Annex B: Specific conditions for contracting the Professional Pentesting Analysis service marketed by Uniway
Last modified date: June 1, 2023
This “Annex B”, which contains the Specific Contract Conditions of the Professional Pentesting Analysis service marketed by Uniway Technologies, SL, (hereinafter “Uniway”), will only apply to the CLIENT Contract, provided that the CLIENT has contracted the Professional Pentesting Analysis Services on the Uniway website, otherwise it will be understood that this annex is inapplicable to the CLIENT Contract.
You can find this Annex B: Specific contracting conditions for the Professional Pentesting Analysis services marketed by Uniway, as well as the rest of the documentation that makes up the Contract at the following link:
The client authorizes Uniway Technologies to carry out security verification activities on the application(s) and system(s) that it has communicated to us and certifies that said IPs are its property.
Pentesting service provision by Uniway
Services they provide
Uniway, as a Pentesting Services marketer, provides these services to the CLIENT in exchange for a payment established when contracting the service. The different rates are indicated on the following website:
https://www.uniway.es/en/pentesting
The CLIENT must be a registered user of the Uniway website in order to contract the Pentesting Services.
The provision of Pentesting Services by Uniway includes what is described in the Contract Conditions, this Annex B: Specific contract conditions for the Professional Pentesting Analysis services marketed by Uniway, what is described on the website where the contract is formalized and any addendum expressly signed between the parties. All of this constitutes the Contract.
Restrictions and Conformities
This authorization will be valid for the period that the client has contracted the services.
The client declares that it is the owner of the systems where the vulnerability audit is performed and the subscriber has the appropriate authority to carry out application security verification activities.
The service necessarily involves the use of tools and techniques designed to detect security vulnerabilities, and it is impossible to identify and eliminate all the risks involved in the use of these tools and techniques. The client agrees not to modify the system or application during the execution of the pentesting. If this were to happen, it will be understood as a change in scope, so that the pentesting will be considered finished and the report will be delivered to the client with the results obtained up to that point, with which the Auditor will fully comply with the initially agreed scope.
Confidentiality Agreement
Any information, whether technical, financial, commercial or of any other nature, provided and disclosed by the client company to Uniway Technologies in relation to the scope of the contract, through any type of medium, tangible or intangible, currently known or that may be made possible by the state of the art in the future (paper, computer, etc.) or verbally, will be considered “Confidential Information”.
Uniway's Obligations
Upon receipt of Confidential Information, Uniway Technologies will hold it in strict confidence, use it only in connection with scope testing, and will not disclose it to a third party without the prior written consent of the client company.
Exclusions
The Parties agree that the obligations contained in this Agreement shall not apply with respect to information that:
• Is, is or becomes public knowledge without any act by Uniway Technologies in contravention of the terms of this Commitment.
• It must be disseminated by requirement of a legal, contractual or judicial provision.
• Be explicitly identified, in accordance with this Commitment, as Non-Confidential Information.
• Whose communication or unrestricted use has been approved by the client company.
• Is independently generated by Uniway Technologies without use of Confidential Information.
• The receiving Party has been required to do so by means of a final resolution by competent Administrative or Judicial Authorities. In this case, the client company must be immediately notified of this circumstance regarding the request received, provided that there is no obligation to keep it secret due to a legal, administrative or judicial mandate. Likewise, Uniway Technologies will only reveal that part of the Information that is required.
Property rights
This Agreement does not constitute the granting, express or implied, of any right over the Confidential Information provided by the client company, except as may be expressly granted in each case in relation to the Scope of this contract.
Applicable legislation
This Agreement shall be interpreted in accordance with Spanish law.
If any of the Parties is subject to a merger or other corporate reorganization, it is agreed that this Agreement will be binding on its successor in accordance with applicable law.
Thank you for placing your trust in UNIWAY TECHNOLOGIES, S.L.