Under attack? Get 24×7 incident response help now.

Terms of use

The rules for using the SafCY website.

These terms of use (“Terms”) govern your access to and use of safcy.com and its pages, blog and contact form (the “website”). The website is operated by SAFCY TECHNOLOGIES PRIVATE LIMITED, a company incorporated in India (CIN U62011TS2026PTC214796) (“SafCY”, “we”, “us”, “our”).

By using the website, you agree to these Terms and to our Privacy policy.

These Terms are an electronic record under the Information Technology Act, 2000 and the rules made under it. They do not need a physical or digital signature.

1. Who may use the website

You may use the website if you can form a binding contract under the Indian Contract Act, 1872. If you use the website on behalf of an organisation, you confirm that you are authorised to accept these Terms for it.

The website and our services are intended for businesses and professionals. They are not directed at anyone under 18.

2. The website is information, not an offer

The website describes our cybersecurity, privacy and compliance services for general information. Nothing on it is an offer to provide services, a quotation or a guarantee of any result.

Every engagement is governed by a separate written agreement. Before we perform any service (for example a penetration test, red-team exercise, cloud or OT/ICS assessment, forensic investigation or compliance audit), we and the client sign an agreement, such as a master services agreement and statement of work. That agreement sets the scope, written authorisation to test, rules of engagement, fees, confidentiality and liability. If that agreement conflicts with these Terms, the agreement prevails for that engagement.

Service descriptions, timelines, deliverables and figures on the website are indicative. They may change without notice.

Our blog posts, guides, checklists and other content are general information, written in good faith. They are not legal, regulatory, compliance or professional security advice for your situation.

Laws such as the Digital Personal Data Protection Act, 2023, regulatory directions (for example from CERT-In, RBI or SEBI) and industry standards change over time and apply differently to different organisations. Content may not reflect the latest position on the date you read it. Before acting on anything you read here, get advice that considers your specific facts, from us under an engagement or from a qualified adviser.

4. Acceptable use

You agree to use the website only for lawful purposes. You must not:

  1. Scan, probe, test or attack the website or our infrastructure. That includes vulnerability scanning, penetration testing, fuzzing, brute-forcing and load or stress testing, unless we have authorised it in writing (see section 5);
  2. try to gain unauthorised access to any part of the website, including the content-management area, our servers, databases or other users’ data, or bypass any authentication or security measure;
  3. introduce viruses, malware or any other harmful code, or interfere with the website’s operation, including through denial-of-service attacks;
  4. use bots, scrapers or other automated tools to copy, harvest or index content at scale, other than normal search-engine crawling that respects our robots.txt;
  5. submit false, misleading or impersonating information through the contact form, or use it to send spam, advertising or unlawful content;
  6. send us anyone else’s personal data without the right to share it; or
  7. use the website in any way that breaks any applicable law, including the Information Technology Act, 2000 and the Bharatiya Nyaya Sanhita, 2023.

Unauthorised access to, or damage of, computer systems may be an offence under sections 43 and 66 of the Information Technology Act, 2000. We monitor the website for abuse. We may block access, keep relevant logs and report unlawful activity to CERT-In or law-enforcement authorities.

5. Reporting a security vulnerability

We welcome good-faith reports of security vulnerabilities in the website. If you think you have found one, email hello@safcy.com with the subject line “Security report”, including enough detail for us to reproduce it.

When you investigate and report an issue, please:

  • stop as soon as you have confirmed the issue, and do not access, change, download or delete data that is not yours;
  • do not degrade the website’s availability, use social engineering, or attack our staff, offices or clients;
  • give us a reasonable time to fix the issue before telling anyone else about it; and
  • keep the details confidential until we confirm it has been fixed.

We will acknowledge valid reports, keep you informed of our progress and, if you wish, credit you once the issue is fixed. We do not currently run a paid bug-bounty programme.

