Terms of Service

Dash4Sec is a SaaS platform for cybersecurity maturity and compliance, including third-party risk management (TPRM), operated by SAFONT REIS ASSESSORIA LTDA, registered under CNPJ no. 49.204.046/0001-11, headquartered at Al. Purus, 105, Und. 161 — Barueri/SP — CEP 06454-030 ("Dash4Sec", "we").

These Terms of Service ("Terms") form a contract between you and Dash4Sec and govern access to and use of the website, the web application and all related features (the "Service"). Complementary documents — Privacy Policy, Acceptable Use Policy, Cookie Policy, DPA and Additional Terms — are incorporated into these Terms by reference.

If you accept these Terms on behalf of a company, you represent that you have authority to bind it, and "you" then refers to that organization.

Dash4Sec is multi-tenant: each organization has its own isolated space, users and data. The first registered user is the organization administrator and is responsible for managing users, roles and permissions.

You are responsible for keeping credentials confidential, for enabling two-factor authentication (MFA) where applicable, and for all activities carried out under your account. Notify us immediately in the event of unauthorized use.

You must provide truthful information at registration and keep it up to date.

The Service is offered in the Discover (free), Pro, Business and Enterprise plans, with limits and features described on the Plans page. Paid plans are contracted upfront for periods of 12, 24 or 36 months, with a maximum term of 36 months per contract.

Payments are processed by our partner Stripe. By contracting, you authorize the charge corresponding to the chosen plan and period. For upgrades, downgrades and extensions, we apply a credit proportional to the unused time of the current plan; any excess credit is recorded for use in future purchases.

Except as otherwise required by law or for a failure attributable to Dash4Sec, amounts paid are non-refundable. Applicable taxes may apply to the prices.

The paid license is in force for the contracted period. Upon expiration, access to the plan's features is blocked until renewal; during that period, the organization's data is preserved in accordance with the Privacy Policy.

You may stop using the Service at any time. We may suspend or terminate access in the event of a violation of these Terms, the Acceptable Use Policy, non-payment, or a legal requirement.

The Discover plan may remain active at no cost, subject to its limits.

The data you enter into the Service (environment information, frameworks, evidence, suppliers, questionnaire responses, etc. — the "Customer Content") remains yours. You grant us a limited license to process that content solely to operate and improve the Service, in accordance with the Privacy Policy and the DPA.

You are responsible for the legality of the Customer Content and for having the necessary authorizations to submit it, including when it contains third-party/supplier data.

The Service, the Dash4Sec brand, the interface, the code, the framework catalogs and other elements are owned by Dash4Sec or licensed to it, and are protected by law. These Terms do not transfer any intellectual property right to you, except for the license to use described herein.

Third-party trademarks that may be displayed (e.g., integrated rating providers) belong to their respective owners and are used for informational purposes only.

We strive to keep the Service available and secure, but it is provided "as is" and "as available". We may perform maintenance, updates and improvements that may temporarily affect availability.

The level of support varies according to the contracted plan (community, priority or with SLA), as described on the Plans page.

Dash4Sec is a tool to support security and compliance management; decisions made based on its information are the customer's responsibility. We do not guarantee automatic regulatory compliance or the absence of security incidents.

To the maximum extent permitted by law, Dash4Sec's total liability relating to the Service is limited to the amount paid by you in the 12 months preceding the event giving rise to the claim. We are not liable for indirect damages, lost profits or loss of data resulting from improper use.

We may update these Terms to reflect changes in the Service or in the law. Material changes will be communicated through the usual channels; continued use after they take effect implies agreement.

These Terms are governed by the laws of the Federative Republic of Brazil. The courts of the district of Barueri/SP are elected to resolve disputes, with waiver of any other, however privileged.

Questions about these Terms: contato@dash4sec.com.