HackerOne Terms Scorecard

Grade B — Fair terms (score 78/100)

HackerOne's terms are standard for B2B software, avoiding forced arbitration and class action waivers, though they impose broad indemnification obligations on the customer.

Standard B2B terms. No forced arbitration. Broad indemnification required.

Terms at a glance

Sells your data
NO
Forced arbitration
NO
Trains AI on your content
UNCLEAR
Collects biometric data
NO
Shares data with government
UNCLEAR
Easy to cancel
UNCLEAR
Tells you before changes
NO
Deletes data on request
NO

What the terms actually say

Section 8 — Confidentiality

The General Terms and Conditions set forth the Customer's and HackerOne's obligations to protect Confidential Information of the other party.

The document does not define its own security or breach notification commitments, deferring to a separate 'General Terms' document.

Section 11.1 — Indemnification

The Customer will indemnify, defend, and hold harmless HackerOne... from and against any claims... including, without limitation, reasonable legal and accounting fees.

You are required to pay for HackerOne's legal defense and any damages if they are sued because of your data or your instructions.

Section 5.5 — Excessive or Atypical Use

HackerOne reserves the right to address the Customer's use of the Services... HackerOne reserves the right to address the Customer's use of the Services.

HackerOne has broad discretion to determine if your usage is 'excessive' and to take action against your account.

Section 7.2 — License Grant

Customer hereby grants to HackerOne a non-exclusive... worldwide, royalty-free license to use, copy, reproduce, display, modify, adapt, transmit, and distribute copies of such Customer Data for the purpose of providing and improving the Services.

You grant HackerOne a broad license to use and modify your data to improve their platform.

Section 9.7 — Termination

HackerOne reserves the right to terminate access to the HackerOne Platform and Services, at its sole discretion and with immediate effect.

HackerOne can terminate your access instantly without prior notice if they believe you violated trade control laws.

Last reviewed 2026-08-24 under rubric v3.5.

Other scorecards