Policies, terms, and data protection.
The agreements and disclosures that govern ArmorList, provided by IntelAlytic Inc. Everything in one place, written plainly, and mapped to the frameworks buyers, agencies, and suppliers require.
The Armor List is a new platform operated by IntelAlytic Inc. Every document here is one IntelAlytic version: the platform documents below are rendered from the same text as intelalytic.com/legal, with the ArmorList terms that applied before kept word for word in a section of their own, and the entity documents are linked to it, so there is one authoritative text and no risk of divergence. Prior versions and a change log are available at support@intelalytic.com. Questions? Contact us.
Privacy Policy
IntelAlytic Inc. is the controller for personal data across all platforms, operating one privacy program, one set of data-subject rights, and one retention schedule. Publishing this once removes any chance of divergence between products.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Privacy PolicyTerms of Service
Please read carefully. These Terms include a limitation of liability (section 8) and, for commercial customers, binding individual arbitration with a class-action and jury waiver (section 11), which you may opt out of within 30 days. Government and public-safety agency customers are not bound by the arbitration section.
1. Acceptance
These Terms of Service ("Terms") govern access to and use of the websites, platforms, applications, and professional services (collectively, the "Services") provided by IntelAlytic Inc., including ArmorList and ArmorTrack. By accessing our sites, creating an account, or engaging us, you agree to these Terms. If you accept on behalf of an organization, you represent that you have authority to bind it, and "you" refers to that organization. If you do not agree, do not use the Services.
2. Our role and scope
IntelAlytic provides advisory, standards-interpretation, compliance-documentation, testing-coordination, and software services. Our role is structural: we interpret standards, document compliance, and build software. We do not manufacture products, resell equipment, rank or endorse vendors, act as an accredited testing laboratory, or issue certifications. Deliverables support your internal decision-making and are not certifications, warranties of regulatory approval, or legal advice.
3. Order of precedence
Where you have signed an Order Form, statement of work ("SOW"), master services agreement ("MSA") or Master Subscription Agreement with us, that document controls over these Terms if they conflict. These Terms govern all other access to the Services.
These Terms, and the other documents in our Legal center, have a general part that applies to everyone and, where a product has terms of its own, sections headed «For ArmorList users» and «For ArmorTrack users». Those sections add terms that apply only to that product and are written not to conflict with the general part. If a conflict is ever found, the general part governs, except for fees, billing and renewal, where the product section governs for that product.
4. Client responsibilities
- Provide accurate, complete, and lawful information, and keep your account details current.
- Use deliverables and platforms only for lawful, authorized purposes and in compliance with all applicable laws, including export controls, and with our Acceptable Use Policy, which is incorporated by reference.
- Safeguard account credentials, and promptly report suspected compromise.
- Obtain any third-party consents required for data you provide to us. You are responsible for the accuracy, quality, and legality of the data you enter or publish.
5. Intellectual property
We and our licensors retain all right, title, and interest in our platforms, software, methodologies, templates, and pre-existing materials. We grant you a limited, non-exclusive, non-transferable right to use the Services during your term. Upon full payment, you receive a non-exclusive, non-transferable license to use engagement deliverables for your internal business purposes, subject to the SOW. You retain ownership of the data and materials you provide to us ("Customer Data"), and you grant us a limited license to host, process, and use Customer Data to provide and improve the Services as described in the Privacy Policy and the Data Processing Addendum.
Feedback. If you send us suggestions, ideas, or other feedback about the Services, you grant IntelAlytic a perpetual, irrevocable, worldwide, royalty-free license to use and incorporate it without restriction or obligation to you.
6. Fees and payment
Fees, milestones, and payment terms for engagements and negotiated subscriptions are stated in the applicable Order Form or SOW. Undisputed invoices are due within the period stated (net 30 unless otherwise agreed). Late amounts may accrue interest at the lower of 1.5% per month or the maximum permitted by law. Subscriptions bought in a product are billed as that product's section states. You are responsible for applicable taxes.
7. Warranties and disclaimer
We warrant that Services will be performed in a professional and workmanlike manner consistent with industry standards, and that the platforms will perform materially in accordance with their documentation. Except as expressly stated, the Services and platforms are provided "as is" and "as available" and we disclaim all other warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement, to the maximum extent permitted by law.
Public and third-party data. Data that the Services draw from public sources and third parties, such as public procurement contracts and their price lists, U.S. federal data and public registries, is provided as of the date shown, for information. It may be incomplete or out of date, and you must verify it at the original source before relying on it for a procurement, compliance or legal decision. We do not warrant its accuracy or completeness and do not certify any product, price or contract. Our Data Sources & Corrections policy explains where the data comes from and how to ask for a correction or removal.
8. Limitation of liability
To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, or data, even if advised of the possibility. Subject to the carve-outs below, each party's total aggregate liability arising out of or relating to the Services will not exceed the greater of (a) the fees paid or payable to IntelAlytic for the Services giving rise to the claim in the twelve (12) months before the event, or (b) US $100.
Uncapped matters. This cap does not apply to a party's indemnification obligations; breach of confidentiality; infringement or misappropriation of the other party's intellectual property; gross negligence or willful misconduct; fraud; liability for death or bodily injury; amounts owed for the Services; or liability that cannot be limited by law.
Insurance. IntelAlytic maintains commercial general liability insurance and cyber liability insurance. Certificates of insurance are available to customers on request. Insurance does not increase, limit or waive either party's liability.
9. Indemnification
Each party will defend and indemnify the other against third-party claims arising from its breach of these Terms, its violation of law, or its infringement or misappropriation of a third party's intellectual property, subject to prompt notice and reasonable cooperation. Where law prohibits a government customer from indemnifying, its obligation applies only as far as that law permits.
10. Term and termination
These Terms apply while you use the Services. Either party may terminate an engagement as provided in the Order Form or SOW. We may suspend or terminate access for material breach, non-payment, or risk to the Services. On termination, you may export Customer Data for a limited period, after which we delete or de-identify it as the Privacy Policy and the Data Processing Addendum describe. Provisions that by their nature should survive (intellectual property, confidentiality, payment, disclaimers, limitation of liability, indemnification, governing law and dispute resolution) survive termination.
11. Governing law and dispute resolution
These Terms are governed by the laws of the State of Colorado, without regard to conflict-of-laws rules, and the U.N. Convention on Contracts for the International Sale of Goods does not apply.
Government and public-safety agency customers. A government or public-safety agency customer is not bound by this arbitration section. Its disputes follow its contract and the dispute procedures that apply to it by law (for federal agencies, the Contract Disputes Act, 41 U.S.C. §§ 7101 to 7109), and nothing in these Terms requires a public agency to waive a right it cannot lawfully waive.
Informal resolution first. Before filing a claim, you agree to send a written description of the dispute to legal@intelalytic.com and to attempt to resolve it informally for at least 30 days.
