID (cédula jurídica) 3-101-685641, with its address at Escazú Village, Guachipelín, Escazú, San José, Costa Rica. Whoever installs the App represents that they have authority to bind the Customer. Installing or using the App means accepting these terms. Purchase and licensing go through the Atlassian Marketplace; Atlassian is not a party to this agreement and is not responsible for the App.

2. What the App is, and what it does not do yet

GobernIA is an Atlassian Forge app for Jira Service Management Cloud that installs and verifies the scaffolding for governing AI agents defined by the AIGOV methodology: fields, screens, statuses, workflows, a project and an Assets schema.

What it does today: it reads the site’s configuration, builds a step-by-step plan, simulates it without writing anything and computes a fingerprint of the plan. After the Customer has reviewed the plan and confirmed, it applies the steps it can execute, writing to the Customer’s Jira, Jira Service Management and Assets site. It records every operation in a hash-chained audit log and issues a conformity seal per criterion for each run.

What it does not do yet — read this before relying on it:

  • Full provisioning does not exist. Apply writes only the steps the App can execute. Today it does create the project, custom fields with their contexts and options, screens, an issue type, statuses, workflows, their scheme associations and the request types that have an API; it does not create the AQL filters or the request types with no API, nor any step whose field or attribute type has no verified mapping: those are issued as specifications to complete by hand, with the reason on screen, and are never reported as done. The Assets object types, attributes and objects are written only once an icon has been resolved on the Customer’s site (the App looks for one by name; otherwise an administrator picks one from the site’s own list). The features planned for later phases (loading and risk calculation of agents, change-cycle gates, scheduled monitoring) are not built.
  • The interface is in Spanish.
  • The seal never shows green on anything unverified; so it can come out yellow even when everything that was done went well, and it is a record, not a certification (section 5).
  • Prodeo does not promise that a planned feature will arrive by any date. What the listing and the documentation describe is what exists.

3. Licence

Prodeo grants you a limited, non-exclusive, non-transferable, revocable licence to install and use the App on the Customer’s Atlassian sites for the term of the Marketplace licence (or evaluation). Commercial model: paid via Atlassian, charged per Jira Service Management user. Price and tiers: as shown on the GobernIA listing in the Atlassian Marketplace. The licence state is reported by the Atlassian platform; if the licence is not active, the App goes into a restricted mode: you can view, simulate, read the seal and the audit log, but no new changes are applied.

You may not: copy, modify or create derivative works of the App; decompile it or try to extract its code, except where the law does not allow that to be prohibited; circumvent licence controls or the App’s own controls (the administrator check, the name perimeter, the run lock); resell or sublicense the App.

4. Customer responsibilities

  1. Governance decisions are yours. The App installs scaffolding and records; it approves nothing and decides nothing. Risk appetite, ceilings, owners and authorizations are set and signed by the Customer.
  2. Review the plan before applying. An apply is tied by fingerprint to the plan you simulated; if the site changed, it is refused.
  3. What the App creates is not deleted. By design, the App never deletes or removes anything from your site: retiring is a state. Everything it creates or adopts stays on your site with names that begin AIGOV ·, and removing it is manual work on your side. If a run is interrupted it may leave half-created objects: the next run adopts them instead of duplicating them, but there is no automatic undo.
  4. Try it first on a non-production site. Prodeo recommends this. In production environments the App additionally requires that whoever presses Apply holds the Administer Jira permission, which it checks against Jira at that moment; in other environments it does not check it.
  5. Permissions. On installation, a Customer administrator grants the App the permissions its manifest declares. The Customer decides who may open the administration page and ensures that those who operate it are authorized to do so.
  6. Your people’s personal data. The Customer is responsible for telling the people who operate the App that it keeps an opaque alias of them in its audit log and run records and, in one register, their Atlassian account identifier until Atlassian reports the account closed, and for having a legal basis for it. See the Privacy Policy.

5. What the App does not promise

  • It does not guarantee regulatory compliance. It produces evidence and structures decisions; the legal determination is the Customer’s and its advisers’.
  • It does not prevent adversarial attacks and is no substitute for a threat model.
  • It does not give automatic coverage of the agent inventory: the inventory is fieldwork.
  • The seal is a record, not a certification. Its signature and the audit-log chain detect accidental alteration; they are not proof of non-repudiation and do not protect against an administrator with access to the App’s storage.
  • No approval time or audit outcome is promised.

6. Data and privacy

The App runs on Forge and sends no data to Prodeo or to third parties; its records live in the Forge storage of your installation. What is stored, for how long and what can be requested is in the Privacy Policy (https://prodeoinnovation.com/gobernia/privacy-policy/), which forms part of these terms. Your data remains yours; Prodeo acquires no rights over it. Atlassian hosts the App and its storage under its own terms.

7. Support

Public support channel: soporte@prodeoinnovation.com. Support is provided on a reasonable-efforts basis on business days in Costa Rica (UTC−6). No service level, response time or resolution time is committed.

8. Changes and versions

The App is updated through Forge versions. Versions that add permissions require a Customer administrator to consent again; until they do, the installation stays on the previous version. Prodeo may change these terms by publishing a new version with its date; the new version applies from its effective date, and continuing to use the App after that date means accepting it. If the Customer does not accept a new version, its only remedy is to uninstall the App.

9. Intellectual property

The App, the AIGOV methodology and Prodeo’s materials belong to Prodeo or its licensors. The Customer keeps ownership of its data and of its site’s configuration.

10. Warranty and liability

THE APP IS PROVIDED «AS IS» AND «AS AVAILABLE», to the maximum extent the law allows, without implied warranties of merchantability, fitness for a particular purpose or freedom from errors. Because of the nature of the App (it writes to your Atlassian site) the Customer is responsible for reviewing the plan and for backing up whatever it needs before applying. To the maximum extent the law allows, Prodeo’s total liability under these terms is limited to the amounts the Customer paid for the App in the twelve months before the event that gave rise to the claim, and Prodeo is not liable for indirect, incidental or consequential damages, loss of data, loss of profits or business interruption. Prodeo is not liable for: the changes the App makes on the Customer’s site once the Customer has reviewed and confirmed the plan; the configuration, data or decisions of the Customer; or the availability, security or changes of the Atlassian platform or of other third-party services. Descriptions of how the App works, in these terms, in the Privacy Policy, in the listing or in the documentation, are informational and do not constitute a warranty. Prodeo does not provide any indemnity beyond what the applicable law requires. The Customer will indemnify and hold Prodeo harmless against third-party claims arising from the Customer’s use of the App in breach of these terms or of the applicable law. Prodeo is not liable for any failure or delay caused by events beyond its reasonable control. Nothing in this section limits liability that the law does not allow to be limited.

11. Term and termination

The agreement lasts while the App is installed and the licence is active. The Customer may end it at any time by uninstalling the App; what was already created on its site stays (the App does not delete it) and the App’s data in Forge follows Atlassian’s lifecycle (see Privacy Policy §7). Prodeo may suspend support or withdraw the App from the Marketplace under the Marketplace Partner Agreement. Prodeo may also terminate the licence if the Customer materially breaches these terms and does not remedy the breach within 30 days of being notified, or immediately if the Customer breaches the restrictions in section 3. Prodeo may suspend the App or support immediately if needed to protect the security of the App, of Prodeo or of other customers.

12. Governing law and jurisdiction

These terms are governed by the laws of the Republic of Costa Rica. Any dispute will be submitted to the competent courts of San José, Costa Rica. These terms are published in Spanish and English; in case of discrepancy, the Spanish version prevails.

13. Contact

Legal notices and questions about these terms: info@prodeoinnovation.com.