Terms and Conditions of Use

1.1. "Agreement" means the agreement signed between Cyberangels and one of its customers or partners for the provision of the Cyberangels services, including the Channel Partner Agreement (CPA), the Order Form and their annexes.

1.2. "Partner" means the business (Telco, ISP, MSP, MSSP, system integrator or other professional services provider) that uses the Platform under an Agreement to deliver services to its own customers.

1.3. "End Customer" means the Partner's customer on whose behalf the Platform is used.

1.4. "Authorized User" means the individual to whom Cyberangels or the Partner has assigned credentials to access the Platform, including the Partner's personnel and, where provided for in the Agreement ("Co-managed" mode), the End Customer's personnel.

1.5. "Visitor" means anyone browsing the Website.

1.6. "Outputs" means reports, dashboards, risk classifications, commercial proposals and any other result generated by the Platform, including through artificial intelligence components.

1.7. "DPA" means the Cyberangels Data Processing Agreement published at cyberangels.io/dpa.

2.1. These Terms apply to all Visitors and all Authorized Users.

2.2. Commercial relationships between Cyberangels and its customers and Partners are governed by the Agreement. In case of conflict between these Terms and the Agreement, the Agreement prevails; for the processing of personal data on behalf of customers, the DPA prevails.

2.3. The Website and the Platform are intended exclusively for businesses and professionals. Cyberangels services are not offered to consumers within the meaning of Italian Legislative Decree 206/2005 (Consumer Code).

3.1. The Website content, including articles, guides, calculators and informational materials, is provided for informational purposes only and does not constitute legal, technical or compliance advice, nor a binding contractual offer. Prices and features shown on the Website are indicative and are defined in the Agreement.

3.2. Cyberangels takes care over the accuracy of the content but does not warrant that it is complete, up to date or error-free.

3.3. Submitting contact forms or booking a demo through the Website does not conclude any contract.

3.4. The Website may contain links to third-party websites and services, such as booking or consent-management tools, over which Cyberangels has no control and which are governed by the terms of their respective providers.

4.1. Access to the Platform is restricted to Authorized Users, with credentials provided by Cyberangels or by the Partner under an Agreement. The Platform does not offer self-registration.

4.2. Credentials are personal and non-transferable. Authorized Users must keep them secure, use multi-factor authentication where available and promptly notify Cyberangels or the Partner of any unauthorized use or suspected compromise.

4.3. The Partner is responsible for granting and revoking access for its own Authorized Users and for those of its End Customers, and for the use of the Platform made through such access.

5.1. The Platform may be used only for the purposes set out in the Agreement and in compliance with applicable law.

5.2. In particular, users shall not:

• run scans, attack-surface analyses, dark-web searches or vulnerability assessments on third-party domains, systems or other assets without the documented prior authorization of their holder;
• use the Platform or the Outputs to gain unauthorized access to computer systems, exploit vulnerabilities or for any other unlawful purpose;
• test, probe or circumvent the security measures of the Platform without Cyberangels' written consent, without prejudice to responsible vulnerability disclosure under Section 13.2;
• decompile, disassemble or reverse engineer the Platform, or attempt to derive its source code, models, model weights or training data;
• use the Platform to develop, train or improve competing products or services;
• extract data or content from the Website or the Platform in bulk with unauthorized automated tools, or overload their infrastructure;
• upload malware, malicious code or unlawful content, or special categories of personal data (Articles 9 and 10 GDPR) without a prior written agreement;
• remove or alter copyright notices, trademarks or legal notices, except as permitted by the white-label configuration provided for in the Agreement;
• use the Platform, or make it available, for the benefit of persons or in countries subject to sanctions or embargoes of the European Union, the United States, the United Kingdom or Italy.

5.3. Whoever runs a scan or search must keep evidence of the authorization received and produce it at Cyberangels' request.

6.1. The Platform uses artificial intelligence components, including the AI Sales Coach, automated risk classification and proposal generation.

6.2. Outputs are advisory and must be reviewed by qualified personnel before being presented to third parties or relied upon for commercial, technical or compliance decisions. No Output involves decision-making based solely on automated processing within the meaning of Article 22 GDPR.

6.3. The Platform is a support tool and does not, in itself, guarantee compliance with regulations such as GDPR, NIS2 or DORA, nor the absence of security incidents or the detection of all threats.

6.4. Cyberangels does not use customer data to train artificial intelligence models intended for other customers or the general public, as set out in the DPA.

7.1. The Website, the Platform, the software, documentation, models and content, as well as the Cyberangels trademarks and logos, are owned by Cyberangels or its licensors and are protected by intellectual property law. These Terms do not transfer any right in them, except for the right of use provided for in the Agreement.

7.2. Public Website content may be consulted and shared for informational purposes, citing the source; any other reproduction requires Cyberangels' written consent.

7.3. Outputs generated for a specific End Customer may be used within the limits set out in the Agreement.

7.4. Suggestions and feedback about the Platform may be used freely by Cyberangels, without any obligation to pay compensation; Cyberangels does not identify their source without consent.

8.1. The processing of Visitors' personal data, including data collected through contact forms and cookies, is described in the Privacy Policy and Cookie Policy available on the Website.

8.2. The processing of personal data carried out by Cyberangels on behalf of its customers through the Platform is governed by the DPA.

9.1. Cyberangels endeavours to keep the Website accessible but does not guarantee its uninterrupted operation. The Platform service levels are those set out in the Agreement.

9.2. Cyberangels may update or change features of the Website and the Platform, without materially reducing the services provided for in the Agreement.

9.3. In case of breach of Section 5 or of a concrete risk to the security of the Platform, other users or third parties, Cyberangels may suspend the access of the Authorized User concerned, notifying the Partner or customer, without prejudice to the Agreement.

10.1. The Website and its content are provided "as is". To the extent permitted by law, Cyberangels is not liable for damages arising from the use of the Website's informational content or from the inability to access it.

10.2. For Authorized Users, Cyberangels' liability in connection with the Platform is governed exclusively by the Agreement.

10.3. Nothing in these Terms excludes or limits liability for wilful misconduct or gross negligence under Article 1229 of the Italian Civil Code, or any other liability that cannot be excluded or limited by law.

10.4. Users are liable for damages caused to Cyberangels or third parties by a breach of Section 5.

11.1. Cyberangels may amend these Terms by publishing the new version on the Website with its update date. Material changes affecting Authorized Users are notified with reasonable notice through the Platform or to the Partner.

11.2. Changes do not apply retroactively and do not amend Agreements already signed.

12.1. These Terms are governed by Italian law.

12.2. The Court of Milan has exclusive jurisdiction over any dispute relating to these Terms. Relationships governed by an Agreement are subject to the law and forum set out in the Agreement.

12.3. The rights of data subjects and supervisory authorities under data protection law remain unaffected.

13.1. If any provision of these Terms is held invalid or unenforceable, the remaining provisions remain in effect. In case of discrepancy between the Italian version and this English translation, the Italian version prevails.

13.2. Security vulnerabilities in the Website or the Platform may be reported responsibly to the contacts listed at cyberangels.io/.well-known/security.txt.

13.3. For any communication relating to these Terms: Cyberangels S.r.l., Via Augusto Anfossi 36, 20135 Milan (MI), Italy — email info@cyberangels.io — PEC cyberangels.srl@legalmail.it.