Terms of Service

Validra provides application security audit and review services (the "Production Readiness Scan" and "Production Readiness Review"), designed to identify potential vulnerabilities in an application before it goes into production.

The services provided by Validra consist of a technical analysis performed at a given point in time, combining automated tooling and manual testing, based on the information, access, and materials provided by the client.

This analysis is a good-faith assessment, carried out using practices and knowledge reasonably available at the time of the engagement. It does not, under any circumstances, constitute:

• a guarantee of the absence of any vulnerability, flaw, or security defect, whether or not detected during the engagement;

• a guarantee against any cyberattack, intrusion, data breach, or other security incident, past, present, or future;

• a commitment of regulatory compliance (GDPR, PCI-DSS, ISO 27001, or any other standard), unless explicitly stated in the contracted scope;

• a certification, a legal compliance audit, or a forensic or judicial expert opinion.

The client acknowledges that information security is a constantly evolving field and that no analysis, however rigorous, can guarantee the total absence of risk. The client remains solely responsible for implementing the recommendations, for the ongoing security of their application after the engagement, and for any decision made based on the report provided.

Production Readiness Scan: automated review plus targeted manual verification, delivered within 48 hours.

Production Readiness Review: complete manual audit, business impact analysis, prioritized roadmap, and a debrief call, delivered within 5 business days.

The exact scope of each service is described on the Pricing page at the time of order.

The client provides Validra with the access necessary to perform the engagement (read-only repository access, staging or test environment URL, relevant technical information). Validra never requires write or administrator access to production systems. The client warrants that they hold the necessary rights to authorize this access.

Applicable prices are those displayed on the website at the time of order, in euros. Payment is due according to the terms communicated when booking. Unless stated otherwise, services are invoiced in full before or upon delivery of the report.

Stated timelines (48 hours for the Scan, 5 business days for the Review) are indicative and start once all necessary access and information have been received. They may be extended in case of missing elements, a larger-than-expected scope, or specific technical constraints, without giving rise to any compensation.

The report delivered to the client belongs to the client and may be used freely internally. Validra retains ownership of its methodology, tools, and know-how.

Validra commits to treating any information, source code, or data shared by the client during the engagement as strictly confidential, and will not disclose it to any third party. A non-disclosure agreement (NDA) can be signed before any engagement, at the request of either party.

To the extent permitted by applicable law, Validra's total liability for any engagement, for all claims combined, is capped at the amount actually paid to Validra for that engagement.

Validra shall under no circumstances be liable for indirect damages, including but not limited to: data loss, business interruption, loss of revenue, reputational harm, or the consequences of a cyberattack occurring before, during, or after the engagement.

This limitation does not apply in the event of willful misconduct or gross negligence by Validra.

For business clients (B2B), statutory consumer withdrawal rights do not apply. Where applicable consumer law would otherwise grant a withdrawal period, the client expressly agrees, by requesting that the engagement begin, that the service is fully performed before the end of that period and that the right of withdrawal no longer applies once work has started.

Any cancellation request made before the engagement begins may be eligible for a refund under the terms communicated at booking. Once an engagement has started, amounts paid remain due to Validra in proportion to the work completed.

These Terms are governed by French law. Any dispute regarding their interpretation or performance shall, failing an amicable resolution, fall under the exclusive jurisdiction of the competent French courts.

For any question regarding these Terms: teobrondel6@gmail.com. Operated by Téo Brondel, sole trader (auto-entrepreneur), SIRET 935 405 985 000 18, registered address: 17 rue Primo Levi, 28300 Lèves, France.