Binding arbitration. Except as noted in this section, any dispute arising out of or relating to these Terms or the Services that is not resolved informally will be resolved by final and binding individual arbitration administered by JAMS under its applicable rules, seated in Colorado, before a single arbitrator, with judgment enforceable in any court of competent jurisdiction. The Federal Arbitration Act governs this section.
Delegation. The arbitrator, not a court, has exclusive authority to resolve any dispute about the interpretation, scope, enforceability, or formation of this arbitration agreement, including whether a claim is arbitrable.
Class-action and jury waiver. To the maximum extent permitted by law, claims may be brought only in an individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated, or representative proceeding, and each party waives any right to a jury trial.
Coordinated filings. If 25 or more similar demands are asserted by or with the coordination of the same or common counsel, the demands will be administered in staged batches of no more than 50 at a time, with a single set of filing fees per batch, to promote efficient resolution; limitation periods are tolled for demands awaiting their batch.
Time limit. Any claim must be filed within one (1) year after it arises, or it is permanently barred, except where a longer period is required by law.
Exceptions and venue. Either party may (a) bring an individual claim in small-claims court, and (b) seek injunctive or equitable relief in court to protect its intellectual property or confidential information, or against a breach of the automated-access restrictions in these Terms. Any dispute a court hears under these Terms is brought exclusively in the state courts of Arapahoe County, Colorado, or the U.S. District Court for the District of Colorado, and both parties consent to personal jurisdiction and venue there.
Opt-out. You may opt out of arbitration within 30 days of first accepting these Terms by emailing legal@intelalytic.com with your name, account, and intent to opt out. Opting out does not affect any other part of these Terms.
Severability. If the class-action or jury waiver is held unenforceable as to a claim, that claim (and only that claim) is severed and heard in court, and the remainder of this section still applies. If any other provision of this section is held unenforceable, it is severed and the rest remains enforceable.
12. General provisions
- Entire agreement. These Terms, any Order Form, SOW or MSA, and the policies referenced here are the entire agreement and supersede prior understandings on the subject.
- Severability. If any provision is unenforceable, the rest remain in effect and the provision is modified to the minimum extent necessary.
- Waiver. Failure to enforce a provision is not a waiver of it.
- Assignment. You may not assign these Terms without our consent; we may assign to an affiliate or in connection with a merger, acquisition, or sale of assets.
- Force majeure. Neither party is liable for delay or failure caused by events beyond its reasonable control (e.g., natural disaster, war, labor dispute, outage, or government action).
- Relationship. The parties are independent contractors; nothing creates a partnership, agency, or joint venture.
- Notices. Legal notices to us go by email to legal@intelalytic.com or by post to IntelAlytic Inc., Attn: Legal, 12424 E Weaver Pl., Ste A, Centennial, CO 80111-5663, USA. We give notice to you through the Services or at the contact details on your account.
- U.S. government rights. Software and data provided to U.S. government end users are “commercial” items under FAR 12.212 / DFARS 227.7202, licensed with only the rights granted to all other end users. See Export Controls & Government Use.
- Language. These Terms and the other documents in our Legal center are written in English, which is the only authoritative version. Any translation is for convenience only, and the English version controls in any conflict.
- Third-party beneficiaries. There are none, except as expressly stated.
13. Electronic communications
By using the Services or contacting us, you consent to receive communications from us electronically (email, on-site notices), and you agree that electronic agreements, notices, and records satisfy any legal requirement that such communications be in writing, consistent with the E-SIGN Act and UETA.
Text messages. We do not send text messages (SMS) today. If we start, we will ask for your consent first and update these Terms before we send any.
14. Changes
We may update these Terms. We post each new version here with its date. For a material change, we give notice by email or in the product before it takes effect, and we ask account holders to accept changes to these Terms and to the Data Processing Addendum in the product. Using the Services does not by itself mean you accepted a change. Questions: legal@intelalytic.com.
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
1. The Services and accounts
ArmorList is a verified directory and marketplace for the body armor industry, connecting buyers and agencies with manufacturers, distributors, and their products. Buyers and agencies may browse, compare, and send RFIs and quote requests at no charge. Suppliers may claim a company profile, publish listings, and access growth tools.
2. Fees, billing, and renewal
Access for buyers and public-safety agencies is provided at no charge. Suppliers subscribe on one of the plans, at the price and with the inclusions stated on our Pricing page and shown at checkout when you subscribe, monthly or annually. One plan opens ArmorList and ArmorTrack for your account, with seats counted per product. Subscriptions are billed in advance through our payment processor, Stripe, and renew automatically for another month or year, matching the period you chose, until canceled. You may cancel at any time in the billing portal of your account settings; the cancellation takes effect at the end of the period already paid. Fees are non-refundable except as required by law or under the review guarantee in section 8, and you are responsible for applicable taxes.
3. Listings, verification, and accuracy
Suppliers must ensure listings are truthful and not misleading, including any representation of NIJ or CPL status, certifications, and specifications. ArmorList verifies certain fields against authoritative sources and may correct, flag, or remove listings that are inaccurate, unverifiable, or in breach of these Terms, and may suspend or terminate access for fraudulent or misleading listings. Verification supports, but does not replace, your own diligence and legal and compliance obligations. ArmorList provides directory and verification information to assist your decisions; it does not warrant a supplier's products or replace your own compliance and procurement judgment.
4. Our role in the marketplace
ArmorList is a venue that connects buyers and suppliers. Except where IntelAlytic is expressly identified as the seller, IntelAlytic is not a party to, and is not the buyer, seller, agent, broker, or guarantor in, any transaction between a buyer and a supplier. Contracts for products or materials are formed directly between the buyer and the supplier, who are solely responsible for their listings, communications, negotiations, orders, payment, fulfillment, warranties, and disputes. IntelAlytic does not manufacture, test, inspect, take title to, store, or ship any product a supplier lists, and does not guarantee the quality, safety, legality, or compliance of any product, or the truth or accuracy of any listing. You are responsible for your own due diligence before entering into any transaction.
5. Export control, sanctions, and lawful acquisition
Body armor, ballistic materials, and related equipment may be subject to U.S. export controls, economic sanctions, and federal, state, local, and foreign laws that restrict who may purchase, possess, sell, or receive such items (including 18 U.S.C. § 931). Suppliers are responsible for lawful sale and export of their products; buyers are responsible for lawful purchase, receipt, end-use, and any re-export. You will not use ArmorList to solicit, facilitate, or complete any transaction that would violate export controls, sanctions, or purchase- or possession-eligibility laws, and IntelAlytic may refuse, suspend, or remove access, listings, or connections that present a legal or compliance risk. See our Export Controls & Government Use statement.
6. Automated access, AI, and text-and-data-mining
The manufacturer and supplier directory, product catalog, materials database, verification records, and Armor Intelligence are a proprietary compilation of IntelAlytic, protected by copyright and by database rights (including sui generis database rights under EU/UK law). IntelAlytic expressly reserves all text-and-data-mining rights, including the reservation under Article 4(3) of EU Directive 2019/790, and grants no license to use any content of the Services to train, fine-tune, or ground an AI or machine-learning model. This reservation is published in machine-readable form at /robots.txt, /ai.txt, /.well-known/tdmrep.json, and /llms.txt, which are incorporated into these Terms by reference.
