Terms of Service

Last updated: September 2026  ·  Version 2.0

1. Who we are

These terms apply to the services and products of Aegix. The provider is Aegix OÜ, registry code 17609403, Sepapaja tn 6, 15551 Tallinn, Estonia. You can reach us at [email protected].

Until 15 October 2026, the provider is Aegix B.V., registered in the Netherlands under Chamber of Commerce number 98632094. From that date, the business of Aegix B.V. continues as Aegix OÜ.

2. When these terms apply

1. These terms apply to every offer, order, subscription and agreement with Aegix, unless we agree otherwise in writing.
2. If you have a signed agreement with us, such as a managed service agreement, that agreement takes precedence where it differs from these terms. After that come your order confirmation or accepted quote, then the product description on our website at the time of purchase, and then these terms.
3. Your own general terms and conditions do not apply, unless we accept them in writing.
4. “You” means our customer. A business customer acts for a trade, business or profession. A consumer is a private individual acting outside a trade, business or profession. Where these terms treat the two differently, we say so. Nothing in these terms limits the rights a consumer has under mandatory law.

3. Our services

1. We provide cybersecurity and IT services, including managed security such as Aegix Protect and Cyber Vigilance 360, cloud backup (VaultGuard), website care (Web Care), digital products such as the AI Hardening Kit, and consultancy: risk assessments, penetration testing, compliance support (for example ISO 27001 and NIS2), and cloud and infrastructure advice.
2. What a service includes is described on its product page, in your order, or in your agreement.
3. We perform our services with care and expertise. This is a best-efforts obligation, unless we explicitly agree a specific result in writing. No security service can guarantee that every attack is stopped or that systems are never compromised.
4. We work with carefully selected third-party security platforms, subcontractors and freelancers to deliver our services. We remain responsible for our services.
5. We may improve or replace the tools and platforms behind a service, as long as the level of protection you receive does not go down.

4. Offers and orders

1. Quotes are without obligation and valid for 30 days, unless they state otherwise.
2. An online purchase is concluded when you complete checkout. Other agreements are concluded when we confirm them in writing or electronically, or when we start the work.
3. Changes to the scope of the work can change the planning and the price. We agree such changes with you before we carry them out.

5. Subscriptions

1. Subscriptions such as Aegix Protect, VaultGuard and Web Care are paid in advance, monthly or yearly. They renew automatically for the same period until you cancel, so your protection does not lapse.
2. You can cancel at any time, by email or through the customer portal. Cancellation takes effect at the end of the period you have paid for. There are no refunds for part of a period, except for the Aegix Protect promise below or where the law requires one.
3. For yearly plans, we send you a reminder about a month before the renewal date. If you cancel before the renewal date, you pay nothing more.
4. Aegix Protect: if we cannot get your protection live and working, you get a full refund.
5. Per-user prices follow the number of users as described on the product page. We check that number with you during onboarding and settle any difference fairly. If the number changes later, we adjust your subscription.
6. Some services have technical requirements, which the product page lists. For example, email security and cloud backup require a business domain on Google Workspace or Microsoft 365.

6. Digital products

1. Digital products such as the AI Hardening Kit are delivered by download immediately after payment.
2. You receive a personal, non-transferable right to use the product for yourself or within your own organization. You may not resell, publish or share it.
3. If anything is wrong with your download, email [email protected] and we fix it.

7. Prices and payment

1. Prices exclude VAT unless stated otherwise. We charge VAT as the law requires. If you are a business customer in a different EU country from us and have a valid VAT number, the VAT is reverse-charged.
2. Online purchases are paid at checkout through our payment provider, Stripe. Subscription renewals are charged automatically to the payment method you provided, unless we agree to invoice you.
3. Invoices are due within 14 days of the invoice date, unless the invoice states otherwise.
4. If a business customer pays late, statutory commercial interest and reasonable collection costs are due. For consumers, the consequences of late payment apply only as far as the law allows.
5. If a payment is overdue, we may suspend the service after notifying you.
6. We may change subscription prices. We tell you at least 30 days before a change takes effect, and you can cancel before then. Price changes in signed agreements follow those agreements.

8. Your responsibilities

Protection works best as a joint effort. You agree to:

• give us correct and complete information, and tell us about changes such as new users, devices or domains;
• install our protection agents on your devices and keep them there, and keep your devices and software supported and up to date;
• give us the access we need, and follow our security advice where that is reasonable;
• keep your passwords and access credentials to yourself;
• respond when we contact you about an incident;
• use our services lawfully.

We are not liable for damage that results from not meeting these responsibilities.