6. Intellectual property

The website and its content are owned by SafCY or our licensors and are protected by Indian and international intellectual-property laws. That includes text, articles, graphics, logos, icons, illustrations, page designs, the “SafCY” name and marks, and the underlying code.

You may view the website and share links to our pages and articles. You may quote short extracts from our articles if you credit SafCY and link to the original page. You may not otherwise copy, reproduce, modify, republish, sell or create derivative works from the website or its content, or use our name, logos or marks, without our prior written permission.

Third-party names and marks that appear on the website belong to their respective owners. These include ISO/IEC, NIST, OWASP, MITRE ATT&CK, PCI DSS, SOC 2, CIS, CERT-In, RBI and SEBI. Naming a framework, standard or regulator means only that our services relate to it. It does not imply affiliation, certification or endorsement unless we say so expressly.

7. Information you send us

When you contact us, you confirm that the information you give is accurate and that you are entitled to share it. We handle personal data as described in our Privacy policy.

Please do not send confidential or sensitive information through the contact form or by email before an engagement and a non-disclosure agreement are in place. That includes passwords, access credentials, details of unpatched vulnerabilities and evidence from a live incident. If your enquiry involves such information, tell us and we will arrange a secure channel. A professional or confidential relationship begins only when a written agreement is signed.

If you send us suggestions or feedback about the website or our services, we may use it without any obligation to you.

The website links to, and loads some content from, third parties. These include fonts and icons from content-delivery networks, social-media platforms and external references in our articles. We do not control those third parties and are not responsible for their content, availability, security or privacy practices. Your use of them is subject to their own terms.

9. Availability and changes

We work to keep the website secure and available, but we do not guarantee that it will always be available, uninterrupted or error-free. We may change, suspend or withdraw any part of the website at any time, including for maintenance or security reasons, without notice.

10. Disclaimer

To the fullest extent permitted by law, the website and its content are provided “as is” and “as available”. We make no warranty or representation, express or implied, about their accuracy, completeness, timeliness or fitness for a particular purpose.

No security measure, assessment or advice can eliminate every risk. Nothing on the website is a guarantee that any system, organisation or data will be secure or compliant.

11. Limitation of liability

To the fullest extent permitted by law:

  1. SafCY, its directors, employees and agents are not liable for any indirect, incidental, special, consequential or punitive loss or damage arising from your use of, or inability to use, the website or its content. That includes loss of profits, revenue, data, goodwill or business opportunity; and
  2. our total liability to you for all claims relating to the website is limited to ₹1,000 (one thousand rupees).

These limits apply to your use of the website only. Our liability for services is governed by the written agreement for that engagement. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud.

12. Indemnity

You agree to indemnify SafCY against any claims, losses, liabilities and reasonable costs, including legal fees, arising from your breach of these Terms, your misuse of the website, or your violation of any law or third-party right.

13. Suspension

We may restrict, suspend or block your access to the website, without notice, if we reasonably believe you have breached these Terms or are using the website in a way that could harm us, our clients or other users.

14. Changes to these Terms

We may update these Terms from time to time. The updated version takes effect when we publish it on this page. Please check this page regularly. If you keep using the website after a change, you accept the updated Terms.

15. Governing law and jurisdiction

These Terms are governed by the laws of India. Subject to any dispute-resolution clause in a written agreement between us, the courts having jurisdiction over our registered office in Telangana, India have exclusive jurisdiction over any dispute arising from these Terms or the website.

16. General

  • Severability: if any provision of these Terms is found invalid or unenforceable, the rest continue in full force.
  • No waiver: if we do not enforce a right, we have not waived it.
  • Assignment: we may transfer our rights and obligations under these Terms to a successor organisation. You may not transfer yours without our written consent.
  • Entire terms: these Terms and our Privacy policy are the entire agreement between you and SafCY about your use of the website.

17. Contact

Questions about these Terms can be sent to hello@safcy.com or through our contact page.

For questions or complaints about your personal data, contact our Grievance Officer, Srinivas K, at srinivas@safcy.com, as described in our Privacy policy.