Skip to the main content.

Support Policy

This Annex B – Support Policy, governs the provision of Support Services for the Binalyze Software offered under the applicable Quote and the underlying General Terms and further Services Terms (hereinafter “Agreement”). All capitalized terms used but not otherwise defined herein have the meanings given to them in the Agreement.

 

1. Definitions

  • “Support Services” means the support services contracted by Customer from Company in accordance with the Agreement and the applicable Quote. 

  • “Designated Contact(s)” means the individual(s) within Customer’s organization assigned in accordance with Section 2.2 of this Annex B. 

  • “Incident(s)” means those issues relating to the Software that are covered under this Support Policy, as specifically set forth herein below.

  • “Response Time(s)” means the amount of time within which Company’s support team commits to respond to Service Requests (as set forth in Section 2.7 of this Annex B).

  • “Service Request” means a Customer request as set forth in Section 2.4 of this Annex B for assistance from Company with respect to an Incident.

  • “Support Hours” means the applicable Support Hours. This is Mon-Fri 9:00am - 6:00pm CET/EST, excluding public holidays.

 

2. Contracted Support Coverage

  •  2.1 Duration

Company shall provide Support Services for the Subscription Period specified in the respective Quote. 

  •  2.2 Appointment of Designated Contacts

To receive Support Services, Customer shall (i) appoint at least one Designated Contact (ii) ensure that all Designated Contacts are sufficiently trained on the Binalyze Software and (iii) notify Company in written form (email sufficient) of the names and contact details of the Designated Contacts.

  •  2.3 Scope of Support Service

The Support Services cover Binalyze Software as follows:

  • (a) Access to and use of the Support Portal, including a self-service knowledge base and the ability to submit Service Requests for Designated Contacts;

  • (b) The processing of Service Requests during Support Hours;

  • (c) Unlimited number of Incidents; and

  • (d) Response Times for Incidents as defined in the Response Times table below.

  • 2.4 Submission of Service Requests

  1. (a) Customer shall submit all Service Requests via email to support@binalyze.com. 

  2. (b) Customer shall ensure that the the Incident is covered by Support Services under this Annex B.

  3. (c) Customer shall use reasonable efforts to fix any error, bug, malfunction or network connectivity defect before submitting a Service Request to Company. 

  4. (d) Customer shall suggest a Priority level according to Section “Priority Definitions” upon submission of Service Requests. Company reserves the right to check and in its sole discretion change Customer’s Priority suggestion if Company believes that Customer’s suggestion is incorrect and will inform Customer of any such change in its response to the Service Request. Customer may appeal any such reclassification to Company’s support management for review through any available support channel. To successfully challenge a classification by Company, Customer needs to provide proof in accordance with the Priority level definition that Company’s Priority designation was incorrect. 

  5. (e) Customer shall provide all requested diagnostic and technical information and assist Company as may be reasonably required to resolve a Service Request.

  6. (f) Company may respond to a Service Request by acknowledging receipt of the request. Customer acknowledges and understands that Company may be unable to provide answers to or resolve all Service Requests. 

  7. (g) Company does not demand or require Personal Data for resolving Service Requests, other than the email address of the individual who submitted the Service Request for communication purposes. When uploading evidence or information related to an issue in the form of e.g., log files or screenshots/screen captures. Customer shall ensure that (1) all Personal Data has been anonymized or masked before being uploaded into the support ticket; or (2) if masking or anonymizing the Personal Data is technically impossible, the respective Individual has consented to the processing of the related Personal Data or Customer has another legal basis according to Applicable Data Protection Law.

  8. (h) At the commencement of the Term, Customer shall allow Company to set up secure SSH access to Customer's servers for administration purposes. This remote access shall be maintained at all times during the Term and shall be removed by Company upon termination of the Agreement.

  9. (i) Customer shall make the necessary adjustments to the configuration of its fire-wall(s) so that SSH access from outside is guaranteed to Company permanently and without time limit. Company shall secure SSH access with an SSH key. Customer can restrict SSH access via the IPv4 address specified by Company and fixed by the firewall(s).

  •  2.5. Priority Definitions

  • (a) “Priority 1 – High Severity” means an Incident preventing Customer from continuing use of the Binalyze Software, or critically impacting a core function of the Binalyze Software or Customer’s environment causing the Binalyze Software to experience downtime. No workaround is known to Customer. 

