End User License Agreement

Important — Read Carefully

This End User License Agreement ("Agreement") is a legal agreement between you (either an individual or a single entity, hereinafter "User", "You", or "Your") and Tmi Antti Kurittu, a sole proprietorship registered in Finland (VAT ID: FI30037023), located at Vantaa, Finland (hereinafter "Licensor", "We", "Us", or "Our") for the use of DFIRe — Digital Forensics and Incident Response software platform ("Software").

BY CLICKING "I ACCEPT", BY INSTALLING, DEPLOYING, OR OTHERWISE USING THIS SOFTWARE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT. IF YOU ARE ACCEPTING THESE TERMS ON BEHALF OF AN ORGANIZATION, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND THAT ORGANIZATION TO THIS AGREEMENT. IF YOU DO NOT AGREE TO THESE TERMS, DO NOT INSTALL, DEPLOY, OR USE THE SOFTWARE.

1. Definitions

"Software" means the DFIRe (Digital Forensics and Incident Response) case management platform, including all associated documentation, updates, and any copies thereof.
"License Key" means the unique identifier provided by Licensor that enables full functionality of the Software.
"License Server" means the server operated by Licensor at license.dfire.fi that validates licenses and receives basic system information and usage metrics.
"Installation" means a single deployment of the Software, identified by a unique tenant identifier.
"Trial Period" means the initial 90-day evaluation period during which the Software operates with full functionality without a License Key, subject to maintaining connection to the License Server.
"Licensed Mode" means operation of the Software with a valid, active License Key.
"Unlicensed Mode" means operation of the Software when the Trial Period has expired and no valid License Key is present, during which the Software operates in read-only mode.

2. License Grant and Restrictions

2.1 License Grant

Subject to the terms and conditions of this Agreement and payment of applicable license fees, Licensor grants You a limited, non-exclusive, non-transferable, non-sublicensable license to:

Deploy and operate one Installation of the Software per License Key purchased;
Use the Software for Your internal business purposes in connection with digital forensics investigations, incident response activities, and related case management functions;
Allow Your authorized employees and contractors to access and use the Software within the scope of their duties.

2.2 Self-Hosted Deployment and Data Ownership

The Software is designed for self-hosted deployment using Docker container technology. The Software functions solely as a user interface for data that You own, store, and control in Your own database. Licensor does not host, store, process, or have access to Your investigation data at any time. Licensor receives only optional aggregate usage statistics as described in Section 4.

You are solely responsible for:

Providing and maintaining the underlying infrastructure, including but not limited to servers, databases (PostgreSQL), storage systems, and network connectivity;
Implementing and maintaining appropriate security measures, including but not limited to HTTPS/TLS encryption, firewall configurations, access controls, and security updates;
Performing regular backups of Your data and ensuring disaster recovery capabilities;
Ensuring compliance with applicable data protection and privacy laws in Your jurisdiction;
Restricting access to the Software to authorized personnel only through appropriate authentication, network controls, and access management;
Any and all consequences arising from the configuration, maintenance, or security of Your deployment environment;
Any data breaches, unauthorized access, or security incidents that occur in Your environment.

2.3 Data Processing Relationship

IMPORTANT: With respect to any data You create, store, or process using the Software:

You are the sole Data Controller (or equivalent under applicable law) of all data entered into or managed through the Software;
Licensor is NOT a Data Processor, Data Controller, or Data Owner of Your investigation data. The Software is a tool that operates entirely within Your infrastructure on Your data;
Licensor has no access to Your investigation data. Your cases, evidence items, investigation details, attachments, reports, and all other investigation-related content reside exclusively in Your database under Your control and are never transmitted to Licensor;
Licensor receives only aggregate usage metrics as described in Section 4, including optional usage counts (number of users, cases, evidence items), software version information, and system configuration flags. These metrics do not include case names, evidence details, investigation content, or any information that would reveal the nature of Your investigations;
Licensor bears no responsibility for the security, integrity, confidentiality, or availability of Your data;
You are solely responsible for compliance with GDPR, CCPA, HIPAA, or any other data protection regulations applicable to the data You process using the Software.

2.4 License Restrictions

You shall NOT:

Use the Software without a valid License Key after the Trial Period has expired, except in read-only Unlicensed Mode;
Attempt to circumvent, disable, or interfere with the license validation mechanisms, License Server communication, or any usage restrictions;
Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Software, except to the extent expressly permitted by applicable law;
Modify, adapt, translate, or create derivative works based on the Software;
Sublicense, rent, lease, loan, sell, distribute, or otherwise transfer the Software or Your license rights to any third party;
Remove, alter, or obscure any proprietary notices, labels, or marks on the Software;
Use the Software for any unlawful purpose or in violation of any applicable laws or regulations;
Use the Software if You or Your organization are located in, or are a national or resident of, any country subject to comprehensive sanctions by the European Union, United States, or United Nations, including but not limited to Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions;
Use the Software to process data for entities or individuals subject to targeted sanctions.

