Terms of Service

1. Who We Are and What These Terms Cover

These Terms of Service (the “Terms”) govern access to and use of the DNS Armor™ products and services and of this website, provided by SECURE DOMAINS MANAGED CYBER SECURITY SERVICES PROVIDER (“Secure Domains”, “we”, “us”, “our”), a company licensed in Dubai, United Arab Emirates under commercial licence No. 1357380 issued by the Dubai Department of Economy and Tourism.

In these Terms, the “Service” means, collectively:

• DNS Armor™ Protect — cloud-based protective DNS resolution, DNS firewalling and policy enforcement, together with the endpoint agents for Microsoft Windows, Apple macOS, Linux, Google Android and Apple iOS, and the local DNS Security resolver deployed on-premises or in your own cloud.
• DNS Armor™ Resolve — authoritative DNS hosting for zones and records you own or control, including optional capabilities such as DNSSEC and traffic steering.
• The DNS Armor™ administration portal and its APIs, through which tenants, users, policies and subscriptions are managed.
• This website at secure-domains.org, our documentation, and the support and operational communications associated with the foregoing.

These Terms are published in full for transparency. They consolidate the terms that are presented for acceptance inside the Service, so that customers, prospective customers and their procurement and security teams can review them before signing up.

2. Which Terms Apply to You, and Which Prevail

• Self-signup accounts — Personal, Business (SMB) and Education & Library accounts created directly through the Service — are governed by Part I and Part II.
• Enterprise, government and MSP customers are governed by Part I and Part III, together with any master services agreement, order form, purchase order or reseller agreement executed with Secure Domains (the “Agreement”).

Order of precedence. This page is a published consolidation, not a replacement for what you have signed or accepted. Where documents conflict, the following order applies, from highest to lowest: (1) a written Agreement, order form or reseller agreement executed by Secure Domains; (2) the version of the terms you accepted inside the Service, which is the version binding on your account; (3) these published Terms. Where a signed Agreement is silent on a matter, these Terms apply to fill that gap.

The Privacy Policy is incorporated into these Terms by reference and is available at secure-domains.org/privacy. The Data Processing Addendum set out in Part II of the Privacy Policy applies only where you use the Service as a controller of personal data and we act as your processor — that is, to Business (SMB), Education & Library, enterprise, government and MSP customers. It does not apply to Personal accounts, which we operate as controller. The audit, sub-processor-notification and data-return provisions of the Data Processing Addendum apply only to customers holding a signed Agreement with Secure Domains. Where the Data Processing Addendum and these Terms conflict on liability, Section 9 governs.

3. Acceptance and Eligibility

By registering for, accessing or using the Service — including by clicking to accept these Terms in the Service — you confirm that you have read, understood and agree to be bound by them and by the Privacy Policy.

You must be at least 18 years of age and legally capable of entering into a binding contract. If you accept these Terms on behalf of an organisation, you represent and warrant that you are authorised to bind that organisation, and “you” refers to both you and that organisation.

Where we make a material change to these Terms, we may require you to review and accept the updated version in the Service before continuing to use it.

4. Accounts, Credentials and Administrators

You must provide accurate, current and complete information when creating your account and keep it up to date. Notices we are required to send you — including billing, security and service notices — are sent to the address registered on the account.

You are responsible for safeguarding the credentials issued under your account or tenant, for enforcing appropriate access controls (including multi-factor authentication where available), and for all activity that occurs under those credentials. Administrators are responsible for the roles and permissions they grant to other users.

Notify us immediately at security@secure-domains.org, or at support@secure-domains.org, if you suspect any unauthorised access to or use of your account.

