Terms of Service

Good Security provides cybersecurity consultancy services to New Zealand small and medium enterprises, including but not limited to:

• Managed security monitoring and response
• Security assessments and penetration testing
• Compliance guidance and audit preparation
• Virtual Chief Information Security Officer (vCISO) services
• Security awareness training and advisory

The specific scope, deliverables, timelines, and fees for any engagement are defined in a separate service agreement or statement of work between Good Security and the client. These Terms of Service apply in addition to any such agreement, and in the event of a conflict, the service agreement shall prevail.

We reserve the right to modify, suspend, or discontinue any aspect of our services at any time, with reasonable notice to affected clients where applicable.

All content on the Good Security website, including text, graphics, logos, images, and software, is the property of Good Security or its content suppliers and is protected by New Zealand and international intellectual property laws.

You may not reproduce, distribute, modify, or create derivative works from any content on our website without our prior written consent.

Engagement deliverables: Ownership of deliverables produced during a consultancy engagement (such as assessment reports, security policies, or remediation plans) is governed by the terms of the relevant service agreement. Unless otherwise specified in writing, Good Security retains ownership of its proprietary methodologies, tools, templates, and frameworks, while the client receives a licence to use the deliverables for their internal business purposes.

Good Security provides cybersecurity consultancy services with professional care and skill. However, no security assessment or advisory service can guarantee complete protection against all threats. Our services are intended to strengthen your security position and reduce risk, not to eliminate it entirely.

To the maximum extent permitted by New Zealand law:

• Good Security shall not be liable for any indirect, incidental, special, consequential, or punitive damages arising from your use of our services or website.
• Our total liability for any claim arising from a service engagement shall not exceed the fees paid by the client for the specific engagement giving rise to the claim.
• We are not liable for any security incidents, data breaches, or losses that occur despite the implementation of our recommendations, as the ultimate responsibility for security implementation lies with the client.

Nothing in these terms limits or excludes liability that cannot be limited or excluded under the Consumer Guarantees Act 1993 or other applicable New Zealand legislation.

You agree to indemnify, defend, and hold harmless Good Security, its directors, employees, and contractors from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with:

• Your misuse of any deliverables, reports, or recommendations provided by Good Security.
• Your breach of these Terms of Service or any applicable service agreement.
• Your violation of any applicable laws or regulations.
• Any unauthorised use of our proprietary methodologies or tools beyond the scope of the licence granted.

Both Good Security and our clients recognise the importance of confidentiality in cybersecurity engagements. All parties agree to treat as confidential any proprietary, sensitive, or non-public information shared during the course of a service engagement.

Confidentiality obligations include, but are not limited to:

• Assessment findings, vulnerability reports, and security recommendations.
• Client network architecture, system configurations, and access credentials.
• Good Security proprietary tools, methodologies, and internal processes.
• Business strategies, pricing, and commercial arrangements.

For formal engagements, confidentiality terms are typically documented in a Non-Disclosure Agreement (NDA) or within the service agreement. Confidentiality obligations survive the termination of any engagement for a period specified in the relevant agreement, or for two years if no period is specified.

Either party may terminate a service engagement in accordance with the terms set out in the relevant service agreement. In the absence of specific termination provisions:

• Either party may terminate with 30 days' written notice.
• Good Security may terminate immediately if the client breaches these terms or the service agreement and fails to remedy the breach within 14 days of written notice.
• The client may terminate immediately if Good Security materially breaches the service agreement and fails to remedy the breach within 14 days of written notice.

Upon termination, the client shall pay for all services rendered up to the date of termination. Confidentiality obligations, limitation of liability, and indemnification provisions shall survive termination.

These Terms of Service are governed by and construed in accordance with the laws of New Zealand. Any disputes arising from or relating to these terms or our services shall be subject to the exclusive jurisdiction of the courts of New Zealand, with venue in Wellington.

Before initiating legal proceedings, the parties agree to attempt to resolve any dispute through good-faith negotiation. If the dispute cannot be resolved through negotiation within 30 days, either party may pursue resolution through mediation before resorting to court proceedings.

If you have any questions about these Terms of Service, please contact us:

• Company: Good Security
• Status: Independently registered in New Zealand
• Email: legal@goodsecurity.co.nz
• Website: goodsecurity.co.nz/contact