Terms of Service

01Acceptance

By accessing this website you agree to these terms. If you do not agree, please do not use the site.

02The website is information, not advice

Content on this site, including guidance on ISO 27001, SOC 2, penetration testing and cloud security, is provided for general information. It is not legal advice, not audit advice, and not a substitute for an assessment of your specific circumstances.

Standards evolve and interpretations differ between certification bodies and auditors. Do not rely on this website as the sole basis for a compliance or security decision.

03No certification or attestation authority

innsecs is an independent consultancy. We are not an accredited certification body and cannot issue ISO 27001 certificates. We are not a licensed CPA firm and cannot issue SOC 2 reports.

We prepare organisations for certification and attestation and support them through the external audit. The certification or attestation decision is made solely by the independent body you engage.

04Engagements are governed separately

Any services we provide are governed by a signed engagement contract, statement of work, and where applicable rules of engagement for security testing. Those documents define scope, deliverables, fees, liability, confidentiality and intellectual property.

Nothing on this website constitutes an offer to contract, a quotation, or a guarantee of any specific outcome, timeline or price.

05Authorisation for security testing

We perform security testing only against systems for which the client has given written authorisation and holds the legal right to authorise testing. Clients are responsible for obtaining any consent required from hosting providers, upstream vendors or other third parties.

We will not test systems outside an agreed, written scope under any circumstances.

06Confidentiality

We treat client information, findings and reports as confidential. We do not name clients publicly, publish findings, or use engagement material in marketing without explicit written permission.

07Intellectual property

The content, design, wording and code of this website belong to us and may not be copied, republished or used commercially without permission. You may reference and link to pages, and quote short extracts with attribution.

Ownership of engagement deliverables is set out in the relevant engagement contract; typically, reports produced for a client belong to that client.

08Acceptable use of this website

• Do not attempt to gain unauthorised access to this site or its infrastructure
• Do not use automated means to scrape, overload or disrupt the site
• Do not submit unlawful, misleading or malicious content through our forms
• Do not misrepresent your identity or affiliation when contacting us

09Limitation of liability

To the fullest extent permitted by law, we exclude liability for any loss arising from use of, or reliance on, this website. The site is provided on an as-is basis without warranties of any kind.

Nothing in these terms limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot lawfully be excluded. Liability arising from services is addressed in the engagement contract.

10Third-party links

This site may link to third-party resources such as standards bodies and certification bodies. We do not control those sites and are not responsible for their content or practices.

11Changes

We may revise these terms at any time. The date at the top of this page reflects the current version, and continued use of the site constitutes acceptance of the revised terms.

12Governing law and contact

These terms are governed by the laws of the jurisdiction in which innsecs is established, and the courts of that jurisdiction have exclusive jurisdiction over any dispute. Update this clause with your registered jurisdiction before launch.

Questions about these terms: security@innsecs.com.