5. Acceptable Use

You agree to use the Service only for lawful purposes and in accordance with these Terms. You shall not:

• Use the Service for any unlawful purpose or in violation of any applicable law or regulation.
• Interfere with or disrupt the Service, or the servers, resolvers and networks connected to it, including by generating abusive volumes of automated queries or by any denial-of-service activity.
• Attempt to gain unauthorised access to any part of the Service, to another customer’s tenant, or to any data you are not entitled to access.
• Use the Service to host, distribute or transmit malware, phishing content, spam or any other harmful or unlawful content.
• Resell, sublicense, rent out or otherwise commercially redistribute the Service or access to it, except where your Agreement expressly authorises you to do so (for example under an MSP or reseller agreement).
• Circumvent or attempt to circumvent any usage limit, capacity, licensing or metering control, or misrepresent your account type or eligibility in order to obtain entitlements you are not entitled to.
• Copy, modify, reverse engineer, decompile or create derivative works from the Service or any of its software components, except to the extent that restriction is prohibited by applicable law.
• Publish or disclose to any third party the results of any benchmark, penetration test, detection-rate test or other evaluation of the Service without our prior written consent.

We may investigate suspected breaches of this section and may suspend the Service in accordance with Section 13 (Suspension and Termination).

6. Your Data, Privacy and Data Protection

To provide the Service we process DNS queries originating from the devices and networks you protect, together with the account, configuration and device information described in the Privacy Policy. DNS query logs are stored and archived in the geographic region assigned to, or selected by, your account, save where processing elsewhere is necessary for support, administration, security or continuity, as described in the Privacy Policy.

Our collection and use of personal information, our role as data processor or data controller, our security measures, our sub-processors and our cross-border transfer mechanisms are described in the Privacy Policy and its Data Processing Addendum, which form part of these Terms.

Where you deploy the Service for employees, contractors, students, family members or other end users, you are responsible for having a lawful basis to do so, for informing those individuals as required by the law applicable to you, and for obtaining any consent that law requires — including in relation to the logging of DNS activity. You are also responsible for the accuracy and lawfulness of the data you enter into the Service, including DNS zone data you host on Resolve.

7. Service Availability — No Service Level Agreement

The Service is provided on an “as available” basis. Unless a service level agreement is expressly agreed in a written order form or Agreement executed by Secure Domains, the Service carries no uptime commitment, no guaranteed response or resolution times, and no service credits, refunds or other remedies for unavailability, latency or degraded performance. This Section does not exclude or limit any remedy that cannot be excluded or limited under the law applicable to you, including mandatory consumer rights — see Section 32.

Our security measures are described in the Privacy Policy and are subject to Section 8. We may carry out planned maintenance, and may carry out emergency maintenance without prior notice where necessary to protect the security, integrity or stability of the platform.

We may apply reasonable technical limits — for example on query rates or automated API calls — to protect the Service and its other customers.

Support is provided by email at support@secure-domains.org on a commercially reasonable efforts basis. Named support contacts, priority handling and defined response times are available only where agreed in an Agreement or order form.

8. Disclaimer of Warranties

To the maximum extent permitted by law, the Service is provided “as is” and “as available”, without warranties or conditions of any kind, whether express, implied or statutory — including any implied warranty of merchantability, fitness for a particular purpose, non-infringement, accuracy, or quiet enjoyment.

Security-specific disclaimer

• No security control detects or blocks every threat. Protective DNS relies on threat intelligence, classification and heuristics that are inherently incomplete and change continuously. We do not warrant that the Service will identify, block or prevent any particular threat, malicious domain, phishing campaign, malware infection, data exfiltration attempt or policy violation.
• False positives and false negatives will occur. Legitimate destinations may occasionally be blocked and harmful destinations may occasionally be allowed. You are responsible for testing policies and filtering profiles before deploying them widely, and for maintaining a means of correcting a block that affects your operations.
• DNS-layer protection is one layer of defence, not a complete security programme. It does not replace endpoint protection, email security, patching, backup, monitoring, user awareness or incident response, and it cannot protect traffic that does not pass through it — for example applications using hard-coded resolvers, alternative encrypted DNS providers, or networks on which the Service is not deployed.
• We do not warrant that the Service will meet the regulatory or compliance obligations applicable to you. Determining whether the Service is suitable for your regulatory environment remains your responsibility.
• Classifications, reports and analytics are informational. Domain categorisations, threat verdicts, risk scores, dashboards and reports produced by the Service are automated outputs, may be incomplete or incorrect, and do not constitute security, legal or professional advice or a determination that any destination is safe or unsafe.
• We do not warrant that the Service will be uninterrupted, timely, error-free or free of harmful components, or that any defect will be corrected.

