General terms of sale (business offers)

1. Purpose and scope

The CGV govern the supply, on a subscription basis, of the Kayzen Security platform (agents, console, cloud services) and related options. They prevail over any Customer document, unless otherwise agreed in writing. The Customer declares that it acts for professional purposes.

2. Offers and prices

The plans (Essentials, Pro, Ultimate) and options (K-Mail, K-Vault & Remote) and their prices are published on the Pricing page, in euros excluding tax, per device, per mailbox or per technician per month. A plan is offered for subscription only once its main modules are delivered. As long as a module included in a plan has not been delivered, it is not billed: the price applied is that of the nearest lower plan, or a reduced price stated before subscription.

Prices may change; any increase is notified at least 30 days before it applies and allows the Customer to terminate free of charge before it takes effect.

3. Free trial

A free 30-day trial, with no payment method, is offered to each new organisation. At the end of the trial, without a subscription, the workspace becomes read-only and is then deleted within 30 days. [À VALIDER : durées]

4. Order and term

Subscription is made from the console. The subscription is monthly, with no commitment, or annual with a 15% discount. It renews automatically for the same period unless terminated.

5. Invoicing and payment

Invoicing is based on the number of declared or active devices, mailboxes or technicians, payable in advance. Payment is made by bank card or SEPA direct debit through the provider Stripe. Invoices are issued in electronic format in accordance with the applicable regulations.

Invoices are payable within 30 days of the invoice date; no discount is granted for early payment. Any late payment automatically entails, without reminder, penalties at the rate applied by the European Central Bank to its most recent refinancing operation, plus 10 points, as well as the fixed recovery indemnity of €40 (art. L. 441-10 of the French Commercial Code). After a formal notice left without effect for 15 days, the Publisher may suspend the service. [À VALIDER]

6. Publisher's obligations

The Publisher provides the platform in accordance with its documentation, under an obligation of best efforts. It provides security updates, hosting of customer data in the European Union from commercial launch, and support in French and English, Monday to Friday from 9 am to 7 pm (Paris time).

An availability commitment (SLA) and any related penalties will be specified before commercial launch. [À VALIDER]

7. Customer's obligations

• to deploy the agents on devices under its control and to inform its employees, and where applicable its works council (CSE), of the processing carried out (in particular EDR, AI control and email security);
• to keep access credentials confidential and to enable two-factor authentication for administrators;
• to maintain backups of its data independent of the platform;
• not to use the platform for unlawful purposes or to monitor people outside the legal framework.

8. Liability

No security solution can guarantee the total absence of incidents. The Publisher's liability, for all causes combined, is limited to direct and foreseeable damages, up to the amounts paid by the Customer during the 12 months preceding the triggering event, without being lower than [À VALIDER: amount] €. Indirect damages are excluded, in particular loss of operations, data or revenue. This limitation does not apply in the event of gross negligence or wilful misconduct.

The Customer acknowledges that automatic or requested protection measures (quarantining a file, terminating a process, isolating an endpoint, blocking a domain) may occasionally affect a legitimate item. The Publisher provides the means to reverse them (restoration, lifting of isolation, exception) and is not liable for their consequences when they result from the policy configured by the Customer. Neither party is liable for a failure due to force majeure within the meaning of article 1218 of the French Civil Code.

9. Personal data

For data processed on behalf of the Customer, the Publisher acts as a processor within the meaning of Article 28 GDPR, under the data processing agreement (DPA) published on the Site, which forms an integral part of these CGV. The list of sub-processors is published and kept up to date.

10. Intellectual property

The Publisher grants the Customer, for the duration of the subscription, a non-exclusive, non-transferable right to use the platform, limited to its internal needs or, for a managed service provider, to those of its customers. The Customer remains the owner of its data.

11. Termination and reversibility

The Customer may terminate from the console; termination takes effect at the end of the current period. For 30 days after the end of the subscription, the Customer may export its data (inventory, reports, logs depending on the offer), which is then deleted, unless there is a legal retention obligation. [À VALIDER]

12. Partner offers (MSP)

The specific terms for managed service providers (volume discounts, white label, usage-based billing) are covered by a separate partnership agreement that supplements these CGV.

13. Governing law and jurisdiction

These GTS are governed by French law. Any dispute between professionals who have all contracted as merchants falls within the exclusive jurisdiction of the courts within the jurisdiction of the Lyon Court of Appeal; in other cases, the ordinary-law rules of jurisdiction apply. [À VALIDER]