Terms & Conditions

1. Operating Entity & Contract Acceptance

These Terms and Conditions ("Terms") constitute a legally binding agreement between you (individually or on behalf of your organization) and Radar 36 Inc., a Delaware corporation (Registered Address: 8 The Green, Ste. R, City of Dover, County of Kent, DE 19901, USA).

By registering for an account, accessing the platform, or logging into any *.radar36.app subdomain or mapped white-label portal, you confirm that you have read, understood, and agreed to be bound by these Terms.

2. Platform Nature & Scope

Radar 36 is a white-label technology platform providing software tools for:

• Vulnerability assessment & penetration testing (VAPT) workflow management.
• Client portal delivery, risk heatmaps, and scope intake under tenant branding.
• One-click compliance reporting (DOCX, PDF) and AI compliance framework mapping.
• Automated patch retesting checking and integration pipelines.

Explicit Exclusion: Radar 36 Inc. does NOT perform security scanning, penetration testing, code review, or vulnerability remediation on behalf of Tenants or End Clients. All underlying security assessments are conducted independently by Tenants.

3. Definitions

• "Platform": The Radar 36 software engine, web applications, APIs, databases, and infrastructure.
• "Company": Radar 36 Inc. (Delaware US C Corp).
• "Tenant / Organization": A registered entity (security consultancy, MSSP, agency, or firm) operating a workspace on Radar 36.
• "User": Any consultant, pentester, administrator, or representative authorized to access a Tenant account.
• "End Client": A client organization receiving security reports or portal access from a Tenant.
• "Security Data": Vulnerabilities, CVSS scores, proof-of-concept evidence, scope lists, target assets, and compliance metadata uploaded by Tenants.

4. Tenant Account & Subdomain Setup

To access the Platform, Tenants must register an account and select a custom workspace subdomain (e.g., yourfirm.radar36.app) or configure a custom domain CNAME. Tenants are responsible for maintaining credential confidentiality, implementing strong passwords, and restricting account access to authorized personnel.

5. Acceptable Use Policy (AUP)

Users agree to utilize the Platform solely for legitimate, authorized cybersecurity operations. You must NOT:

• Upload fraudulent, unauthorized, or malicious vulnerability data.
• Attempt to probe, scan, or exploit vulnerabilities in Radar 36 Inc.'s own platform infrastructure.
• Attempt to bypass tenant isolation controls, access other tenant environments, or reverse engineer platform code.
• Use the Platform to store illegal, defamatory, or infringing material.

6. Tenant Responsibilities & End-Client Authorization

Tenants bear 100% responsibility for:

• Obtaining proper legal authorization (Permission to Test / Rules of Engagement) from End Clients prior to conducting assessments referenced in the Platform.
• Verifying the technical accuracy, severity scoring, and evidence provided in security reports.
• Fulfilling all contractual obligations and service level agreements with End Clients.

Radar 36 Inc. is not a party to contracts between Tenants and End Clients and accepts zero liability for tenant-client contractual disputes.

7. Data Ownership & Privacy Safeguards

Tenants retain 100% exclusive ownership of all Security Data, client lists, asset inventories, and findings uploaded to the Platform. Radar 36 Inc. acts strictly as a data processor and infrastructure host. We will never sell, rent, or commercially exploit Tenant Security Data.

8. White-Label Usage & Branding Accuracy

Radar 36 enables Tenants to deliver reports and portals under their own brand. Tenants are solely responsible for ensuring that white-labeled logos, trademarks, domain CNAMEs, and legal disclaimers comply with applicable trademark laws and do not misrepresent the nature of their services.

9. Reporting Disclaimer & Automated Retesting

Reports compiled via the Platform reflect the data input by Users or external scanner APIs. Radar 36 Inc. makes no guarantees regarding the completeness, accuracy, or vulnerability-free state of any system assessed. Automated retesting verification features provide code/endpoint validation checks but do not replace comprehensive human verification.

10. Intellectual Property Rights

All rights, titles, and interests in and to the Platform—including software architecture, database design, UI/UX components, report layout generation scripts, AI auto-mapping algorithms, and proprietary code—belong exclusively to Radar 36 Inc. Tenants receive a limited, non-exclusive, non-transferable subscription right to use the Platform during their active subscription term.

11. Third-Party Integrations & APIs

The Platform may support integrations with external scanner tools, vulnerability feeds, or messaging platforms. Radar 36 Inc. is not responsible for the availability, data accuracy, or security of third-party tools or APIs.

12. Service Availability & SLA

Radar 36 Inc. strives for 99.9% platform availability. Scheduled maintenance windows will be communicated in advance when possible. Emergency maintenance or cloud infrastructure provider outages may cause occasional temporary downtime.

13. Subscription Terms & Fees

Platform access is billed according to agreed subscription plans (including optional one-time onboarding/setup fees and uncapped user options). Payments are non-refundable except where explicitly required by applicable law or written agreement. Subscription renewal terms apply per plan specifications.

14. Limitation of Liability

To the maximum extent permitted by applicable law, in no event shall Radar 36 Inc., its directors, officers, or employees be liable for any indirect, incidental, special, consequential, or punitive damages (including loss of business, data breach at an end client, or lost profits) arising from platform use.

Radar 36 Inc.'s total cumulative liability for any claim shall be capped at the actual subscription fees paid by the Tenant to Radar 36 Inc. during the one (1) month period preceding the event giving rise to liability.

15. Indemnification

Tenants agree to defend, indemnify, and hold harmless Radar 36 Inc. against any third-party claims, losses, liabilities, damages, or legal expenses (including reasonable attorney fees) arising from: (a) breach of these Terms; (b) unauthorized penetration testing or scope violations; or (c) disputes between Tenant and End Clients.

16. Confidentiality

Both parties agree to hold all non-public technical, business, and security information in strict confidence and use it only to fulfill rights and obligations under these Terms.

17. Suspension & Termination

Radar 36 Inc. reserves the right to suspend or terminate account access immediately upon material breach of these Terms, non-payment, or detected security risks to the platform. Upon termination, Tenants have a 30-day grace period to export their Security Data prior to database purging.

18. Governing Law & Dispute Resolution

These Terms shall be governed by, construed, and enforced in accordance with the laws of the State of Delaware, United States of America, without giving effect to conflicts of law principles. Any legal suit, action, or proceeding arising under these Terms shall be instituted exclusively in the federal or state courts located in Delaware, USA.

19. Miscellaneous & Contact Information

If any provision of these Terms is held invalid or unenforceable, the remaining provisions shall remain in full force. Failure to enforce any right does not constitute a waiver.

---