Legal and trust center.
Every Eresus Guard policy, contractual document, and trust notice in one place, so a customer, a reviewer, or a procurement team can find the governing text without guesswork.
These documents are provided by Eresus Security Ltd. Şti.. Contractual documents are supplied for countersignature and are not executed by browsing this page. Mandatory transfer instruments are signed separately where they apply.
Contractual
- Terms of Service — The master terms for the hosted Workbench, including authorized-use and liability terms.
- Acceptable Use Policy — Conduct that is prohibited on the platform, including unauthorized scanning and abuse.
- Professional Services Terms — Terms for assessments and managed services delivered by Eresus personnel alongside the platform.
- MSSP and Partner Terms — How MSSP partners may use the platform on behalf of downstream customers, and their obligations.
Privacy
- Data Processing Addendum — The controller/processor contract and its annexes, supplied for countersignature with the customer agreement.
- Privacy Policy — How personal data is collected, used, shared, stored, and transferred.
- KVKK Aydınlatma Metni — Kişisel verilerin işlenmesine ilişkin Türkçe aydınlatma metni (6698 sayılı KVKK m.10).
- Cookie Statement — Which cookies and browser storage this site sets, and what stays off your device.
- Data Controls — The technical data-processing, tenant-isolation, and erasure controls implemented in the product.
- Subprocessors — The third parties that support the site and the hosted service, and what they receive.
Trust & security
- Security Overview — How the service is secured and how to reach the security team.
- Vulnerability Disclosure Policy — How to report a vulnerability and the boundaries of authorized research.
- Responsible Scanning Policy — Authorization, scope, and safety requirements for running assessments with Eresus Guard.
- Data Retention and Deletion — How long each data category is kept, and how deletion and erasure work.
- Support and Service Levels — Support channels, severity definitions, and target response times.
How to read these documents
- Plain-language explainers describe controls and practice. They are not a warranty and do not replace the executed contract.
- The Data Processing Addendum governs processing of customer personal data, and names its annexes for processing details, security measures, subprocessors, transfers, and incident coordination.
- Where a document depends on the deployment — region, plan, or enabled integration — the order package for that deployment is the authoritative statement.
- Official transfer instruments (EU Standard Contractual Clauses, the UK International Data Transfer Addendum, or the KVKK standard contract) are signed separately and are not replaced by anything on this site.
Need a document for a review?
Email contact@eresussec.com with the region, plan, and document you need. We will issue signable versions, the deployment-specific annexes, and the executed transfer instruments that apply.