3. License Tiers and Operational Modes

3.1 Trial Mode

Upon initial Installation and acceptance of this Agreement, the Software operates in Trial Mode for a period of ninety (90) days.
Trial Mode provides full functionality of the Software.
Trial Mode requires the Software to maintain periodic communication with the License Server. If connection to the License Server cannot be established or is lost, the Trial Mode may be suspended or terminated.
At the end of the Trial Period, You must either activate a License Key or the Software will transition to Unlicensed Mode.

3.2 Licensed Mode

Licensed Mode is activated by entering a valid License Key obtained from Licensor.
License Keys are valid for the term specified at the time of purchase.
Licensed Mode provides full functionality of the Software for the duration of the license term.
License renewal terms and pricing are determined by Licensor and may change upon renewal.

3.3 Unlicensed Mode

If the Trial Period expires without activation of a License Key, or if a License Key expires without renewal, the Software transitions to Unlicensed Mode.
In Unlicensed Mode, the Software operates in READ-ONLY mode: You may view existing data but cannot create, modify, or delete cases, evidence items, or other records.
The Software may display prominent notices indicating the unlicensed status.

3.4 Grace Period

In the event of temporary inability to communicate with the License Server, the Software provides a grace period of up to fourteen (14) days during which it continues to operate based on the last known license status.
If communication with the License Server is not restored within the grace period, the Software may transition to Unlicensed Mode until communication is restored and license status can be verified.

4. Data Collection and Privacy

4.1 Usage Metrics Collection

By accepting this Agreement and using the Software, You consent to the automatic collection and transmission of usage metrics to the License Server. You have the possibility to opt out of usage metrics collection, but basic system information is still transmitted to the License Server for license validation purposes. This is a mandatory requirement for operation of the Software. Systems installed with an offline license are exempt from this requirement.

4.2 Data Collected

The following data is collected and transmitted to the License Server at regular intervals (approximately hourly):

Installation Information: Unique tenant identifier, public IP address, hostname, organization name, and contact email as configured by You;
Usage Statistics: Optional aggregate counts only, including number of active users, total cases, total evidence items, active users in the last 30 days, and cases created in the last 30 days;
System Information: DFIRe version, Python version, operating system platform, configured timezone;
Feature Flags: Whether certain features are enabled (e.g., SSO, email notifications);
License Information: License key (if any), registration timestamp, last check timestamp;
EULA Acceptance: Timestamp of EULA acceptance, version accepted, and username of accepting user.

4.3 Data NOT Collected

The Software does NOT collect or transmit:

Case names, descriptions, or any investigative content;
Evidence item details, file contents, or metadata;
Personal information about investigation subjects or case participants;
User passwords or authentication credentials;
Attachments, documents, or files stored in the Software;
Audit log entries or detailed activity records;
Any content that would reveal the nature or details of Your investigations.

4.4 Purpose of Data Collection

The usage metrics are used for:

License validation and compliance verification;
Product improvement and feature development;
Technical support and troubleshooting;
Aggregate usage analytics and reporting;
Detection of potential license abuse or unauthorized use.

4.5 Data Security

All usage metrics are encrypted during transmission using Fernet symmetric encryption with installation-specific keys.
Communication with the License Server occurs over HTTPS/TLS encrypted connections.
Usage metrics are stored securely and access is restricted to authorized personnel of the Licensor.

4.6 Data Retention

Usage metrics are retained for the duration of Your license relationship plus a reasonable period for archival and compliance purposes. You may request deletion of Your usage metrics upon termination of Your license.

5. Intellectual Property

5.1 Ownership

The Software, including all copies, modifications, enhancements, and derivative works thereof, and all intellectual property rights therein, are and shall remain the exclusive property of Licensor. This Agreement does not convey to You any rights of ownership in the Software.

5.2 Third-Party Components

The Software may include third-party open source components subject to their respective licenses. A list of such components and their licenses is available in the Software documentation.

5.3 Feedback

If You provide suggestions, ideas, or feedback regarding the Software, Licensor shall have the right to use such feedback for any purpose without obligation or compensation to You.

6. Support and Maintenance

6.1 Support Availability

Technical support is provided on a BEST-EFFORT basis only.
There is NO service level agreement (SLA) and no guaranteed response times.
Support is provided primarily through electronic means (email, issue tracking).

