Terms of service

These terms cover the use of Mitivanta, by the business that engages it and by everybody that business gives an account to. Using the service means agreeing to them.

What the service is

A security assessment of your business, and a portal to see what was found and track what you fix, reachable through a web browser and an iPhone app. The assessment is a service performed by people; the portal is supplied as a service and is not sold as software to install and keep.

Accounts

Accounts are created by Mitivanta or by the business’s own admin, and cannot be created from inside the phone app. The business is responsible for who it gives an account to and for removing accounts when people leave. Passwords are not to be shared between people; a shared login makes the record of who logged what meaningless, which is most of the value of keeping one.

Who owns what

The business owns its data. The findings, the device list and the record of what was fixed belong to the business, not to Mitivanta. It may be exported on request at any time, including after cancelling.

Mitivanta owns the software. The right granted is to use it while the account is open, not to copy it, resell it, or rebuild it from the outside.

What the business agrees not to do

• Use it to store data it has no right to hold, or for anything unlawful.
• Attempt to reach another company’s records, or to test that boundary without asking first.
• Resell access, or use it to run a business that competes with this one.

Genuine security research is welcome. Report anything found to the address below and it will be treated as a favour rather than an attack.

Payment

Fees, where they apply, are agreed in writing before they start and are billed in advance. Cancelling stops the next charge; the current period is not refunded in proportion unless something here has gone badly wrong, in which case ask. Notice of a price change comes at least 30 days before it takes effect.

Availability, honestly stated

Reasonable effort goes into keeping the service up, and there is no uptime guarantee. This is a young product from a small supplier and claiming a number here would be a promise discovered to be worthless on the first bad day. What is offered instead: the phone app keeps working with no connection at all and sends what you ticked off when it returns, so an outage never costs you the record of what you did.

An assessment is a point in time. It reports what was found on the day, by the methods used. It does not guarantee that nothing was missed, that nothing has changed since, or that the business cannot be attacked. Readiness against a checklist is a fact about that checklist; whether a business is compliant with any law or standard is a judgement for an auditor, and Mitivanta never claims it.

Backups are taken, and a customer holding data it cannot afford to lose should still take its own export periodically. That is true of every service and is worth saying rather than leaving implied.

Ending it

The business may stop at any time, and its data will be exported on request and then deleted within 30 days. An account may be suspended while fees go unpaid, or closed for a serious breach of these terms, with notice and a chance to put it right except where the breach is causing active harm.

Liability

The service is provided as it is. To the extent the law allows, Mitivanta is not liable for lost profits or lost business, and its total liability is limited to what was paid in the twelve months before the claim. Nothing here limits liability for fraud, or for anything else the law does not permit to be limited.

Changes to these terms

Material changes are emailed to account holders at least 30 days before they apply.

Contact

support@mitivanta.com