Answer and citation engines expressly permitted in /robots.txt may retrieve the public editorial layer only (The Standard, guides, glossary, standards registry, and marketing pages) solely to generate responses that cite the source with attribution and a link. Any other automated access, including crawling, scraping, harvesting, bulk extraction, indexing, or model training against the gated catalog, search, intelligence, member, or admin surfaces, is prohibited.
Accessing the Services by automated means constitutes acceptance of these Terms. Unauthorized extraction or circumvention of the login gate may violate breach-of-contract, the Computer Fraud and Abuse Act, 17 U.S.C. §1201 (anti-circumvention), and applicable database-rights and TDM-reservation laws. Access is logged and canary records are seeded in proprietary datasets to detect and evidence unauthorized extraction. We reserve the right to pursue injunctive relief, damages, and recovery of enforcement costs, and to report violations to relevant authorities. Licensing, authorized API access, and violations: legal@intelalytic.com.
7. Publicity
Neither party will use the other's name, logo, or trademarks without prior written consent, except that IntelAlytic may identify a supplier by name and logo in a list of platform participants and in that supplier's own listing. Government customers are excluded from any implication of endorsement.
8. Procurement Ready review guarantee
If your account's first paid subscription is to a plan that includes the Procurement Ready credential, taken to pursue that credential, and our review is not completed within sixty (60) days after you have submitted every required record, we will refund the subscription fees you paid for that period, on request made to support@intelalytic.com within thirty (30) days after the sixty-day period ends. "Every required record" means all items listed as required on your Procurement Pathway at the time of submission. Delays caused by missing, expired or inconsistent records, or by your response time to our requests, do not count toward the sixty days. The guarantee applies once per account, to that first purchase only, and not to a renewal, an upgrade from another plan, or a later subscription. It covers the review only; it does not promise that the credential will be granted.
For ArmorTrack users
Terms that apply only to ArmorTrack users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
1. The Services and accounts
ArmorTrack provides chain-of-custody lifecycle management for protective equipment. Each organization is a separate tenant workspace, and each person in it holds only the permissions chosen when they were invited.
2. Fees, billing, and renewal
Access for public-safety agencies is provided at no charge once the agency is verified. Manufacturers, distributors, and research organizations get ArmorTrack through an IntelAlytic plan (Essential, Professional, or Enterprise), the same plan that opens ArmorList for the account, as described on the ArmorList pricing page. Plans are billed monthly or annually in advance through our payment processor, Stripe, and renew automatically for another month or year, matching the period chosen, until canceled; you may cancel at any time in the billing portal of your account settings, and the cancellation takes effect at the end of the period already paid. Disposition and destruction services are quoted per job; a quote is valid for 30 days from issue and is accepted when you authorize the job in writing or within the Services. Fees are non-refundable except as required by law, and you are responsible for applicable taxes.
3. NIJ compliance decisions
ArmorTrack supports, but does not replace, your legal and safety obligations, including NIJ compliance decisions. It records the NIJ status of a model as read from the NIJ Compliant Products List, with the date it was read; it does not certify equipment, and you remain responsible for decisions about your equipment and personnel.
4. Third-party services
ArmorTrack may connect you with certified disposition facilities. Your dealings with them are governed by their terms, and IntelAlytic is not responsible for them.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 30, 2026 | 1.5 | Plans and prices: the ArmorList section no longer lists plan names and amounts; the plans, prices and inclusions are those on the Pricing page and shown at checkout when you subscribe. The Procurement Ready review guarantee in section 8 now applies to a first subscription to any plan that includes the credential, not only Professional or Enterprise. |
| October 29, 2026 | 1.4 | Added «Public and third-party data» to section 7: data drawn from public sources is provided as of the date shown, must be verified at the original source before a procurement, compliance or legal decision, and is not warranted or certified; corrections and removals follow the new Data Sources & Corrections policy. Added the Procurement Ready review guarantee to the ArmorList section: a refund of the fees for the period when the review of complete records takes longer than 60 days, once per account, on its first paid subscription to Professional or Enterprise. |
| October 10, 2026 | 1.3 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: one liability cap, the greater of 12-month fees or US $100, with one list of uncapped matters; one arbitration clause, which government and public-safety agency customers are not bound by; venue in Arapahoe County, Colorado and the District of Colorado; legal@intelalytic.com for informal resolution, the arbitration opt-out and legal notices; an order of precedence between the general part and the product sections; insurance stated without figures; a mutual indemnity covering breach, violation of law and intellectual property; the text-message terms replaced, since we send no text messages; material changes are notified and accepted in the product, and using the Services no longer counts as accepting a change. |
| July 18, 2026 | 1.2 | Set the liability cap at the greater of trailing-12-month fees or US $100 with uncapped carve-outs, added an insurance clause, and expanded arbitration with a delegation clause, coordinated-filing batching, and a one-year limitation. |
| July 1, 2026 | 1.0 | Initial publication. |
Data Processing Addendum
The processor terms, Standard Contractual Clauses, and UK Addendum are entity-level and identical for every platform. The platform-specific part, which sub-processors and regions actually handle your data, is published separately below.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Data Processing AddendumPlatform-specific: see The Armor List sub-processors and data residency, which lists the actual infrastructure processing your data on this platform.
Sub-processors
We engage the sub-processors below to deliver and operate our sites and platforms, ArmorList and ArmorTrack included. Each is bound by a written data processing agreement with obligations no less protective than our own and is used on the principle of least data. The platform database is hosted in the United States; some providers, such as our content delivery network, operate globally, and each row shows the location where it is documented. This table is the authoritative register for the IntelAlytic suite. The Trust Center shows the same list.
| Sub-processor | Purpose | Data | Location |
|---|---|---|---|
| Supabase (on Amazon Web Services) | Database, authentication, file storage, server functions and scheduled jobs | Account, organization and application records, uploaded files, outgoing email and AI conversation history | United States (AWS) |
| Cloudflare | Website and app hosting, edge delivery and security | Request metadata (IP address, browser) and the requests our site workers forward (feedback, public IRIS questions, form fields) | Global network |
| Stripe | Subscription billing and payments | Billing contact, organization name and subscription data; card details go straight to Stripe and never reach us | United States |
| Anthropic | The one AI model provider behind IRIS | The question and the help context of the screen; for ArmorTrack incident analysis, which each agency switches on and which is off by default, the incident description, damage codes and photos | On request |
| Resend | Platform email (sign-in codes, invitations, notices) | Recipient name and email, message content | On request |
| Sign in with Google; website analytics (GA4) on the public sites, on by default in the United States until the visitor opts out or sends Global Privacy Control, and only after an opt-in in the EU, the EEA, the UK and Switzerland; YouTube videos in articles, loaded only when the reader clicks Play | Name, email and picture at sign-in; page analytics without names, emails or record IDs; the video request when a reader plays one | United States | |
| Sign in with LinkedIn | Name, email and picture at sign-in | United States | |
| GitHub | Source code, automated checks, and the scheduled jobs that collect public records into our database | Source code; the collectors handle public-sourced agency and company records, including public officials’ work contacts | United States |
| Pulse CRM (IntelAlytic’s own, part of the IntelAlytic platform) | Follow-up on leads from our sales forms | Lead and contact details from our sales forms | On request |
| Instantly | Outreach email campaigns for IntelAlytic | Contact name and email, campaign events | On request |
We update this register before a new sub-processor receives any data, subject to the notice and objection rights in the Data Processing Addendum. Controlled, export-sensitive, or classified data is never placed with third-party sub-processors; it is handled in governed, access-controlled environments limited to authorized U.S. persons. To receive advance notice of sub-processor changes, email privacy@intelalytic.com.
