Terms of engagement

Who we are

Schema Signal Hub operates from No. 196, 1st Floor, Cinmuk Commercial Centre, Jalan Penrissen Batu 7, Kuching, Sarawak 93250, Malaysia. You can reach the studio on +60 82-614787 or reviews@schemasignal-hub.digital.

What you are commissioning

You commission a bounded written review of a customer portal application: agreed URLs, roles, environments, and journeys. The deliverable is an audit pack (sponsor letter, finding register, retest list) and a close-out briefing. We do not sell software, hosting, implementation, or a guaranteed outcome in your support queue.

Scoping before work starts

Work does not start until both sides have a short written scope: the portal, the environment, test accounts or equivalent access, the journeys, the fee, and the expected window in working days. If access never arrives, we pause. Time spent waiting is not billed as review time, but a booked slot may be treated as a cancellation if you withdraw access without notice — see the refund note.

Your responsibilities

You warrant that you may grant us access to the named environment and that test accounts will not expose live customer secrets beyond what the scope requires. You remain responsible for your own backups, change control, and any notice you owe to customers or vendors. We will not use personal data from the portal for any purpose except performing the review and writing the pack.

Our responsibilities

We perform the review with reasonable care, in line with the method published on this site and the scope you signed. Findings reflect what we could observe in the agreed window. We do not promise to find every defect, and we do not promise that a later release will behave the same way.

Independence and conflicts

Tell us if you also want us to review a vendor you know we have recently audited, or if a member of your team used to work with us. We will say if we cannot be independent enough to write a useful pack.

Fees and invoices

Fees on the site are informational starting points in Malaysian ringgit. The binding fee is the one in the scoped quote. We invoice; we do not take card payments on this website. Unless the quote says otherwise, invoices are due within fourteen days of the invoice date.

Intellectual property

You own the pack we deliver for your portal, for internal use and for sharing with vendors who need it to fix findings. You may not resell the pack as a product, or present it as a certification. We retain our method, templates, and anonymised patterns that cannot identify you or your customers.

Confidentiality

Each side keeps the other’s non-public information confidential, including portal URLs that are not public, test credentials, and the contents of the pack, except where disclosure is required by law or by a regulator, or where you ask us to brief a named vendor.

Limitation

The review is observational. It is not a penetration test, not legal advice, and not an insurance policy. Our liability for a given engagement is limited to the fees you paid for that engagement, except where Malaysian law does not allow that limit (including death or personal injury caused by negligence, or fraud).

Governing law

These terms are governed by the laws of Malaysia. The courts of Sarawak have jurisdiction, without limiting any non-excludable rights you have as a client.

Changes

The terms on this page apply to work commissioned after the date you last read them. A signed scope can set different conditions for that engagement only.