Terms of ServiceTerms of Service

1. Acceptance

By accessing this website you confirm that you are at least 18 years old, have the legal capacity to enter into binding agreements, and accept these Terms in full.

If you are accessing the website on behalf of an organisation, you represent that you have authority to bind that organisation to these Terms.

We may update these Terms at any time. Material changes will be indicated by a revised effective date. Continued use of the website after changes constitutes acceptance of the updated Terms.

2. Permitted Use

You may access and use the website for lawful purposes only. You must not:

• Attempt to disrupt, degrade, or gain unauthorised access to the website or its infrastructure.
• Use the website to transmit malware, spam, or unlawful content.
• Scrape, crawl, or harvest content without prior written consent.
• Misrepresent your identity or affiliation when submitting enquiries.
• Use the website in violation of applicable law or these Terms.

We reserve the right to block access for any user or IP address violating these Terms without notice.

3. Data Processing & Privacy

Grilli OÜ does not use cookies, analytics, or third-party trackers on this website. The only personal data we collect is what you actively submit via contact or lead forms (name, work email, and message) and server access logs (IP address, user-agent).

All website data is processed in accordance with our Website Data Processing Addendum and stored in the EU. See our subprocessors page for details.

Form data is processed under Art. 6(1)(b) GDPR (pre-contractual steps at your request); server access logs under Art. 6(1)(f) GDPR (legitimate interests in website security). Provision of form data is voluntary — you are not obliged to submit it, but we may be unable to respond to your enquiry if you do not.

For full details on how we handle personal data, your rights, and our legal bases, see our Privacy Policy.

4. Intellectual Property

All content on this website — including text, graphics, logos, and service descriptions — is the property of Grilli OÜ or its licensors and is protected by applicable intellectual property laws.

You may view and print pages for personal, non-commercial reference only. No content may be reproduced, distributed, or used commercially without prior written permission.

Grilli OÜ retains all rights in its methodologies, tools, and templates. Deliverables produced under a professional engagement are licensed or assigned as specified in the applicable engagement agreement.

5. Website Content & Availability

Website content is provided for informational purposes only and does not constitute legal, security, regulatory, or professional advice. Service descriptions are indicative; specific terms, scope, and deliverables are defined in engagement agreements.

We do not guarantee continuous availability of the website. We reserve the right to modify, suspend, or discontinue any part of the website at any time without notice or liability.

6. Third-Party Links

The website may contain links to third-party websites. These links are provided for convenience only. Grilli OÜ has no control over, and accepts no responsibility for, the content, privacy practices, or terms of any third-party site.

7. Disclaimers

The website is provided “as is” and “as available” without warranties of any kind, express or implied, including but not limited to merchantability, fitness for a particular purpose, accuracy, or non-infringement.

Grilli OÜ does not warrant that the website will be error-free, uninterrupted, or free from viruses or other harmful components. You are responsible for implementing appropriate security measures on your own systems.

8. Limitation of Liability

To the fullest extent permitted by applicable law, Grilli OÜ shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of, or inability to use, this website — including loss of data, revenue, or business opportunity.

Grilli OÜ's total liability arising from these website Terms shall not exceed €100. Nothing in these Terms limits liability for fraud, wilful misconduct, or any liability that cannot be excluded by law.

9. Professional Services

These Terms govern website use only. Any professional services engagement — penetration testing, DFIR, SOC monitoring, compliance advisory, R+D, or otherwise — is governed by a separate Master Services Agreement and applicable Statement of Work executed in writing between the parties.

Submitting a contact or quote form does not create a contractual relationship or engagement. No work commences and no obligations arise until a written agreement is signed by both parties.

10. Export Controls & Sanctions

You agree to comply with all applicable export control laws and sanctions regimes, including those of the EU, Estonia, UK, and US. You will not use or access this website or any Grilli OÜ services in violation of such laws.

Grilli OÜ complies with Wassenaar Arrangement obligations for the export and transfer of dual-use security tools and research.

11. Law Enforcement Requests

We respond only to valid legal process issued by a competent authority and narrowly scoped to the information requested. We scrutinise all requests for legal sufficiency before complying.

Where permitted by law, we will notify affected users before disclosing their information in response to a legal request.

12. Severability & Waiver

If any provision of these Terms is found to be unenforceable by a court of competent jurisdiction, that provision will be modified to the minimum extent necessary to make it enforceable, and the remaining provisions will continue in full force and effect.

Failure by either party to enforce any provision of these Terms at any time does not constitute a waiver of the right to enforce that provision in the future.

13. Assignment

You may not assign or transfer any rights or obligations under these Terms without the prior written consent of Grilli OÜ. Grilli OÜ may assign these Terms in connection with a merger, acquisition, corporate restructuring, or sale of substantially all assets.

14. Force Majeure

Neither party is liable for delays or failures in performance caused by events beyond reasonable control, including natural disasters, war, civil unrest, acts of government, labour disputes, or failures of internet or utility infrastructure, provided the affected party takes reasonable steps to mitigate the impact.

15. Governing Law & Disputes

These Terms are governed by and construed in accordance with the laws of Estonia, without regard to conflict-of-law principles. The GDPR and applicable EU law apply to data protection matters.

Any dispute arising from these Terms shall be subject to the exclusive jurisdiction of the courts of Estonia, without prejudice to your right to seek interim relief in any competent jurisdiction or to lodge a complaint with a data protection supervisory authority.

Contact

Questions about these Terms: legal@grillisecurity.com. For data protection matters, see our Privacy Policy, Website Data Processing Addendum, and Subprocessors.