General terms
Terms of sale
These general terms of sale ("GTS") govern the sale of hardware and software, consulting, integration and managed security services provided by ADISTOS SERVICES (SIREN 102649845). Any order implies their unreserved acceptance.
1. Scope
The services cover, within the limits of the declared corporate purpose:
- The sale of security hardware and software (firewall/UTM, EDR, email security, identity, VPN/ZTA, backup);
- Security consulting and audit services;
- The deployment, integration and hardening of these solutions;
- Managed detection and response services (MDR/SOC);
- Custom developments (integrations, automations, dashboards).
2. Orders and prices
Offers are established on quotation and remain valid for thirty (30) days. Prices are exclusive of tax; applicable VAT is added where relevant. Orders become firm upon signature of the quotation and payment of any deposit provided for.
3. Obligations of the parties
The client undertakes to provide the access and information necessary for the performance of the services and to designate a single point of contact. ADISTOS SERVICES undertakes to perform the services diligently and in accordance with professional standards.
4. Scope of MDR/SOC services
Unless otherwise stipulated, the MDR service includes: collection and correlation of events from telemetry-enabled equipment, detection and qualification of alerts, client notification and remote remediation according to the agreed playbooks. The exact scope (monitored assets, telemetry sources, authorized actions) is described in an appendix to the contract.
5. Service level agreements (SLA)
| Commitment | Objective |
|---|---|
| Detection of an event | < 15 minutes after receipt of telemetry |
| Client notification after qualification | < 30 minutes |
| Start of remediation (major incident) | < 2 hours |
| MDR platform availability | 99.9% measured over 12 rolling months |
In the event of non-compliance with an SLA attributable to ADISTOS SERVICES, the client may claim the contractually defined penalties, where applicable in the form of a credit note.
6. Obligations in the event of a security incident
Within the framework of managed services, ADISTOS SERVICES undertakes to: mobilize its incident response team, apply the agreed playbooks, collect and preserve evidence, and keep the client informed of progress. The client remains responsible for any notification obligations to the authorities (CNIL, ANSSI) and to its own stakeholders.
7. Liability and limitations
The services constitute an obligation of means. ADISTOS SERVICES' liability, all damages combined, is limited to the amount actually paid by the client for the service concerned over the previous twelve (12) months. ADISTOS SERVICES shall not be held liable for indirect damages or loss of business, except in the case of gross negligence or fraud, and within the mandatory legal limits. These limitations are coordinated with the professional liability and cyber insurance taken out by the company.
8. Intellectual property
Specific developments produced by ADISTOS SERVICES remain its property, unless assigned in writing. The client retains all of its data.
9. Confidentiality
Each party undertakes strict confidentiality regarding the information exchanged, including vulnerabilities identified during audits.
10. Applicable law and disputes
These GTS are governed by French law. In the event of a dispute, the parties favor an amicable resolution before any referral to the competent courts.
These GTS are indicative and must be reviewed and validated by the company's legal counsel before any final publication.