Legal Notice & Terms of Service

In accordance with the provisions of Articles 6-III and 19 of Law No. 2004-575 of June 21, 2004 for Confidence in the Digital Economy, known as L.C.E.N., users and visitors ("User") of the website https://tamper.one ("Site") are hereby informed of the present legal notice.

Connecting to and browsing the Site by the User implies full and unreserved acceptance of this legal notice, which remains permanently accessible on the Site.

Article 1.1 Publisher & Company Information

The Site is published by SIENNA Information Technology Solutions SAS ("the Company"), a French simplified joint-stock company (SAS) with a share capital of 4,000 Euros, registered with the Trade and Companies Register of Lille Métropole (RCS) under registration number 984 632 596 00016.

• Registered Office: Campus Euratechnologies, Place de Saintignon, 165 Avenue de Bretagne, 59000 Lille, France.
• Intra-community VAT Identification: FR62 984632596
• Director of Publication: Hadrien PARIS
• Corporate Contact: contact@sienna.dev

Article 1.2 Website Hosting & Edge Infrastructure

The Site is hosted and distributed exclusively via the global edge cloud network of Cloudflare, Inc.:

• Host: Cloudflare, Inc.
• Headquarters: 101 Townsend St, San Francisco, CA 94107, USA
• Website: https://www.cloudflare.com
• Hosting Architecture: Serverless Cloudflare Workers deployed across worldwide edge points of presence. The Site does not rely on Amazon Web Services (AWS) hosting.

For any inquiry regarding the hosting of the Site, the User may contact contact@sienna.dev with the subject line "tamper.one Hosting".

Article 1.3 Site Accessibility

The Site is accessible from any location, 24 hours a day, 7 days a week, except in cases of events beyond reasonable control (acts of God, unforeseen circumstances), scheduled or unscheduled interruptions arising from maintenance necessities. In the event of modification, interruption, or suspension of the Site, the Company cannot be held liable.

Article 1.4 Technical Specifications & Compatibility

The Site uses standard JavaScript and web technologies. The Company cannot be held liable for material or hardware damages resulting from browsing the Site. The User agrees to access the Site using modern, virus-free hardware with an up-to-date web browser.

Article 1.5 Intellectual Property

The Company is the owner of all intellectual property rights and holds usage rights for all elements accessible on the Site, including texts, images, graphics, logos, icons, sounds, stylesheets, software, and interactive assets.

Any reproduction, representation, distribution, modification, adaptation, publication, or commercialization of all or part of the elements of the Site, by any means or process whatsoever, is strictly prohibited without prior written authorization from an authorized representative of the Company, and will give rise to legal proceedings pursuant to the French Intellectual Property Code and Civil Code.

Article 1.6 Personal Data, Cookies & Privacy (GDPR)

1.6.1 Data Controller

SIENNA Information Technology Solutions SAS acts as the Data Controller for personal data processed through the Site, within the meaning of the General Data Protection Regulation (GDPR - EU Regulation 2016/679).

1.6.2 Collected Data & Purposes

The Site collects personal data under two categories:

• Data directly transmitted by the User: Contact and career application forms (first name, last name, professional email address, company name, resume, message), for the exclusive purpose of processing inquiries or applications. Legal basis: User consent / pre-contractual legitimate interest.
• Data collected automatically: Technical cookies and audience measurement trackers to evaluate site traffic and security. Legal basis: User consent, gathered prior to storing any non-essential cookies.

1.6.3 Cookies & Tracking Technologies

The Site distinguishes between:

• Strictly necessary cookies: Navigation preferences, session security, and load balancing, which do not require prior consent.
• Audience measurement & performance cookies: Deployed only after explicit consent via the cookie banner displayed upon initial visit (e.g., Google Analytics / Google Tag Manager, Reddit advertising pixel if applicable).

Refusing non-essential cookies is as simple as accepting them, in strict compliance with CNIL guidelines. The User may adjust preferences at any time.

1.6.4 Transfers Outside the European Union

Where external technical providers process data outside the European Union (e.g., in the United States), transfers are governed by appropriate safeguards, including European Commission Standard Contractual Clauses (SCCs).

