Terms and Conditions

1. Acceptance of these terms

By accessing or using cyberintech.com (the "Website"), or by engaging CyberInTech for services, you agree to these Terms and Conditions. If you do not agree, please do not use the Website. Specific engagements are additionally governed by the signed proposal, statement of work, or master services agreement ("Engagement Agreement"); where an Engagement Agreement conflicts with these terms, the Engagement Agreement prevails.

2. Definitions

"CyberInTech", "we", "us"

The CyberInTech entity identified in the Contact section below.

"Client"

An organisation or individual that engages CyberInTech under an Engagement Agreement.

"Services"

Cybersecurity compliance consulting, GRC, managed IT and security services, and related advisory services described in a proposal or on this Website.

"Deliverables"

Reports, gap assessments, plans, configurations, documentation, and other work products we provide under an engagement.

"Content"

Text, graphics, logos, and materials published on this Website.

3. Permitted use of this website

You may browse, download, and print pages from this Website for your own legitimate business or personal information purposes. You agree not to:

• use the Website in any way that breaches applicable Saudi Arabian or other applicable law;
• attempt to gain unauthorised access to the Website, its servers, or related infrastructure (including by scanning, probing, or testing vulnerabilities without written permission);
• introduce malware, or attempt denial-of-service or similar attacks;
• scrape, copy, or reuse substantial parts of the Website content for commercial purposes without our prior written consent;
• misrepresent your identity or affiliation when contacting us.

Permission to use security-testing tooling against our own systems must be requested in writing; unauthorised testing will be reported to the relevant authorities and providers.

4. Website content and information

Content on this Website - including articles, framework guides, and regulatory summaries - is provided for general information. It does not constitute legal, regulatory, or security advice for your specific circumstances, and should not be relied upon as a substitute for a formal assessment or consulting engagement. Regulatory frameworks referenced (including NCA ECC and its derivative controls, SAMA CSF, and PDPL) are amended from time to time; we do not undertake to update Website content immediately upon such changes.

5. Service engagements

5.1 Scope

Each engagement is defined by its Engagement Agreement, which sets out scope, assumptions, deliverables, timeline, and fees. Work outside that scope is performed only under a written change approval.

5.2 Performance

We will perform Services with reasonable skill and care by suitably qualified personnel, in accordance with the agreed timeline. Timelines depend on timely Client inputs (see Section 7).

5.3 Subcontractors and personnel

We may use vetted subcontractors to perform parts of the Services and remain responsible for their work. Named consultants may be substituted with personnel of equivalent seniority.

6. Fees, invoicing and payment

• Fees are stated in the Engagement Agreement and are exclusive of VAT, which is added where applicable.
• Invoices are payable within the period stated on the invoice (unless otherwise agreed) by bank transfer to the account we nominate.
• Overdue amounts may accrue interest or pause work until cleared, at our discretion and as permitted by law.
• Expenses are pre-agreed in the Engagement Agreement and billed at cost with receipts.

7. Client responsibilities

Effective compliance work depends on cooperation. The Client agrees to: provide timely access to systems, personnel, and documentation reasonably required; nominate a decision-maker with authority to approve deliverables; respond to review requests within agreed timeframes; and ensure information provided to us is accurate and lawfully obtained. Delays in Client inputs may extend timelines and, where significant, adjust fees.

8. Confidentiality and data protection

Both parties will protect the other's confidential information with at least the same care used for their own, use it only for the engagement, and return or destroy it on request. We process personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and our privacy practices; details of how we handle Website and engagement data are available on request and in our privacy notices. Security-specific obligations (access handling, evidence custody, breach notification) may be supplemented in the Engagement Agreement.

9. Intellectual property

• Our pre-existing materials: methodologies, templates, and tooling we bring to an engagement remain ours.
• Deliverables: on full payment, the Client receives the deliverables for its internal business use; ownership terms may be tailored in the Engagement Agreement.
• Website content: all Content on this Website is owned by or licensed to CyberInTech and may not be reproduced commercially without written consent.
• Third-party materials: frameworks and standards referenced (e.g., NCA, SAMA, ISO publications) remain the property of their respective owners.

10. Disclaimers

The Website and its Content are provided "as is" without warranties of any kind. To the fullest extent permitted by law, we disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Website will be uninterrupted, error-free, or free of harmful components, or that following Website content alone will achieve any compliance outcome. Compliance conclusions are delivered only through engagements and depend on facts available at the time.

11. Limitation of liability

To the fullest extent permitted by law: (a) neither party is liable for indirect, incidental, special, or consequential losses, including lost profits or data, however arising; and (b) each party's aggregate liability arising out of the Website or an engagement is limited to the fees paid or payable under the relevant Engagement Agreement in the twelve (12) months preceding the claim. Nothing in these terms limits liability that cannot be limited by law, including for fraud or death or personal injury caused by negligence.

12. Third-party links and services

This Website may link to third-party sites or services for convenience. We do not control and are not responsible for their content, policies, or availability, and linking does not imply endorsement. Your use of third-party services is at your own risk and subject to their terms.

13. Termination

Either party may terminate an engagement for material breach not remedied within 15 days of written notice, or immediately if the other becomes insolvent. On termination: accrued fees become payable; the Client pays for work performed to date; and each party returns or destroys the other's confidential information as requested. Provisions intended to survive (confidentiality, IP, liability, governing law) survive termination.

14. Governing law and disputes

These terms and any engagement are governed by the laws of the Kingdom of Saudi Arabia. The parties will first attempt to resolve any dispute in good faith through senior-level discussion for 30 days. Unresolved disputes are subject to the exclusive jurisdiction of the competent courts of Riyadh, unless the Engagement Agreement specifies arbitration.

15. Changes to these terms

We may update these terms from time to time. The current version, with its effective date, is always published on this page. Material changes that affect active engagements will be communicated directly; continued use of the Website after publication constitutes acceptance of the updated terms.

16. Contact