Terms of Service
Engagement principles for resilient protocol defense.
These terms govern the delivery of audits, intelligence retainers, and incident response support offered by DeFiAuditHub. Individual statements of work may supplement these terms with additional scope-specific provisions.
1. Services
We provide security assessments, continuous monitoring, and advisory services as detailed in mutually executed agreements. Deliverables will follow the methodologies, timelines, and acceptance criteria defined in the applicable statement of work.
2. Client Responsibilities
Clients must supply accurate technical documentation, provide timely access to systems and stakeholders, and maintain secure communication channels throughout the engagement.
Coordinated disclosure of critical findings requires client cooperation for remediation scheduling and public communications.
3. Confidentiality
Both parties agree to protect confidential information using reasonable care and limit disclosure to authorized personnel. Confidential data includes source code, infrastructure details, findings, and any non-public intelligence shared during the engagement.
4. Intellectual Property
Clients retain ownership of their systems and deliverables specific to their environment. DeFiAuditHub retains ownership of proprietary methodologies, tooling, and research artifacts used to deliver the services.
5. Warranties and Limitations
Our services are provided on a best-effort basis without warranties of uninterrupted operations or absolute security. Liability for direct damages is limited to fees paid in the preceding six months unless prohibited by law.
6. Incident Response
For retainers, our rapid response commitments apply once critical incident criteria are met and incident channels are activated. Clients remain responsible for executing operational mitigations under our guidance.
7. Governing Law
These terms are governed by the laws set forth in the master service agreement. Disputes will be resolved through binding arbitration unless otherwise required by jurisdictional regulations.
Effective date: November 10, 2025