1.6.5 Data Retention Periods

Information submitted via forms is retained for a maximum duration of 3 years following the last active contact. Cookie-derived audience measurement data is retained for a maximum of 13 months pursuant to CNIL recommendations.

1.6.6 Data Recipients

Collected data is strictly intended for the Company and its authorized technical subcontractors, within the limits strictly necessary to fulfill the described purposes. Data is never sold to third parties.

1.6.7 User Rights & Contact

In accordance with GDPR, Users possess rights of access, rectification, erasure, restriction of processing, objection, and data portability. To exercise these rights, contact contact@sienna.dev. Users also retain the right to lodge a complaint with the French supervisory authority, the CNIL (www.cnil.fr).

Article 2.1 Preamble & Scope

These General Terms of Sale and Service ("Terms" or "Agreement") govern the contractual relationships between SIENNA Information Technology Solutions SAS ("SIENNA" or "the Company") and its professional business clients ("the Client"), in the context of supplying the recurring software subscription ("SaaS") known as tamper.

Article 2.2 Definitions

• tamper: Software surveillance and analysis solution for cloud object storage, covering File Integrity Monitoring (FIM), Data Security Posture Management (DSPM), Data Access Monitoring (DAM), and Data Loss Prevention (DLP), delivered via monthly subscription.
• S3 Gateway: Free inline reverse proxy and request analyzer provided alongside tamper to log S3 API operations and enforce threat mitigation policies with zero latency.
• Client: Any professional legal entity subscribing to a tamper license.
• License: Non-exclusive, non-assignable, and non-transferable right to deploy and use tamper granted to the Client for the duration of the subscription.
• Call Home: Lightweight technical verification mechanism confirming license validity via secure outbound connection to api.tamper.one/licence before each initialization of tamper.

Article 2.3 Purpose & Deployment Model

These Terms define the conditions under which SIENNA provides the Client with access to tamper, deployed in On-Premises / self-hosted mode within the Client's own cloud infrastructure, VPC, or dedicated servers, as well as the respective rights and obligations of both parties.

Article 2.4 Subscription & Free Trial

2.4.1 30-Day Free Trial

SIENNA offers a 30-day free trial on a streamlined version of the Genesis plan. No credit card or payment method is required to activate the trial. Upon expiration of the 30-day period, software execution is automatically suspended; the Client must subscribe to an active paid plan to resume utilization.

2.4.2 Subscription Process

Subscriptions may be initiated via tamper.one or through direct engagement with SIENNA. A subscription becomes definitive upon: validation of the selected tier, receipt of the initial payment, and activation/issuance of the license key by SIENNA.

Article 2.5 Pricing & Subscription Plans

SIENNA offers three monthly recurring subscription tiers:

Tier	Price (excl. VAT)	Key Scope
Genesis	€30 / month	1 S3 bucket, 1 node instance, community support, core FIM baseline monitoring.
Monolith	€200 / month	Unlimited S3 buckets, multi-node clustering, priority support, full DSPM, DAM, DLP, and AI modification analysis.
Universe	Custom Quote	Custom scale, dedicated SLAs, offline/sovereign air-gapped environments, tailored support.

Detailed specifications of each tier (bucket counts, node capacities, data volumes) are available on tamper.one. Prices are expressed in Euros, excluding applicable taxes; French/EU VAT is added pursuant to prevailing regulations.

SIENNA reserves the right to revise pricing at any time subject to thirty (30) days prior written notice sent to the Client by email. In the event of refusal of the revised rate, the Client may terminate the subscription pursuant to Article 2.7.

Article 2.6 Payment Terms

2.6.1 Payment Methods

Payment is executed exclusively by bank wire transfer to the corporate bank details specified by SIENNA on issued invoices.

2.6.2 Payment Schedule

The initial monthly payment is due immediately upon subscription. Subsequent recurring payments are due on the monthly anniversary date. Any monthly billing period commenced is due in full.

2.6.3 Invoicing

Electronic invoices are issued within 7 business days following receipt of payment and transmitted via email.