  • (b) “Priority 2 – Medium Severity” means an Incident preventing Customer from continuing use of a non-core function of the Binalyze Software, but does not affect the performance or functionality of Customer’s environment in its entirety. The Incident impacts Customer’s ability to use the Binalyze Software, the severity of which is significant and may be repetitive in nature. Priority 2 is the highest possible level for all non-production systems. 

  • (c) “Priority 3 – Low Severity” means minor errors, which do not inhibit any of the core functionality of the Binalyze Software. Error negligibly impacts Customer’s ability to use the Binalyze Software, and the Binalyze Software remains mainly functional. This Priority level may include any Binalyze Software issue with a viable workaround. 

  • (d) “Priority 4 – Request for Information” includes minor, cosmetic, or documentation-related issues, and enhancement requests that are not time-sensitive. There is no impact on the Binalyze Software existing features, functionality, performance or stability. This Priority Level includes any development support related incidents.

  • 2.6 Response Times 

  • (a) Company shall use commercially reasonable efforts to answer to Customer’s Service Requests as set forth below.  The Priority Level shall be indicated by Customer with each Service Request. Company may reclassify the Priority Level at its sole discretion. Response Times during Support Hours are defined as follows:



Priority Level

Response Time

Applicable Support Hours

Basic Support Hours 

Priority 1 Response Time* (within Support Hours)

1 business day

Priority 2 Response Time* (within Support Hours)

2 business days

Priority 3 Response Time* (within Support Hours)

3 business days

Priority 4 Response Time* (within Support Hours)

5 business days

 

 

 

 

 

*Response Times begin when Customer has submitted a Service Request in accordance with Section “Submission of Service Requests”.

  • (b) It is at the sole discretion of Company which means it uses to remedy a fault. If Company determines that it cannot successfully remedy the Defect within the Response Period, it will notify Customer in writing of the additional time required to remedy the Defect.

  • (c) In the event of a malfunction, Company may, at its sole discretion, provide a workaround until the malfunction is completely resolved.´

  • (d) By default, server-side support incidents are handled using remote maintenance via SSH.

  • 2.7 Support Services Exclusions.

The following cases are not covered by the Support Services:

  • (a) Support Requests in a period in which Customer has not fully paid all fees due to Company;

  • (b) Maintenance and support of the system environment, including, but not limited to, mobile hardware and third-party applications used by Customer in connection with the Binalyze Software;

  • (c) Training and setup of Binalyze Software;

  • (d) Identification of errors caused by force majeure, environmental conditions, defective mobile hardware or errors caused by Customer, its affiliates or third parties, in particular due to incorrect or incomplete system or data entries or interventions in the program code by employees or contractors of Customer and/or its Affiliates;

  • (e) IT architectural guidance and consulting on how to integrate Binalyze Software into Customer’s specific use case; and

  • 2.8 Updates of Binalyze Software and Supported Version

  • (a) As part of the provision of Support Services, Company shall, at its discretion, provide Customer with Updates of the Binalyze Software. Customer is obliged to use the latest version of the Binalyze Software in order to be eligible for Support Services. 

  • (b) Customer shall have no claims with respect to the remedy of Incidents according to this Annex B that have already been corrected through an Update by a current version of the Contractual Software not yet used by Customer.

Processing purpose

Legal basis for the processing purpose

Personal Data used for the processing purpose

Handling pre-contractual negotiations and communications, concluding of the contract and managing the contractual relationship

If you as a natural person wish to become or are already our client or partner and the enquiry or request is related to your potential or ongoing customer or partnering relationship with us, the legal basis is taking and implementing the pre-contractual measures of the contract or performing the contract concluded between us

If you as a representative of legal entity, who wishes to become or is already our client or partner and the enquiry or request is related to the legal entity’s potential or ongoing customer or partnering relationship with us, the legal basis is our legitimate interest in taking and implementing the pre-contractual measures of a contract or performing the contract concluded between the legal entity and us

Main Data, Communication Data

Responding to your enquiries and requests submitted via the Website, live chat, or e-mail, including submissions regarding partnership and receiving a demo

Our legitimate interest in ensuring effective relations management with potential customers, partners and interested parties

If you as a natural person wish to become or are already our client or partner and the enquiry or request is related to your potential or ongoing customer or partnering relationship with us, the legal basis is taking and implementing the pre-contractual measures of the contract or performing the contract concluded between us

If you as a representative of legal entity, who wishes to become or is already our client or partner and the enquiry or request is related to the legal entity’s potential or ongoing customer or partnering relationship with us, the legal basis is our legitimate interest in taking and implementing the pre-contractual measures of a contract or performing the contract concluded between the legal entity and us.

