Terms of the security review

The service is provided by Technix IT AB (“Technix”) and consists of an automated or semi-automated security review of the customer’s IT environment. The result is intended as guidance for identifying potential security risks and areas for improvement.

The review is not a complete security audit, penetration test or certification of the IT environment.

Technix gives no guarantee that the review identifies every security weakness, vulnerability or misconfiguration.

The result of the review is guidance and is not to be regarded as legal, regulatory or security advice. The customer alone is responsible for decisions made and actions taken on the basis of the result.

The customer is responsible for:

• holding the rights and authorisations required to review the IT environment in question.

Information collected through the review is used only to carry out the review, present the result, and develop and improve the service.

Technix processes the information in accordance with applicable data protection legislation.

All rights to the service, the analysis models, the reports, the graphics and the content belong to Technix IT AB or its licensors.

The review is provided as is.

Technix is not liable for indirect damage, loss of profit, loss of production, loss of data or other consequential damage.

Technix’s total liability is limited to the amount the customer has paid for the review in question. If the review is provided free of charge, Technix has no financial liability.

Technix shall treat information obtained through the service as confidential and take reasonable technical and organisational security measures to protect it.

Any dispute arising out of or in connection with this agreement shall be finally settled by arbitration administered by the Arbitration Institute of the Stockholm Chamber of Commerce (the “Institute”). The Institute’s Rules for Expedited Arbitrations shall apply, unless the Institute, taking into account the complexity of the case, the amount in dispute and other circumstances, determines that the Arbitration Rules shall apply. In the latter case, the Institute shall also decide whether the arbitral tribunal shall consist of one or three arbitrators. The seat of arbitration shall be Stockholm and the language of the arbitration shall be Swedish. Swedish law shall apply to the dispute.

If, after the review, the Customer wishes Technix IT AB to assist with advice, consulting, configuration changes, implementation or other measures arising from the result, such services are ordered separately.

Such services are governed in all applicable respects by Technix IT AB’s general terms and conditions for IT services as in force from time to time, whether or not the parties have entered into a separate agreement for IT services. The current version of those terms is provided by Technix IT AB on request.

The general terms and conditions supplement these terms. In the event of any conflict between these terms and Technix IT AB’s general terms and conditions for IT services, these terms prevail.

Technix’s total liability for the review and for any measures carried out as a result of it is limited to an amount equal to what the Customer has paid Technix in total for the review and the measures that gave rise to the claim.

Technix’s liability for damages covers only compensation for direct damage caused by Technix intentionally or through gross negligence. It does not cover indirect damage, including loss of profit, loss of data, consequential damage, third-party damage, loss of income or other pure economic loss.