DFIRe
Install

Legal

Terms & Conditions

Last Updated: October 2026

1. Introduction

These Terms and Conditions ("Terms") govern the purchase from DFIRe Oy of a license to use the DFIRe software platform ("Software") and of DFIRe training workshops.

The Software is developed and owned by DFIRe Oy ("Licensor", "we", "us"), a limited liability company registered in Finland (VAT ID: FI36221438), with its registered office in Vantaa, Finland.

DFIRe is sold to businesses and organizations on a business-to-business (B2B) basis, paid by invoice or by card. By placing an order, you ("Customer", "you") agree to these Terms on behalf of your organization. If you do not agree to these Terms, please do not place an order.

2. Definitions

  • "Software": the DFIRe case management platform, including updates and documentation made available to you.
  • "License": the time-limited, non-exclusive right to operate the Software, granted upon payment and described further in the EULA.
  • "License Key": the unique code that activates the License for the License Term.
  • "License Term": the period for which the License is valid: 12 months from the activation of the License Key, unless your invoice states a different period.
  • "Trial Period": the 90-day evaluation period during which the Software runs with full functionality before a License is required.
  • "EULA": the End User License Agreement accepted during installation, which governs your use of the Software.

3. License and Permitted Use

What you purchase is a License: a time-limited right to operate the Software for the License Term. You are not purchasing the Software itself, any copy of it, or any intellectual property rights in it.

The License permits you to deploy and operate one Installation of the Software per License Key, for your internal business purposes, on infrastructure you control. The Software is self-hosted; you are responsible for its deployment, configuration, security, and operation.

Your use of the Software is governed by the EULA, which you must accept during installation. In the event of any conflict between these Terms and the EULA concerning the use of the Software, the EULA prevails.

4. Trial Period

The Software is available for a 90-day Trial Period with full functionality and without charge. The Trial Period is provided so that you can evaluate whether the Software is suitable for your technical environment and intended purpose, including its PostgreSQL, storage, and network requirements, before purchasing a License.

We strongly recommend completing this evaluation during the Trial Period, because all sales are final (see Section 9).

5. Ordering and Payment

Order a License in one of two ways:

  • By invoice: contact us at contact@dfire.fi. We issue an invoice for the applicable License and License Term, payable by bank transfer (SEPA) within the payment term stated on the invoice.
  • By card: pay through the card payment link on our website. Stripe processes the payment in euros. We then send you an invoice that shows the payment as received.

The License Key is issued once payment has been received in full. Fees that your card issuer charges, such as currency conversion fees, are your responsibility.

  • Contracting party: Your contract for the purchase of the License is with DFIRe Oy. Your use of the Software is additionally governed by the EULA.
  • Eligibility: Orders are placed by businesses and organizations. The Software is not offered to consumers.

6. Pricing and Taxes

Prices are those stated on our website or, where applicable, in a written quotation, and are confirmed on your invoice. We may change our prices at any time; the price applicable to your order is the one stated on your invoice. All prices are stated VAT 0% (exclusive of VAT).

VAT is added on top of the stated price on the invoice where required by EU legislation. Standard Finnish VAT applies to sales within Finland. For B2B sales to VAT-registered businesses in other EU member states, the reverse charge mechanism applies and no VAT is charged on the invoice. Sales outside the EU are generally outside the scope of EU VAT.

For card payments, VAT is calculated at checkout from your billing address. To apply the reverse charge, enter your VAT ID at checkout.

7. License Term and Renewal

The License Term starts when you activate the License Key in the Software and lasts 12 months, unless your invoice states a different period. At the end of the License Term, the License expires.

On expiry, and as described in the EULA, the Software ceases to operate in licensed mode and enters a read-only state. Your data remains in your own database and under your control at all times.

To continue operating the Software beyond the License Term, you may purchase a renewal by placing a new order. Renewal prices and terms are those in effect at the time of renewal.

8. Delivery of the License Key

License Keys are delivered electronically. Once we have received your payment, we generate your unique License Key and send it to the email address you provide, from an @dfire.fi address. Please check your spam folder if you do not see it in your inbox.

Keys are generally issued within one business day of payment being received. You are responsible for providing a correct delivery email address. If you have not received your key, please contact us.

9. Refunds

All sales are final. License fees are non-refundable once payment has been received and the License Key has been issued. This applies to all Licenses, including renewals and Offline Licenses.

The 90-day Trial Period (Section 4) is provided specifically so that you can determine whether the Software meets your requirements before committing to a purchase. By placing an order you confirm that you have had the opportunity to evaluate the Software and that you are purchasing on that basis.

Offline Licenses: for air-gapped environments that cannot reach the license server, a standard License can be converted to an Offline License on request. Because offline keys operate without server validation, they cannot be revoked once issued and are non-refundable.

Refunds for training workshops follow Section 10.

10. Training Workshops

This section covers the online training workshops described on our website. You order and pay for a workshop in the same way as a License (Sections 5 and 6). We quote on-site training separately, and the quotation states its terms.

