These Terms of Use (the "Terms") set forth the conditions for using "FirstLook" (the "Service") provided by Securious Lab G.K. ("we," "us," or "our"). The Japanese version of these Terms is the governing version. This English version is provided for reference only.
1. Nature of the Service
The Service is a tool intended to support digital forensics, incident response, log analysis, IOC matching, threat intelligence lookups, report preparation, and related analytical work. The Service assists investigations, judgments, reporting, and decisions by the user and the organization that permits or procures such use (collectively, "User"); it does not replace them.
2. Individual Conditions
Service term, fees, payment terms, available features, support scope, PoC, trial, evaluation use, and other individual conditions are governed by the relevant order form, quotation, agreement, or other written or electronic agreement between the User and us ("Individual Agreement"). If an Individual Agreement conflicts with these Terms, the Individual Agreement prevails to the extent of the conflict.
3. Nature of Analysis Results
Automated analysis, rule-based determinations, IOC matching, threat intelligence lookups, scoring, reports, comments, summaries, and other outputs generated by the Service ("Analysis Results") may include false positives, missed detections, misclassification, incomplete explanations, outdated information, errors from external sources, analysis failures, or processing failures. Users must treat Analysis Results as reference information and are responsible for their final decisions and use.
4. No Professional Advice or Operational Substitute
The Service and Analysis Results do not constitute incident response services, forensic investigation services, legal advice, audit services, warranties, deliverable preparation, operational outsourcing, professional advice, or any service that guarantees a particular result. Separate professional services, if any, are governed by an Individual Agreement.
5. Authority and Responsibility for Uploaded Data
Users represent and warrant that they have all necessary rights and authority to upload, input, transmit, or connect logs, files, artifacts, IOCs, notes, reports, customer information, personal data, confidential information, and other data to the Service ("Uploaded Data"), and that doing so does not violate laws, contracts, internal policies, customer agreements, or third-party rights. Users are responsible for selecting, minimizing, lawfully submitting, and safeguarding Uploaded Data.
6. Confidential, Personal, and Dangerous Data
Users must submit Uploaded Data only to the minimum extent necessary for the purpose of using the Service, and must not upload unnecessary personal data, credentials, decryption keys, or other highly confidential data. Malware, suspicious files, malicious scripts, exploit code, executable files, or other potentially dangerous data may be uploaded only in formats, methods, or analysis targets expressly supported or permitted by us. Details are governed by our Data Handling Policy and related documents.
7. External Services and APIs
The Service may use external APIs, threat intelligence services, cloud services, and other external services for analysis, lookups, report generation, quality improvement, feature improvement, operations, monitoring, or support. We may transmit or process Uploaded Data, metadata, IOCs, hashes, domains, IP addresses, URLs, log fragments, Analysis Results, and other information through such external services to the extent necessary and appropriate. For external threat intelligence lookups, we generally send IOCs such as hash values, IP addresses, domains, and URLs. File names, file paths, log bodies, and file bodies are not sent for external threat intelligence lookup purposes except where an expressly described feature, or the User's explicit operation or consent, provides otherwise. Details are governed by our Data Handling Policy or External Service Usage Policy.
8. AI and Data Use
As of this draft, the standard analysis functions of the Service do not send Uploaded Data to generative AI or LLM services for analysis. If we later use AI, LLMs, or similar external services as standard Service functionality, we will describe the handling in our Data Handling Policy or related documents and, where necessary, notify Users or obtain consent. We will not use Uploaded Data to train or improve general-purpose AI models or other third-party AI models.
9. Use of Data and Analysis Results
We may use Uploaded Data, Analysis Results, usage history, operation logs, error information, feedback, and related information for providing the Service, analysis, report generation, support, security, quality improvement, product improvement, feature improvement, operational improvement, statistical analysis, and related purposes. We will obtain separate consent before using information in a manner that identifies an individual, organization, customer, or matter in public materials, sales materials, training materials, case studies, or other third-party-facing materials.
10. Use of Reports
Users are responsible for their use of reports, notes, Analysis Results, and other deliverables generated by the Service. If Users provide them to customers, internal stakeholders, auditors, insurers, law enforcement, regulators, or other third parties, Users must review the contents and, as necessary, make corrections, additions, expert confirmations, or other appropriate measures.
