Copyright & IP Policy

This document is provided in English, which is the authoritative version; any translation is for convenience only and the English version prevails.

This document applies to all cybersecurity software-as-a-service solutions, websites, applications, platforms, APIs, software, modules, features, documentation, support, and related services made available by Stack4Sec, LLC, a Wyoming limited liability company.

For purposes of this document, "Stack4Sec," "Company," "we," "us," and "our" mean Stack4Sec, LLC. "Customer," "you," and "your" mean the person or entity accessing or using the Services.

This document is incorporated into and forms part of the Stack4Sec Terms of Service. Product-specific terms may supplement this document for particular products, modules, services, or features.

This Copyright and Intellectual Property Policy explains ownership of intellectual property, restrictions on use, trademark rules, feedback rights, third-party materials, and copyright complaint procedures.

Stack4Sec and its licensors own all rights, title, and interest in and to the Services, including software, source code, object code, APIs, user interfaces, workflows, configurations, templates, dashboards, reports, visualizations, documentation, AI Features, models, prompts, scoring methods, methods of analysis, product names, trade names, trademarks, service marks, logos, designs, and all related intellectual property rights.

No ownership rights are transferred to Customer except for the limited access rights expressly granted in the Stack4Sec Terms of Service or applicable Order Form.

As between Customer and Stack4Sec, Customer retains ownership of Customer Content. Customer grants Stack4Sec the rights necessary to host, process, transmit, store, copy, display, analyze, and use Customer Content to provide, secure, maintain, support, and improve the Services, as described in the Stack4Sec Terms of Service, Privacy Policy, and Data Processing Addendum.

Customer represents that it has all rights and permissions necessary to submit Customer Content to the Services.

Unless otherwise stated in a signed Order Form, Stack4Sec owns the underlying structure, layout, format, methods, templates, dashboard designs, scoring structures, and other proprietary elements of reports and outputs generated by the Services.

Customer may use reports and outputs generated from Customer Content for Customer's internal business purposes and other permitted uses under the applicable agreement, provided that Customer does not misrepresent Stack4Sec's role, remove proprietary notices, or state or imply that Stack4Sec has certified or independently verified Customer's security posture or compliance status.

Customer must not:

• copy, modify, translate, reproduce, distribute, sell, lease, license, sublicense, or create derivative works of the Services except as expressly permitted;
• reverse engineer, decompile, disassemble, or attempt to derive source code, algorithms, scoring logic, model logic, prompts, or non-public methods;
• remove, obscure, or alter proprietary notices;
• use the Services to develop, improve, benchmark, or commercialize a competing product or service;
• scrape, harvest, copy, or extract substantial portions of the Services;
• use Stack4Sec trademarks, logos, product names, screenshots, or branding without prior written consent.

Stack4Sec names, marks, logos, designs, trade dress, product names, service names, and related branding are trademarks or proprietary identifiers of Stack4Sec or its licensors.

Customer may not use Stack4Sec trademarks in a way that suggests sponsorship, endorsement, certification, partnership, affiliation, or approval unless expressly authorized in writing.

Any permitted use of Stack4Sec branding must comply with Stack4Sec's brand guidelines and must be truthful, non-misleading, and revocable at any time.

Customer may provide suggestions, ideas, requests, recommendations, corrections, comments, or other feedback. Stack4Sec may use feedback without restriction, attribution, compensation, or obligation to Customer. To the extent Customer has rights in feedback, Customer grants Stack4Sec a worldwide, perpetual, irrevocable, transferable, sublicensable, royalty-free license to use, exploit, reproduce, modify, distribute, display, perform, and create derivative works from such feedback for any purpose.

The Services may reference, display, incorporate, link to, or interoperate with third-party content, standards, frameworks, libraries, open-source software, documentation, data, or services. Third-party materials may be subject to separate licenses, terms, or ownership rights.

Stack4Sec does not grant Customer rights in third-party materials except as expressly permitted by applicable third-party terms.

References to third-party cybersecurity frameworks, standards, laws, regulations, control catalogs, methodologies, and industry publications are provided for identification, interoperability, mapping, assessment workflow, and customer configuration purposes only. Such references do not imply ownership, sponsorship, endorsement, certification, authorization, affiliation, or approval by any third-party framework owner, standards body, regulator, certification body, or industry organization.

Unless expressly stated in writing, Stack4Sec does not provide, reproduce, license, replace, certify, distribute, or grant rights in official third-party framework or standard materials. Stack4Sec-created assessment questions, evidence guidance, implementation guidance, summaries, mappings, scoring methods, and recommendations are original Stack4Sec materials and should not be treated as official third-party publications. Customer is responsible for obtaining and using official or licensed materials where required.

The Services may include or interact with open-source software. Open-source software is governed by its applicable open-source license and not by this Policy to the extent the license requires different terms.

Nothing in this Policy limits Customer's rights under applicable open-source licenses.

If you believe content available through the Services infringes your copyright, you may send a notice to Stack4Sec containing:

• your name, address, telephone number, and email address;
• identification of the copyrighted work claimed to be infringed;
• identification of the allegedly infringing material and where it is located;
• a statement that you have a good-faith belief that use is not authorized by the copyright owner, its agent, or the law;
• a statement that the information in the notice is accurate and, under penalty of perjury, that you are authorized to act on behalf of the copyright owner;
• your physical or electronic signature.

Copyright notices should be sent to:

Stack4Sec, LLC 30 N Gould St, STE R Sheridan, WY 82801 United States Email: legal@stack4sec.com

If Customer believes content was removed or disabled by mistake or misidentification, Customer may submit a counter-notice containing sufficient information for Stack4Sec to evaluate the request. Stack4Sec may forward counter-notices to the complaining party and may restore content where appropriate under applicable law.

Stack4Sec may suspend or terminate Accounts of users who repeatedly infringe or are repeatedly accused of infringing intellectual property rights, where Stack4Sec determines that action is appropriate.

Stack4Sec reserves all rights not expressly granted. No implied license, waiver, exhaustion, or transfer is created by these Terms, any Order Form, access to the Services, or use of Stack4Sec intellectual property.