TERMS OF SERVICE
Arkeo Cyber (Pty) Ltd
Last Updated: 1/1/2026
1. Introduction
These Terms & Conditions (“Terms”) govern the provision and use of the Managed Detection & Response (“MDR”) services (“Services”) offered by Arkeo Cyber (Pty) Ltd (“Arkeo Cyber,” “we,” “us,” or “our”). By subscribing to or using the Services, you (“Client,” “you,” or “your”) confirm that you have read, understood, and agree to be bound by these Terms.
If you do not agree with these Terms, you must not use the Services.
2. Service Description
Arkeo Cyber provides real-time threat monitoring, detection, response orchestration, incident triage, and cybersecurity analytics through a subscription-based model. The Services may include but are not limited to:
Continuous monitoring of endpoints, networks, and cloud environments
Threat detection using proprietary and third-party tools
Incident investigation and response support
Security analytics and reporting
Threat intelligence enrichment
Alert triage and prioritisation
The precise scope of Services is defined in your subscription plan or statement of work.
3. Subscription Model
3.1 Monthly Subscription
The Services are offered on a monthly subscription basis. Fees are payable in advance and renew automatically unless terminated in accordance with Section 12.
3.2 Modifications to Plans
We may update or modify subscription tiers, inclusions, or pricing. Any material changes affecting active subscriptions will be communicated in advance and will take effect at the start of the next billing cycle.
4. Account Registration and Client Responsibilities
4.1 Account Creation
Clients must provide complete and accurate information when registering an account or onboarding MDR Services.
4.2 Authorised Users
You are responsible for ensuring that authorised users comply with these Terms and maintain appropriate access controls internally.
4.3 Required Client Inputs
You agree to provide:
Accurate network diagrams or environment information
Administrative access where required for deployment
Timely responses to incident notifications
Updated contact details for escalation and approval workflows
Failure to provide required information may limit the effectiveness of the Services.
5. Licence and Usage Rights
5.1 Licence Grant
Arkeo Cyber grants you a limited, non-exclusive, non-transferable licence to access and use the Services during the subscription term.
5.2 Restrictions
You may not:
Reverse engineer, decompile, or attempt to extract underlying code
Circumvent security controls or monitoring mechanisms
Sub-licence, resell, or distribute the Services without written approval
Use the Services for unlawful or harmful activities
6. Data Protection and Security
6.1 Data Types Processed
To deliver MDR Services, Arkeo Cyber may collect, store, or process the following:
Billing and account information
Personally Identifiable Information (PII)
Sensitive financial information
Security event logs, telemetry, and threat intelligence data
System metadata and forensic artefacts
6.2 Data Ownership
All Client data remains the exclusive property of the Client. Arkeo Cyber claims no ownership rights over your data.
6.3 Security Controls
Arkeo Cyber implements industry-standard administrative, technical, and organizational safeguards, including:
Encryption in transit and at rest
Strict access controls and role-based access privileges
Secure logging, monitoring, and audit trails
Vulnerability management and patching processes
6.4 Data Retention
Unless otherwise required by law or outlined in a specific service agreement, incident data and logs may be retained for up to 90 days after service termination.
6.5 Compliance
Arkeo Cyber aims to align with relevant global data protection frameworks including:
GDPR (EU)
POPIA (South Africa)
CCPA (United States – where applicable)
Clients remain responsible for their own compliance obligations within their respective jurisdictions.
7. Service Availability and Limitations
7.1 Availability
While Arkeo Cyber aims for continuous availability, no service can guarantee 100% uptime. Scheduled maintenance will be communicated when practical.
7.2 Limitations of MDR
MDR improves security posture but does not guarantee the prevention of all cyberattacks. Threat landscapes evolve rapidly, and no vendor can assure complete immunity from compromise.
8. Incident Response and Escalation
Arkeo Cyber will notify the Client of confirmed or suspected security incidents that require action. The Client must ensure escalation contacts are valid, responsive, and authorised to approve remediation steps.
If the Client fails to respond or delays approval, Arkeo Cyber is not liable for resultant impact or damages.
9. Third-Party Tools and Integrations
The MDR platform may utilise or integrate with third-party security technologies. Arkeo Cyber is not responsible for third-party outages, changes in functionality, licensing models, or data processing practices.
10. Fees, Billing, and Payment
10.1 Payment Terms
Fees are payable monthly in advance
Invoices are due on issue unless otherwise stated
Failure to pay may result in suspension of Services
10.2 Currency
Pricing is denominated in South African Rands (ZAR) for global clients unless otherwise agreed.
10.3 Non-Refundable Fees
Subscription fees are non-refundable except where required by law.
11. Intellectual Property
All intellectual property associated with Arkeo Cyber’s platform, detections, algorithms, methods, tooling, analytics, and documentation remains the exclusive property of Arkeo Cyber.
Client data and metadata remain the property of the Client.
12. Suspension and Termination
12.1 Termination by Client
The Client may terminate the monthly subscription at any time. Termination becomes effective at the end of the current billing cycle.
12.2 Termination by Arkeo Cyber
We may suspend or terminate Services if the Client:
Fails to pay fees
Breaches contractual obligations
Compromises platform security
Misuses the Services
12.3 Data Handling Post-Termination
Arkeo Cyber will retain data for up to 90 days post-termination, after which it may be securely deleted.
13. Limitation of Liability
To the fullest extent permitted by law:
Arkeo Cyber is not liable for indirect, consequential, incidental, or punitive damages
Total liability for claims in any 12-month period shall not exceed the total subscription fees paid by the Client during that period
Cybersecurity services inherently carry residual risk; the Client acknowledges and accepts this.
14. Indemnification
The Client agrees to indemnify Arkeo Cyber against claims arising from:
Misuse of the Services
Breach of laws or regulations by the Client
Failure to implement recommended security measures
Actions or omissions by Client personnel
15. Disclaimer of Warranties
The Services are provided “as is” and “as available.” Arkeo Cyber disclaims all implied warranties including:
Merchantability
Fitness for a particular purpose
Non-infringement
No guarantee is made that all attacks, intrusions, or breaches will be detected or prevented.
16. Governing Law and Jurisdiction
These Terms are governed by the laws of South Africa, unless otherwise agreed in writing.
For international clients, disputes may be subject to the jurisdiction of courts in:
South Africa, or
The Client’s primary operating country, based on contractual agreement
17. Amendments to Terms
Arkeo Cyber may amend these Terms from time to time. Updated Terms will be posted on our website with the revised “Last Updated” date. Continued use of the Services constitutes acceptance of updated Terms.
18. Contact Information
For legal, billing, support, or security-related enquiries:
Arkeo Cyber (Pty) Ltd
Email: info@arkeocyber.com