DeepReview Licence Agreement

Version 2026-10-22.2

This agreement is between you - the person, or the organisation on whose behalf that person accepts it ("you") - and Justin's Security Services Limited, the licensor ("we", "us"). It covers DeepReview: the server application, its container images, installation files, collectors and web interface, and their documentation and updates (the "Software"), which we provide by invitation for you to install and run on your own systems.

By accepting an invitation, or by installing, copying, accessing or using the Software you accept this agreement. If you do not accept it, do not install, access or use the Software. If you accept it for an organisation, you confirm that you are authorised to do so.

IMPORTANT: YOU USE THE SOFTWARE AT YOUR OWN RISK. SECTIONS 2 TO 7 LIMIT WHAT YOU MAY USE THE SOFTWARE FOR AND MAKE YOU RESPONSIBLE FOR HOW YOU USE IT AND FOR ITS RESULTS, SECTION 11 EXCLUDES ALL WARRANTIES, AND SECTION 12 EXCLUDES OUR LIABILITY. PLEASE READ THEM BEFORE YOU ACCEPT.

1. Invitation and licence

The Software is provided free of charge, only by invitation, to organisations that we approve. An invitation, and any key, code or credential that comes with it, is for the organisation we sent it to only. Subject to this agreement, we grant you a non-exclusive, non-transferable, non-sublicensable and revocable licence to install the Software on systems you control and to use it there, only for the permitted purposes in section 2. People who use the Software for you must do so under this agreement, and you are responsible for their use and for keeping their sign-in details secure.

We provide the Software at our discretion. We may decline any request for an invitation, limit which features or sources you may use, withdraw an invitation, stop providing updates to you, and end this licence at any time and for any reason.

2. Permitted purposes

You may use the Software only to assess a company or other organisation (a "subject") in which you have a legitimate interest, and only for one of these purposes:

(a) due diligence on a company you are considering acquiring, investing in, merging with or lending to;

(b) assessing the security of a current or prospective supplier, vendor, service provider or business partner;

(d) security testing, red-team or capture-the-flag work that the owner of the subject's systems has authorised in writing.

An individual may be a subject only as a supplier or provider acting in a business capacity, such as an independent consultant you are considering engaging, and only in respect of that business. Before each assessment you must have, and keep a record of, its purpose and the basis of your interest, and you must give us that record on request.

3. Prohibited uses

You must not, and must not allow anyone to, use the Software or its results:

(a) to locate, track, monitor, profile, harass, intimidate, threaten, stalk or expose any individual, or to compile information about an individual's private life, family, home, health or other sensitive characteristics;

(b) to make or support any decision about an individual's eligibility for employment, credit, insurance, housing, a tenancy, a licence or a government benefit, or for any other purpose for which consumer reports or background checks are regulated by law, such as the United States Fair Credit Reporting Act;

(c) to sign in to, test or use any account, credential, password, key or token found in the results, or to access any system or data without its owner's authorisation;

(d) to run the active check, or any other check that sends more to a subject's systems than an ordinary request for a public web page, without the prior written permission of the owner of every system checked, and then only within the scope that owner agreed;

(e) to attack, disrupt, exploit, defraud, extort or embarrass a subject or anyone else, or to compete unfairly;

(f) to publish, sell, license or disclose results, scores or grades about a subject, except to the subject, and to people in your organisation, the other parties to the transaction and your and their professional advisers who need them for the permitted purpose and keep them confidential;

(g) in breach of the terms of any source or service the Software uses, or to evade a source's rate limits, access controls or restrictions; or

(h) in breach of any law, including privacy, data protection, anti-spam, computer misuse, criminal, intellectual property, defamation and export laws.

If we believe the Software is being used in breach of this agreement, we may withdraw your invitation and stop providing updates to you at once, and you must stop using the Software if we ask.

4. Sources, personal information and results

The Software collects information that is publicly available, from sources that we do not control: among others, registries, certificate transparency logs, DNS, search engines, web archives, vulnerability catalogues, breach indexes, corporate filings, social and professional networks, onion services and the subject's own public pages, some of them through services you configure with your own keys. You are responsible for your accounts with those services, for complying with their terms, and for making sure that collecting, keeping and using the information is lawful where you are and where the subject is. Some sources, such as breach indexes and onion services, may be unlawful to access or use in some places; you decide whether to enable them.