Nothing in this section excludes or limits any warranty or right that cannot be excluded or limited under the law applicable to you, including mandatory consumer rights.

9. Limitation of Liability

Your sole and exclusive remedy for any unavailability, interruption, latency, degraded performance, or failure of the Service to detect, block or prevent any threat is, at our option: (a) a service credit, or (b) an extension of your subscription term, in each case of up to the value of the affected period. We do not provide cash refunds for partial billing periods.

Where a remedy under the preceding paragraph is unavailable or is held unenforceable, then whether a claim arises in contract, tort (including negligence), breach of statutory duty or otherwise, the total aggregate liability of Secure Domains and of its affiliates, officers, employees, licensors and suppliers, for all claims and all events arising out of or in connection with the Service, these Terms, the Privacy Policy and the Data Processing Addendum, shall not exceed the greater of (a) the amounts you paid to Secure Domains for the Service in the twelve (12) months preceding the first event giving rise to the claim, and (b) one hundred United States dollars (USD 100) for self-signup accounts, or one thousand United States dollars (USD 1,000) for accounts held under an Agreement. These limits are aggregate and are not cumulative: further claims or events do not increase them.

To the maximum extent permitted by law, we are not liable for any indirect, incidental, special, consequential or punitive damages, nor for any loss of profits, revenues, business, goodwill, anticipated savings or data, nor for the cost of substitute services, nor for any loss, cost or damage arising from any threat, malicious domain, phishing campaign, malware infection, data exfiltration, intrusion or content that the Service did not detect, block or prevent — even if we have been advised of the possibility of such damages.

Where the Service is supplied to you through a managed service provider or reseller, amounts you paid to that provider are not fees paid to Secure Domains, and your remedies in respect of that supply lie against that provider under your contract with it.

Any claim arising out of or in connection with the Service must be brought within twelve (12) months of the date on which the claiming party first became aware, or ought reasonably to have become aware, of the facts giving rise to it, except where a longer period is required by mandatory law.

Nothing in these Terms excludes or limits liability for fraud or fraudulent misrepresentation, for death or personal injury caused by negligence, for gross negligence or wilful misconduct, or for any other liability that cannot lawfully be excluded or limited under the law applicable to you, including mandatory consumer rights. If any exclusion or limitation in this Section is held unenforceable, the remainder continues to apply, and that exclusion or limitation applies to the maximum extent permitted by law. The allocation of risk in Sections 7, 8 and 9 is a fundamental element of the pricing of the Service and applies notwithstanding the failure of any limited remedy of its essential purpose.

10. Your Indemnity

If you use the Service other than as a Personal account holder — that is, as a Business (SMB), Education & Library, enterprise, government or MSP customer — you will defend, indemnify and hold harmless Secure Domains and its officers, employees and suppliers against any third-party claim, and any resulting loss, damage, fine or reasonable legal cost, arising from:

• your use of the Service in breach of these Terms or of any applicable law;
• the data, domains, DNS zones or content you place in or route through the Service, including any claim that it infringes a third party’s rights;
• your failure to provide the notices or obtain the consents described in Section 6; or
• the acts or omissions of your users, and — for MSPs and resellers — of your end customers.

11. Intellectual Property and Feedback

The Service, and all software, content, trademarks, service marks, logos and trade names within it, are the property of Secure Domains or its licensors and are protected by intellectual property law. DNS Armor™ is a trademark of Secure Domains, registered in the United Arab Emirates. Subject to these Terms and your Agreement, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service during your subscription term for the purposes permitted in Part II or Part III. No other rights are granted.

You retain all rights in the data and configuration you place in the Service. You grant Secure Domains a non-exclusive, worldwide, royalty-free licence to host, store, copy, transmit, display and process that data and configuration to the extent necessary to provide, secure, support and maintain the Service. We may also generate and use aggregated and de-identified data derived from use of the Service — including threat and traffic statistics that do not identify you, your users or your organisation — to operate, secure and improve the Service and our threat intelligence. If you send us feedback, suggestions or feature requests, you grant us a perpetual, worldwide, royalty-free right to use them to improve the Service, without obligation or attribution to you.

