Terms of Service

These terms govern your use of OpenPerimeter (the "Service"), provided by Defline SRL ("we", "us"). By creating an account or using the Service you agree to them on behalf of the organisation you register ("Customer", "you").

1. The Service

OpenPerimeter monitors the internet-facing systems of organisations, maps the results to the NIS2 Directive (EU) 2022/2555, and provides tools for gap assessment, incident records, supplier management, reports and evidence export. Features may change as the Service develops; we will not remove a core feature you pay for without reasonable notice.

The Service provides technical evidence and workflow support. It is not legal advice, an audit or a certification, and using it does not by itself make you compliant with NIS2, GDPR or any other law. Classification results (such as the NIS2 applicability check) are indicative; the competent authority decides.

2. Accounts

• The Service is for businesses and public bodies, not consumers. The person registering confirms they may bind the organisation.
• Keep credentials confidential, use multi-factor authentication where possible, and tell us promptly about unauthorised use.
• Account owners decide who joins their organisation and are responsible for the actions of their members and invited consultants.

3. Authorisation to scan

We only actively test domains and IP ranges whose control you prove (DNS TXT record, internet-registry data, reverse DNS or our manual review). By adding a domain or IP range you confirm that you own it or are authorised by its owner to have it tested, and that testing it does not breach any agreement with a third party (for example a hosting or cloud provider). You must remove a domain or range as soon as that authorisation ends.

Testing is designed to be non-disruptive (DNS lookups, a limited port scan, ordinary web and TLS requests; intrusive templates are off by default), but any network test carries some risk. You are responsible for informing your providers where their terms require it. Supplier ratings use public information only and never actively test a supplier's systems.

4. Acceptable use

You must not: use the Service against systems you are not authorised to test; try to bypass ownership verification or usage limits; use the Service, its outputs or supplier questionnaires to harass, defame or mislead; upload malware or content you have no right to share; resell the Service without our written agreement; or interfere with the Service or other customers. We may suspend accounts that breach this section, normally after notice unless urgent action is needed to prevent harm.

5. Plans and fees

Prices are listed on the pricing page: Free up to 10 monitored assets; Professional at €100 per month for up to 100 assets plus €1 per additional asset per month. Prices are in euro and exclude VAT. Asset counts are taken from the Service's Plan & usage page.

During early access no fees are charged. We will give at least 30 days' notice before the first invoice and before any price change, and you may cancel before it applies. Paid plans are billed monthly in advance and can be cancelled at any time, effective at the end of the paid month.

6. Your data

You keep all rights to the data you put into the Service and to the results produced for you. You grant us the rights needed to host and process it to provide the Service. Where that data includes personal data, we process it as your processor under the Data Processing Agreement, which forms part of these terms. How we handle personal data as a controller (for example account and website data) is described in the Privacy Notice.

You can export your data at any time (evidence pack, CSV/JSON). After your account is closed we delete Customer data within 30 days, except where the law requires us to keep it.

7. Confidentiality and security

Each party keeps the other's non-public information confidential and uses it only for this relationship. We protect the Service with appropriate technical and organisational measures, described in the DPA, and keep a tamper-evident audit trail of actions in your organisation.

8. Availability and support

We aim for high availability but, during early access, do not commit to a service level. Planned maintenance is announced where possible. Support is provided by email at [email protected].

9. Intellectual property

The Service, its software, content and brand remain ours or our licensors'. You may use the reports and exports it produces for your own business, audits and dealings with authorities, customers and suppliers.

10. Warranties and liability

The Service is provided as available. Scanning cannot find every weakness, and findings may include false positives; you remain responsible for your security decisions. Neither party excludes liability for intent, gross negligence, death or personal injury, or anything else that cannot be limited by law. Otherwise, each party's total liability in any 12-month period is limited to the fees you paid for the Service in that period (or €100 if you are on the Free plan), and neither party is liable for indirect or consequential loss, lost profit or lost data that regular exports would have prevented.

You will indemnify us against third-party claims arising from tests you instructed on systems you were not authorised to have tested.

11. Term and termination

These terms apply while you have an account. You may close your account at any time. We may terminate for material breach not cured within 15 days of notice, or with 60 days' notice for convenience (refunding any prepaid fees for the unused period).

12. Changes

We may update these terms. Material changes are announced by email or in the Service at least 30 days before they take effect; continuing to use the Service after that date means you accept them.

13. Governing law

These terms are governed by the laws of Romania. Disputes go to the competent courts at the operator's registered office, unless mandatory law provides otherwise.

Operator: Defline SRL, Sighisoarei 16, Cluj-Napoca, Romania, trade register no. J12/5570/21/12/2023, VAT RO49325536. Contact: [email protected]. Effective 2026-10-17.