1. Identification and purpose

Apex is a product and service operated by VERIXA CONSULTORIA EM TECNOLOGIA DA INFORMAÇÃO LTDA, Brazilian company registration (CNPJ) 66.466.170/0001-74. These Terms govern the use of the site and the general conditions that precede the engagement of security assessments.

2. Governing documents

Execution is governed by the proposal, contract, testing authorization, rules of engagement and any other documents accepted by the parties. In case of conflict, the specific engagement document prevails over these general Terms.

3. Express authorization

No assessment begins without authorization. The client declares that it owns the assets indicated or holds express, documented authorization from the owner to submit them to testing.

4. Scope and limits

Activities are limited to the approved assets, periods, access and techniques. Assets outside the scope will not be assessed. Vorvex may halt actions that present disproportionate or unforeseen risk.

5. Client obligations

Provide accurate information and name available points of contact.
Ensure authorizations are in place and communicate operational restrictions.
Maintain backups and procedures appropriate to the assessed environment.
Not use results, tools or channels for unlawful activity.

6. Confidentiality and data

Technical information, vulnerabilities, evidence and commercial terms are confidential. Data processing follows the Privacy Policy, the applicable data protection law and the commitments set out in the contract.

7. Nature of the assessment

Penetration testing reduces uncertainty but does not guarantee the absence of vulnerabilities. The result represents the scope and the conditions observed during the execution period and should be combined with remediation, monitoring and continuous controls.

8. Intellectual property

Vorvex methodologies, software, templates, interfaces and materials remain protected. The client retains ownership of its data and receives a licence for internal use of the reports delivered, as set out in the contract.

9. Liability

Responsibilities, limits, exclusions and service levels are defined in the applicable contract, subject to mandatory law. Vorvex is not liable for use of the services on unauthorized assets or for incorrect information provided by the client.

10. Governing law and jurisdiction

Brazilian law applies. The courts of São Paulo/SP are elected as the competent forum, save for mandatory rules of jurisdiction.

11. Language

This is a courtesy translation. In case of any divergence between versions, the Portuguese version of these Terms prevails.