Service Terms

Your written proposal

Each engagement has a written proposal setting the scope, deliverables, fees, timing and exclusions. Fees are in AUD, ex GST; GST is added where applicable. The signed proposal prevails over these general terms to the extent of any inconsistency, subject to rights that cannot lawfully be excluded.

Initial assessment: completed within 3–5 business days. Project timeframe: confirmed in your proposal, based on your scope. Timely access and the information agreed in the proposal are needed to meet the schedule.

Your responsibilities

You must provide accurate information, timely access, current backups before testing and authority to approve work on all systems in scope. You are responsible for arranging any required system-owner or other approvals and telling us about operational constraints, sensitive information and third-party restrictions.

Testing approval

No security or load testing begins without written approval from the system owner and agreed rules, targets, testing windows, escalation contacts and stop conditions. Only the agreed systems and activities are included.

Specialist practitioners

We may engage qualified specialist practitioners and subcontractors matched to your scope under confidentiality obligations. CYRENTIQ remains your point of contact. Relevant access, responsibilities and information-handling arrangements are agreed before delivery.

Scope and limitations

Assessments and tests are point-in-time and limited to the agreed scope. They cannot identify every weakness or defect or prevent every incident. Findings depend on the systems, access, information and conditions available during the engagement. We do not guarantee defect-free software, uninterrupted service or a particular security outcome.

AI-assisted testing tools are used only where agreed, with appropriate safeguards and human review. Our services are not legal advice.

Certification and audit reports

We provide readiness and advisory services. ISO/IEC 27001 certificates are issued by independent accredited certification bodies. SOC 2 reports are issued by independent licensed audit firms. Their fees are separate. We do not issue certificates or audit reports of this kind, and do not guarantee certification or audit outcomes.

Managed services and additional work

Ongoing monitoring, managed backups and other managed services are provided under a separate agreement. Emergency incident response, implementation and remediation work are not included unless agreed in writing. Changes to scope, access, testing or deliverables must be agreed before additional work begins.

Confidentiality

We treat client information, security evidence and reports as confidential, use them for the agreed engagement and restrict access to authorised recipients who need them. Confidentiality obligations apply to specialist practitioners and subcontractors. Disclosure may be made where required by law. Retention, secure transfer and deletion arrangements are agreed for the engagement.

Fees, payment and cancellation

Fees, invoicing, payment dates, deposits, cancellation, rescheduling and any related charges are stated in your proposal. Please raise any invoice or delivery concern promptly so we can discuss it.

Liability and consumer rights

To the extent permitted by law, our total liability for an engagement is limited to the fees paid for that engagement, and we are not liable for indirect or consequential loss, including loss of profit, revenue or data. Nothing in these terms excludes, restricts or modifies rights or guarantees under the Australian Consumer Law or other laws that cannot lawfully be excluded, restricted or modified.

Governing law

These terms and engagements are governed by the laws of Victoria, Australia, subject to mandatory applicable laws. Please contact us first about a dispute so we can seek a practical resolution.

Contact CYRENTIQ

(03) 9070 0878
16D McCartin Street, Leongatha VIC 3953
info@cyrentiq.com.au