12. Third-Party Components, Integrations and Beta Features

The Service incorporates third-party and open-source components, and relies on third-party providers including cloud infrastructure, threat-intelligence feeds, payment processing and email delivery. Both DNS Armor™ Protect and DNS Armor™ Resolve are delivered from cloud regions operated by Microsoft Azure and/or Huawei Cloud, depending on the region serving your account; the current list of providers is published at secure-domains.org/subprocessors. Those components and providers are governed by their own terms and licences, and we are not responsible for their acts or omissions beyond the obligations we have accepted in the Privacy Policy and its Data Processing Addendum.

Where you connect the Service to your own tooling — for example a SIEM, SOAR or reporting platform — you are responsible for that integration and for the credentials you issue to it.

Features identified as beta, preview, early access, pilot or evaluation are provided for testing only. They are exempt from any service level agreement, may change or be withdrawn at any time without notice, and are provided “as is” with the limitations in Sections 8 and 9 applying in full.

13. Suspension and Termination

We may suspend or terminate access to the Service, in whole or in part, where you materially breach these Terms, where fees are unpaid, where we are required to do so by law or by a competent authority, or where suspension is necessary to protect the security, integrity or availability of the platform and its other customers. Where practicable and lawful, we will give you notice and an opportunity to remedy.

You may stop using the Service at any time; the consequences for your subscription and data are set out in Part II (self-signup accounts) or Part III and your Agreement (enterprise, government and MSP customers).

14. Export Control, Sanctions and Lawful Use

The Service is provided from the United Arab Emirates and is subject to applicable export control and sanctions laws. You represent that you are not located in, ordinarily resident in, or acting on behalf of a person or entity in a jurisdiction subject to comprehensive sanctions, that you are not a restricted or designated party under any applicable sanctions regime, and that you will not make the Service available to any such person, entity or jurisdiction.

15. Force Majeure

Neither party is liable for any failure or delay in performance caused by events beyond its reasonable control, including acts of God, natural disaster, war, civil unrest, epidemic, labour action, act of government or regulator, failure or unavailability of internet or telecommunications infrastructure, failure of an upstream cloud region or provider, and denial-of-service or other attacks. This does not excuse an obligation to pay fees already due.

16. Changes to the Service and to These Terms

We continually develop the Service and may add, modify or discontinue features. If we make a change that materially reduces the Service you have paid for, we will notify you in advance where reasonably possible.

We may update these Terms from time to time to reflect changes to the Service, to applicable law or to our business practices. The “Last Updated” date above reflects the most recent revision. Material changes will be notified to you — for example by email or in the administration portal — and, where we require it, you will be asked to accept the updated Terms before continuing to use the Service. Continued use after the effective date of a change constitutes acceptance. If you do not accept a change, your remedy is to stop using the Service and cancel your subscription as described in Part II or your Agreement.

17. Governing Law and Disputes

These Terms are governed by the federal laws of the United Arab Emirates and the laws of the Emirate of Dubai, without regard to conflict-of-law rules. The courts of Dubai have exclusive jurisdiction over any dispute arising out of or in connection with these Terms or the Service, unless your Agreement expressly provides for a different forum or for arbitration.

Before commencing proceedings, each party agrees to notify the other in writing and to attempt in good faith to resolve the dispute for a period of thirty (30) days. This does not apply to, and nothing prevents either party from immediately pursuing, a claim for unpaid fees, a claim to protect intellectual property or confidential information, or an application for urgent injunctive relief. This Section does not deprive a consumer of the protection of mandatory provisions of the law of their country of residence, or of any right they have under mandatory law to bring proceedings in the courts of that country.