9. Liability

1. We are liable only for direct damage caused by our proven negligence in performing the agreement.
2. For business customers, our total liability per event is limited to the amount you paid for the service concerned in the 12 months before the event, or for one-off work the invoice value of that work, and never more than EUR 1,000,000 per event.
3. For business customers, we are not liable for indirect damage, such as lost profit, lost revenue, loss of data, reputational damage or other consequential loss.
4. These limits do not apply to damage caused by our intent or gross negligence, to death or personal injury, or where the law does not allow them. For consumers, our liability is limited only as far as the law allows.
5. Business customers must report a claim to us in writing as soon as reasonably possible. A claim lapses if it is not reported within 12 months after the event it relates to.
6. We carry professional and general liability insurance.

10. Freelancers and partners

1. We may involve carefully selected freelancers and partners in our work. We remain responsible for the quality of our services.
2. Business customers may not engage a freelancer we introduced to them for similar work, directly or through others, during the agreement and for 12 months after it ends, without our written consent. A penalty of EUR 10,000 per breach is then due.

11. Confidentiality and data protection

1. Both parties keep each other’s confidential information confidential, during and after the agreement.
2. We process personal data in line with the EU General Data Protection Regulation (GDPR), as described in our Privacy Policy.
3. Where we process personal data on behalf of a business customer, a data processing agreement applies. Our standard data processing agreement is available on request.
4. We take appropriate technical and organizational measures to protect your data, and we operate an information security management system certified to ISO/IEC 27001.
5. If a security incident affects your data, we inform you without undue delay.

12. Force majeure

We are not liable for delays or failures caused by circumstances beyond our reasonable control, such as outages at our suppliers, power or internet failures, large-scale attacks on third-party infrastructure, natural disasters or government measures.

13. Intellectual property

1. All intellectual property rights in our reports, advice, software, methods, templates and digital products remain with Aegix or its licensors.
2. You may use them within your own organization, unless we agree otherwise in writing.

14. Term and termination

1. An agreement runs for the term stated in the order or agreement. Subscriptions follow section 5.
2. Unless agreed otherwise, either party can end an agreement for an indefinite term with one month’s notice.
3. We may end an agreement with immediate effect if you do not pay after a reminder, if you are declared bankrupt or granted a suspension of payments, or if you seriously breach the agreement.
4. When an agreement ends, we remove our access and stop the service. We delete or return your data as set out in our data processing agreement and our retention periods, unless the law requires us to keep it.

15. Right of withdrawal for consumers

1. If you are a consumer and buy online, you can withdraw from the agreement within 14 days without giving a reason. The 14 days start on the day the agreement is concluded.
2. To withdraw, send us a clear statement before the 14 days end, by email to [email protected]. You may use the model form below, but you do not have to.
3. We refund all payments within 14 days of receiving your withdrawal, using the same payment method unless you agree otherwise.
4. If you asked us to start a service during the withdrawal period, you pay a proportionate amount for what we provided until you withdrew.
5. For digital content such as the AI Hardening Kit, the right of withdrawal ends once we deliver the download, if you asked for immediate delivery at checkout and acknowledged that you would lose the right of withdrawal.
6. Your statutory rights, including the legal guarantee for services and digital content, are not affected.

16. Transfer of the agreement

1. We may transfer our rights and obligations under an agreement to an affiliate or to a successor of our business, by notifying you in writing.
2. If you are a consumer and object to such a transfer, you can end the agreement, and we refund any amount you paid in advance for the remaining period.
3. You may not transfer your rights or obligations without our written consent.

17. Changes to these terms

1. We may change these terms. Changes apply to new agreements from the moment we publish them on this page.
2. For running subscriptions, we notify you at least 30 days before a change that affects you takes effect. If you do not agree, you can cancel before the change takes effect.

18. Complaints

If you are not satisfied, email [email protected]. We respond within 14 days.

19. Governing law and disputes

1. Agreements with Aegix OÜ are governed by Estonian law. Agreements concluded with Aegix B.V. are governed by Dutch law.
2. We first try to resolve any dispute together. If that does not work, disputes with business customers are submitted to the competent court at our registered office.
3. If you are a consumer, you keep the protection of the mandatory law of the country where you live, and you can also bring a claim before the courts there.
4. The UN Convention on Contracts for the International Sale of Goods does not apply.

20. Final provisions

1. If a provision of these terms is invalid, the other provisions remain in force, and we replace the invalid provision with a valid one that comes as close as possible to its purpose.
2. These terms are written in English. If we provide a translation, the English version prevails.