Terms & conditions

Introduction

These terms and conditions (the “Terms”) govern your use of this website, including all pages within it (collectively referred to as the “Website”). By using this Website, you accept all these Terms in full. If you disagree with any part of these Terms, you must not use this Website.

Intellectual property rights

Cloudforce and/or its licensors own all rights to the intellectual property and material on this Website, and all such rights are reserved. You are granted a limited license solely for viewing the material on this Website.

Restrictions

You are strictly prohibited from:

• Publishing any Website material in any media;
• Selling, sublicensing, or otherwise commercializing any Website material;
• Publicly performing or displaying any Website material;
• Using this Website in any way that may be damaging to it;
• Interfering with user access to this Website;
• Violating applicable laws and regulations in connection with Website use;
• Engaging in data mining, data harvesting, or similar activities related to this Website;
• Using this Website for advertising or marketing.

No warranties

This Website is provided “as is,” and Cloudforce makes no express or implied representations or warranties regarding the Website or the materials contained on it. Nothing on this Website constitutes professional advice.

Limitation of liability

Cloudforce, including its officers, directors, and employees, shall not be liable for any damages arising from your use of this Website, whether under contract, tort, or otherwise. This includes indirect, consequential, or special damages.

Indemnification

You agree to indemnify Cloudforce to the fullest extent against any liabilities, costs, demands, damages, or expenses arising from your breach of these Terms.

Severability

If any provision of these Terms is found to be unenforceable or invalid, the rest of the Terms will remain unaffected.

Variation of terms

Cloudforce may revise these Terms at any time. By using this Website, you agree to review these Terms regularly to stay informed of any changes.

Assignment

Cloudforce may assign, transfer, or subcontract its rights and obligations under these Terms without prior notice or consent. However, you may not assign, transfer, or subcontract your rights and obligations under these Terms.

Entire agreement

These Terms, along with any legal notices on this Website, constitute the entire agreement between Cloudforce and you regarding the use of this Website, overriding any prior agreements.

Governing law and jurisdiction

These Terms shall be governed by and interpreted under the laws of the State of Maryland. Any disputes shall be resolved in the state or federal courts located in Maryland.

Vulnerability report/disclosure

How to submit a vulnerability

To submit a vulnerability report to Cloudforce’s Cloud Security Team, please utilize the following email: secops@gocloudforce.com.

Preference, prioritization, and acceptance criteria

We will use the criteria from the next sections to prioritize and triage submissions.

What we would like to see from you:

• Well-written reports in English will have a higher probability of resolution.
• Reports that include proof-of-concept code equip us to better triage.
• Reports that include only crash dumps or other automated tool output may receive lower priority.
• Reports that include products not on the initial scope list may receive lower priority.
• Please include how you found the bug, the impact, and any potential remediation.
• Please include any plans or intentions for public disclosure.

What you can expect from Cloudforce:

• A timely response to your email within 5 business days.
• After triage, we will send an expected timeline, and commit to being as transparent as possible about the remediation timeline as well as on issues or challenges that may extend it.
• The vulnerability will be addressed according to its criticality with it taking no more than 90 days for a resolution to be achieved.
• An open dialog to discuss issues.
• Notification when the vulnerability analysis has completed each stage of our review.
• Credit after the vulnerability has been validated and fixed.

If we are unable to resolve communication issues or other problems, Cloudforce may bring in a neutral third party to assist in determining how best to handle the vulnerability.

Cloudforce will not retaliate against individuals who submit vulnerability disclosures in good faith.