11. Prohibited Conduct
Users must not use the Service for unlawful conduct, unauthorized access, attacks, infringement, excessive load, unauthorized account sharing, or any act that disrupts the Service. Without our prior written consent, Users must not reverse engineer, decompile, disassemble, analyze, copy, modify, adapt, extract, scrape, automatically acquire, reproduce, plagiarize, create derivatives from, resell, redistribute, lend as SaaS or other third-party services, provide to unauthorized third parties, build competing services from, or commercially exploit beyond the permitted scope, the Service, Analysis Results, screens, specifications, analysis logic, templates, report formats, or other Service-related information.
12. Permitted Sharing and Representative Use
Users may use and share Analysis Results and reports for internal use, customer reporting, and legitimate reporting to auditors, insurers, law enforcement, regulators, and similar recipients. If an MSSP, DFIR vendor, consultant, or other third party uses the Service on behalf of a customer, the User is responsible for obtaining necessary authority from the customer and ensuring compliance with these Terms and the Individual Agreement. Such representative use is subject to the Individual Agreement or our separate approval.
13. Personal Data
We handle Users' personal data in accordance with our Privacy Policy. Please refer to the Privacy Policy on this website. With respect to personal data included in Uploaded Data, Users are responsible for ensuring they have the necessary authority, notices, consents, contractual grounds, or other lawful basis for processing.
14. Use Restrictions and Account Suspension
If a User violates these Terms or an Individual Agreement, engages in unauthorized use, attack activity, reverse engineering, excessive resource consumption, payment delay or non-payment, registration of false information, creates security risks, is suspected of violating laws, is subject to a reasonable third-party complaint, or if we otherwise determine that action is necessary for operation of the Service, we may restrict or suspend use of the Service, or suspend or delete the account, without prior notice.
15. Fees, Term, and Refunds
Service fees are payable in accordance with the Individual Agreement. For annual or other prepaid contracts, unless otherwise provided in the Individual Agreement, we will not refund fees already paid if termination is requested by the User, if use is suspended due to the User's breach of these Terms or the Individual Agreement, or if suspension is attributable to the User.
16. Changes, Suspension, and Termination
We may change, add, or remove Service content, specifications, service conditions, analysis logic, external integrations, credit consumption, data retention periods, support scope, and other aspects of the Service as necessary. We may suspend or stop all or part of the Service for maintenance, failures, external service suspension, legal compliance, security reasons, or other reasons we deem necessary. Unless otherwise provided in an Individual Agreement, we do not guarantee any particular uptime, response time, recovery time, support hours, or other service level.
17. Disclaimer of Warranties
We will endeavor to implement reasonable safeguards in providing the Service. However, we do not warrant the accuracy, completeness, usefulness, timeliness, fitness for a particular purpose, achievement of results, continuous availability, uninterrupted operation, absence of failures, errors, or defects, or detection of all threats, compromises, vulnerabilities, or unauthorized acts.
18. Limitation of Liability
Except in cases of our willful misconduct or gross negligence, we are not liable for damages incurred by Users in connection with the Service. Even where we are liable, our liability is limited to ordinary and direct damages actually incurred, and we are not liable for lost profits, indirect damages, special damages, consequential damages, data loss, loss of business opportunities, customer handling damages, claims from third parties, or similar damages. For paid contracts, our aggregate liability is capped at the total Service fees actually paid to us by the User for the contract year in which the damage occurred. For free use, PoC, trial, or evaluation use, our aggregate liability is capped at JPY 10,000, except in cases of our willful misconduct or gross negligence.
19. Changes to these Terms
We may change these Terms as necessary. If we change these Terms, we will notify Users of the revised terms and effective date by posting in the Service, email, or other appropriate means. For material changes, we may request renewed consent by a method we deem appropriate. If a User uses the Service on or after the effective date of the revised Terms, the User is deemed to have agreed to the revised Terms.
20. Governing Language
The Japanese version of these Terms is the governing version. Any English or other translation is for reference only. If there is any conflict or inconsistency between the Japanese version and a translation, the Japanese version prevails.
21. Governing Law and Jurisdiction
These Terms are governed by and construed in accordance with the laws of Japan. If any dispute arises between us and the User in connection with the Service or these Terms, the Tokyo District Court has exclusive jurisdiction as the court of first instance.