Terms & Conditions

Business IT & Cybersecurity Terms

These terms apply to business IT support, managed IT plans, remote support, on-site business service, cybersecurity projects, vulnerability assessments, cyber insurance or compliance readiness assistance, consulting, and related professional services.

1) Scope of Business & Cyber Services

• Services are limited to the items listed on the Services page, accepted quote, written project scope, statement of work, managed service agreement, or other written authorization.
• Services not specifically included in a monthly plan, project quote, or written agreement may be billed separately.
• Techdoods may recommend changes, tools, policies, vendors, or additional services, but implementation occurs only after authorization unless already included in the applicable plan or agreement.
• Business and cybersecurity services are intended to reduce risk, improve reliability, and support operations, but they do not eliminate all risk or guarantee uninterrupted service.

2) Quotes, Authorization & Statements of Work

• Business projects may require a written quote, statement of work, project scope, or managed service agreement before work begins.
• Approval may be provided by signature, email, text, form submission, payment, or other documented authorization.
• If scope changes, hidden issues, inaccurate information, vendor requirements, or additional work are discovered, Techdoods may provide an updated quote before continuing.
• The client is responsible for ensuring that the person authorizing work has authority to approve services, account access, security changes, and charges on behalf of the business.

3) Monthly Managed IT Plans

• Monthly plans are billed in advance unless otherwise agreed in writing.
• Onboarding fees, first-month service, licensing, setup work, or deposits may be due before service begins.
• Monthly plan pricing, device counts, included support time, and service details are listed on the Services page or in the applicable agreement.
• Subscriptions require 30 days written notice for cancellation unless a different written agreement applies.
• Partial months are not automatically prorated unless agreed in writing.
• Past-due invoices may result in paused service, delayed response, suspension of management tools, or termination of service.

4) Included Support & Administration Time

• Included support and administration time covers standard remote troubleshooting, routine administration, account changes, minor configuration adjustments, device management, backup checks, security-related management tasks, and similar work.
• Unused included time does not roll over month to month.
• Additional support or administration time is billed at the rate listed on the Services page or in the applicable agreement.
• On-site work, hardware installation, major migrations, new system deployments, emergency response, after-hours service, cabling, advanced recovery, significant cleanup, incident response, and larger projects may be quoted or billed separately unless specifically included in writing.

5) Response Times, Scheduling & Availability

• Response times listed on the Services page are response goals, not guaranteed service level agreements, unless a separate written SLA is signed.
• Service availability depends on schedule, workload, client responsiveness, vendor availability, remote access, required approvals, and parts or licensing availability.
• Urgent issues are handled best-effort unless the client has a written agreement that provides specific emergency coverage.
• Techdoods does not provide guaranteed 24/7 monitoring, live SOC coverage, or emergency incident response unless specifically agreed in writing.

6) Client Responsibilities

• The client is responsible for providing accurate information about systems, users, devices, accounts, vendors, licensing, business needs, and known issues.
• The client must provide authorized access to systems, accounts, devices, networks, cloud services, vendors, or documentation needed to perform approved work.
• The client is responsible for maintaining appropriate business practices, employee policies, physical security, insurance, legal compliance, and continuity planning for their organization.
• The client agrees not to disable, remove, bypass, or materially alter security tools, backup tools, monitoring agents, MFA, or other protective measures without notifying Techdoods.
• The client should promptly notify Techdoods of employee departures, suspected incidents, device loss/theft, account compromise, vendor changes, new systems, or material business changes that may affect security or service.

7) Third-Party Tools, Licensing & Vendors

• Software, cloud services, email platforms, backup tools, endpoint protection, DNS/web filtering, remote access tools, hardware vendors, internet providers, and other third-party services are subject to their own terms, pricing, availability, and support limitations.
• Licensing, subscriptions, backup storage, security tools, and vendor services are quoted separately unless specifically included in a written agreement.
• Vendor price changes, outages, discontinued products, licensing changes, service disruptions, or account restrictions may affect cost, availability, or performance.
• Techdoods is not responsible for outages, data loss, service failures, account actions, security incidents, or business interruption caused by third-party providers, platforms, vendors, or client-managed services outside Techdoods’ control.
• If required licensing or vendor invoices are unpaid, related services may stop working or may be suspended.

8) Backups, Recovery & Data Loss

• Backup setup, backup monitoring, backup review, and recovery guidance are designed to reduce the risk of data loss but do not guarantee that every file, device, system, version, or account can be restored.
• Backup coverage depends on selected tools, retention settings, storage limits, user behavior, device availability, vendor functionality, licensing, and the systems included in scope.
• Clients remain responsible for confirming that backup coverage, retention, legal requirements, insurance requirements, and recovery needs are appropriate for their business unless a written agreement states otherwise.
• Restore testing may be available as a separate service or included only where specifically stated.
• Techdoods is not responsible for data loss caused by systems, accounts, devices, files, drives, or services that were not included in the approved backup scope.