2.6.4 Late Payments & License Suspension

In the event of late payment, overdue amounts bear interest at the statutory legal rate, plus a mandatory flat recovery indemnity of €40 pursuant to Articles L. 441-10 and D. 441-5 of the French Commercial Code.

If payment remains outstanding fifteen (15) days after the due date, SIENNA reserves the right to immediately suspend tamper execution via the Call Home mechanism, without formal notice or indemnity, and without refund of sums previously paid. Default in payment persisting beyond thirty (30) days constitutes grounds for immediate termination by right.

Article 2.7 Term & Termination

2.7.1 Term & Tacit Renewal

Subscriptions are contracted for an indefinite term and tacitly renewed on a month-to-month basis on the monthly anniversary date, without long-term commitment.

2.7.2 Termination by the Client

The Client may terminate the subscription at any time with a fifteen (15) day notice period prior to the next billing date, by email sent to contact@sienna.dev or contact@tamper.one (specifying Client corporate name, subscription tier, and desired effective termination date). Any started monthly billing period remains due in full without pro-rata refund.

2.7.3 Termination by SIENNA

SIENNA may terminate the subscription with thirty (30) days notice in the event of material contractual breach by the Client, failure to pay persisting beyond 30 days, or with sixty (60) days notice in the event of total cessation of business activities by SIENNA.

2.7.4 Effects of Termination

Upon the effective date of termination, tamper software access is suspended via Call Home. The Client retains all data and configurations residing on its own infrastructure, as SIENNA retains no customer data.

Article 2.8 Intellectual Property & Restrictions

2.8.1 Proprietary Ownership

The tamper software (binary code, source code, user interface, documentation, cryptographic algorithms, improvements, and updates) constitutes a proprietary work protected by copyright and intellectual property laws, remaining the exclusive property of SIENNA. The Client is granted solely a non-exclusive, non-transferable, and non-assignable right of use for the duration of the subscription and within the scope of the subscribed tier.

2.8.2 Prohibited Actions

The Client expressly undertakes not to:

• Decompile, disassemble, or reverse-engineer tamper;
• Modify, adapt, translate, or create derivative works based on tamper;
• Rent, lease, lend, distribute, sell, or sublicense tamper to third parties;
• Remove, obscure, or alter any copyright or proprietary notices embedded in the software.

Any infringement constitutes copyright counterfeiting actionable under French civil and criminal law.

Article 2.9 Deployment, Call Home & Updates

2.9.1 On-Premises Environment

tamper is deployed on the Client's own infrastructure. The Client is solely responsible for supplying a compliant execution environment conforming to SIENNA technical prerequisites, performing installation, securing its network, and managing data backups. SIENNA does not guarantee software operations on non-conforming infrastructure.

2.9.2 Call Home Verification

Before each execution, tamper performs a lightweight Call Home to licence.tamper.one to verify license validity, requiring outbound internet connectivity. If the licensing server cannot be reached (due to network failure, restrictive firewall, etc.), tamper execution may be temporarily restricted; SIENNA cannot be held liable for interruptions caused by the Client's network environment. Call Home exclusively verifies the license identifier and software version; no object content or bucket data is ever transmitted.

2.9.3 Software Updates

Software updates and security patches are made available on the private client dashboard at https://dash.tamper.one. Security and bugfix updates are strongly recommended. Backward compatibility across major releases is not unconditionally guaranteed without adherence to migration notes.

Article 2.10 Technical Support

2.10.1 Scope & Hours

SIENNA provides technical support exclusively via email at contact@sienna.dev or contact@tamper.one, Monday through Friday, 09:00 to 18:00 CET (excluding French public holidays).

Support covers initial deployment guidance, diagnostic assistance related to tamper operations, and documentation clarification. It excludes general Client infrastructure administration, network troubleshooting, custom feature engineering, and independent security audits.

2.10.2 Service Levels

Unless a specific SLA is contracted under a custom Universe agreement, no binding Service Level Agreement (SLA) response time is guaranteed. Requests are prioritized according to issue severity and support load.

2.10.3 Remote Assistance

When necessary, SIENNA may provide remote guidance (diagnostic scripts, screen-sharing). The Client remains solely responsible for executing commands on its infrastructure. In last resort scenarios, a reset of tamper configuration may be recommended.