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
The legacy ArmorList app at armorlist.com (built on Lovable), which still serves accounts until they move to IntelAlytic, uses the vendors below. This list retires when that migration completes; the ArmorList screens served from app.intelalytic.com already use the register above.
This list was reconciled against the legacy app's codebase on August 15, 2026, by reading every outbound endpoint in the application and its automation functions.
| Sub-processor | Purpose | Location |
|---|---|---|
| Amazon Web Services | Cloud infrastructure: where platform data physically resides, encrypted | United States |
| Supabase | Managed data services: database, authentication, file storage, and automation functions | United States |
| Cloudflare | Application delivery, edge routing, and network protection | Global network |
| Stripe | Billing for supplier subscriptions and procurement checkout | United States |
| Airtable | Operational record of companies, contacts, and locations, synchronized with the platform database | United States |
| Brevo | Transactional & alert messaging | European Union |
| Make | Workflow automation for company approval and content ingestion | European Union |
| Anthropic (Claude) | Data verification & content assistance, human-reviewed | United States |
| OpenAI | Data verification & content assistance, human-reviewed | United States |
| Google (Gemini) | Data verification & content assistance, human-reviewed | United States |
| Lovable AI Gateway | Model routing for AI search and company enrichment; carries the query text of AI searches | United States |
| OpenRouter | Model routing for multi-model consensus checks on verification | United States |
| Firecrawl | Retrieval of public web pages for company, product, and news enrichment | United States |
| SerpAPI | Public search and patent record retrieval for enrichment | United States |
| Google Maps Platform | Address geocoding, place lookup, and embedded maps | United States |
| Contentsquare | Product analytics and session behavior measurement | United States |
Public data sources the Services read but send no personal data to, and which are therefore not sub-processors, include SAM.gov, USAspending.gov, the U.S. Census Bureau, the NIJ Compliant Products List at OJP, and CJTTEC.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| November 5, 2026 | 1.5 | Factual correction: Pulse CRM, IntelAlytic’s own, now runs on the IntelAlytic platform with the providers already listed, no longer on AWS EC2, and receives the leads of our sales forms only. Added Instantly, for IntelAlytic’s outreach email campaigns. |
| October 18, 2026 | 1.4 | Factual correction: Google Analytics on the public sites runs as the Cookie Notice already says, on by default in the United States until a visitor opts out or sends Global Privacy Control, and only after an opt-in in the EU, the EEA, the UK and Switzerland. The register had said «after consent» for every visitor. |
| October 10, 2026 | 1.3 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the IntelAlytic register governs the suite; the ArmorList section lists the vendors of the legacy ArmorList app until that app retires at the migration; the rule that controlled data is never placed with sub-processors applies to everyone; privacy@intelalytic.com as the contact. |
| October 7, 2026 | 1.2 | Factual correction: the register names each sub-processor the platform uses, with the data it receives and its documented location, in place of categories that all read United States. |
| September 10, 2026 | 1.1 | Added four sub-processor categories and declared this register authoritative over the summary in the Trust Center. |
| July 1, 2026 | 1.0 | Initial publication. |
Acceptable Use Policy
This policy applies to everyone who uses our platforms, sites, or deliverables, and is incorporated into the Terms of Service. You agree not to, and not to permit others to:
- Violate any law or regulation, or infringe intellectual property, privacy, or other third-party rights.
- Circumvent or violate U.S. export controls or sanctions, or transfer controlled data to unauthorized persons or destinations.
- Upload unlawful, infringing, or malicious content, or malware.
- Attempt to disrupt, degrade, or gain unauthorized access to the Services, other accounts or tenants, or related systems and data.
- Reverse engineer, decompile, copy, or create derivative works from our platforms except as permitted by law.
- Resell, sublicense, or provide access to unauthorized third parties.
- Use the Services to develop a competing product; scrape, crawl, harvest, or bulk-extract content or data except through interfaces we expressly authorize (such as a published RSS feed or API) and within posted rate limits; or use our content for text-and-data-mining or to train, fine-tune, or ground AI models (see IP, Copyright & AI Rights).
- Enter personal data you lack the rights or lawful basis to provide.
- Misrepresent your identity or authority, or use another party's credentials.
Prohibited data: CUI, classified and export-controlled information
Our platforms are not designed or authorized to store, process, or transmit controlled government information. They are not a CUI-authorized information system, are not FedRAMP authorized, and have not been assessed under CMMC or against NIST SP 800-171. You must not upload, enter, paste, message, or otherwise share through the Services, including with IRIS:
- Controlled Unclassified Information (CUI) as defined in 32 CFR Part 2002 and the CUI Registry, including Covered Defense Information under DFARS 252.204-7012 and information under legacy designations such as For Official Use Only or Law Enforcement Sensitive;
- Classified information at any level;
- Export-controlled technical data: technical data or technology controlled under the ITAR 22 CFR 120 to 130 or listed on the Commerce Control List under the EAR 15 CFR 730 to 774, including documents bearing DoD Distribution Statement B, C, D, E, or F. Items designated EAR99 are not in scope.
This applies whether or not the material is marked. Information that is already lawfully public, such as a published product listing or an entry on the NIJ Compliant Products List, is not prohibited data.
To help prevent mistakes, the Services check file names and the text you submit for common CUI, classification, and export-control markings, and refuse what they recognize. This check is a safeguard, not a guarantee: it does not read the contents of every file and does not recognize unmarked material, and you remain responsible for not submitting prohibited data. If prohibited data is found or reported, we may remove it or restrict access to it (quarantine) without prior notice, notify the account's administrators, suspend access while we investigate, and notify the data's owner or an authority where the law requires. Report suspected prohibited data to legal@intelalytic.com. We may offer a separately authorized environment for controlled data in the future; until we announce one and an agreement with you says so, this section applies to every product.
