Parties:
(1) Strand Intelligence Ltd., a company incorporated in England & Wales (company number 16505027) with its registered office at GM Digital Security Hub (DISH), 47 Lloyd St, Manchester M2 5LE ("Strand," "we," "us," or "our"); and
(2) The organization identifying itself on the ordering page, signed order form, or other enrollment mechanism ("Customer," "you," or "your").
By continuing to use the Strand platform, executing an order form, or deploying the Strand Azure Enterprise Application or Software Agent following receipt of these terms, Customer agrees to be bound by these Terms of Service.
1. Definitions
2. Scope of the Trial
2.1 License Grant
Subject to this Agreement, Strand grants Customer a non-exclusive, revocable, limited license to (a) deploy the Azure Enterprise App or Software Agent on devices that Customer owns or controls, and (b) access and use the Platform solely for internal evaluation during the Trial Period.
2.2 No Production Use
The Trial Services are provided for testing and evaluation only. Live, production use is allowed but at Customer's sole risk.
2.3 Feature Changes
Strand may modify, suspend, or terminate Trial Services at any time without notice.
3. Deployment Prerequisites & Permissions
Permission to Deploy
Customer represents and warrants that it has obtained all consents, licenses, and legal authority necessary to (a) install the Agent and/or Azure Enterprise Application on target systems, (b) access those systems' logs and data, and (c) transmit such data to Strand.
Back-ups & Change Control
Customer is solely responsible for (a) backing up data and images before deployment, (b) maintaining current disaster-recovery plans, and (c) ensuring deployment complies with its change-management policies.
Minimum Requirements
Customer must provide compatible hardware, software, network access, and privileges as required by the software agent and/or enterprise application for full functionality of Strand.
4. Customer Responsibilities & Due Care
4.1 Maintain Operational Control
The Platform may recommend containment or destructive actions (e.g., mass wipe). Customer decides whether, when, and how to execute such actions and bears all associated risk.
4.2 Apply Professional Judgment
The Platform is a decision-support tool; Customer must verify outputs, correlate evidence, and apply professional expertise before acting.
4.3 Security of Credentials
Customer shall keep account credentials, API keys, and OAuth permissions secure and restrict them to Authorized Users. Access tokens associated with Azure enterprise applications are encrypted and secured by Strand.
4.4 Regulatory Compliance
Customer is solely responsible for complying with applicable data-protection, privacy, employment, and cybersecurity laws when using the Trial Services.
4.5 Acceptable Use
Customer shall not:
- • Use the Platform for offensive security, unauthorized penetration testing, or to access systems it does not own or control
- • Reverse-engineer, decompile, or attempt to discover source code
- • Upload unlawful content
- • Violate export or sanctions laws
5. Misuse & Security Notification
If Strand detects activity that reasonably appears to (a) breach Section 4.5, (b) compromise the security or integrity of the Platform, or (c) threaten third-party rights, Strand may:
- • Notify Customer's designated security contact(s) without undue delay
- • Suspend the relevant account, Agent, or functionality
- • Provide limited data about the event to facilitate remediation
6. Data Protection
Roles
For Personal Data uploaded by or on behalf of Customer, Strand is Processor and Customer is Controller. For account, telemetry, and billing data, Strand is Controller.
Processing Instructions
Strand will process Personal Data solely (a) to provide Trial Services, (b) to improve security, or (c) as required by law.
Sub-Processors
Strand's sub-processors (cloud hosting, email, logging) are Amazon Web Services, Cloudflare, and Supabase. Customer authorizes their use.
Transfers
Strand uses Standard Contractual Clauses (or UK IDTA) for transfers outside the UK/EEA, where applicable.
Deletion
Strand will delete or anonymize Customer data within thirty (30) days after Trial Period end, except where retention is required by law.
7. Confidentiality
Each party agrees to keep the other's non-public business, technical, or security information ("Confidential Information") in strict confidence and use it only to perform this Agreement. Evidence gathered during an Incident is Customer Confidential Information. This Section survives five (5) years after disclosure (indefinitely for trade secrets).
8. Intellectual Property
8.1 Strand IP
Strand retains all right, title, and interest in the Platform, Documentation, detection signatures, playbooks, and derivatives.
8.2 Feedback License
Customer grants Strand a perpetual, worldwide, royalty-free license to use or incorporate suggestions or feedback without obligation.
9. Warranties & Disclaimers
9.1 Trial "As-Is"
The Trial Services are provided without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose, title, or non-infringement.
9.2 Security Disclaimer
Strand does not warrant that the Trial Services will detect every threat, that findings are error-free, or that use will prevent future incidents.
10. Liability
10.1 No Incident Liability
Strand accepts no liability for (i) damage caused by the underlying cyber incident, (ii) Customer's failure to act on Platform guidance, or (iii) actions executed by Customer or its users (including destructive containment).
10.2 Indirect Damages Excluded
In no event is either party liable for indirect, incidental, consequential, special, punitive, or exemplary damages, even if advised of the possibility.
10.3 Cap on Liability
Strand's aggregate liability under this Agreement shall not exceed one thousand British pounds (£1,000).
10.4 Unlimited Liability
Nothing limits liability for death or personal injury caused by negligence, fraud, or other liability that cannot be limited by law.
11. Indemnity
Customer shall indemnify, defend, and hold harmless Strand and its affiliates against third-party claims arising from (a) Customer's breach of Sections 3 or 4, or (b) Customer's unlawful or infringing use of the Trial Services.
12. Suspension & Termination
12.1 Suspension
Strand may suspend the Trial Services immediately for security reasons, suspected misuse, or non-compliance with this Agreement.
12.2 Termination
Either party may terminate for convenience on 24 hours' written notice. Sections 4, 5, 6, 7, 8, 9, 10, 11, 13, and 14 survive termination.
13. Notices
Notices shall be in writing and delivered by email to our founding team ([email protected] or [email protected] for Strand; the email registered to the Account for Customer) or by overnight courier to the parties' addresses.
14. Governing Law & Venue
This Agreement is governed by the laws of England and Wales. The courts of London have exclusive jurisdiction, except Strand may seek injunctive relief in any jurisdiction to protect its IP.
15. Changes to the Agreement
Strand may update this Agreement by posting a revised version at https://app.strandintelligence.com/tos. Material changes become effective thirty (30) days after posting (or immediately for legal or security reasons). Continued use after the effective date constitutes acceptance.
16. Entire Agreement
This Agreement is the entire understanding between the parties regarding the Trial Services and supersedes all prior agreements or representations. Any terms on a purchase order or similar document are void. Neither party may assign this Agreement without the other's prior written consent, except to an affiliate or in a merger or sale of substantially all assets.