Each of these is a term of the program. We ask now rather than after you have built a plan around a different assumption. All are required.
We enforce multi-factor authentication on every account our people would use to access Tasirio, use named individual accounts only , and run a documented joiner/mover/leaver process. We operate a documented security-incident process and would notify Tasirio within 24 hours of any suspected compromise of our credentials or of client data obtained through Tasirio. We have had no reportable security breach affecting client data in the past 24 months — or we describe it in the box below. We understand that no outbound export destination — SIEM, SOAR, webhook or ticketing integration — may be enabled for any client without a signed Data Egress Authorization naming that destination. We will obtain each client's written authorization before requesting access to their organization, and tell them in writing who has access, at what level, and how to have it removed. We will describe the product only as Tasirio describes it — we will not claim it detects any particular issue, makes anyone compliant or certified, writes to or remediates a client's systems, or that Tasirio is SOC 2 or ISO 27001 certified (SOC 2 is not certified and no auditor is engaged; ISO 27001 is self-assessed, not certified; and no third-party penetration test has ever been performed). We will not describe ourselves as "Certified Tasirio MSP" unless and until Tasirio issues a certification record, and we understand the designation is not accredited by, recognised by, or issued by any certification body, standards organization, regulator or insurer. We understand the appointment is non-exclusive , that no exclusivity of any kind is granted or implied as to any territory, vertical, segment, network, association or account list, and that none arises from our own investment, hiring or marketing . We understand that no plan is unlimited — each buys a counted quantity of connected systems, legal entities and identities — that above the top tier's ceiling on any one of them there is no list price and no partner rate and the order will be declined in favour of a custom quote, and that we may not sell, quote, invoice, renew or describe an uncapped or unlimited subscription. We also understand that nothing is priced on findings , and we will not price our own services to a client that way either. Our firm is in good standing and is not insolvent; neither it nor any principal is a restricted party under U.S. sanctions or export-control law; and we will comply with anti-bribery and anti-kickback law. In the past 5 years , neither the firm nor any principal has been convicted of, or subject to a governmental enforcement action involving, fraud, dishonesty, computer crime or a data-privacy violation — and we disclose any conflict of interest with a prospective client, including any auditing, assurance or fiduciary role — or we describe it in the box below. I am authorized to submit this application on behalf of the firm, and the information in it is true and complete. I understand that submission creates no relationship and that Tasirio may decline without explanation.