Terms of Service

1. Definitions

1.1 “Agreement” means these Terms of Service together with the applicable Order Form and any master services agreement executed between the parties.

1.2 “Customer” means the organisation that has executed an Order Form for Cybrex.

1.3 “Authorized Users” means Customer's employees, contractors, or (in the case of an MSSP license) Customer's own clients, authorised to access Cybrex under the applicable license tier.

1.4 “Deployment Environment” means the on-premise infrastructure or private cloud environment, specified in the Order Form, in which Cybrex is installed and operated.

1.5 “Customer Data” means architecture, configuration, telemetry, alert, and other data ingested into or generated within Cybrex by or on behalf of Customer.

1.6 “Documentation” means the user and administrator documentation made available by Reflextion for Cybrex.

2. License Grant

2.1 Subject to Customer's compliance with this Agreement and payment of applicable fees, Reflextion Ventures Pte Ltd (“Reflextion,” “we,” “us”) grants Customer a non-exclusive, non-transferable, non-sublicensable license to install and use Cybrex, solely within the Deployment Environment specified in the Order Form, and solely up to the node count, user count, and feature tier purchased.

2.2 Where Customer holds an MSSP (managed security service provider) license tier, this license extends to permit Customer to operate per-tenant, multi-client deployments of Cybrex for Customer's own clients, subject to the tenant and client limits specified in the applicable Order Form.

2.3 No license is granted for any use beyond the scope expressly stated in this Section 2, whether by implication, estoppel, or otherwise.

3. Restrictions

Customer shall not, and shall not permit any Authorized User or third party to:

• Use Cybrex beyond the licensed node count, user count, Deployment Environment, or feature tier stated in the Order Form;
• Sublicense, resell, rent, lease, or distribute Cybrex to any party outside the scope of an active MSSP license;
• Reverse engineer, decompile, disassemble, or attempt to derive the source code of Cybrex, except to the extent such restriction is prohibited by applicable law;
• Circumvent or attempt to circumvent the license server's node or user enforcement mechanisms;
• Use Cybrex to build a competing product or service;
• Remove or obscure any proprietary notices in Cybrex or its Documentation.

4. Customer Data

4.1 As between the parties, Customer retains all right, title, and interest in and to Customer Data, including all architecture models, telemetry, and alert data ingested into or generated within Cybrex.

4.2 Reflextion will access Customer Data only (a) to provide support expressly requested by Customer, (b) as necessary to deliver contracted professional services, or (c) under Customer's prior written instruction — and, where Cybrex is deployed on-premise or in Customer's private cloud, Customer Data does not leave the Deployment Environment by default.

4.3 Where Customer enables an optional cloud-assisted reasoning feature (see Section 7 of our Privacy Policy), a defined subset of Customer Data may be transmitted to a third-party model provider strictly to generate the requested analysis, subject to that provider's data processing terms.

4.4 Detailed data processing terms, security commitments, and (where applicable) audit rights are set out in the Data Processing Agreement executed as part of Customer's Order Form.

5. Fees & Payment

5.1 Fees are as set out in the applicable Order Form, based on the licensed node count, user count, and feature tier (or, for MSSP customers, the applicable multi-tenant tier).

5.2 Unless otherwise stated in the Order Form, fees are invoiced annually in advance and are non-refundable except as expressly stated in this Agreement or as required by law.

5.3 Reflextion may adjust pricing for future renewal terms with at least 60 days' written notice.

6. Term & Termination

6.1 This Agreement commences on the effective date of the applicable Order Form and continues for the term stated therein, renewing as specified unless either party gives notice of non-renewal.

6.2 Either party may terminate this Agreement for the other party's uncured material breach following 30 days' written notice of such breach.

6.3 Upon termination or expiry, Customer's license to use Cybrex ceases, and Customer shall, at Reflextion's request, uninstall Cybrex or provide written confirmation of its deletion from the Deployment Environment. Sections 4, 7, 8, 9, 10, and 13 survive termination.

7. Confidentiality

7.1 Each party may disclose confidential information to the other in connection with this Agreement. The receiving party shall protect the disclosing party's confidential information using at least the same degree of care it uses for its own confidential information of similar nature, and shall not disclose it to any third party except as permitted under this Agreement or as required by law.

7.2 Confidentiality obligations do not apply to information that is or becomes publicly available through no fault of the receiving party, was already known to the receiving party without restriction, or is independently developed without reference to the disclosing party's confidential information.