9) Cybersecurity Projects

• Cybersecurity projects may include security baseline assessments, vulnerability assessments, cyber insurance questionnaire assistance, compliance readiness support, security awareness training, phishing simulations, incident response planning, and related consulting.
• Cybersecurity services reduce risk but do not guarantee that a system, account, network, device, website, cloud service, or business will be secure, compliant, breach-free, malware-free, or immune from attack.
• Security assessments and vulnerability findings reflect conditions at the time of review or testing. New vulnerabilities, configuration changes, software updates, user actions, vendor changes, and threat activity can change risk after the engagement.
• Unless expressly agreed in writing, cybersecurity projects are limited to non-destructive review, scanning, configuration review, documentation review, user education, and practical recommendations.

10) Vulnerability Assessments, Scans & Testing Authorization

• Security testing, scanning, vulnerability assessments, phishing simulations, and similar work are performed only with documented authorization from an authorized representative of the client.
• The client is responsible for confirming that they own or are authorized to test all systems, networks, domains, cloud accounts, applications, email accounts, users, and devices included in scope.
• Testing scope must be defined before work begins. Systems or accounts outside the approved scope will not be intentionally tested.
• Some scans or tests may affect performance, trigger alerts, cause account lockouts, expose misconfigurations, or reveal unstable systems. Techdoods will make reasonable efforts to perform testing responsibly, but the client accepts the inherent risks of authorized testing.
• The client is responsible for notifying internal staff, vendors, hosting providers, internet providers, or other affected parties when appropriate.

11) Cyber Insurance, Compliance Readiness & Questionnaires

• Cyber insurance questionnaire assistance, compliance readiness support, security policy review, and documentation help are advisory services only.
• Techdoods does not provide legal advice, insurance advice, accounting advice, or formal compliance certification.
• The client is responsible for the accuracy of final answers submitted to insurers, regulators, vendors, customers, or other third parties.
• Compliance readiness work does not guarantee approval by an insurer, regulator, customer, vendor, payment processor, or other third party.
• Clients should consult qualified legal, insurance, compliance, or regulatory professionals when formal advice or certification is required.

12) Security Awareness & Phishing Simulations

• Security awareness training and phishing simulations are provided for education, risk reduction, and improvement of business security practices.
• Phishing simulations must be authorized by business ownership or management and must define the users, domains, dates, and general scope involved.
• Results are confidential and intended for coaching and risk reduction. Employee discipline, HR action, or employment decisions are solely the client’s responsibility.
• Techdoods is not responsible for business disruption, employee reaction, HR issues, or internal disputes arising from authorized training or simulations.

13) Incident Response Planning & Emergency Incidents

• Incident response planning is not the same as live emergency incident response.
• Live incident response, breach containment, forensic investigation, malware eradication, regulatory notification, legal coordination, insurance coordination, ransom negotiation, public relations, and full business recovery may require separate scope, pricing, or third-party escalation.
• Techdoods may provide best-effort guidance during an active incident, but does not guarantee containment, recovery, attribution, evidence preservation, regulatory compliance, or restoration of operations.
• Clients should maintain appropriate cyber insurance, legal contacts, backups, and business continuity plans based on their risk and regulatory obligations.

14) Confidentiality, Credentials & Security Reports

• Techdoods will treat client systems, credentials, business information, security findings, reports, configurations, and data as confidential.
• Techdoods will access only what is reasonably necessary to perform authorized services.
• Clients should not send passwords through insecure channels when avoidable. When credentials are required, they should be shared using an approved or reasonably secure method where possible.
• Security reports, vulnerability findings, diagrams, configurations, and recommendations may contain sensitive information and should be stored and shared carefully by the client.
• Techdoods may retain limited service records, notes, invoices, reports, and documentation as needed for business, warranty, legal, security, and continuity purposes.

15) Payment, Late Fees & Collections

• Payment terms are defined by the invoice, quote, statement of work, managed service agreement, or Services page.
• One-time projects may require a deposit, milestone payment, or payment before final delivery depending on scope.
• Monthly services are billed in advance unless otherwise agreed in writing.
• Late or unpaid invoices may result in paused service, delayed response, suspension of recurring management, collections activity, or termination of service.
• The client is responsible for reasonable costs of collection, including processing fees, collection costs, court costs, or attorney fees where permitted by law and applicable agreement.

16) Warranty, Service Limitations & Limitation of Liability

• Techdoods will perform services in a professional and commercially reasonable manner based on the information, access, scope, tools, and approvals provided.
• Technology work involves inherent risk, including downtime, configuration issues, compatibility problems, vendor failures, user error, failed updates, hardware failure, security incidents, and data loss.
• Techdoods is not responsible for pre-existing issues, latent defects, undocumented environments, inaccurate information, unauthorized changes, vendor outages, third-party failures, user actions, business decisions, or systems outside the approved scope.
• To the extent permitted by law, Techdoods’ total liability is limited to the amount paid for the specific service, project, or one month of managed service giving rise to the claim, whichever is less unless a written agreement states otherwise.
• Techdoods is not liable for indirect, incidental, special, consequential, punitive, exemplary, or business interruption damages, including lost profits, lost revenue, lost data, loss of goodwill, loss of use, downtime, regulatory fines, insurance denial, third-party claims, or reputational harm, except where prohibited by law.