Terms & Conditions

1. Acceptance of terms

By using the SecureAware platform (operated by SECUREAWARE S.R.L., CUI 55515209, J2026052392005), the client organization accepts these terms. If you do not agree, do not use the platform.

2. Description of the service

SecureAware provides phishing simulations, penetration tests, and security awareness training, intended exclusively for the authorized testing of the client organization's own systems and employees.

3. Authorization requirement — essential

The client organization represents and warrants that it:

• Has the legal right to test its systems and to simulate campaigns targeting its own employees.
• Has properly informed its employees (through internal policies, internal regulations, or another suitable means under applicable law) that they may be subject to security awareness tests.
• Uses the platform exclusively for authorized purposes, not for real or unauthorized attacks.

SecureAware does not launch any test (penetration test or simulation campaign) without a written authorization agreement, agreed in advance with the client organization.

4. Client obligations

• Provide accurate information about the scope and limits of the testing requested.
• Not use the platform to test systems or persons outside the agreed authorization.
• Keep platform access credentials confidential.

5. SecureAware obligations

• Perform testing strictly within the agreed authorized scope.
• Protect processed data in accordance with the Privacy Policy.
• Report results clearly and in order of priority.

6. Limitation of liability

To the extent permitted by law, SecureAware's liability for any claim arising from the use of the platform is limited to the amounts paid by the client organization in the 12 months preceding the event giving rise to the claim. SecureAware is not liable for indirect damages, lost profits, or reputational harm resulting from the use or inability to use the platform. This limitation does not apply in cases of willful misconduct or gross negligence, or where applicable law prohibits such a limitation. In general, a penetration test or simulation shows the risk at the time of testing and does not constitute a permanent security guarantee.

7. Intellectual property

The platform, templates, and training content remain the property of SecureAware. Reports generated for a given client belong to that client.

8. Confidentiality

Testing results (vulnerabilities found, click rates, risk scores) are confidential and are not shared with third parties without the client organization's consent, except where required by law.

9. Term and termination

The contract runs for the term agreed in the commercial offer accepted by the client organization (typically a monthly or annual subscription), automatically renewing for the same period unless terminated with at least 30 days' notice before expiry. Either party may terminate the contract immediately in case of a serious breach that is not remedied within 15 days of notice. Upon termination, access to the platform is deactivated, and the client organization's data is retained per the Privacy Policy and can be exported on request within 30 days of termination.

10. Governing law

These terms are governed by Romanian law. Any dispute that cannot be settled amicably falls under the jurisdiction of the Romanian courts, except where the law provides otherwise.

11. Contact

For questions about these terms, contact us.