8. Intellectual Property

8.1 Reflextion retains all right, title, and interest in and to Cybrex, the Reflextion Enterprise Graph Platform, the Documentation, and all underlying software, models, and technology, including all intellectual property rights therein. No rights are granted to Customer except the limited license expressly set out in Section 2.

8.2 “Cybrex,” “Reflextion,” and associated logos are trademarks of Reflextion Ventures Pte Ltd. Nothing in this Agreement grants Customer any right to use Reflextion's trademarks except as necessary to identify Customer's authorised use of Cybrex.

8.3 Customer retains all right, title, and interest in Customer Data, as set out in Section 4.

9. Warranties & Disclaimers

9.1 Reflextion warrants that Cybrex will materially conform to the Documentation when used as intended within the Deployment Environment specified in the Order Form. Reflextion's sole obligation, and Customer's sole remedy, for breach of this warranty is correction of the non-conformance, or, if Reflextion is unable to correct it within a reasonable time, termination of the affected license and a pro-rata refund of prepaid, unused fees.

9.2 Except as expressly stated in Section 9.1, Cybrex and all related services are provided “as is” and “as available.” To the maximum extent permitted by law, Reflextion disclaims all other warranties, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, and non-infringement, and does not warrant that Cybrex will be uninterrupted, error-free, or that it will detect, prevent, or remediate any specific security incident.

9.3 Cybrex is a decision-support and visualization tool. It does not replace Customer's own security policies, controls, incident response procedures, or professional judgment, and Reflextion is not responsible for Customer's security posture or outcomes.

10. Limitation of Liability

10.1 To the maximum extent permitted by law, neither party shall be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, revenue, data, or goodwill, arising out of or in connection with this Agreement, even if advised of the possibility of such damages.

10.2 Except for (a) a party's indemnification obligations under Section 11, (b) breach of confidentiality under Section 7, or (c) Customer's breach of the license restrictions in Section 3, each party's total aggregate liability arising out of or in connection with this Agreement shall not exceed the total fees paid or payable by Customer under the applicable Order Form in the twelve (12) months preceding the event giving rise to the claim.

11. Indemnification

11.1 Reflextion shall defend Customer against any third-party claim alleging that Cybrex, as provided by Reflextion and used in accordance with this Agreement, infringes that third party's intellectual property rights, and shall indemnify Customer against damages finally awarded, subject to Customer promptly notifying Reflextion of the claim and providing reasonable cooperation and control of the defence.

11.2 Customer shall indemnify Reflextion against any third-party claim arising from Customer's breach of this Agreement, misuse of Cybrex, or violation of applicable law, including claims arising from Customer's use of Cybrex under an MSSP license to serve Customer's own clients.

12. Export Control & Sanctions Compliance

12.1 Cybrex may be subject to export control and economic sanctions laws of Singapore and other applicable jurisdictions. Customer represents that it is not located in, under the control of, or a national or resident of any country or party subject to applicable trade sanctions, and shall not export, re-export, or make Cybrex available in violation of such laws.

13. Governing Law & Dispute Resolution

13.1 This Agreement is governed by the laws of the Republic of Singapore, without regard to conflict of law principles.

13.2 The parties shall first attempt to resolve any dispute arising out of or in connection with this Agreement amicably through good-faith negotiation within 30 days of written notice.

13.3 Failing amicable resolution, any dispute shall be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre (SIAC) under the SIAC Arbitration Rules then in force, with the seat of arbitration in Singapore, one arbitrator, and proceedings conducted in English. The courts of Singapore shall have non-exclusive jurisdiction over matters not referred to arbitration.

14. Order of Precedence

14.1 In the event of any conflict, the order of precedence is: (1) the applicable Order Form, (2) any executed master services agreement or data processing agreement between the parties, and (3) these Terms of Service.

15. General Provisions

15.1 Notices under this Agreement shall be in writing and sent to the addresses specified in the Order Form or to legal@reflextion.ai.

15.2 Assignment. Neither party may assign this Agreement without the other's prior written consent, except in connection with a merger, acquisition, or sale of substantially all assets.

15.3 Force Majeure. Neither party is liable for delay or failure to perform resulting from causes beyond its reasonable control.

15.4 Severability. If any provision of this Agreement is held invalid or unenforceable, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remainder of this Agreement shall remain in full force and effect.

15.5 Entire Agreement. This Agreement, together with the applicable Order Form, constitutes the entire agreement between the parties regarding its subject matter and supersedes all prior discussions or agreements on that subject.

16. Contact

For legal or contractual enquiries: legal@reflextion.ai
For general enquiries: support@reflextion.ai