Terms of sale

01Scope

These terms apply to every service: offensive security, purple teaming & detection, DevSecOps and secure architecture missions, secure application development, and IT & security support for small businesses. Specific conditions in a signed proposal prevail over these terms. The provider's details are given in the legal notice.

02Proposal and order

Every service starts with a written proposal stating the scope, deliverables, timeline and price. A proposal is valid for 30 days. The order is confirmed when the client signs the proposal (or accepts it in writing) and, where agreed, pays the deposit.

03Prices

• ▹All prices are expressed excluding VAT; VAT at the applicable rate (20% in France) is added.
• ▹Travel and on-site expenses are invoiced only if they were agreed in the proposal.

04Payment

• ▹Accepted methods: SEPA bank transfer, card, PayPal and crypto-assets on request.
• ▹Missions and projects: invoices are payable within 30 days of the invoice date. A deposit of 30 to 50% may be required for larger projects.
• ▹Small businesses and application projects: deposit at the order, then payments at each milestone, and the balance on delivery.
• ▹Any late payment automatically triggers late-payment penalties at three times the French legal interest rate, plus a fixed recovery fee of €40 (French Commercial Code, art. L441-10). No discount is granted for early payment.

05Performance of the services

• ▹Cyber Monarch provides its services with the care and skill of a professional, under a best-efforts obligation.
• ▹No security test is carried out without a signed authorization and a written scope. The client guarantees that it has the right to authorize testing of the systems in scope.
• ▹The client provides the access, information and contacts needed in good time. Delays caused by the client may shift the timeline.

06Delivery and acceptance

Deliverables (reports, configurations, applications) are delivered as stated in the proposal. The client has 10 working days to report any non-conformity in writing; after that, the deliverables are deemed accepted.

07Intellectual property

Once the price is paid in full, the client receives the rights to use the deliverables made specifically for them, for their own needs. Cyber Monarch keeps its tools, methods, know-how and pre-existing components, and may reuse non-confidential general knowledge.

08Confidentiality

Each party keeps confidential the information received from the other, during the mission and for 5 years after it. Security findings are shared only with the client. A specific non-disclosure agreement can be signed on request.

09Liability and insurance

No system can be made 100% secure: Cyber Monarch cannot guarantee the absence of vulnerabilities or attacks. The client remains responsible for implementing the recommendations and for its own operational security and backups.

Cyber Monarch's liability is limited to direct damages and capped at the amount paid for the mission concerned. Cyber Monarch holds professional liability insurance (RC Pro).

10Cancellation

The client may cancel an order in writing; work already done is invoiced and the deposit is kept. Either party may terminate a mission if the other seriously breaches its obligations and fails to remedy it within 15 days of formal notice.

11Small businesses: right of withdrawal

A client who is a professional employing five people or fewer, when the contract is concluded off-premises and its purpose falls outside the client's main activity, has 14 days from the conclusion of the contract to withdraw, without giving a reason (French Consumer Code, art. L221-3 and L221-18). To withdraw, the client sends a clear statement, for example the form below, to contact@cybermonarch.tech. The amounts paid are refunded within 14 days.

If the client expressly asks for the service to start before the end of this period, an amount proportional to the service provided until the withdrawal is due (art. L221-25). The right of withdrawal can no longer be exercised once the service has been fully performed with the client's express agreement (art. L221-28).

• ▹Withdrawal form: to Cyber Monarch, 66 avenue des Champs-Élysées, 75008 Paris, France, contact@cybermonarch.tech. I hereby give notice that I withdraw from my contract for the following service: [service], ordered on [date]. Name, address, date and signature (if sent on paper).

12Governing law and disputes

These terms are governed by French law. Any dispute that cannot be settled amicably falls under the courts of Paris, to the extent permitted by law.