Article 2.11 Availability & Maintenance

2.11.1 Deployment Uptime

Because tamper is deployed on the Client's infrastructure, SIENNA cannot guarantee software uptime; the Client remains solely responsible for the high availability and resilience of its systems.

2.11.2 Licensing Server Maintenance

SIENNA may perform maintenance on its licensing system (api.tamper.one/licence) without notice, operations being non-intrusive and non-disruptive to running instances. In the event of planned maintenance impacting Call Home, SIENNA will endeavor to notify Clients via email.

Article 2.12 Personal Data & GDPR Compliance

2.12.1 Client as Data Controller

With tamper deployed On-Premises, the Client acts as sole Data Controller for all data scanned, monitored, or processed by the software (object metadata, audit logs, security configurations). SIENNA has zero access to Client data, except minimal technical telemetry strictly required for Call Home.

2.12.2 Compliance Undertaking

The Client warrants compliance with all applicable data protection regulations (GDPR, national laws) and agrees not to utilize tamper for unlawful purposes.

2.12.3 Invoicing Data

SIENNA processes administrative and billing contact data as Data Controller in accordance with its Privacy Policy (Section I, Article 1.6 of these Terms).

Article 2.13 Limitations of Liability

2.13.1 Exclusions of Liability

SIENNA undertakes to provide tamper with professional diligence. However, SIENNA shall not be held liable for:

• Service interruptions caused by Client infrastructure, network routing, acts of God, or events beyond reasonable control;
• Data loss or corruption, the Client having sole responsibility for data backups;
• Indirect damages, including loss of business, turnover, operating profit, clientele, loss of opportunity, or commercial/financial injury;
• Cyberattacks, ransomware intrusions, or security compromises suffered by the Client. tamper is an automated surveillance and analysis tool, not an absolute guarantee against compromise, and is provided "as is";
• Specific operational outcomes expected by the Client.

2.13.2 Aggregate Liability Cap

SIENNA's total aggregate liability, on all grounds combined, is strictly limited to the amount effectively paid by the Client to SIENNA during the three (3) months preceding the incident giving rise to liability.

2.13.3 Decision-Support Tool

The Client acknowledges that tamper is a security posture decision-support system and remains solely responsible for configuring cloud storage buckets, establishing security policies, and investigating alerts.

Article 2.14 Events Beyond Reasonable Control & Unforeseen Circumstances (Force Majeure)

Neither party shall be held liable for non-performance or delay caused by an event beyond its reasonable control, act of God, or unforeseen circumstances (force majeure) within the meaning of Article 1218 of the French Civil Code (including natural disasters, fire, flood, war, acts of terrorism, civil unrest, nationwide telecommunication or power grid failures, and major cloud provider outages). If the unforeseen prevention or force majeure event persists beyond sixty (60) days, either party may terminate the contract without indemnity.

Article 2.15 Amendments to Terms

SIENNA reserves the right to modify these Terms at any time. Modifications take effect thirty (30) days after notification sent to the Client by email. The Client may refuse updated Terms by terminating the subscription pursuant to Article 2.7; continuing use after thirty days constitutes unreserved acceptance.

Article 2.16 Entire Agreement & Severability

These Terms constitute the entire agreement between SIENNA and the Client regarding tamper and supersede any prior written or oral agreements. If any provision is deemed invalid or unenforceable, the remaining provisions remain in full force.

Article 2.17 Governing Law & Jurisdiction

These Terms are governed by and construed in accordance with the laws of France. Any dispute relating to their interpretation, performance, or termination that cannot be settled amicably within thirty (30) days shall be subject to the exclusive jurisdiction of the Commercial Court of Lille (Tribunal de Commerce de Lille), France, notwithstanding multiple defendants or third-party claims.

Article 2.18 Legal & Corporate Inquiries

For any inquiry regarding these Terms or legal notices:

• Email: contact@sienna.dev or contact@tamper.one
• Postal Address: SIENNA Information Technology Solutions SAS, Euratechnologies, 165 Avenue de Bretagne, 59000 Lille, France