Legal

Not legal advice

DirectiveLock provides process controls, documentation templates, training materials, and evidence packaging. We are not a law firm and do not provide legal advice. You remain responsible for deciding how to interpret and apply policies within your organization.

No guarantees

Cyber-enabled fraud and impersonation attacks evolve. DirectiveLock does not guarantee that incidents will never occur. Our services reduce risk by enforcing verification and separation of duties that make common scams harder to execute.

Limitation of liability

To the maximum extent permitted by law, DirectiveLock will not be liable for indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business interruption. Any liability, if established, is limited to the fees paid for the applicable package in the 3 months preceding the event giving rise to the claim, unless a different limitation is agreed in writing.

Client responsibilities

• • You are responsible for internal approvals, adoption, and enforcement of policies.
• • You must ensure your team follows approved channels and verification requirements.
• • You should provide only sanitized materials (blur/redact sensitive data) when sharing screenshots or documents.

Confidentiality

We treat client communications as confidential. When requested, we can provide a standard NDA before exchanging sensitive information.

Service scope & change requests

Packages have fixed scope (e.g., two async review rounds, one tabletop scenario). Work beyond the package scope is delivered as a change request (fixed add-on or hourly), agreed in writing via email before execution.

Your legal entity details

Replace this section with your legal entity name, address, registration number, and VAT ID (if applicable).