18. General Provisions

• Entire agreement and non-reliance. These Terms, the Privacy Policy and (where applicable) your Agreement constitute the entire agreement between the parties regarding the Service and supersede all prior discussions, proposals and representations. Each party acknowledges that it has not relied on, and has no remedy in respect of, any statement, representation, assurance, demonstration, benchmark or warranty that is not expressly set out in these Terms or in your Agreement. Nothing in this provision limits liability for fraud or fraudulent misrepresentation.
• Assignment. You may not assign or transfer these Terms without our prior written consent. We may assign them to an affiliate or in connection with a merger, acquisition or sale of assets.
• Severability and waiver. If any provision is held unenforceable, it will be modified to the minimum extent necessary and the remainder will stay in force. A failure to enforce a provision is not a waiver of it.
• No third-party beneficiaries. These Terms do not create rights for any person other than the parties, except that our suppliers and licensors may rely on the disclaimers and liability limitations in Sections 8 and 9.
• Notices and electronic communications. We may give notice by email to your registered address or through the administration portal, and you consent to receiving communications electronically. Notices to us should be sent to support@secure-domains.org.
• Independent parties. Nothing in these Terms creates a partnership, joint venture, agency or employment relationship.
• Confidentiality. Each party will keep confidential any non-public information of the other that it receives in connection with the Service — including pricing, security information, unreleased features and support communications — and use it only for the purposes of these Terms. This does not apply to information that is or becomes public other than by breach of these Terms, or that must be disclosed by law.
• Survival. Sections 5, 6, 7, 8, 9, 10, 11, 12, 14, 15, 17, 18 and 19 survive termination or expiry, together with any other provision that by its nature is intended to survive.
• Language. These Terms are published in English and Arabic. The Arabic text is provided for convenience; in the event of any discrepancy, the English text prevails, except where mandatory law requires otherwise.

19. Use of This Website

The content of this website — including product pages, documentation, blog articles and event material — is provided for general information only and does not constitute security, legal or professional advice. We may change it at any time without notice.

You may not scrape, harvest or systematically extract content from this website, use it to train models without our written consent, or use our trademarks and branding without permission. Links to third-party sites are provided for convenience; we do not control them and are not responsible for their content or practices.

20. Contact

Questions about these Terms, your subscription or your Agreement: support@secure-domains.org. Privacy and data subject requests: privacy@secure-domains.org. Security disclosures: security@secure-domains.org.

Secure Domains, Dubai, United Arab Emirates.

21. Account Types and Scope

• Personal accounts are provided for your personal and household use only.
• Business (SMB) accounts may be used for the internal business purposes of the organisation named at signup, as described in Section 28.
• Education & Library accounts are available only to accredited educational institutions and to public or community libraries, subject to verification, as described in Section 29.

You may register only one account per person, and you may not share your account with, or transfer it to, anyone else. If you need the Service for a larger organisation or as a managed offering, our enterprise and MSP editions are available under a separate agreement — see Part III.

22. Free Trial

First-time subscribers receive a free trial of the length shown at signup. You are not charged during the trial; your first charge is taken automatically when the trial ends, for the plan, seat count and billing interval then in effect.

The trial is offered once per person and per account. If your account has previously held a subscription — including one that was cancelled or lapsed — a new subscription is billed from its start date without a further trial.

23. Plans, Billing and Payments

Advance billing

Subscriptions are billed automatically in advance. On each renewal date your payment card is charged for the upcoming billing period according to the subscription active at that moment. Billing cycles are monthly or annual, as selected by you. Your invoice may also include prorated charges or credits arising from changes you made during the previous period.

Usage-based components

Parts of the Service are priced per seat or in usage blocks. DNS Armor™ Protect is priced per protected device (seat). DNS Armor™ Resolve is billed in usage blocks of hosted zones and DNS records, at the block sizes and prices shown in the Service. Resolve block counts adjust automatically as the number of zones and records you host grows or shrinks, and the resulting charges or credits appear on your next invoice; on annual plans, blocks added mid-year are prorated for the remainder of the year.

Payment processing, invoices and prices

Payments are processed by our payment provider, Stripe. Card details are entered with and held by Stripe; we receive only limited information such as the card brand and the last four digits. Your invoices, including PDF downloads, are available on the Manage Subscription page.

The prices shown at signup and on the plan pages are retrieved from our payment provider at the time they are displayed and may exclude taxes, which are added where required by law. A price change does not affect a billing period you have already paid for: your subscription keeps its pricing until you change your plan or we notify you of a price change, which takes effect no earlier than your next renewal.

24. Plan and Seat Changes

Upgrades and seat increases take effect immediately: the added capacity is available to you at once, and the prorated cost of the increase for the remainder of the current billing period is charged on your next invoice, together with the upcoming period at your new plan and seat count. By making such a change — and by continuing to use the increased capacity — you agree to pay those prorated charges.