Controlled data & enforcement
Because we operate in defense and public safety, misuse involving controlled or export-sensitive data is treated with particular seriousness. We may investigate violations, remove content that violates this policy or poses a security or legal risk, suspend or terminate access and, where required, report unlawful conduct to the appropriate authorities. Report suspected misuse to legal@intelalytic.com, and security vulnerabilities to security@intelalytic.com under our Vulnerability Disclosure Policy.
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
- Do not publish false, misleading, or fraudulent listings, or misrepresent NIJ / CPL status, certifications, specifications, or company identity.
- Do not attempt to manipulate search relevance or verification.
- Do not use ArmorList to evade export controls or facilitate an unlawful transaction.
We may correct, flag, or remove listings that violate this policy.
For ArmorTrack users
Terms that apply only to ArmorTrack users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
- Do not use ArmorTrack to endanger public or officer safety.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 10, 2026 | 1.2 | Added «Prohibited data»: CUI, classified information and export-controlled technical data may not be uploaded, entered or shared through the Services or with IRIS; the platforms are not a CUI-authorized system; a marking check refuses what it recognizes and is not a guarantee; found material may be removed or quarantined, the account notified and access suspended. |
| October 10, 2026 | 1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the product sections keep only the rules specific to each product; misuse is reported to legal@intelalytic.com and vulnerabilities to security@intelalytic.com. |
| July 1, 2026 | 1.0 | Initial publication. |
AI Disclosure and Responsible Use
We use artificial intelligence to accelerate research, drafting, and analysis, and to assist the people who use our platforms. AI augments our people; it does not replace professional judgment.
Our commitments
- Human oversight. IRIS answers questions directly, and its answers are labelled as AI-generated. Where an AI output feeds a decision about a person, an organization or a product (for example an advertising review or a suggested change to a directory record), a person makes that decision or can review and reverse it. Any feature that acts without a person is named in this Disclosure and stays off until we switch it on.
- Traceability, AI-assisted conclusions are traceable to the underlying standards, evidence, and sources.
- Data protection, controlled, export-sensitive, or confidential client data is not submitted to third-party or public AI models. We use governed, access-controlled tooling for such work.
- Accuracy limits, AI can produce incomplete or incorrect results; confidence scores are indicators, not guarantees, and outputs are not a substitute for accredited testing, legal advice, or your own judgment.
- Governance alignment, our practices are designed to align with recognized AI risk frameworks, including the NIST AI Risk Management Framework and the direction of ISO/IEC 42001.
Our AI integration layer and IRIS
IntelAlytic operates an in-house, multimodal AI integration layer, developed by us and shared across our platforms and the IntelAlytic family. It orchestrates text, data, and document workflows behind a single governed interface, with role-based access and audit logging. Where its output feeds a decision, a person makes that decision or can review and reverse it, as «Human oversight» above describes.
IRIS is IntelAlytic's assistant, one assistant with one set of rules on every IntelAlytic platform. When you are signed out, IRIS answers within daily limits from what we have published on the open web, and has no access to any account; ask it something account-specific and it says so and offers to sign you in. When you are signed in, IRIS works within your own permissions: it never sees another customer's data, and if the interface would not show something to you, IRIS does not say it. When the AI runtime is unavailable, IRIS says so instead of guessing.
Model providers (sub-processors)
Our platforms send AI requests only to the providers listed here, each engaged as a sub-processor under written terms no less protective than our Data Processing Addendum and named, with what it receives, in our Sub-processors register:
- Anthropic (Claude), the model behind IRIS and every AI feature of the suite.
A provider is added to this disclosure and the Sub-processors register before it receives any data, and we notify customers of material changes.
How your data flows
- What each feature sends, each AI feature sends only the fields it uses. The help assistant sends your question and the help text for the screen. The product sections below say what each product's features send. We do not automatically remove personal information from text you type, so do not enter sensitive case information in free-text fields.
- No training on your data, we engage providers under terms that prohibit training their models on our or our customers' data, and we do not use customer data to train any third-party or publicly shared model.
- Provider retention, a provider keeps prompts and outputs only as its commercial terms allow; we do not have a zero-retention arrangement today.
- Controlled data stays out, do not give IRIS or any AI feature CUI, classified information, or export-controlled technical data (see «Prohibited data» in our Acceptable Use Policy). IRIS refuses a question that carries a recognized CUI, classification, or export-control marking before any model provider receives it; unmarked material is not detected, so the obligation remains yours. We never send controlled, export-sensitive, or classified data to third-party models.
Automated decision-making and your rights
Our AI features are designed to support human judgment, not to make consequential decisions about individuals such as employment, credit, housing, insurance, education, healthcare, or access to government services. We align our practices with recognized frameworks and emerging law, including the NIST AI Risk Management Framework, the California automated decision-making technology regulations, the Colorado AI Act, and the EU AI Act. Where these laws apply, you may have the right to be notified of automated decision-making, to access information about it, to opt out, to correct inaccurate personal data used in it, and to request meaningful human review of an adverse decision. To exercise these rights or ask a question about this disclosure, contact legal@intelalytic.com.
Machine-readable AI & TDM reservation
We reserve our content from text-and-data-mining and model training, declared in machine-readable form in our robots.txt, per-page noai / noimageai and tdm-reservation metadata, /ai.txt, a tdm-reservation at /.well-known/tdmrep.json, and guidance for answer engines in our llms.txt. Answer engines may quote our public pages with attribution to IntelAlytic, plus the product name where the content comes from a product (for example, "ArmorTrack by IntelAlytic"), and a link to the source. See IP, Copyright & AI Rights.
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
1. Where AI is used in ArmorList
- Supplier tools: IRIS can draft listing and campaign copy from what the supplier enters; the supplier reviews and approves it before anything is published.
- Advertising review: when this review is switched on, IRIS may approve a sponsored campaign that clearly meets our advertising policy. It never rejects one; anything it does not approve waits for a person.
- Verification: Verified badges rely on corroboration against authoritative sources, and conflicting fields are held for review by a person rather than published automatically.
2. The legacy ArmorList app
Until accounts move to IntelAlytic, the legacy ArmorList app at armorlist.com (built on Lovable) also uses AI for data verification, AI search, and company enrichment. Besides Anthropic, it sends AI requests to the providers below, which are listed because they process data today and which retire when that app is retired:
- Lovable AI Gateway, model routing for AI search and company enrichment; carries the query text of AI searches.
- OpenRouter, model routing for multi-model consensus checks on verification.
- OpenAI, data verification and content assistance, reviewed by a person.
- Google (Gemini), data verification and content assistance, reviewed by a person.
The rules of the general part apply to them: no training on customer data, and a provider keeps prompts and outputs only as its commercial terms allow.
For ArmorTrack users
Terms that apply only to ArmorTrack users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
1. Where AI is used in ArmorTrack
- Help assistant: IRIS answers questions about how to use the screen you are on. It is given your question and our help text, not your records.
- Incident analysis and photo review: off by default; each agency decides whether to switch it on. When on, IRIS reviews a filed incident and its photos and suggests damage codes, a location, and resolution steps, which you review before anything is saved. An incident cannot be closed until required actions are completed or deferred with a reason.
