1. Acceptance of These Terms
These Assessor Portal Terms of Use ("Terms") govern your access to and use of the WASViking Assessor Portal, the free account offered by WASViking LLC ("WASViking", "we", "our", or "us") to people who assess the security posture of a third party. By creating an account or using the Assessor Portal, you agree to be bound by these Terms and by the Assessor Portal Privacy Notice. If you do not agree, you may not use the Assessor Portal.
Each individual who uses the Assessor Portal must personally review and accept these Terms, even when the assessment is performed on behalf of an organization. This establishes individual accountability for the confidential information you will see.
2. The Assessor Portal and the Parties
The Assessor Portal is a third-party risk portal. An organization that uses the WASViking platform as a customer (a "Vendor") can share an aggregated, signed view of its security posture with the people who assess it (a "Posture Share"). You are the person the Vendor invited to read that view (the "Assessor").
The Vendor uses the WASViking platform under its own agreement with WASViking. You are not a party to that agreement, you do not pay WASViking for the Assessor Portal, and you do not sign anything with WASViking other than these Terms. One account serves every Vendor that invites your email address.
3. Eligibility, Account and Security
You must be at least 18 years old and authorized by your organization to perform the assessment. Accounts are created only from an invitation sent by a Vendor to your email address. That email address identifies your account.
The first sign-in uses a temporary password delivered with the invitation. You then create your own password and set up two-factor authentication with an authenticator app, which is mandatory for every account. Your account is personal: you will keep your password, your authenticator app and your backup codes to yourself, you will not share a session, and you will notify WASViking promptly at [email protected] if you believe someone else accessed your account. You are responsible for the activity that occurs under your account.
4. The Vendor Controls What You See
Each Vendor decides what it discloses to you, at which level of detail and for how long, and may end your access at any time without notice. WASViking shows you the figures the Vendor chose to disclose, as measured and signed by the platform. WASViking does not grant, extend or restore access on a Vendor's behalf, and does not show you anything a Vendor did not choose to share.
5. Nature of the Information
A Posture Share is evidence produced by automated security assessments and signed by the platform so that anyone holding it can verify it was not altered. It is not a certification, an audit opinion, a penetration test report or a statement of compliance with any framework, and it does not guarantee that a Vendor is secure. It supports your assessment and does not replace your own judgment. You are responsible for the decisions you make with it.
Remediation deadlines and other statements a Vendor records in a Posture Share are statements of that Vendor. They are not commitments of WASViking.
6. Confidentiality
What a Vendor shares with you is that Vendor's confidential information. You will use it only to assess that Vendor, you will not disclose it outside the team that performs that assessment, and you will protect it with at least the care you apply to your own confidential information. Any confidentiality agreement between you or your organization and the Vendor continues to apply and prevails over this section where it is stricter.
Pages and downloads carry a watermark that identifies the access. You will not remove or obscure it.
7. Acceptable Use
You agree that you will not:
- Attempt to access a Vendor that did not invite you, or to bypass the disclosure level a Vendor chose;
- Use what you see to identify assets, locate findings, or test, scan or attack a Vendor's systems;
- Collect the content by automated means beyond the exports the Assessor Portal offers;
- Interfere with or disrupt the service, probe it for vulnerabilities without authorization, or attempt to access another person's account;
- Reverse engineer the platform, or use the Assessor Portal to build a competing service;
- Use the Assessor Portal in violation of applicable law.
If you believe you found a vulnerability in the Assessor Portal, report it to [email protected].
8. Records of Your Activity
Your visits and downloads in a Vendor's shared space are recorded and shown to that Vendor, with your email address, the time and the network address. The first time you open a Vendor's shared space, and wrong attempts with a temporary password, are recorded for that Vendor as well. Those records belong to the Vendor's audit trail. A Vendor never sees which other Vendors you follow.
9. Requests You Send to a Vendor
The Assessor Portal lets you ask a Vendor for more detail or for a remediation deadline. A request is delivered to the Vendor, which decides whether and how to answer. WASViking does not answer on a Vendor's behalf.
10. Notifications
While your account exists, WASViking may send you at most one email a day when something changed at a Vendor you follow. A message reports only what that Vendor's Posture Share already shows you. You choose the subjects on the Notifications page, and every message carries a link that turns all of them off without a sign-in.
11. License and Ownership
WASViking grants you a limited, non-exclusive, non-transferable and revocable right to use the Assessor Portal to read and download what Vendors share with you, for the purpose of assessing those Vendors. The platform, its software and its trademarks belong to WASViking LLC. The information a Vendor shares belongs to that Vendor.
12. Suspension and Termination
You may delete your account at any time on the Profile page. WASViking may suspend or close an account that breaches these Terms, that puts the service or a Vendor at risk, or where required by law. When your account ends, your access to every Vendor's shared space ends with it. Sections 5, 6, 13, 14 and 16 survive the end of your account.
13. Disclaimers
The Assessor Portal is provided free of charge, "as is" and "as available", without warranties of any kind, whether express or implied. We do not guarantee that the service will be error-free, secure or uninterrupted, or that the information a Vendor shares is accurate or complete.
14. Limitation of Liability
To the fullest extent permitted by law, WASViking LLC shall not be liable for any indirect, incidental, special, consequential or punitive damages, including loss of data, loss of business or decisions made about a Vendor, arising out of or relating to these Terms or the Assessor Portal.
To the fullest extent permitted by law, the total aggregate liability of WASViking LLC arising out of or relating to these Terms or the Assessor Portal, whether in contract, tort (including negligence) or otherwise, shall not exceed one hundred U.S. dollars (US$100). The existence of more than one claim shall not enlarge this limit. Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law.
15. Export Compliance
You agree to comply with all applicable U.S. export control laws. You may not use the Assessor Portal in violation of U.S. laws or from any restricted jurisdiction.
16. Governing Law and Jurisdiction
These Terms shall be governed by and construed under the laws of the State of Florida, United States, without regard to conflict of law principles. All legal actions must be brought in courts located in Florida. If you are located in Brazil, you acknowledge that WASViking processes personal data in accordance with the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018), as described in the Assessor Portal Privacy Notice.
17. Changes to These Terms
WASViking may update these Terms from time to time. When they change, the Assessor Portal asks you to accept the new version before you continue. The version you accepted, and when, stays on record and is shown to you on the Terms and privacy page of the portal.
18. Contact Information
If you have questions about these Terms, contact us at:
WASViking LLC
Orlando, FL, USA
[email protected]