Terms of engagement
The ground rules for working with us. These terms apply to website use and form the baseline for every sprint; the signed engagement letter takes precedence where it differs.
Last updated · September 2026
1. Scope of service
A Cybnivo readiness sprint is a time-boxed assessment over ten business days across six weighted modules. It produces a weighted readiness score, an evidence gap list, a prioritized action plan and a management summary.
2. Authorization is mandatory
We perform no scanning, configuration reading or technical checking without written authorization naming the systems in scope, the time window and the responsible contact. We do not run active tests against production or safety-relevant systems. If a check falls outside the agreed scope, we ask before we act.
3. Customer responsibilities
- Name one decision-maker and one technical contact for the duration of the sprint.
- Provide access, documentation and evidence within the agreed windows.
- Ensure you are entitled to authorize checks on systems operated by third parties.
A ten-day timeline depends on timely responses. Delays in access shift the delivery date accordingly.
4. What a readiness assessment is not
A readiness sprint is not a certification, audit opinion, penetration test or legal advice. It does not make you compliant with NIS2, DORA, ISO 27001 or any other framework, and we will never claim otherwise on your behalf. It tells you where you stand and what to fix first.
5. Confidentiality
All findings, evidence and documentation exchanged during an engagement are treated as confidential and are used solely to deliver the sprint. We do not name customers publicly without written permission.
6. Fees and payment
Pilot engagements marked as free carry no fee. Paid sprints are quoted as a fixed price in the engagement letter, invoiced on delivery of the final report and payable within 14 days net, plus statutory VAT where applicable.
7. Liability
We are liable without limitation for intent and gross negligence and for injury to life, body or health. For slight negligence we are liable only for breach of an essential contractual obligation, limited to the foreseeable damage typical for this type of contract. Findings are advisory; implementation decisions and their consequences remain with the customer.
8. Governing law
German law applies, excluding the UN Convention on Contracts for the International Sale of Goods. Until Cybnivo is incorporated, the place of jurisdiction for merchants is agreed in writing in the individual engagement or pilot agreement.
9. Questions
Anything unclear before you sign? Write to info@cybnivo.com and we will answer in writing.