- Other features: asking questions about your own records, reading uploaded purchase documents, and researching client agencies are switched off today. We will update this disclosure before switching any of them on.
- Notice matching: NIJ advisories and recall notices are matched to your inventory by our own matching logic with confidence scoring, not by an AI model, and your inventory is not sent to a third-party model for it.
2. What incident analysis sends
Incident analysis, when your agency has switched it on, sends the incident description, damage codes, location on the item, resolution notes, the equipment's type, model, manufacturer and protection level, and any photos you attach; it does not send serial numbers, officer names or badge numbers. IntelAlytic switches each feature on or off, and incident analysis is also switched on or off by each agency. Do not enter Criminal Justice Information in free-text fields.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 29, 2026 | 1.6 | Factual correction of «Human oversight»: IRIS answers questions directly, labelled as AI-generated; where an AI output feeds a decision about a person, an organization or a product, a person makes that decision or can review and reverse it; a feature that acts without a person is named here and stays off until we switch it on. Removed the statements that a person reviews every AI-assisted output and that AI never operates unsupervised in a decision path. |
| October 10, 2026 | 1.5 | IRIS must not be given CUI, classified information or export-controlled technical data, and refuses a question that carries a recognized marking before any model provider receives it; removed the statement that such data is handled in a governed environment, since the platforms do not accept it. |
| October 10, 2026 | 1.4 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the model providers are listed from one register, shared with the Sub-processors register, and only providers active today are named; for every product, a provider keeps data only as its commercial terms allow, with no zero-retention arrangement; the providers of the legacy ArmorList app are listed until that app retires; attribution names IntelAlytic and the product; legal@intelalytic.com as the contact. |
| October 7, 2026 | 1.3 | Factual correction: names the one model provider, Anthropic, and what each feature sends; incident analysis is off by default per agency; no zero-retention arrangement is in place. |
| September 10, 2026 | 1.2 | Added the express no-training-on-your-content commitment. |
| July 18, 2026 | 1.1 | Named the in-house multimodal integration layer and added the machine-readable TDM reservation. |
| July 1, 2026 | 1.0 | Initial publication. |
Copyright & DMCA
One Privacy Policy covers your IntelAlytic account, every IntelAlytic platform including The Armor List, and our websites.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Copyright and DMCAExport Controls & Government Use
Because IntelAlytic works in ballistic protection, defense, and public safety, our services, deliverables, technical data, and platforms are subject to U.S. export, sanctions, and defense-trade controls. This policy supplements our Terms of Service and Acceptable Use Policy. It is a core operational discipline, not a formality, and it does not replace your own compliance obligations.
1. Export and sanctions compliance
Our work may involve technical data and defense articles controlled under U.S. law. We comply with:
- ITAR, International Traffic in Arms Regulations, administered by the Directorate of Defense Trade Controls (DDTC) 22 CFR 120 to 130, governing defense articles and technical data on the U.S. Munitions List.
- EAR, Export Administration Regulations, administered by the Bureau of Industry and Security (BIS) 15 CFR 730 to 774, governing dual-use items on the Commerce Control List.
- OFAC, Office of Foreign Assets Control sanctions programs and the Specially Designated Nationals (SDN) list.
In practice, that means controlled technical data is identified and classified at intake and handled under access controls limited to authorized U.S. persons; we manage deemed exports (release of controlled technical data to a foreign person in the U.S. is treated as an export); we screen customers, partners, and suppliers against denied-party, entity, and SDN lists before transacting; and an export compliance officer oversees jurisdiction and licensing determinations, with voluntary self-disclosure where appropriate. Controlled, export-sensitive, or classified data is never placed with third-party or public AI models and is handled only in governed, access-controlled environments.
Our platforms are not such an environment: they do not accept CUI, classified information, or export-controlled technical data, and you may not upload or share it through them (see «Prohibited data» in the Acceptable Use Policy).
You represent and warrant that you and your authorized users: (a) are not located in, organized under the laws of, or ordinarily resident in a country or territory subject to comprehensive U.S. sanctions; (b) are not identified on any U.S. government denied-, restricted-, or debarred-party list; and (c) will not access, use, export, re-export, or transfer the Services or any data from them in violation of applicable export or sanctions laws, or to any prohibited end use or end user. We may refuse, suspend, or remove access that presents a trade-compliance risk.
2. State and local restrictions
Independent of federal export law, some U.S. states and localities restrict the sale, possession, or shipment of body armor and related items (for example, restrictions applicable to certain purchasers or jurisdictions). Where our work touches product-level sourcing or distribution, we structure engagements to respect applicable state and local requirements, and we advise clients to confirm the rules for their own jurisdiction and end users.
3. U.S. Government end users
The Services and software are commercial products, commercial computer software, and commercial computer software documentation under FAR 2.101. Consistent with FAR 12.212 and DFARS 227.7202-1 through 227.7202-4, any use, modification, reproduction, release, performance, display, or disclosure by or for the U.S. Government (or a prime contractor or subcontractor at any tier) is governed solely by the Terms of Service, and the Government acquires only the rights granted to all other users, except to the extent of mandatory federal law that cannot be waived. Deliverables that contain controlled technical data are handled under the applicable ITAR/EAR controls and any DFARS/FAR terms incorporated in a signed agreement. Where a specific end user, funding source, or contract vehicle changes the applicable requirements, we align documentation and access controls accordingly before delivery.
4. Public agencies and public records
Where a public agency is the customer, the agency remains responsible for its own records and obligations, including responses to freedom-of-information and public-records requests, record-retention schedules, and any evidentiary requirements. Content an agency submits to, or generates in, the Services may be subject to those obligations. We mark confidential, proprietary, and controlled materials accordingly, and we maintain U.S.-based processing to support agency data-residency expectations; controlled technical data continues to be handled under the access controls described above regardless of a public-records request.
5. Government contracting
Any flow-down clauses a prime contractor, agency, or distributor seeks to impose must be agreed in a signed order, statement of work, or subcontract. Unilateral or undisclosed flow-downs are not incorporated into our agreements unless expressly accepted in writing. Our commercial terms, and any negotiated exceptions, govern the engagement.
Revision history
| Date | Version | Summary |
|---|---|---|
| October 10, 2026 | 1.3 | Our platforms do not accept controlled data: a reference to «Prohibited data» in the Acceptable Use Policy, and the ArmorTrack note on controlled technical data is now a prohibition. |
| October 10, 2026 | 1.2 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the export representations and the government-use and public-records sections apply to everyone; the product sections keep only the rules specific to each product; legal@intelalytic.com as the contact. |
| July 2026 | 1.1 | Restructured into Export & Government Use: added state/local restrictions, U.S. Government end users, public records, and government-contracting flow-down sections. |
| July 1, 2026 | 1.0 | Initial Export Compliance policy (ITAR, EAR, OFAC framework and controls). |
Export-control questions: legal@intelalytic.com.
