Terms of Service

Who provides the service

The services are provided by Custom Service Arleta Marczyńska, ul. Bielska 107, 32-652 Bulowice, NIP (tax identification number) 5492373228, REGON (statistical number) 528250567, hereinafter “arLET’S”. Contact: arlets@yesfor.ai.

What the service covers

arLET’S performs a security assessment within the scope agreed with the client before work begins and delivers the result as a report containing the decision, findings, evidence, conditions and a list of areas not tested.

The scope of each package is described on the pricing page. The working method is described in the methodology. Both documents form part of the agreement.

What the service does not cover

• A full penetration test, unless the parties agree on one separately.
• A guarantee of system security or a security certificate. arLET’S does not issue such documents.
• Legal advice. Pointing out what a given contract clause means for the client’s use case is not a legal opinion.
• Fixing the problems found, unless a separate arrangement provides for it.
• Tests performed without the written authorization of the system owner.

Agreeing the scope

1. The client submits the subject and purpose of the assessment through the form or by email.
2. arLET’S replies within 24 business hours, describing what can be established, what cannot, in what time and at what price.
3. The parties confirm the scope in writing. The price given in the reply is valid for 30 days.
4. If the assessment includes tests at level L2 or higher, the client provides an authorization signed by a person entitled to dispose of the system.
5. Work begins once the scope is confirmed and, where required, once the authorization has been received.

Client obligations

• The client represents that it has the right to commission an assessment of the system in question and to hand over the documents it hands over.
• The client does not hand over personal data or production data to a greater extent than necessary.
• The client names a contact person available while the work is in progress.
• The client informs arLET’S of changes to the system during the assessment, because they change the result.

Nature of the result

The report concerns a defined scope and a defined date. It is not a statement that the system is secure, nor that it contains no problems outside the examined scope.

The absence of a finding does not mean the absence of a problem. It means that within the examined scope and on the available evidence no problem was identified. The report lists the areas that were not examined.

The decision contained in the report has an expiry date. After that date arLET’S makes no claim about the state of the system.

Liability

arLET’S is responsible for performing the assessment with due care and in accordance with the agreed scope and the published methodology.

arLET’S is not liable for the consequences of the client’s business decisions, for the actions of third parties, for problems arising after the date of the assessment or for problems in areas identified in the report as not tested.

The liability of arLET’S is limited to the amount of the fee for the service in question, except in cases of wilful misconduct. The limitation does not apply to consumers to the extent that the law prohibits it.

Custom Service Arleta Marczyńska keeps confidential everything it learns in the course of the assessment and does not use it for purposes other than performing the service.

Payments

The fee and the payment deadline follow from the confirmed scope. Prices shown on the site are gross prices (including VAT), unless stated otherwise, and may change, but a change does not apply to scopes already confirmed.

Complaints

Send a complaint to arlets@yesfor.ai, describing what you object to. We reply within 14 days.

If the objection concerns the accuracy of a finding, we check it at the source and either show the evidence or correct the report, marking what has been changed. The principle is described on the trust and neutrality page.