Legal

Terms of engagement

Last updated 12 August 2026. These terms apply to professional audit services offered by Data Endpoint Grid from A 197 Jln Segambut, Kuala Lumpur, Wilayah Persekutuan 51200, Malaysia.

Who we are

Data Endpoint Grid provides independent review of IoT control applications. We are not a licensed advocate and solicitor, not a certification body, and not the manufacturer or integrator of the systems we examine. Work is performed in English unless a written engagement says otherwise.

What an engagement is

An engagement starts only when both sides have a written note that names the services (for example a command-path audit), the site, the dates, the fee, and any limits on write tests. A form submission or telephone call is a request, not a contract.

Deliverables are written packs as described on the relevant service page. We do not supply software licences, hardware, 24-hour monitoring, or emergency incident response retainers unless a separate note says so.

Your responsibilities

You obtain authority for us to be on the site and on the networks in scope. You name an operations contact who can approve or refuse a supervised write test. You do not ask us to bypass access controls we are not authorised to touch. You keep backups of configurations before any agreed test window.

Our responsibilities

We work with reasonable professional care for an independent auditor of control applications. We do not guarantee that every possible command path will be found, that a plant will be free of incidents after the pack is delivered, or that a regulator or insurer will accept the pack as sufficient. Findings reflect the system as observed in the engagement window.

Confidentiality

Configuration excerpts, tag names, and photographs taken for evidence stay in the engagement file. We do not publish client names or site details without permission. You may share the pack inside your organisation and with insurers or integrators you appoint. Public posting of a pack that still contains hostnames or personal data is your decision and your risk.

Personal data

How we handle personal data is described in the privacy notice. Operator names in logs we review remain your records; copies we keep for the engagement follow that notice.

Fees and payment

Fees are stated in the engagement note, usually in Malaysian ringgit, exclusive of SST if SST applies. Invoices are payable within fourteen days unless the note says otherwise. This site does not take payment. Deposits, cancellation, and refunds are in the refund notice.

Limitation

To the extent permitted by Malaysian law, our aggregate liability for an engagement is limited to the fees paid for that engagement. We are not liable for loss of production, loss of profit, or indirect loss arising from a finding you implement, decline to implement, or implement late. Nothing in these terms limits liability for death or personal injury caused by negligence, or for fraud.

Governing law

These terms are governed by the laws of Malaysia. Courts of Kuala Lumpur have non-exclusive jurisdiction. If a clause cannot be enforced, the rest remains.

Contact

Data Endpoint Grid, A 197 Jln Segambut, Kuala Lumpur, Wilayah Persekutuan 51200, Malaysia, +60 3-62586210, audits@dataendpointgrid.digital.