Effective Date: November 22, 2023

By using our services, you agree to these Terms of Service (“Terms”). Please read them carefully. These Terms are designed in alignment with NIST Cybersecurity Framework (CSF), Service Organization Control 2 (SOC2) standards, and the General Data Protection Regulation (GDPR).


Acceptance of Terms

Service Description: yes-security provides cybersecurity solutions, including risk assessments, security consulting, and incident response services.

User Agreement: By accessing or using our services, you agree to be bound by these Terms and any amendments in the future. yes-security reserves the right to update these Terms at any time.

Privacy and Data Protection

Data Collection and Usage: We collect data in accordance with our Privacy Policy, which is GDPR compliant. This includes personal data provided by you for service provision and improvement.

Data Security: Consistent with SOC2 and NIST CSF guidelines, we implement robust security measures to protect your data against unauthorized access, alteration, and disclosure.

Data Rights: You have rights regarding your personal data, including access, correction, deletion, and data portability, as outlined in GDPR.

Use of Services

Compliance: You agree to use our services in compliance with all applicable laws and regulations, and not for any unlawful purpose.

Restrictions: You may not misuse our services, such as interfering with our services or accessing them using a method other than the interface and instructions provided by us.

Service Modifications: yes-security reserves the right to modify or discontinue, temporarily or permanently, the services (or any part thereof) with or without notice.

Intellectual Property

Ownership: All intellectual property rights in the services provided by yes-security are owned by or licensed to us.

Usage Rights: We grant you a limited, non-exclusive, non-transferable license to access and use our services in accordance with these Terms.

Limitation of Liability

Service Provision: While we strive for excellence, we cannot guarantee that our services will be uninterrupted or error-free.