API Terms
Terms for authorised use of DoorAPI APIs and credentials.
Customer-specific agreements, order forms and mandatory law may override these general provisions.
Authorisation
API access is limited to the scopes, tenant context, rate limits and purposes authorised by the customer agreement. Keys must be kept confidential.
Credential control
Customers may create and revoke multiple scoped keys. Compromised keys must be revoked immediately. Doorsecure may disable keys presenting a security or legal risk.
Usage restrictions
No circumvention of controls, abusive polling, scraping of unrelated data, credential sharing across unauthorised organisations, reverse engineering or interference with service integrity.
Data and privacy
API users must process data lawfully, minimise data, honour tenant boundaries and implement appropriate security. API output does not transfer ownership of customer or Doorsecure data.
Changes and limits
Doorsecure may introduce versioning, reasonable rate limits and deprecations with notice appropriate to the change. Emergency security changes may be immediate.