Terms of Service

In this document, the following terms have the meanings set out below:

By using our Services, you represent and warrant that:

• You are at least 18 years old or have the legal capacity to enter into commercial agreements in Indonesia.
• You use the Services solely for lawful, ethical purposes consistent with the laws of the Republic of Indonesia.
• All information you provide to CloudSphere is accurate, complete, current, and not misleading.
• You are fully responsible for the security of your account credentials and must promptly report any unauthorized access to us.
• You will not allow unauthorized parties to access the account or Services using your identity.
• Use of the Services by any User you authorize is the full responsibility of the Customer.

You are expressly prohibited from using the Services for the following activities:

Violations of these prohibitions may result in immediate service termination and legal action under applicable regulations.

For GRC consulting services and security testing (Vulnerability Assessment & Penetration Testing), additional terms set forth in the Service Agreement apply:

• Scope — Testing is conducted only against systems, applications, and infrastructure explicitly listed in the Service Agreement. Testing outside the agreed scope is not permitted.
• Mandatory Authorization — The Customer must possess and provide valid written authorization for all systems to be tested before testing begins. CloudSphere is not responsible for testing performed based on invalid authorization.
• Deliverables — Schedules, formats, and quality standards for reports follow the applicable Service Agreement.
• Confidentiality of Findings — All vulnerability findings and reports are confidential and may not be disclosed to third parties without written consent from CloudSphere.
• VAPT Liability Limitation — CloudSphere is not liable for system disruptions resulting from testing conducted within the agreed scope and performed according to standard procedures.

• Prices and payment schedules are set out in writing in the Service Agreement or proposal approved by both parties.
• Payment is due on the date specified in the invoice. Delays of more than 30 calendar days may result in temporary suspension of Service access.
• All listed prices are exclusive of Value Added Tax (VAT) per applicable Indonesian tax regulations.
• A late fee of 2% per month may be charged on outstanding invoices past the due date.
• Refund policies are specified in each Service Agreement. For billing inquiries, contact billing@cloudsphere.id.

CloudSphere is committed to maintaining the availability and quality of SaaS platform services in accordance with the Service Level Agreement established for each product:

SLA Compensation: If CloudSphere fails to meet the uptime commitment in a calendar month, the Customer is entitled to submit a service credit claim. Claim procedures and credit amounts are governed by each Service Agreement.

SLA does not apply to disruptions caused by: force majeure, Customer actions, scheduled maintenance that was notified in advance, or third-party infrastructure failures beyond CloudSphere's reasonable control.

All intellectual property rights in the platform, software, documentation, methodologies, trademarks, and CloudSphere products remain the exclusive property of PT CloudSphere Digital Indonesia or its licensors. Use of the Services does not grant you any ownership rights over our intellectual property in any form.

Rights to Deliverables: Reports, recommendations, and deliverables produced specifically for the Customer under a Service Agreement become the Customer's property upon settlement of all payment obligations, unless otherwise agreed in writing.

Rights to Methodology: Methodologies, frameworks, templates, and tools developed by CloudSphere remain the property of CloudSphere even if used in Customer engagements.

Rights to Customer Data: The Customer retains full ownership of all Customer Data. CloudSphere uses such data only to the extent necessary to provide the Services.

Both parties agree to maintain the confidentiality of all sensitive information obtained or communicated during the performance of the Services, including but not limited to:

• Security vulnerability findings and testing reports
• Business strategies, financial data, and customer information of each party
• CloudSphere's internal methodologies, tools, and processes
• Technical information and system architecture of the Customer

This confidentiality obligation remains in effect for 3 (three) years after the termination of the Service Agreement, unless otherwise agreed in writing. The obligation does not apply to information that has entered the public domain through no breach of this agreement, or that must be disclosed pursuant to law or court order.

To the extent permitted by applicable law, CloudSphere is not liable for:

• Indirect, incidental, or consequential losses arising from use of or inability to use the Services
• Loss of data, profits, or business opportunities of an indirect nature
• Business operational disruptions due to factors beyond CloudSphere's reasonable control
• Losses resulting from unauthorized use of Customer credentials by third parties
• Failures of third-party systems integrated with our platform

CloudSphere reserves the right to terminate or suspend your access to the Services, with or without prior notice depending on the severity of the breach, if:

• You violate any provision of these Terms of Service or the Service Agreement
• There are outstanding payment arrears that have not been settled past the due date
• There is suspicious, illegal, or potentially harmful activity that threatens platform security
• The Service Agreement expires or is terminated by either party

The Customer may terminate the Service Agreement in accordance with the notice period specified therein. Obligations that arose before the termination date remain in effect.

CloudSphere will not be deemed in breach of its obligations under these terms if a delay or failure to perform is caused by events beyond its reasonable control, including but not limited to: natural disasters, pandemics, civil unrest, government action, national internet infrastructure outages, or other force majeure events recognized under Indonesian law.

CloudSphere will notify the Customer as soon as practicable if a force majeure event affects the performance of the Services, along with an estimated impact assessment and recovery plan.

These Terms of Service, together with all Service Agreements that reference them, are governed by and construed in accordance with the laws of the Republic of Indonesia.

Any dispute arising out of or in connection with this document will be resolved through:

1. Amicable Resolution — The parties must endeavor to resolve the dispute amicably within 30 calendar days from the date the first written notice is sent.
2. Mediation — If amicable resolution fails, the parties may pursue mediation with a mutually agreed mediator.
3. Arbitration / Litigation — If mediation is also unsuccessful, the dispute will be resolved through the Indonesian National Arbitration Board (BANI) or the competent District Court in the Jakarta area.

CloudSphere reserves the right to modify these Terms of Service at any time to reflect changes in Services, regulations, or operational needs. For material changes:

• Notice will be sent by email at least 30 days before the change takes effect
• The “Last updated” date at the top of this document will be updated
• For active Customers, changes take effect on the date specified in the notice

Continued use of the Services after a change takes effect constitutes acceptance of the revised terms. If you object to a change, you may terminate the Service Agreement in accordance with the applicable procedure.

For legal or administrative questions regarding these Terms of Service:

See also: Privacy Policy and Security Policy.