The results can contain personal information, such as names, roles, email addresses and the fact that an address appears in a breach. You decide what is collected and why, and you are responsible, as the organisation that controls that information, for having a lawful basis for collecting and using it, for keeping it secure and only for as long as you need it, for answering requests from the people it is about, and for meeting every other obligation that privacy and data protection laws place on you.

The results are produced automatically, including by large language models, from information that may be incomplete, out of date, wrongly attributed to the subject, or wrong. Grades, scores, verdicts, recommendations, attack paths and findings are automated estimates, not statements of fact about any subject, and not legal, security, investment or other professional advice. You are solely responsible for verifying results before you, or anyone you share them with, rely on them, and for every decision you make with them.

5. Your installation, prerequisites and updates

The Software runs on systems that you provide and control. Before it can run, it needs prerequisites that you obtain and pay for yourself, under your own agreements with their providers: among others, a server able to run it, a commercial VPN service for its network egress, and accounts and keys for the sources and AI providers it uses. You are responsible for them; for the systems the Software runs on and their security, configuration, access control, updates and backups; for its network egress, including any VPN or Tor configuration; and for everything you and your users put into it, including uploaded documents. The encryption key generated for your installation protects the keys stored in it: if it is lost, they cannot be recovered, by you or by us.

We may make updates available, which you can fetch from our servers when you choose. Installing one is your decision: an update can change what the Software collects, how it behaves and the format of its data, so back up first. When you check for or download updates, our servers receive what they need to check your invitation, such as the key that came with it, and the address and time of the request. The Software does not send us your subjects, your results or your keys.

6. Confidentiality and restrictions

The Software, your invitation and any key, code or credential that comes with it are our confidential information. Except as this agreement expressly allows, or as applicable law permits despite this restriction, you may not:

(a) copy, distribute, sell, resell, rent, lease, lend, sublicense, publish or otherwise make the Software, your invitation or its key available to anyone outside your organisation;

(b) remove, alter or obscure any copyright, licence or other proprietary notice in the Software;

(c) circumvent, disable or interfere with any of the Software's safeguards, such as its passive default, its egress interlock, the permission needed for active checks, or its records of runs;

(d) reverse engineer, decompile or disassemble the Software, except to the extent applicable law expressly permits it, and except as the licences of the third-party components described in section 8 permit for those components; or

(e) use the Software to build or train a product or service that competes with it.

7. Your responsibility

You use the Software entirely at your own risk. You are solely responsible for your choice of subjects, purposes and sources, for every check the Software runs for you, and for what you, and anyone you share them with, do with the results.

To the fullest extent permitted by law, you will defend, indemnify and hold harmless us, our directors, officers, employees and agents, and our successors and assigns, against any claim, demand or proceeding, and any loss, liability, damage, fine, penalty, cost or expense (including reasonable legal fees), arising out of or relating to:

(a) your use of the Software, or its use by anyone you allow to use it;

(b) any claim by a subject, by an individual named in the results, or by the owner of a source or a system, including a claim of defamation, invasion of privacy, breach of confidence or unauthorised access;

(d) any use that is not for a permitted purpose, or that section 3 prohibits; or

(e) your breach of law, of a source's terms or of this agreement.

8. Third-party components and services

The Software includes open-source components and third-party tools that are licensed to you under their own licences, and nothing in this agreement limits the rights those licences give you. If you configure an AI service or provider, or another third-party service, the Software sends the requests and the data needed to answer them to that service, under your own agreement with its provider. We are not responsible for those services, their availability, their answers or how they handle your data.

9. Ownership

The Software is licensed, not sold. We and our licensors keep all right, title and interest in it, including all intellectual property rights. All rights not expressly granted in this agreement are reserved. We claim no rights in your results, which remain subject to sections 2 to 4. If you send us suggestions or feedback, we may use them without obligation to you.

10. Updates and support

We may make updates available and may answer questions, but we are not obliged to provide updates, fixes, support, maintenance or any other service, and we may stop at any time. Any help, answer or suggestion we give is given on the terms of sections 11 and 12. Each version of the Software may come with an updated version of this agreement; the agreement that comes with a version applies to that version.

