About these terms
These terms describe use of AssayMark, operated by Darklayer Tech Ltd. Contact info@assaymark.co.uk with questions. AssayMark is currently a pre-launch security assessment service offering limited free reviews and pilots for organisations.
Use the service only if you are authorised to act for the organisation whose systems or information you submit. Any separate written pilot or service agreement also applies and takes priority where it expressly changes these terms. Publishing this page does not record acceptance on behalf of an existing user.
What AssayMark provides
AssayMark helps review supported logs, website exposure and selected configuration settings; explain findings using supplied business context; and track remediation and re-testing. Available functionality depends on the workflow and access enabled for your account.
Findings are decision support, based on the evidence and checks available at the time. False positives, missed issues and incomplete context are possible. A clean result does not establish that a system is secure. Reports are not a certification, an independent audit, legal advice or a guarantee of compliance. You remain responsible for reviewing recommendations and safely testing changes before applying them.
Permission to assess
Only upload data you are entitled to share and assess targets you own or have explicit permission to test. For active or deeper checks, your authorisation must cover the target and the nature of the tests. Complete any domain or account verification required by the service.
Do not use AssayMark to probe unrelated systems, bypass access controls, collect another person's information without authority, disrupt services, or evade scan limits. A domain-verification step is not a substitute for permission from the relevant system owner.
Accounts and acceptable use
Keep account access secure, provide accurate information and notify us if you suspect misuse. Do not share credentials in uploaded files or support messages. Do not upload malicious executable material, attempt to exploit AssayMark, access another customer's records, or overload the service.
We may restrict scans, uploads or access to address abuse, security risks, capacity limits or a breach of these terms. Where appropriate, we will explain the restriction and how to contact us. We may need to act immediately to protect the service or others.
Your information and reports
You retain rights in the material you provide. You authorise us to process it as needed to deliver the requested assessment and related support. Personal information is handled as described in our Privacy Policy. Arrange any necessary organisational consent and data-processing agreement before supplying personal or confidential data.
You may use your assessment reports internally and share them with advisers or other authorised recipients. Protect confidential details and keep the report's scope, date and limitations with it. Do not present a report as a guarantee, regulatory approval or independent certification.
AssayMark's software, branding and website content remain owned by Darklayer Tech Ltd or their respective rights holders. These terms do not transfer ownership of them to you.
Retention and operator backup access
Keep your own copies of information and reports you need. Assessment retention is normally 90 days under the configured rules; account information and recovery copies have different lifecycles explained in the Privacy Policy. Request account deletion at our contact email. There is no promise of immediate erasure from every backup.
The separate AssayMark Ledger Backup connector is for authorised operators. Its limited Google Drive permission supports encrypted deletion-record backups and retrieval. It operates for internal recovery and is not an end-user backup service. Revoking its Google access can interrupt future backups; existing copies need separate handling.
Availability and changes
Pre-launch features may change and maintenance can cause interruptions. We do not promise uninterrupted availability, a particular recovery time, or a service-level commitment unless agreed separately in writing. Backups reduce risk but are not a guarantee that all information can be recovered.
Free reviews and pilots do not create a paid subscription. Any future charges or paid-service terms must be agreed separately before they apply.
Responsibility and applicable rights
Each party remains responsible for its own acts and omissions under applicable law. Nothing in these terms excludes liability for fraud, fraudulent misrepresentation, death or personal injury caused by negligence, or any liability or statutory right that cannot lawfully be excluded or limited.
Before making changes to your systems, assess their impact, obtain the necessary permission and keep an appropriate recovery plan. Contact us promptly if you believe a report or service behaviour is incorrect.
Questions, complaints and updates
Email info@assaymark.co.uk about support, complaints or closing an account. We will try to resolve concerns directly. We will identify material changes to these terms and communicate changes affecting an ongoing pilot or service as appropriate. A change will not retrospectively remove rights that have already accrued.