Downgrades and seat decreases likewise take effect immediately, with a prorated credit applied to your next invoice. A decrease is refused while your current usage — for example protected devices, networks, zones or plan features in use — exceeds what the reduced plan or seat count allows. The amount you will be charged or credited is shown to you for confirmation before any change is applied.

25. Cancellation and Refunds

You may cancel your subscription at any time from the Manage Subscription page. Cancellation takes effect at the end of the billing period you have already paid for: no further charges are made, and you keep full access to the Service until that period ends. If you cancel during your free trial, your subscription ends when the trial ends and you are not charged.

You may reactivate a cancelled subscription at any time before the end of the paid period, in which case billing resumes at the next renewal date as normal. We do not provide refunds or credits for partial billing periods, except where required by applicable law.

If you are a consumer in a jurisdiction that grants a statutory right of withdrawal (for example, 14 days in the EU and the UK), nothing in these Terms limits that right. Because you are not charged until your free trial ends, cancelling during the trial costs you nothing.

26. Failed Payments, Disputes and Suspension

If a renewal charge fails, we automatically retry the payment and notify you so that you can update your payment method. If payment cannot be collected, the Service is suspended after the last day you have paid for.

If a payment dispute or chargeback is opened with your card issuer, we may suspend the Service while the dispute is under investigation, and plan, seat and other billing changes on your account are suspended until it is resolved. If the dispute is resolved against us, your subscription is cancelled and the Service is deactivated.

27. Account Deletion and Data Erasure

Deletion is irreversible. Deleting your account, or the automatic deletion of an unpaid account, removes your account data, configuration and DNS logs from the Service, and they cannot be restored to you. Residual copies may persist in routine backups and system logs for a limited period before being overwritten in the ordinary course, and invoices and billing records are retained where we are legally required to keep them.

You may delete your account yourself at any time from the account settings. Any active subscription is cancelled effective at the end of the current paid period, and no refunds are given for the unused remainder of that period.

Accounts with no active payment are permanently deleted after the grace period stated in the Service and in the terms you accept at signup, counted from the last paid day. We may send reminder notices to your registered address before deletion, but you are responsible for keeping your payment method and contact address current, and we are not liable for the consequences of a notice not being sent, delivered or read.

Invoices and billing records are retained after deletion where we are legally required to keep them.

28. Business (SMB) Accounts

If you open a Business account, you represent and warrant that you are authorised to act on behalf of, and to bind, the organisation named at signup, and that these Terms bind both you and that organisation. All information provided about the organisation — including its name, website and contact details — must be accurate, current and complete, and must be kept up to date.

Business accounts may use the Service for the internal business purposes of that organisation, up to the device, zone and record limits of the subscribed plan. All other provisions of these Terms, including Section 5 (Acceptable Use) and its prohibition on reselling or redistributing the Service, continue to apply.

29. Education & Library Accounts

Education & Library accounts are available only to accredited educational institutions and to public or community libraries. Eligibility is subject to verification: you must provide the verification information we request, and Secure Domains may approve or reject an application at its sole discretion. Until verification is approved you cannot purchase or change a paid plan, and Education & Library entitlements are not active.

The Education & Library entitlement — under which each licensed seat covers multiple devices, according to the device-per-seat multiplier published at signup and on your plan pages — applies only while your verified status is active. Approved accounts may be billed against dedicated education prices, as shown at signup. If your organisation ceases to be eligible, or your verified status is revoked, the entitlement may be withdrawn and your account may continue under standard Business terms and limits.

Misrepresenting your organisation’s eligibility for an Education & Library account is a material breach of these Terms and is grounds for suspension or termination of your account.

30. Plan Limits and Fair Use

Each account type and plan tier includes limits — for example on the number of protected devices (seats), hosted DNS zones and DNS records. The limits that apply to you are those published in the Service, for example on the plan selection and Manage Subscription pages, for your account type and plan at the relevant time.

You agree to use the Service fairly and within the reasonable limits of your subscription and account type. As the Service evolves these limits may change in accordance with Section 16; if a change materially reduces an entitlement you have paid for, we will notify you in advance where reasonably possible.

