Terms and conditions

These terms apply to all contracts for the use of Vallion between [provider company] and the customer. The offering is aimed exclusively at businesses within the meaning of Section 14 BGB.

Deviating terms of the customer apply only if the provider expressly agrees to them in writing.

Vallion is a software-as-a-service application that supports manufacturers in monitoring their products for vulnerabilities and in preparing notifications under Art. 14 of Regulation (EU) 2024/2847.

• Vallion does not submit notifications to ENISA or CSIRTs; the customer submits them through the Single Reporting Platform.
• The customer remains responsible for meeting its legal obligations and for the content and timeliness of its notifications.
• Content, guides and notes in Vallion are not legal advice.

The contract is concluded upon registration and confirmation by the provider. The trial lasts 30 days, is free of charge and ends automatically unless a plan is booked.

The scope of services follows from the plan booked. Availability: [set availability commitment]. Planned maintenance is announced in good time.

The availability and timeliness of external data sources such as CISA KEV, ENISA EUVD, OSV or EPSS are outside the provider’s control.

• Credentials and API keys must be kept confidential and protected against unauthorised access.
• The customer checks prepared notification content for accuracy and completeness before submitting it.
• The customer ensures that it is entitled to process the uploaded data.

The prices published at the time the contract is concluded apply, plus statutory VAT. Billing is by invoice; payment term: [set].

Monthly contracts can be terminated at the end of each billing month, annual contracts at the end of the term. The right to terminate for good cause remains unaffected.

The customer can export its data at any time. After the contract ends, the data is deleted after [set period], unless retention obligations apply.

Where the provider processes personal data on behalf of the customer, the parties conclude a data processing agreement pursuant to Art. 28 GDPR.

[Liability clause to be defined with legal counsel]

The law of the Federal Republic of Germany applies. Place of jurisdiction is [provider’s registered office]. Should individual provisions be invalid, the validity of the remaining provisions remains unaffected.