Terms of Service

These Terms of Service ("Terms") govern your use of the Cyber Assure Service ("Service"), operated by Mira Software Ltd, trading as Cyber Assure ("we", "our", "us"). This Agreement sets out the legally binding terms and conditions for your use of cyberassure.cloud and the Cyber Assure portal at cyberassure.app.

"You", "the Customer", or similar terms mean the person creating an account, logging into the Service, or otherwise accessing or using the Service, as well as the organisation on whose behalf the Service is accessed. By creating an account, logging in, or using the Service in any way, you confirm that you have the authority to enter into this Agreement on behalf of yourself or your organisation, and that you agree to be bound by these Terms.

1. Scope of Service

The Service provides tools to help organisations understand and improve their cyber security posture. These include, but are not limited to: a Cyber Maturity Index, risk register, guided compliance frameworks (such as Cyber Essentials and the DfE Digital and Technology Standards), policy management, external vulnerability scanning, dark web credential monitoring, mail and web security checks, Microsoft Secure Score integration, benchmarking, supplier/asset/incident registers, business continuity tooling, and reporting.

The Service is intended to supplement, not replace, your organisation's own cyber security controls, monitoring, or compliance activities. It provides visibility, guidance and oversight to help manage cyber risk. It is not a substitute for comprehensive penetration testing, a managed security operations centre (SOC), or dedicated cyber security services. Features may change, be added, or be removed from time to time.

2. Account Terms

• Accounts must be created on behalf of an organisation, and the person creating the account confirms they have authority to do so.
• You are responsible for maintaining the security of your account and password.
• Each subscription is tied to a single organisation. That organisation may create multiple user accounts under its subscription.
• You must provide accurate and complete information when creating your account.
• You must not add user accounts belonging to other organisations or shared tenants. Each account must be limited to the subscribing organisation.
• Users of the Service must be 18 or over.

3. Asset Ownership and Monitoring

• You may only register or submit domains, IP addresses, or other digital assets for monitoring that your organisation owns, controls, or has legal authorisation to monitor.
• You must not use the Service to scan or monitor third-party assets without consent.
• You confirm this authorisation at the point you add an asset for scanning or monitoring.
• Any breach of this requirement may result in immediate suspension or termination of your account.

4. Grant of Licence and Restrictions on Use

Subject to these Terms and payment of applicable fees, we grant you a non-exclusive, non-transferable, limited right to use the Service for your own internal business purposes.

You may not, and may not allow any third party to:

• Copy, distribute, rent, lease, transfer, or sublicense the Service.
• Modify or create derivative works of the Service.
• Use the Service in a way that threatens its security, performance, or availability.
• Use the Service in any unlawful manner or against assets you do not own or control.
• Reverse engineer, decompile, or disassemble the Service.
• Misrepresent or publish results from the Service in a misleading way, including suggesting that the Service provides complete or guaranteed protection against cyber threats.
• Attempt to bypass, disable, or interfere with any security-related features, or attempt to gain unauthorised access to other accounts or systems.
• Use the Service to perform penetration testing, denial-of-service attacks, or other offensive security activities beyond the intended monitoring and reporting functions.

We may impose limits on usage (such as scan frequency or number of monitored assets) to ensure fair use and system stability. You must use the Service in compliance with all applicable laws, including data protection, privacy, export control, and cyber security laws in your jurisdiction.

5. Licence to Cyber Assure

Customer Data means the electronic data you submit to the Service. System Data means technical, diagnostic and usage information generated through your use of the Service. Reports means analyses, alerts or recommendations produced by the Service.

All data you submit remains your property. By submitting data, you grant us a non-exclusive licence to use, store and process it as necessary to: provide the Service; generate reports and statistics for you; improve and maintain the Service; and create aggregated, anonymised reports or statistics that do not identify you or your organisation.

We may process data in the UK and in other jurisdictions where our authorised Sub-Processors operate, solely to deliver the Service. We will not sell or rent your data. Any processing of personal data is carried out in line with our Privacy Policy and Data Processing Agreement, which form part of this Agreement.

6. Ownership

The Service — including all software, code, databases, designs, reports (excluding the underlying data you provide), user interfaces, and all intellectual property rights — is and shall remain the exclusive property of Mira Software Ltd. Except for the limited licence granted under these Terms, no rights or ownership in the Service are transferred to you. All data you provide remains your property.

7. Subscriptions, Payment, and Refunds

• Subscriptions are managed securely through Stripe.
• Pricing for each plan is set out on our website. By subscribing, you agree to the fees for the plan you select.
• Plans automatically renew at the end of each billing cycle unless cancelled before the renewal date.
• You are responsible for maintaining accurate billing information and a valid payment method.
• If payment cannot be collected, we may suspend or terminate access until payment is received.
• Refunds are not provided for partial use, downgrades, or unused time within a billing period, unless required by law.
• We may change subscription fees on renewal. For annual subscriptions, we give at least 30 days' notice. For monthly subscriptions, changes take effect from the start of your next billing cycle, with prior notice.
• Managed Service Provider (MSP) billing is governed by Section 14 and the MSP Partner Agreement.

