Terms of Service

Agreement to these terms

These terms form an agreement between you and SecureEdge Advisory, a free zone establishment whose registered office is PO Box 410193, Dubai, United Arab Emirates. By using this website or the customer portal, you accept these terms. If you do not accept them, do not use the service.

Where you accept these terms on behalf of an organisation, you confirm that you are authorised to bind that organisation, and references to 'you' mean that organisation.

What we provide

We provide advisory services in governance, risk and compliance, together with a customer portal through which an engagement is scoped, conducted and reported.

The tooling described on this website is offered as part of an engagement rather than as a self-service product. The stage of each product is stated on its page, and a product marked as a simulation or as being built is not available for production use. Nothing on this website is an offer to supply software that is not yet available.

Pre-release status

This website and the customer portal are pre-release and are marked BETA. The marking is a statement of fact about how mature the service is, not a formality. Features may change, may be withdrawn, and may behave differently from one visit to the next, and a screen you have used before may be replaced without notice.

While the service carries that marking we give no availability commitment and no service level for it. Access may be interrupted for maintenance or for correction, and we may do so without notice where a defect requires it. Where an engagement letter states a service level for a particular engagement, that letter prevails for that engagement.

Output produced through a pre-release service is provisional. It should be checked before it is relied on for a regulatory filing, a certification submission, an audit response, or any other decision that has an effect outside your organisation. This restates, in the context of a pre-release service, the position set out under 'Advisory output is not a certification', and does not narrow it.

Pre-release status does not reduce how we look after your data. The security measures, the retention periods and the data subject rights set out in our Privacy Policy and in our Data Processing Agreement apply in full and are not conditional on the stage the service has reached. Where development requires data to be migrated or corrected, we do so under those same obligations, and we will tell you before anything you have entered is reset.

We will publish a revised version of these terms when the pre-release period ends, and your acceptance of that version will be recorded in the same way as this one.

Engagements and fees

The scope, duration, deliverables and fees for an engagement are set out in a separate written engagement letter or order form. Where those terms conflict with these terms, the engagement letter prevails for that engagement.

An initial due diligence review determines the security posture of your organisation, and the tooling and support we then propose are designed around what that review finds. The commercial arrangement follows from the scope so determined and is agreed in writing before work begins.

Your responsibilities

• To provide information that is accurate and complete, and to correct it when it changes.
• To keep your account credentials confidential, and to notify us promptly if you believe they have been compromised.
• To obtain any consent or authorisation required before you provide us with personal data or with information belonging to a third party.
• To use the service in accordance with our Acceptable Use Policy and with applicable law.

Advisory output is not a certification

An assessment, score, gap analysis, readiness report or other output produced through the service reflects the information available to us and the professional judgement of our team at the time it is produced. It informs your decisions; it does not make them, and it does not transfer responsibility for them to us.

We are not a certification body or an accredited registrar. No output of the service constitutes certification against any standard, and no output guarantees that a certification body, regulator, auditor or customer will reach the same conclusion. Where a certification is sought, it is issued by the accredited body, not by us.

Intellectual property

We retain all right, title and interest in the service, in our methodologies, and in any framework, template or tool we make available. You retain all right, title and interest in the data and materials you provide to us.

We grant you a non-exclusive, non-transferable right to use the deliverables of an engagement within your organisation for the purpose for which they were prepared. You grant us the right to process your data to the extent necessary to provide the service and to meet a legal obligation.

This website is itself our work. The text, the structure and sequence of the pages, the assessment questions and the wording of their results, our control descriptions and the mappings between frameworks, the visual design, the layout, and the underlying code are our copyright. You may read them, and you may quote a short passage with attribution.

You may not copy, reproduce, republish, systematically extract or scrape any part of this website or of the customer portal, whether by hand or by automated means, and you may not use any part of them to develop, train or market a competing product or service. Removing our name from the material does not put it outside this clause. Our product names, logos and marks may not be used without our written permission.

Confidentiality

Each party shall keep confidential the non-public information of the other party disclosed in connection with the service, shall use it solely to perform its obligations, and shall protect it with no less care than it applies to its own confidential information. This obligation does not apply to information that is or becomes public through no breach of this clause, that was lawfully known before disclosure, or whose disclosure is required by law or by a competent authority.

Warranties and disclaimer

We shall provide the service with reasonable skill and care and in a professional manner. To the fullest extent permitted by law, and except as expressly stated in these terms or in an engagement letter, the service is provided without further warranty of any kind, whether express or implied, including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement.

We do not warrant that the service will be uninterrupted or error-free, that the results obtained from it will be accurate in every respect, or that any defect will be corrected within a particular period.

Limitation of liability

Neither party excludes or limits liability for death or personal injury caused by its negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded.

Subject to the preceding paragraph, neither party shall be liable for indirect or consequential loss, nor for loss of profit, revenue, anticipated saving, business, goodwill or data, however arising.

Subject to the preceding two paragraphs, the total aggregate liability of each party arising out of or in connection with an engagement shall not exceed the fees paid and payable under that engagement in the twelve months preceding the event giving rise to the claim.

Suspension and termination

We may suspend access to the service where we reasonably believe that its use threatens the security or integrity of the service or of another customer, or where use breaches the Acceptable Use Policy. Where circumstances permit, we shall give notice before we suspend access, and we shall restore access once the cause is resolved.

Either party may terminate an engagement in accordance with the engagement letter. On termination, you may request a copy of your data, and we shall delete or return it in accordance with our Data Processing Agreement and our retention obligations.

Changes to the service and to these terms

We may modify the service, and we may publish a revised version of these terms. Where a revision materially affects your rights we shall bring it to your attention, and where you hold an account we shall record the version of these terms that you have accepted. Continued use of the service after a revision takes effect constitutes acceptance of the revised terms.

Governing law and jurisdiction

These terms are governed by the laws of the United Arab Emirates as applied in the Emirate of Dubai. The courts of Dubai shall have exclusive jurisdiction over any dispute arising out of or in connection with these terms, save that either party may seek injunctive relief in any competent court.

Contact

Questions about these terms should be addressed to legal@secureedgeadvisory.com.