11. No warranty

TO THE FULLEST EXTENT PERMITTED BY LAW, THE SOFTWARE, ITS RESULTS AND ANY HELP WE GIVE ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS AND WITHOUT WARRANTY OR CONDITION OF ANY KIND, EXPRESS, IMPLIED OR STATUTORY, INCLUDING ANY IMPLIED WARRANTY OR CONDITION OF MERCHANTABILITY, MERCHANTABLE QUALITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE OR NON-INFRINGEMENT. YOU ASSUME THE ENTIRE RISK AS TO THEIR QUALITY, RESULTS AND PERFORMANCE.

We do not warrant that the Software will be error-free, secure or uninterrupted, that its sources will be available, that it will find everything that is public about a subject, that its results are complete, current, correctly attributed or accurate, or that using it is lawful in your circumstances. Where the law does not allow a warranty or condition to be excluded, it is limited to the shortest period and the narrowest scope the law permits.

12. Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, AND WHATEVER THE LEGAL BASIS OF THE CLAIM, WHETHER CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, STATUTE OR ANYTHING ELSE:

(a) WE ARE NOT LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL OR DATA, ANY LOSS IN A TRANSACTION OR FROM A DECISION MADE WITH THE RESULTS, ANY CLAIM BY A SUBJECT OR BY ANYONE NAMED IN THE RESULTS, ANY SECURITY INCIDENT, ANY FINE OR PENALTY, ANY COST OF SUBSTITUTE PRODUCTS OR SERVICES, OR ANY BUSINESS INTERRUPTION, ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, ITS RESULTS OR ANY HELP WE GIVE, EVEN IF WE WERE ADVISED OF THE POSSIBILITY OF THEM OR THEY WERE FORESEEABLE; AND

(b) THE SOFTWARE IS PROVIDED FREE OF CHARGE, AND WE HAVE NO LIABILITY TO YOU OF ANY KIND.

These limits apply even if a remedy fails of its essential purpose. They are an essential basis on which we make the Software available free of charge, and each of them is separate and severable from the others.

Our directors, officers, employees and agents are not personally liable to you for anything arising out of or relating to this agreement, the Software, its results or any help we give, and each of them may rely on this section as if they were a party to this agreement.

Nothing in this agreement limits or excludes liability that cannot be limited or excluded by law, such as liability for fraud. Where the law does not allow our liability to be excluded or limited as this section provides, it is excluded or limited to the fullest extent the law permits.

13. Termination

This agreement continues until it is terminated. You may terminate it at any time by stopping all use of the Software and deleting your copies of it. We may terminate it at any time and for any reason by notice to you, and it ends at once, without notice, if you breach it. When it ends, you must stop using the Software, delete your copies of it and the key that came with your invitation, and, where we ask, delete results that you hold in breach of this agreement. Sections 2 to 9 and 11 to 15 survive termination.

14. Governing law

This agreement, and any dispute arising out of or relating to it or the Software, is governed by the laws of the Province of New Brunswick and the federal laws of Canada applicable there, without regard to conflict-of-laws rules. The courts of New Brunswick have exclusive jurisdiction over any such dispute, and you and we submit to them. The United Nations Convention on Contracts for the International Sale of Goods does not apply. If a consumer protection law applies to you, nothing in this agreement takes away any right under it that cannot be waived.

To the fullest extent permitted by law: (a) a claim against us must be started within one (1) year after the events that gave rise to it, or it is permanently barred; and (b) you may bring a claim against us only on your own behalf, and not as a plaintiff or member of any class, collective or representative proceeding, and you waive any right to a trial by jury.

15. General

This agreement is the entire agreement between you and us about the Software. If a provision of this agreement is held to be unenforceable, it is enforced to the maximum extent possible and the rest of the agreement remains in effect. A failure or delay in enforcing a provision is not a waiver of it. You may not assign this agreement without our written consent; we may assign it. You must comply with the export control and sanctions laws that apply to your use of the Software, and you confirm that you are not named on, or owned or controlled by anyone named on, a Canadian sanctions list. We may give you notices under this agreement by email to the address you asked for the Software from, or the address we sent it or your access to; send notices to us by email to [email protected].

16. Contact

Justin's Security Services Limited (DeepReview, MNA Tools), New Brunswick, Canada.

Requests for an invitation, support and notices: [email protected]
Privacy: [email protected]
Web: https://mnatools.com/deepreview