Terms of Service

Vigil is a security posture management platform designed to help organizations build, manage, and communicate their information security programs. Vigil is a management tool. It does not: • Provide legal, compliance, or security consulting • Guarantee compliance with any regulatory framework • Replace the judgment of qualified security professionals • Constitute professional security advice

The Service is currently in private beta. Access is by invitation only. We reserve the right to modify, suspend, or terminate access at any time during the beta period without notice. Beta users may experience interruptions, data loss, or changes in functionality. By participating in the beta, you acknowledge and accept these risks.

You are responsible for: • Maintaining the confidentiality of your credentials • All activity that occurs under your account • Ensuring your use complies with applicable laws • The accuracy of information you provide You must notify us immediately at support@tandemlens.net if you suspect unauthorized access to your account.

You agree not to: • Use the Service for any unlawful purpose • Attempt to gain unauthorized access to any system • Reverse engineer, decompile, or disassemble the Service • Upload malicious code or interfere with the Service • Misrepresent your identity or affiliation • Use the Service to harm, threaten, or harass others

You retain ownership of all data you upload to Vigil. By using the Service, you grant us a limited license to process your data solely to provide the Service. We do not sell your data to third parties. We do not use your data to train AI models. Your data is stored securely using industry-standard encryption. You may export or delete your data at any time through the Admin > Data Export section.

The Service, including its design, features, and content, is owned by Tandem Lens Cybersecurity and protected by intellectual property laws. Security frameworks referenced in the Service (ISO 27001, SOC 2, PCI-DSS, NIST, HIPAA, GDPR) are the property of their respective owners. Vigil is not affiliated with, endorsed by, or certified by any standards body.

Financial risk estimates provided by Vigil (including exposure ranges, ROI calculations, and cost estimates) are based on industry averages from publicly available research reports. These estimates: • Are for informational purposes only • Do not constitute financial, insurance, or legal advice • May vary significantly from actual costs • Are not guarantees of any outcome Sources include IBM Cost of a Data Breach Report, Verizon Data Breach Investigations Report, and Ponemon Institute research. Vigil is not affiliated with these organizations.

TO THE MAXIMUM EXTENT PERMITTED BY LAW: The Service is provided "AS IS" without warranties of any kind, express or implied. Tandem Lens Cybersecurity shall not be liable for: • Any indirect, incidental, or consequential damages • Loss of data, profits, or business opportunities • Security incidents that occur despite using the Service • Decisions made based on information in the Service • Regulatory fines or penalties of any kind Our total liability to you shall not exceed the amount you paid us in the 12 months preceding the claim.

You agree to indemnify and hold harmless Tandem Lens Cybersecurity from any claims arising from: • Your use of the Service • Your violation of these Terms • Your violation of any third-party rights • Data you upload to the Service

Our collection and use of your personal information is governed by our Privacy Policy, available at vigil.tandemlens.net/legal/privacy.

We may update these Terms at any time. We will notify registered users by email at least 14 days before material changes take effect. Continued use of the Service after changes constitutes acceptance.

We may suspend or terminate your access if you violate these Terms. You may cancel your account at any time through account settings. Upon termination, you may export your data for 30 days. After that period, your data will be permanently deleted.

These Terms are governed by applicable law. Disputes will be resolved through good-faith negotiation. If unresolved, disputes will be submitted to binding arbitration.

For questions about these Terms: Email: support@tandemlens.net Website: vigil.tandemlens.net Tandem Lens Cybersecurity