8. Third-Party Services

Certain features rely on third-party providers, including vulnerability scanning, credential monitoring, cloud hosting and email delivery. These providers may process data outside the UK/EU. Some features depend entirely on such providers and may be unavailable if they suspend, change, or restrict our access. We do not guarantee the accuracy, completeness, or timeliness of data provided through third-party integrations. We are not liable for any interruptions, omissions, or failures of third-party services.

9. Term and Termination

These Terms remain in effect for as long as you maintain a subscription. You may terminate at any time through your account settings; termination takes effect at the end of the current billing period, with no refund for unused time unless required by law.

We may suspend or terminate your account immediately if: you breach these Terms; you use the Service in an unauthorised or unlawful manner; or your payment cannot be collected.

Upon termination, your access ceases. We may retain data for a limited period in line with our Privacy Policy, after which it may be deleted or anonymised.

10. Warranty Disclaimers

The Service is provided on an "as is" and "as available" basis. We make no warranties, express or implied, including merchantability, fitness for a particular purpose, or non-infringement. In particular, you acknowledge that:

• The Service provides visibility, monitoring and guidance but does not guarantee protection against cyber attacks, breaches, or vulnerabilities.
• Information provided through third-party integrations may be inaccurate, incomplete, or delayed.
• AI-generated guidance may contain errors and should be reviewed before being relied upon.
• We do not guarantee the Service will be uninterrupted, secure, or error-free.
• You remain solely responsible for your organisation's overall cyber security measures, compliance, and incident response.

11. Limitation of Liability

To the maximum extent permitted by law: our total aggregate liability for all claims arising under or in connection with these Terms or the Service is limited to the amount you paid for the Service in the 12 months before the event giving rise to the claim. We are not liable for any indirect, incidental, special, or consequential damages, including loss of profits, data, business opportunities, or reputational harm.

We are not liable for losses arising from: cyber attacks, breaches, or vulnerabilities not detected, prevented, or reported by the Service; your reliance on incomplete, delayed, or inaccurate third-party data; your failure to implement appropriate security measures or act on information provided; or your unauthorised or unlawful use of the Service. Nothing in these Terms limits liability that cannot be excluded by law.

12. User Content

You are solely responsible for any data, documents, or materials you upload or submit ("User Content"). You warrant that you have all necessary rights, licences and permissions to provide such User Content and to grant us the rights in Section 5. You agree to indemnify us against any claim arising from User Content that infringes third-party rights, is submitted without necessary authority or consent, or violates applicable law.

13. Indemnification

You agree to indemnify and hold Mira Software Ltd (trading as Cyber Assure), its directors, employees, and partners harmless from any claim, liability, damage, loss, or expense (including reasonable legal fees) arising from: your use of the Service in violation of these Terms; your submission of assets you do not own or have authority to monitor; your misuse of data obtained through the Service; any claim by a third-party provider resulting from your misuse; or your violation of any law, regulation, or third-party rights.

14. MSP-Specific Terms

If you are a Managed Service Provider (MSP) using the Service on behalf of your clients, the following apply in addition to these Terms, and are supplemented by the MSP Partner Agreement:

• You remain fully responsible for your clients' use of the Service and for ensuring they comply with these Terms.
• You must ensure each client agrees to terms at least as strict as these Terms, including data ownership, asset authorisation, confidentiality, and acceptable use.
• End-client data remains the property of the end-client. You are responsible for ensuring only assets owned or controlled by your end-clients are submitted for monitoring.
• You may not white-label or resell the Service as your own standalone product. Designated elements of the Service may be co-branded ("Powered by Cyber Assure") in accordance with our brand guidelines.
• A minimum commitment of five (5) customer organisations is required to open and maintain an MSP account.
• Your subscription fees are based on the number of end-client organisations you onboard, billed to you monthly. You are the billing party for your clients.
• We may monitor MSP usage and suspend or terminate MSP access if we reasonably believe you or your clients are in breach.

15. Publicity

You may state publicly that you are a customer of Cyber Assure. Unless you opt out in writing, you agree we may include your organisation's name and logo in our customer lists, website, and marketing materials, provided we do not suggest you endorse the Service. If you are an MSP, we will not reference your end-clients without your prior written consent.

16. Governing Law and Jurisdiction

These Terms are governed by the laws of England and Wales. You agree to submit to the exclusive jurisdiction of the courts of England and Wales.

17. General Provisions

• Entire Agreement – These Terms, together with the Privacy Policy and DPA, constitute the entire agreement and supersede all prior agreements.
• Severability – If any provision is unenforceable, the remainder remain in full force.
• No Waiver – A failure or delay in enforcing any right is not a waiver.
• Assignment – You may not assign without our consent. We may assign without restriction, provided this does not materially reduce your rights.
• Force Majeure – We are not liable for failure or delay caused by circumstances beyond our reasonable control.
• Notices – Communications may be provided electronically. Legal notices to us must be sent to the contact email published on our website.
• Governing Law – England and Wales.
• Export Control & Sanctions – You may not use the Service if subject to UK, EU, or US sanctions, or in violation of export control laws.
• Governing Version – The version published on our website prevails.