Main Data, Communication Data, Contract Data

Performing the contract by delivering the purchased products (including providing you with free trial of our product), contacting you regarding the purchased products

If the purchase is submitted by a natural person, the legal basis is performance of contract concluded between us

If the purchase is submitted by a legal entity, the legal basis is our legitimate interest in performing the contract concluded between the legal entity and us

Main Data, Contract Data, Communication Data

Gathering information about you from publicly available resources and registrars for the purposes of creating client segments and customising the information we provide to you about our business

Our legitimate interest in ensuring effective relations management with potential customers, partners and interested parties

Communication Data

Sending newsletters and other marketing information regarding us and our business via e-mail

Consent given upon subscribing to our newsletter

Main Data, Communications Data

Administering newsletter subscription list

Our legitimate interest in ensuring valid legal basis for sending newsletters and recording given and withdrawn consents (subscriptions)

Main Data

Diagnosing and repairing problems with the Website

Our legitimate interest in providing data security and preventing fraudulent actions related to the Website; ensuring the functioning of the Website

Technical Data

Making available the basic functions of the Website and administering the Website, including gathering information about visitor’s navigation on the Website

Our legitimate interest in providing the Website and understanding use patterns of the Website to be able to better the Website and enhance the user experience

Technical Data

Insurance and Risk Management

Our legitimate interest is to process personal data where necessary for the purposes of obtaining or maintaining insurance coverage, managing risks and/or obtaining professional advice.

Usage Data

Analysing the use of our products

Our legitimate interests in improving, upgrading, and enhancing our products

Usage Data

Data exchange with our distributors and co-operation partners for facilitating the provision of our products

Our mutual legitimate interest in providing you with our product through our distributor or co-operation partner

Main Data, Contract Data

Storing information containing Personal Data in our backup systems

Our legitimate interest in ensuring continuity and security of data processing operations

All data categories named in Section 3.1

Disclosing data to our service providers or law enforcement and supervisory authorities

Our legitimate interest in utilising the information technology infrastructure and services provided by our service providers or performance of our legal obligation

All data categories named in Section 3.1

Intra-group data disclosures and transfers

Our legitimate interest in utilising common technical infrastructure and performing internal administrative tasks

All data categories named in Section 3.1

Arrange the sale or merger of our company and provide information for conducting the legal or other audit and the data exchange thereof

Our legitimate interest in facilitating proper due diligence process and business continuity by ensuring a successful merger, acquisition or restructuring of the company

All data categories named in Section 3.1

Establishment, exercise, or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure in relation to our, our users’ or employees’ rights

Our legitimate interest in facilitating effective establishment, exercise, or defence of legal claims

All data categories named in Section 3.1

Type of the recipient

Purpose of disclosure

Law enforcement and supervisory authorities

We disclose your Personal Data to law enforcement and supervisory authorities only if we are under a duty to disclose or share these data in order to comply with legal obligations (for example, if required to do so under applicable law, by a court order or for the purposes of prevention of fraud or other crime)

Professional advisors (legal advisors, accounting, auditors etc)

In case not operating as data processors, conducting and supporting our regular business activities

Providers of support services related to fulfilling the contract

For the purposes of performing our obligation related to the fulfilment of the contract we may disclose Personal Data to support service providers, such as payment service providers

IT-service providers

In case not acting as data processor, providing IT solutions necessary for daily business functions

Distributors and co-operation partners

Facilitating the provision of our products through our distributor or co-operation partner

Group entities

Utilising common technical infrastructure and performing internal administrative tasks

Potential business acquirers, investors, and business transferee(s)

If necessary and required for successfully transferring our business or for the purposes of mergers and acquisitions, your Personal Data may be disclosed to the specified acquirers and their representatives and / or legal counsels

Category of the authorised processor

Processing purpose

Safeguard

Location

Providers of IT-services

Providing IT-solutions necessary for the daily business functions (e.g. Microsoft Azure)

Data processing agreements, standard contractual clauses

World-wide, including the USA

Providers of marketing and customer management software services

Providing analytical insight and marketing tools for bettering daily business functions (e.g. MailChimp, HubSpot)

Data processing agreements, standard contractual clauses

World-wide, including the USA


Binalyze AIR Guide

Download our DFIR Guide and learn more how you can elevate your incident response processes.

DOWNLOAD NOW