Terms of Service

1.Who these terms are with

The SINON platform is operated by Sinon Security (“we”, “us”). These Terms form a binding agreement between us and the organisation you represent (“you”, “Customer”).

By creating an account you confirm you are authorised to enter into this agreement on behalf of that organisation. If you are not, do not create an account.

2.What the service is

SINON is a threat-intelligence service. We collect publicly and semi-publicly available material from sources including ransomware leak sites, hacking forums, messaging channels, paste sites and Certificate Transparency logs; we process that material; and we surface items that appear relevant to the organisation profile you provide.

SINON is an intelligence and monitoring service, not a security control. It does not prevent, block or remediate attacks. It is one input to your security programme and does not replace incident response, threat detection, or your own legal and regulatory obligations.

3.Accounts and access

• You are responsible for the accuracy of the registration and organisation details you provide.
• You are responsible for all activity under your account, for keeping credentials confidential, and for promptly removing access for people who leave your organisation.
• Accounts are for named individuals within your organisation. Credential sharing, and access by anyone outside your organisation, is prohibited.
• You must notify us at [email protected] without undue delay if you believe an account has been compromised.

4.Acceptable use

Your use of SINON is subject to our Acceptable Use Policy, which forms part of these Terms. In short: the intelligence we provide is for defending your own organisation. It must not be used to attack, harass, surveil or profile anyone.

5.Accuracy, sources and limits

Our sources are adversarial and unreliable by nature. Threat actors exaggerate, fabricate, redact and deliberately plant false information, including material designed to attack systems that process it. We normalise and classify what we collect, and we use automated systems including machine learning to do so.

Accordingly:

• We do not warrant that any finding is accurate, complete, current or verified. A claim on a leak site that your organisation was breached is a claim, not a fact.
• Absence of a finding is not assurance. We do not see everything, our access to closed sources changes without notice, and a quiet dashboard does not mean you are unaffected.
• Relevance scoring is a heuristic. Items may be surfaced that do not concern you, and items that do concern you may not be surfaced.
• You are responsible for verifying findings and for any decision you take in reliance on them.

6.Your data and your content

You retain all rights in the information you provide — domains, watch terms, organisation details and other configuration (“Customer Data”). You grant us a limited licence to process Customer Data solely to provide and support the service.

Where we process personal data on your behalf we act as your processor: we process it only on your documented instructions, keep it confidential, apply appropriate technical and organisational security measures, and delete or return it on termination. If you require a separate signed data processing agreement, contact us at [email protected].

We may use aggregated, de-identified statistics derived from platform usage to operate and improve the service. Such statistics will not identify you, your organisation or any individual.

7.Our intellectual property

The platform, its interfaces, our classifications, scoring, enrichment and written analysis are our intellectual property or that of our licensors. Subject to these Terms, we grant you a non-exclusive, non-transferable, revocable right to access and use the service for your internal business purposes during your subscription.

You may not, and may not permit anyone else to:

• resell, sublicense, or provide the service or its output as a service to third parties;
• scrape, systematically extract or bulk-export platform content except through features we provide;
• use platform output to train machine-learning models without our prior written consent;
• reverse engineer the platform, or circumvent any access control, rate limit or usage restriction.

You may share individual findings internally, and with your professional advisers, regulators and incident responders, where reasonably necessary to act on them.

8.Fees

Fees, billing frequency and any usage limits are as set out in your order form or the plan you select. Unless stated otherwise: fees are exclusive of taxes, invoices are payable within 30 days, and fees paid are non-refundable except as set out in our Refund Policy, which forms part of these Terms, or where applicable law requires otherwise.

Payments are processed by Polar Software Inc. acting as our merchant of record. Polar is the seller of record for the transaction and issues your invoice.

We may change pricing on renewal with at least 30 days’ written notice before the end of your then-current term.

9.Availability and support

We aim to keep the platform available continuously but do not guarantee uninterrupted access. Collection from third-party sources depends on those sources remaining reachable; interruptions to a particular feed are expected and are not a failure of the service.

For paid plans, our Service Level Agreement sets out the availability we commit to and the service credits payable if we miss it. Those credits are the exclusive remedy for unavailability. The SLA is an availability commitment about the platform, not a commitment about what our sources contain or when they contain it.

We may suspend access without notice where we reasonably believe it is necessary to protect the platform, our other customers, or a third party — including suspected compromise, unlawful use, or breach of the Acceptable Use Policy.

10.Term and termination

• These Terms run from account creation until terminated.
• You may terminate at any time by closing your account.
• Either party may terminate for material breach if the breach is not cured within 30 days of written notice. We may terminate immediately for breach of the Acceptable Use Policy.
• On termination your access ends. We will delete or return Customer Data in accordance with our Privacy Policy.

11.Disclaimers

To the maximum extent permitted by law, the service is provided “as is” and “as available”. We disclaim all implied warranties, including merchantability, fitness for a particular purpose, accuracy and non-infringement.

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for death or personal injury caused by negligence, or for fraud.

12.Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, revenue, goodwill or anticipated savings, however arising.

Each party’s total aggregate liability arising out of or relating to these Terms is limited to the fees paid or payable by you in the twelve months preceding the event giving rise to the claim.

We are not liable for any security incident, breach, loss or damage that SINON did not detect, reported inaccurately, or reported after the fact. This allocation of risk is a fundamental basis of the agreement and is reflected in our pricing.

13.Indemnity

You will indemnify us against claims, losses and reasonable costs arising from your use of the service in breach of these Terms or the Acceptable Use Policy, or from your unlawful use of any information obtained through the service.

14.Confidentiality

Each party will protect the other’s confidential information with at least reasonable care, use it only for the purposes of this agreement, and disclose it only to personnel and advisers with a need to know who are bound by equivalent obligations. This does not apply to information that is public through no fault of the receiving party, independently developed, or required to be disclosed by law.

15.Changes to these terms

We may update these Terms. For material changes we will give at least 30 days’ notice by email or in-product notice before they take effect. Continued use after that date constitutes acceptance. If you do not accept a material change, you may terminate before it takes effect and receive a pro-rata refund of prepaid fees for the unused remainder of your term.

16.Disputes

Before either party begins formal proceedings, both agree to raise the dispute in writing to [email protected] and to attempt in good faith to resolve it within 30 days. Most disagreements about a subscription are settled faster this way than by anyone’s lawyers.

Nothing in these Terms limits any mandatory consumer or statutory right available to you under the law of the country where you live or do business.

17.Contact

Questions about these Terms: [email protected]
Sinon Security