Flat conditions on what a subscription buys, what the card meets, how a line gets stopped, and the claims we turn down. Written to be read the once, not written to be scrolled past.
MediTrust Cyber is the name over this storefront. Standing behind it, and holding the contract with you, is Fortify 24x7. Every line in the catalog comes from that company, every charge goes to it, and every obligation set down below rests on it. Read the word we, anywhere on this page, as that company.
No reseller stands between you and the people doing the work. The engineers provisioning your lines, answering an approval at midnight and running a restore all draw their pay from the company printed on your invoice.
A line subscribes you to one piece of managed security work, tallied in the unit shown beside it. Buying one gets that software operated over the units paid for, our engineers working it on the terms recorded in your scope, and whatever evidence the line throws off.
Your scope is where detail gets settled: machines, mailboxes, tenants, retention, the response authority our engineers hold, and anything left out on purpose. Should this record and your scope disagree over a detail, your scope wins.
What no line gets you is a console login to the platform underneath. These are operated services. Where a platform offers a read only view that is safe to hand across, we hand it across on request.
Charges arrive month by month, always covering the period ahead rather than the one behind. Your card meets the first as a subscription opens, and meets each successor on the same date in later months. Every price runs per unit and per month, quoted in dollars, and sits ahead of any tax owed where you are.
Card handling belongs to Stripe alone. None of it reaches this website, and none of it is kept here. Anything sold from this rack prints FORTIFY 24X7 where a statement shows a name.
Tallies change between periods and never inside one. A machine added midway shows on the next charge; a machine removed does likewise. Halves of a month do not get divided.
Where a charge fails, another attempt follows and a message goes out to you. If payment stays outstanding, lines may be suspended and then closed. Hearing from you ahead of that is much preferred, since a suspended detection line defends nobody at all.
A line stops by either of two routes. Open the card and billing area inside your portal and stop it from there, or file a note and the desk stops it on your behalf. In both cases the line stands until the period already covered expires, after which nothing more is charged.
There is no notice period here and no minimum term. What we ask, as courtesy rather than obligation, is that you say why. It is often a scoping error of ours, and we would rather know about it than not.
Once a line closes, agents stop reporting and collection stops with them. Retained material is dealt with the way the privacy record describes.
A managed service works over the estate it was told about. Give us an honest picture of the machines, mailboxes, tenants and people in scope, and say when it shifts in a way that matters. A machine nobody mentioned is a machine nobody is defending.
Keep somebody reachable as well. Detection work raises questions and a few of them arrive at awkward hours. Our engineers act unasked where the scope grants it, but routine work moves quicker when a person answers.
Last, do not point these services at anything unlawful, and hold the rights you need over the systems and the data you ask us to cover.
Your data is yours. Nothing you hold becomes ours because software of ours ran over it. None of it gets sold, rented or traded, none of it trains anything, and none of it goes into building a product.
We generate operational material about your estate: detections, patch state, sweep findings, capture results, drill records. That exists in order to be handed to you, and you can ask for any part of it while a line runs.
A number of lines here place Fortify 24x7 alongside protected health information. Wherever that is true, a signature goes onto the business associate agreement before provisioning begins, and that document governs handling, safeguards, reporting, and eventual return or destruction.
On that subject the business associate agreement sits above this record. Where the two disagree over protected health information, the agreement wins.
Signing it with us makes you compliant with nothing, and no sentence here should be read the other way. One obligation among many gets discharged, which is the whole of it.
Software from ten companies sits under these lines: SentinelOne and Fluency, ThreatLocker, Ironscales, N-able N-sight with Addigy and Zimperium, Actifile, and N-able Cove with Dropsuite. Every one of them publishes terms of its own, and where one materially alters a product, the line built on it can alter along with it.
When that happens you get told what moved, what it means for your scope, and what your choices are. Where a change leaves a line materially worse for you, stopping it is always among those choices.
What we take on is the operation of security software and the work of the engineers running it. What we do not take on is the consequence of every incident that might occur, and nobody in this trade honestly does.
So far as law permits, the ceiling on anything we owe over a claim is whatever that particular line was charged in the twelve months leading to it. Lost profit, lost business, lost goodwill and every indirect or consequential loss fall outside it completely.
Nothing here caps liability for fraud, for death or personal injury through negligence, or for whatever else the law declines to let a company cap.
We will not say that buying these lines makes an organization HIPAA compliant. Compliance describes a whole organization set against the risk analysis it produced for itself, and no purchase creates that state.
We will not offer a certificate, because none exists to be offered. Not one body anywhere certifies security software against the Security Rule inside HIPAA.
We will not guarantee that nothing gets through, that no machine is ever encrypted, or that no message ever fools anybody. The written part is what runs, who watches it, what it may do unasked, and what reaches your desk afterwards.
We will not claim cover over clinical equipment a manufacturer has locked. Imaging units, analysers and their relatives arrive routinely under a written ban on outside software. Separation on the network, plus a decision somebody recorded, is the honest answer to that, rather than a line on an invoice.
Edits land on this record now and then, usually because a platform shifted or because some sentence here read badly. Whatever date sits at the top of the page belongs to the version you have open.
Where an edit materially reduces what you receive, a message goes to the account address ahead of the change taking hold, and stopping the affected line stays available throughout.
The whole agreement is these terms, your scope, any business associate agreement signed by us both, and the refund record. Should some part of it prove unenforceable, everything else stands.
Failing to enforce something once waives nothing. Transferring this agreement needs our written agreement, which is not withheld unreasonably. Delaware law governs and Delaware courts hold jurisdiction.
Anything arising out of this record goes to support@meditrustcyber.com. A note filed in your portal reaches the same desk and usually moves faster, since it arrives already fastened to your account.