6.2 No Guaranteed Availability

Licensor does not guarantee any particular level of availability, uptime, or performance of the License Server.
Scheduled or unscheduled maintenance may temporarily affect License Server availability.
The grace period mechanism (Section 3.4) is intended to mitigate impact of temporary service interruptions.

6.3 Updates

Licensor may release updates, patches, or new versions of the Software at its discretion.
You are responsible for applying updates to Your Installation.
Continued support may require use of supported Software versions.

7. Disclaimer of Warranties

7.1 AS-IS Basis

THE SOFTWARE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, LICENSOR EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO:

IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT;
ANY WARRANTIES ARISING FROM COURSE OF DEALING, COURSE OF PERFORMANCE, OR TRADE USAGE;
ANY WARRANTIES REGARDING THE ACCURACY, RELIABILITY, COMPLETENESS, OR TIMELINESS OF THE SOFTWARE OR ANY RESULTS OBTAINED THROUGH USE OF THE SOFTWARE;
ANY WARRANTIES THAT THE SOFTWARE WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR FREE OF VIRUSES OR OTHER HARMFUL COMPONENTS.

7.2 Professional Responsibility

The Software is a tool to assist in digital forensics and incident response activities. YOU ARE SOLELY RESPONSIBLE FOR:

Ensuring that Your use of the Software and Your investigative methods comply with applicable laws, regulations, and professional standards;
Verifying the accuracy and completeness of any information processed by or generated from the Software;
Making independent professional judgments regarding investigations and their outcomes;
Maintaining chain of custody, evidence integrity, and proper documentation as required by applicable legal standards.

7.3 No Legal Advice

The Software and any documentation provided do not constitute legal advice. You should consult with qualified legal counsel regarding legal requirements applicable to Your activities.

8. Limitation of Liability

8.1 Exclusion of Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL EITHER PARTY, ITS AFFILIATES, OR THEIR RESPECTIVE OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR REPRESENTATIVES BE LIABLE FOR:

ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES;
ANY LOSS OF PROFITS, REVENUE, BUSINESS, SAVINGS, OR GOODWILL;
ANY LOSS OF DATA, EVEN IF EITHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSS;
ANY COSTS OF PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
ANY DAMAGES ARISING FROM YOUR DEPLOYMENT, CONFIGURATION, OR MAINTENANCE OF THE SOFTWARE ENVIRONMENT;
ANY DAMAGES ARISING FROM SECURITY BREACHES, UNAUTHORIZED ACCESS, OR DATA LOSS IN YOUR INSTALLATION;
ANY DAMAGES ARISING FROM INTERRUPTION OR UNAVAILABILITY OF THE LICENSE SERVER;
ANY DAMAGES ARISING FROM YOUR RELIANCE ON THE SOFTWARE OR ANY OUTPUTS THEREOF.

8.2 Liability Cap

IN NO EVENT SHALL EITHER PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE TOTAL AMOUNT OF LICENSE FEES ACTUALLY PAID BY YOU TO LICENSOR IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE CLAIM, OR ONE HUNDRED EUROS (€100), WHICHEVER IS GREATER.

8.3 Basis of the Bargain

YOU ACKNOWLEDGE THAT THE LIMITATIONS OF LIABILITY IN THIS SECTION ARE AN ESSENTIAL ELEMENT OF THE AGREEMENT AND THAT THE LICENSOR WOULD NOT ENTER INTO THIS AGREEMENT WITHOUT THESE LIMITATIONS. THE LIMITATIONS SHALL APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY.

8.4 Data Security Disclaimer

YOU EXPRESSLY ACKNOWLEDGE AND AGREE THAT:

THE SOFTWARE IS A USER INTERFACE TOOL THAT OPERATES ENTIRELY WITHIN YOUR INFRASTRUCTURE ON YOUR DATA;
LICENSOR HAS NO ACCESS TO, CONTROL OVER, OR RESPONSIBILITY FOR YOUR INVESTIGATION DATA, YOUR DATABASE, YOUR SERVERS, OR YOUR NETWORK (LICENSOR RECEIVES ONLY AGGREGATE USAGE METRICS AS DESCRIBED IN SECTION 4);
LICENSOR IS NOT RESPONSIBLE FOR AND SHALL NOT BE LIABLE FOR ANY DATA BREACHES, SECURITY INCIDENTS, UNAUTHORIZED ACCESS, DATA LOSS, OR DATA CORRUPTION THAT OCCURS IN YOUR ENVIRONMENT;
YOU ARE SOLELY RESPONSIBLE FOR IMPLEMENTING APPROPRIATE SECURITY CONTROLS, ACCESS RESTRICTIONS, ENCRYPTION, MONITORING, AND OTHER SAFEGUARDS FOR YOUR INSTALLATION;
LICENSOR MAKES NO REPRESENTATIONS OR WARRANTIES REGARDING THE SECURITY OF THE SOFTWARE OR ITS SUITABILITY FOR PROCESSING SENSITIVE, CLASSIFIED, OR REGULATED DATA;
ANY DECISION TO USE THE SOFTWARE FOR PROCESSING SENSITIVE DATA IS MADE AT YOUR OWN RISK AND DISCRETION.