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
You are responsible for your own compliance. IntelAlytic is a marketplace venue and does not classify, license, sell, export, or take title to suppliers' products.
1. Controls that may apply to listed products
- Export Administration Regulations (EAR), which classify many body-armor items and ballistic fibers (for example, under Export Control Classification Numbers in Category 1).
- International Traffic in Arms Regulations (ITAR), for any items on the U.S. Munitions List, which can include certain military helmets and hard armor.
- Economic sanctions administered by OFAC, restricting dealings with certain countries, regions, entities, and individuals.
- Purchase- and possession-eligibility laws, including 18 U.S.C. § 931 (restricting possession of body armor by persons convicted of a violent felony) and applicable state and local laws. For example, Connecticut restricts sale or delivery of body armor to in-person transactions.
2. Responsibilities of suppliers and buyers
Suppliers are responsible for correctly classifying their products, obtaining any required authorizations or licenses, and lawfully selling and exporting them. Buyers are responsible for lawful purchase, receipt, end-use, and any re-export or transfer. Each party is responsible for screening its counterparties against applicable denied- and restricted-party lists. Where features would offer or deliver body armor into a jurisdiction that prohibits it, sellers are responsible for compliance with those laws, and we may restrict such transactions.
3. Prohibited use and our measures
You may not use ArmorList to solicit, facilitate, or complete any transaction that would violate export controls, sanctions, or purchase- or possession-eligibility laws, or to divert products to a prohibited end-user or end-use. We may screen accounts and listings, restrict certain features by geography, and refuse, suspend, or remove listings or connections that present a trade-compliance risk.
For a plain-language overview for buyers and sellers, see the Export & Trade Compliance page.
For ArmorTrack users
Terms that apply only to ArmorTrack users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
Controlled technical data. Do not upload export-controlled technical data, drawings, or specifications (for example, ITAR-controlled defense articles or EAR-controlled technology) to ArmorTrack; the rule is «Prohibited data» in the Acceptable Use Policy. ArmorTrack stores customer data in the United States.
1. Criminal Justice Information
Where a customer's use involves Criminal Justice Information (CJI) subject to the FBI CJIS Security Policy, the parties will address the applicable security requirements in an order form or addendum; ArmorTrack's controls are described on the Trust & Compliance Center.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 10, 2026 | 1.3 | Our platforms do not accept controlled data: a reference to «Prohibited data» in the Acceptable Use Policy, and the ArmorTrack note on controlled technical data is now a prohibition. |
| October 10, 2026 | 1.2 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the export representations and the government-use and public-records sections apply to everyone; the product sections keep only the rules specific to each product; legal@intelalytic.com as the contact. |
| July 2026 | 1.1 | Restructured into Export & Government Use: added state/local restrictions, U.S. Government end users, public records, and government-contracting flow-down sections. |
| July 1, 2026 | 1.0 | Initial Export Compliance policy (ITAR, EAR, OFAC framework and controls). |
Vulnerability Disclosure
One security program, one safe-harbour commitment, and one intake channel cover every IntelAlytic platform including The Armor List.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Vulnerability DisclosureData Sources & Corrections
Where the public data on The Armor List comes from, what we never republish, how far you can rely on it, and how anyone asks us to correct or remove a record.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Data Sources & Corrections policyLegal Changelog
Every change to the eight platform documents The Armor List publishes, newest first, generated from one metadata registry so the record cannot drift from the documents themselves. The platform launched July 25, 2026, so all of them begin at Version 1.0 on that date; on October 10, 2026 each became one IntelAlytic version, rendered from the same text as intelalytic.com/legal, and its row shows the IntelAlytic version number. The seven entity-level documents (Privacy, DPA, EULA, NDA, DMCA, Vulnerability Disclosure, Data Sources & Corrections) are version-controlled by IntelAlytic Inc. and their history is published with the master documents. For prior full-text versions, contact support@intelalytic.com.
| Date | Document | Version | Summary of change |
|---|---|---|---|
| October 10, 2026 | AI Disclosure | v1.6 | Factual correction of «Human oversight»: IRIS answers questions directly, labelled as AI-generated; where an AI output feeds a decision about a person, an organization or a product, a person makes that decision or can review and reverse it; a feature that acts without a person is named here and stays off until we switch it on. Removed the statements that a person reviews every AI-assisted output and that AI never operates unsupervised in a decision path. |
| October 10, 2026 | Terms of Service | v1.5 | Plans and prices: the ArmorList section no longer lists plan names and amounts; the plans, prices and inclusions are those on the Pricing page and shown at checkout when you subscribe. The Procurement Ready review guarantee in section 8 now applies to a first subscription to any plan that includes the credential, not only Professional or Enterprise. |
| October 10, 2026 | Sub-processors | v1.5 | Factual correction: Pulse CRM, IntelAlytic’s own, now runs on the IntelAlytic platform with the providers already listed, no longer on AWS EC2, and receives the leads of our sales forms only. Added Instantly, for IntelAlytic’s outreach email campaigns. |
| October 10, 2026 | Export Controls & Government Use | v1.3 | Our platforms do not accept controlled data: a reference to «Prohibited data» in the Acceptable Use Policy, and the ArmorTrack note on controlled technical data is now a prohibition. |
| October 10, 2026 | Acceptable Use Policy | v1.2 | Added «Prohibited data»: CUI, classified information and export-controlled technical data may not be uploaded, entered or shared through the Services or with IRIS; the platforms are not a CUI-authorized system; a marking check refuses what it recognizes and is not a guarantee; found material may be removed or quarantined, the account notified and access suspended. |
| October 10, 2026 | Service Level Agreement | v1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: one set of values for every paid subscription: service credits of 5, 10 and 25%, capped at 25%; response targets of 4 business hours, 1 business day and 2 business days; advance notice of maintenance expected to cause material disruption; credit claims within 30 days of the end of the affected month. |
| October 10, 2026 | Cookie Notice | v1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: the table lists what the sites set today; no marketing or advertising cookies are set; Global Privacy Control is honored on every site; privacy@intelalytic.com as the contact. |
| October 10, 2026 | Accessibility Statement | v1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: one target, WCAG 2.1 Level AA, working toward WCAG 2.2 Level AA; reduced-motion support stated as it is today; a response within 5 business days through support@intelalytic.com; the review date of each product. |
| October 7, 2026 | Sub-processors | v1.3 | Factual correction: stated that this list covers the ArmorList application at armorlist.com, and that screens served from app.intelalytic.com use the IntelAlytic sub-processors. Cloudflare's location corrected from United States to its global network. |
| October 7, 2026 | AI Disclosure | v1.1 | Factual correction: removed the statement that personal information is minimized and redacted before it reaches a model, which we could not verify in the code. |
| August 15, 2026 | Sub-processors | v1.2 | Reconciled against the codebase. Added Airtable, Brevo, Make, Lovable AI Gateway, OpenRouter, Firecrawl, SerpAPI, Google Maps Platform, and Contentsquare, all of which the Services call. Removed Resend, Sentry, and HubSpot, which the Services do not call. Named Google as Gemini for AI assistance, separately from Google Maps Platform. Added the list of public data sources that are read from but are not sub-processors. |
| August 13, 2026 | Sub-processors | v1.1 | Added Cloudflare (application delivery) and Google and OpenAI (AI providers); clarified the AWS, Supabase, and Anthropic service descriptions. |
| July 25, 2026 | Terms of Service | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Service Level Agreement | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Sub-processors | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Cookie Notice | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Acceptable Use Policy | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Export Controls & Government Use | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | AI Disclosure | v1.0 | Initial publication with the launch of The Armor List. |
| July 25, 2026 | Accessibility Statement | v1.0 | Initial publication with the launch of The Armor List. |
Accessibility Statement
We are committed to digital accessibility for people of all abilities, including the personnel of public agencies subject to accessibility mandates. Our target is the Web Content Accessibility Guidelines (WCAG) 2.1 Level AA, and we are working toward WCAG 2.2 Level AA. WCAG 2.1 Level AA is the technical standard of the DOJ 2024 ADA Title II rule for state and local government digital services; Section 508 of the Rehabilitation Act 29 U.S.C. § 794d uses WCAG 2.0 Level AA, which 2.1 includes; and EN 301 549 adopts WCAG 2.1 Level AA for web content.