31. Region and Data Residency

You select a service region when you sign up. That region is where your DNS queries are ordinarily processed and where your DNS logs are ordinarily stored and archived, as described in the Privacy Policy, which also describes when data may be accessed or processed from other locations. If you later need a different region, contact support@secure-domains.org — a change may not be possible for an existing account and may require a new one.

32. Consumer Rights

If you hold a Personal account and are acting as a consumer, nothing in these Terms limits the rights granted to you by mandatory consumer protection law in your country of residence, including any statutory right of withdrawal or refund and any statutory guarantee. Where a provision of these Terms conflicts with such a right, that right prevails.

33. Your Agreement Governs

Where you hold an Agreement with Secure Domains, that Agreement governs. These Terms apply in addition, and fill any gap the Agreement leaves open. Where the Agreement and these Terms conflict, the Agreement prevails — see Section 2.

34. Authorised Use, Tenant Scope and Licensed Capacity

You may use the Service for the internal business purposes of your organisation and, where your Agreement expressly permits it, for the benefit of your managed end customers — in each case within the subscribed capacity, licensed features and tenant scope set out in that Agreement. Permitted activities include:

• Securing corporate and customer network traffic against malicious DNS-based threats.
• Enforcing your organisation’s acceptable-use policies by filtering access to unauthorised or harmful destinations.
• Monitoring and analysing DNS traffic for threat detection, incident response and compliance purposes.
• Administering tenants, delegated roles and DNS filtering policies for the users and devices within your organisation or, for MSPs, within your contracted customers’ environments.
• Integrating the Service with your security operations tooling — for example SIEM, SOAR and reporting platforms.

Use beyond your licensed capacity — for example more protected devices, tenants, zones or records than subscribed — is not authorised. Where such use occurs, we may invoice the additional capacity at the rates in your Agreement.

35. MSP and Reseller Obligations

If you provide the Service to end customers under an MSP or reseller agreement, you additionally:

• must impose on each end customer terms that are no less protective of Secure Domains than these Terms, and are responsible for your end customers’ acts and omissions as if they were your own;
• are responsible for the correct separation of your end customers into their own tenants, and for the roles and access you grant within them;
• remain the sole point of contact for your end customers’ commercial relationship, billing and first-line support, unless your Agreement states otherwise;
• must ensure that the data-protection roles between you, your end customer and Secure Domains are correctly documented — including where you act as a processor for your end customer and we act as your sub-processor; and
• may not represent Secure Domains, make commitments on our behalf, or offer service levels, warranties or indemnities beyond those we have given you in writing.

36. Fees, Term and Invoicing

Fees, subscription term, invoicing and payment terms are as set out in your Agreement, order form or purchase order accepted by Secure Domains. Unless otherwise agreed in writing, subscriptions are invoiced in advance for the contracted term, invoices are payable per the agreed payment terms, and fees are exclusive of applicable taxes.

Changes to subscribed capacity or licensed features are handled through your account manager or authorised reseller in accordance with the Agreement. Late payment may result in suspension under Section 13.

37. Support and Service Levels

Service levels apply only where they are expressly set out in a signed order form or Agreement. Where none is agreed, Section 7 applies in full: the Service carries no uptime commitment, no guaranteed response times and no service credits.

38. Termination, Data Export and Deletion

Either party may terminate as provided in the Agreement. On termination or expiry, your organisation’s access to the Service ceases and your data is handled in accordance with the Agreement, the Data Processing Addendum and the Privacy Policy.

You are responsible for exporting any configuration, reports or logs you wish to retain before access ends. Unless the Agreement or applicable law requires otherwise, we delete or anonymise your data after the retention period stated in the Data Processing Addendum.

39. MSP Private Cloud and On-Premises Deployments

Where the Service, or a component of it such as a local DNS Security resolver, is deployed on infrastructure that you or your end customer own, host or operate, you are responsible for that infrastructure — including its capacity, network connectivity, physical and logical security, operating system maintenance, and the timely application of the updates we make available.

Our responsibility for such deployments is limited to the software and configuration we supply. Availability, performance and data protection on infrastructure outside our control are not covered by any service level agreement, and the disclaimers in Sections 7 and 8 apply in full.