Legal

Skans Sanitizer Disclaimer of Warranty and Limitation of Liability

Last updated: 14 September 2026

This is the disclaimer shown in Skans Sanitizer (About) and shipped with it as DISCLAIMER.md. It forms part of the Skans Sanitizer Software Agreement the operator accepts on first launch.

Disclaimer version 1.1 (2026-09-14)

This Disclaimer is issued by La Costa Services, LLC ("Skans Labs", the "Licensor") and forms part of the Skans Sanitizer Software Agreement (the "Agreement") between the Licensor and the individual or entity using the Software ("You", "Your"). It is displayed in the Software, ships with it as DISCLAIMER.md, and is incorporated by reference into every job report the Software writes. Where this Disclaimer and the Agreement differ, the Agreement governs. Capitalised terms not defined here have the meaning given in the Agreement.

1. Nature of the Software

Skans Sanitizer (the "Software") is an assistive tool. It applies deterministic rules and locally run classification models to find likely secrets and identifiers in the files You supply, writes a transformed copy of those files (a "Sanitized Copy"), and scans that copy against an independent second rule set before the copy can be exported. A passing scan means only that the second rule set found no match. It is not a statement that the Sanitized Copy is free of confidential information, and it is not a legal status of any kind.

2. Disclaimer of warranty

EXCEPT FOR THE LIMITED WARRANTY IN SECTION 1 OF THE AGREEMENT, THE SOFTWARE AND EVERY SANITIZED COPY ARE PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, COMPLETENESS, ACCURACY, AND NON-INFRINGEMENT.

Without limiting that, the Licensor does not warrant, and expressly disclaims any undertaking, that:

(a) a Sanitized Copy is free of personal data, credentials, keys, tokens, or any other confidential information. The Software will miss values, and it will mis-classify values;
(b) the Software will recognise any particular format, encoding, encoding inside an encoding, image, screenshot, or other content. Anything outside the current detector set is out of scope until an adapter for it exists;
(c) a Sanitized Copy is complete. An artifact the Software cannot parse or transform is not in the output, and a value rewritten in a fixed-width binary slot may be shortened to fit. Both conditions are listed for the job and both block export until You have acknowledged them. An incomplete copy is a different thing from a clean copy, and the Software never presents one as the other; or
(d) a Sanitized Copy, a job report, or a passing scan will satisfy any auditor, regulator, counterparty, data-protection authority, or contractual obligation of Yours.

3. Formats whose content the Software cannot read

A file can be recognised, accepted, scanned, and reported clean while its payload was never readable. The following are known and are stated gaps rather than silent ones:

(a) PostgreSQL custom-format dumps (pg_dump -Fc, .dump, .backup). The table of contents is plain text, so table and column names are found; every data block is compressed and the row data is not scanned. Convert to plain SQL before sanitizing.
(b) Compressed or encrypted content inside an accepted container for which the Software has no decompressor: an encrypted .bak, a password-protected archive, a compressed EVTX chunk.
(c) Images and screenshots. The Software performs no optical character recognition.

Recognising a file is not reading it. Where the Software cannot read a payload it says so and does not show a clean scan.

4. Representations the Software does not make

The Software does not state, display as a status, or imply that any output is anonymised, free of personal or sensitive data, certified, guaranteed, complete, identical to the original, or safe or cleared to send or share. The only statements it makes about a copy are: that it is a transformed copy; that no match was found against the current rules; that a scan failed or was incomplete and the export is blocked; or that review is required. You acknowledge that You are not relying on any statement about what the Software will detect that is not written in the Agreement, whether made in marketing material, on the Licensor's websites, in documentation, in a demonstration, or by any employee, agent, reseller or integrator.

5. Your review and Your responsibility

You must review every Sanitized Copy before it leaves Your control. The person who sends a Sanitized Copy is responsible for what they disclose. Export is disabled until You confirm, for that job, that You have reviewed the copy. That confirmation is not remembered across jobs, does not override a failed or incomplete scan, and is recorded in the job report together with the version of the Agreement in force. Sending a Sanitized Copy to any third party is Your act, and Section 4 of the Agreement (Your indemnity) applies to it.

6. Limitation of liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, AND AS SET OUT IN SECTIONS 2, 4 AND 5 OF THE AGREEMENT, THE LICENSOR HAS NO LIABILITY FOR ANY DISCLOSURE THAT FOLLOWS A PASSING SCAN, NOR FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, LOST PROFITS, LOST REVENUE, LOST GOODWILL, LOST OR CORRUPTED DATA, BUSINESS INTERRUPTION, COST OF SUBSTITUTE GOODS OR SERVICES, OR COSTS OF INVESTIGATION, REMEDIATION OR NOTIFICATION FOLLOWING A DISCLOSURE, HOWEVER CAUSED AND EVEN IF ADVISED OF THE POSSIBILITY. THE LICENSOR'S TOTAL AGGREGATE LIABILITY IS LIMITED TO THE PRICE PAID FOR THE AFFECTED SEAT.

Nothing in this Section excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud, wilful injury, gross negligence, wilful misconduct, or violation of law (see California Civil Code section 1668). Stating this does not concede that any of those things has occurred.

7. Governing law and precedence

This Disclaimer is governed by the laws of the State of California, without regard to conflict-of-laws rules, and the venue provisions of the Agreement apply to it. This Disclaimer may be revised in a later version of the Software; the version displayed in the Software is the one in force for that installation. In a conflict between this Disclaimer, the shipped documentation, marketing material, or any statement by an employee or agent, the Agreement governs, then this Disclaimer, then the shipped documentation.

For licensing and legal inquiries: hello@skanslabs.com