Measures we take
- Semantic structure, descriptive headings, keyboard navigability, focus management, and text alternatives for meaningful non-text content.
- Sufficient color contrast and legible, scalable type.
- The operating-system reduced-motion preference is honored on our public websites and by the controls docked at the edge of every screen, and we are extending it across the app screens.
- A built-in, first-party accessibility toolbar on every page (text sizing, contrast and dark modes, a readable font, spacing, reading aids, and motion controls), not a third-party overlay.
- Accessibility considered in design and development reviews.
Conformance & feedback
We consider our sites and platforms partially conformant with WCAG 2.1 Level AA; the product sections below give each product's latest review. The Accessibility Conformance Report (VPAT 2.5) for intelalytic.com, dated August 8, 2026, measured its design prototype against WCAG 2.2 and states, criterion by criterion, what was measured and what was not; the rebuilt site is being re-evaluated. This statement was reviewed on October 10, 2026, and we update it after each review.
If you encounter a barrier, contact support@intelalytic.com or call (303) 351-1076. We will work with you to provide the information or function you need, aim to respond within 5 business days, and work to fix the issue. You can also .
For ArmorList users
Terms that apply only to ArmorList users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
ArmorList partially conforms to WCAG 2.1 Level AA. Our last review, on October 7, 2026, combined automated testing with keyboard checks; screen-reader testing and some criteria have not been evaluated yet. Some small labels still fall just under the 4.5:1 contrast minimum and are being fixed. Our Voluntary Product Accessibility Template (VPAT) / Accessibility Conformance Report lists every criterion with its result and is published for procurement review; a countersigned PDF is available on request at support@intelalytic.com.
For ArmorTrack users
Terms that apply only to ArmorTrack users, in addition to the general part above. The order of precedence is in section 3 of the Terms of Service.
ArmorTrack partially conforms to WCAG 2.1 Level AA. Our last review, on October 7, 2026, combined automated testing with keyboard checks. Screen-reader testing and some criteria have not been evaluated yet, and we have not had an independent audit. Our Accessibility Conformance Report (VPAT) lists every criterion with its result and is available for procurement review on request at support@intelalytic.com.
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 10, 2026 | 1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: one target, WCAG 2.1 Level AA, working toward WCAG 2.2 Level AA; reduced-motion support stated as it is today; a response within 5 business days through support@intelalytic.com; the review date of each product. |
| July 1, 2026 | 1.0 | Initial publication. |
Service Level Agreement
This SLA describes the availability commitment for IntelAlytic's hosted platforms, ArmorList and ArmorTrack included, for customers on an active paid subscription, and forms part of the Terms of Service. It does not apply to access provided at no charge (including free access for buyers and public-safety agencies, which we run with the same operational practices), beta or preview features, or professional-services deliverables. An SLA in a signed Order Form or MSA supersedes this one.
Availability commitment
We target 99.9% monthly uptime for the production platform, measured as the percentage of minutes in a calendar month the service is materially available, excluding Excluded Downtime below.
| Monthly uptime | Service credit (% of that month's fee) |
|---|---|
| < 99.9% to 99.0% | 5% |
| < 99.0% to 95.0% | 10% |
| < 95.0% | 25% |
Excluded downtime
- Scheduled maintenance. We aim to perform it during low-usage windows and give advance notice of maintenance expected to cause material disruption.
- Emergency maintenance for security or stability.
- Force-majeure events, or factors outside our reasonable control (including third-party networks or the customer's own equipment, software, or network).
- Customer misuse or breach of the Terms, unauthorized access using customer credentials, use outside the documentation, or suspension permitted under the Terms.
Support & response targets
| Severity | Definition | Target initial response |
|---|---|---|
| S1, critical | Production down or a major function unusable | 4 business hours |
| S2, high | Significant impairment, no workaround | 1 business day |
| S3, normal | Minor issue or question | 2 business days |
Response targets describe when we aim to acknowledge and begin work, not guaranteed resolution times.
Claiming a credit
Request a service credit within 30 days of the end of the affected month by emailing support@intelalytic.com, with reasonable supporting detail. Credits are the sole and exclusive remedy for availability shortfalls, are applied to future fees, and do not exceed 25% of the affected month's fee. Live status: System status, and the status page of each product (ArmorList, ArmorTrack).
Revision history
| Date | Version | Summary of change |
|---|---|---|
| October 10, 2026 | 1.1 | Consolidated the ArmorList and ArmorTrack texts of this document, until now published separately on armorlist.com and armortrack.io, into this one IntelAlytic document. Changed: one set of values for every paid subscription: service credits of 5, 10 and 25%, capped at 25%; response targets of 4 business hours, 1 business day and 2 business days; advance notice of maintenance expected to cause material disruption; credit claims within 30 days of the end of the affected month. |
| July 18, 2026 | 1.0 | Initial publication. |
End User License Agreement
License terms for the IntelAlytic software that powers The Armor List. Identical across every IntelAlytic platform, so it is maintained once, by the entity that builds and licenses the software.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master End User License AgreementConfidentiality & Mutual NDA
The mutual confidentiality terms you contract under. The counterparty is IntelAlytic Inc., not an individual platform, so one master document governs every engagement.
The Armor List is operated by IntelAlytic Inc., which builds, manages, and contracts for the platform. This document is published and version-controlled once, by IntelAlytic, and applies to your use of The Armor List in full. We link to it rather than reproducing it so there is exactly one authoritative text.
Read the master Confidentiality and Mutual NDAThese legal documents are provided in English, the sole authoritative and legally governing version. Translations, where offered, are for convenience only and the English version controls.