8.5 Jurisdictional Variations

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IN SUCH JURISDICTIONS, THE LIABILITY OF LICENSOR SHALL BE LIMITED TO THE MAXIMUM EXTENT PERMITTED BY LAW.

9. Indemnification

You agree to indemnify, defend, and hold harmless Licensor and its officers, directors, employees, and agents from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

Your use or misuse of the Software;
Any data breach, security incident, or unauthorized access occurring in Your environment;
Your material violation of this Agreement;
Your violation of any applicable law or regulation;
Your negligence or misconduct in the deployment, configuration, or maintenance of the Software;
Any claim that Your use of the Software infringed or violated the rights of a third party.

10. Term and Termination

10.1 Term

This Agreement is effective from the date You first accept it and continues until terminated in accordance with this Section.

10.2 Termination by You

You may terminate this Agreement at any time by discontinuing use of the Software and destroying all copies in Your possession.

10.3 Termination by Licensor

Licensor may terminate this Agreement immediately upon notice if:

You breach any term of this Agreement;
You fail to pay any applicable license fees when due;
You become subject to sanctions that prohibit Licensor from providing the Software to You;
Licensor determines, in its sole discretion, that Your use of the Software poses a risk to Licensor or third parties.

10.4 Effect of Termination

Upon termination of this Agreement:

All rights granted to You under this Agreement shall immediately cease;
You shall immediately discontinue use of the Software;
Your data remains in Your database and under Your control; this Agreement does not affect Your ownership of data You have created;
You shall destroy all copies of the Software in Your possession;
Sections 4, 5, 7, 8, 9, and 11 shall survive termination.

11. General Provisions

11.1 Governing Law

This Agreement shall be governed by and construed in accordance with the laws of Finland, without regard to its conflict of law principles.

11.2 Dispute Resolution

Any dispute arising out of or relating to this Agreement shall be submitted to the exclusive jurisdiction of the courts of Helsinki, Finland. You waive any objection to the exercise of jurisdiction over You by such courts and to venue in such courts.

11.3 Export Compliance

You acknowledge that the Software may be subject to export control laws and regulations. You agree to comply with all applicable export laws and regulations and not to export or re-export the Software to any prohibited country, entity, or person.

11.4 Entire Agreement

This Agreement constitutes the entire agreement between You and Licensor regarding the Software and supersedes all prior or contemporaneous agreements, understandings, and communications, whether written or oral.

11.5 Amendment

Licensor reserves the right to modify this Agreement at any time. Material changes will be communicated through the Software or by other reasonable means. Your continued use of the Software after such changes constitutes acceptance of the modified Agreement.

11.6 Severability

If any provision of this Agreement is held to be invalid or unenforceable, that provision shall be construed to reflect the parties' original intent, and the remaining provisions shall remain in full force and effect.

11.7 Waiver

The failure of Licensor to enforce any right or provision of this Agreement shall not constitute a waiver of such right or provision.

11.8 Assignment

Neither party may assign or transfer this Agreement or any rights hereunder without the prior written consent of the other party; provided, however, that either party may assign this Agreement without consent in connection with a merger, acquisition, or sale of all or substantially all of its assets, so long as the assignee assumes all obligations hereunder.

11.9 Language

This Agreement is made in the English language. Any translations are provided for convenience only. In the event of any conflict between the English version and a translated version, the English version shall prevail.

12. Contact Information

For questions about this Agreement, licensing inquiries, or support requests, please contact:

Tmi Antti Kurittu
Vantaa, Finland
VAT ID: FI30037023
Email: contact@dfire.fi
Website: https://dfire.fi

Acknowledgment

BY CLICKING "I ACCEPT" OR BY INSTALLING, DEPLOYING, OR USING THE SOFTWARE, YOU ACKNOWLEDGE THAT:

You have read and understood this Agreement;
You agree to be bound by its terms and conditions;
You consent to the collection and transmission of usage metrics as described in Section 4;
You understand that the Software is provided "AS IS" without warranties;
You accept the limitations of liability set forth herein;
If accepting on behalf of an organization, You have the authority to bind that organization.