Terms and Conditions
Last updated: September 13, 2026
1. Services
VUNVAULT provides:
- Penetration testing, vulnerability assessments, network hardening, troubleshooting
- Cloud, web, M-Pesa gateway reviews
- Security training & VUNVAULT Academy (Cybersecurity Foundations)
Scope, timeline, and deliverables are defined in proposal/SOW. Testing is authorized only on assets you own or have written permission to test.
2. Client responsibilities
- Provide accurate scope, valid authorization, and emergency contacts
- Ensure backups before testing; we are not liable for unbacked data
- Do not use reports to violate law or attack third parties
- For Academy: honest participation, no sharing of exam answers
3. Payments
- Prices in KES (primary) and USD. KES amounts inclusive of applicable taxes unless stated.
- Payment via Paystack (M-Pesa, card, bank). Test mode uses pk_test_, live uses pk_live_.
- Small Business / Starter: per scan, SACCO/Fintech: per assessment, Enterprise: monthly retainer, Certificate: one-time
- Retainers billed in advance; late payments may pause service after 7-day notice.
- Refunds: Academy certificate purchase refundable within 14 days if not downloaded. Assessments: refundable before work starts, less 15% admin fee.
4. Deliverables & IP
Reports, playbooks, and templates delivered to you are licensed for internal use. VUNVAULT retains methodology IP. You retain your data. We may anonymize findings for aggregate research (no client identification).
5. Confidentiality
Both parties keep confidential information secret for 3 years. We treat scan data as strictly confidential, encrypted at rest and in transit, access on need-to-know.
6. Warranty & liability
- Services performed with professional care per industry standards (NIST, OWASP).
- No guarantee of finding all vulnerabilities; security is risk reduction, not elimination.
- Liability capped at fees paid for the specific service in last 6 months. No consequential damages (lost profits, data loss where backup duty breached).
- Force majeure: delays beyond reasonable control (internet outage, war, regulatory action).
7. Acceptable use
No reverse-engineering Academy paywall, no automated scraping of course content, no use of site to distribute malware or spam, no impersonation.
8. Academy certificate
Certificate issued after passing 12 module quizzes (≥75%) and final exam (≥75%). Name on certificate from user input; verification ID issued. Certificate does not guarantee employment or compliance certification.
9. Termination
Either party may terminate retainer with 30 days written notice. Immediate termination for material breach, non-payment, or illegal use. On termination, pay for work done; we deliver work completed.
10. Governing law
Kenya law, courts of Nairobi, with arbitration option under Nairobi Centre for International Arbitration (NCIA). If you are consumer in EU, mandatory consumer protections apply.
11. Changes
We may update Terms; we will post new date and, for material changes, email clients 14 days prior.
12. Contact
Legal: [email protected] | Support: [email protected]