  • Scheduling: we agree the date and time of each workshop with you by email. Lead time is typically four to six weeks. Payment alone does not reserve a date.
  • No suitable date: if we cannot agree a date that suits both parties within 30 days of your payment, we refund the workshop fee in full.
  • Rescheduling or cancellation by you: you may reschedule a confirmed workshop, or cancel it for a full refund, up to 10 business days before the agreed date. With shorter notice, we do not refund the fee, but we offer one new date where we can.
  • Cancellation by us: if we must cancel a confirmed workshop, for example because of illness, we offer a new date. If no new date suits you, we refund the workshop fee in full.
  • Validity: a paid workshop must take place within 12 months of payment. After that, the order expires without a refund, unless we caused the delay.
  • Attendees: a workshop is for up to 20 attendees from your organization. You are responsible for your attendees' equipment and internet connection.
  • Recording and materials: the recording, slides and materials are for internal use within your organization. You may not publish them, share them outside your organization, or resell them.
  • Refunds: we refund to the original payment method: your card for card payments, your bank account for invoice payments. A refund covers the workshop fee only.
  • Liability: our total liability for a workshop is limited to the fee you paid for it.

11. Warranties and Suitability

The Software is provided "AS IS" and "AS AVAILABLE", without warranty of any kind, whether express or implied, including any implied warranty of merchantability or fitness for a particular purpose, to the maximum extent permitted by law.

You are responsible for satisfying yourself, during the Trial Period, that the Software is suitable for your intended purpose and compatible with your infrastructure. We do not warrant that the Software will be error-free or uninterrupted, or that it will meet any particular requirement.

12. Support and Maintenance

Support is provided on a best-effort basis. Purchasing a License does not entitle you to guaranteed response times or a Service Level Agreement (SLA). The Software is supplied as a self-hosted solution; professional services and managed support are not included.

We may make updates to the Software available from time to time. You are responsible for applying updates to your own Installation.

13. Limitation of Liability

To the maximum extent permitted by law, our total liability arising out of or in connection with your purchase and use of the Software is limited to the amount you actually paid for the License giving rise to the claim. We are not liable for any indirect, incidental, special, or consequential damages, including loss of data, business interruption, or loss of profits. The limitations and exclusions of liability set out in the EULA also apply.

14. Data Protection

  • Purchase Data: information related to your order (company name, contact name, email, billing address, VAT ID) is processed by DFIRe Oy to issue your invoice and License Key and to meet our accounting and tax obligations.
  • Installation Data: the Software sends registration and license data, technical details about the installation and, unless you turn them off, five usage counts. It never sends us case data, evidence or investigation content. The personal data it sends us is the contact email and the username of the administrator who accepted the EULA. We also see the public IP address of each request. Some license types may require the usage counts, as stated in your invoice or agreement. Section 3.3 of the Privacy Policy lists the data and why we use it.

For complete details on how we process personal data, please see our Privacy Policy below.

15. Governing Law and Jurisdiction

These Terms are governed by the laws of Finland, without regard to its conflict of law rules. Any dispute arising out of or relating to these Terms or your purchase of a License or a workshop is subject to the exclusive jurisdiction of the courts of Helsinki, Finland.

16. Changes to These Terms

We may update these Terms from time to time. The version in force at the time you place an order applies to that order. The current version is always available on our website.

17. General

  • Entire agreement: these Terms, together with the invoice and the EULA, constitute the entire agreement between you and DFIRe Oy regarding the purchase of a License or a workshop, and supersede any prior discussions or representations.
  • Severability: if any provision of these Terms is held to be invalid or unenforceable, the remaining provisions remain in full force and effect.
  • Assignment: you may not assign or transfer your License or these Terms without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of all or substantially all of our assets.
  • Waiver and force majeure: our failure to enforce any provision is not a waiver of it. Neither party is liable for any delay or failure to perform caused by events beyond its reasonable control.

18. Contact

For billing, licensing, training, or technical inquiries regarding DFIRe, please contact:

DFIRe Oy
Vantaa, Finland
VAT ID: FI36221438
Email: contact@dfire.fi
Website: https://dfire.fi

Privacy Policy

Last Updated: October 2026

1. Introduction

This Privacy Policy explains how DFIRe Oy ("we", "us", "our") collects, uses, and protects your personal data in connection with the DFIRe website and software platform.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR).

2. Data Controller

DFIRe Oy
Vantaa, Finland
VAT ID: FI36221438
Email: contact@dfire.fi

3. Data We Collect

3.1 Website Visitors

When you visit our website, we collect minimal server logs (IP address, browser type) for security purposes. We also use Cloudflare Web Analytics to count visits. It does not store cookies or other data on your device, and it does not identify individual visitors. We see only aggregate figures, such as page views, referring sites, countries, and browsers.

3.2 Purchases

When you buy a license or a training workshop, we collect the information needed to process and account for the order:

  • Company name and VAT ID
  • Contact name and email address
  • Billing address and country
  • Transaction details (amount, date, license type)

Stripe processes card payments. We do not see or store your card details.

3.3 License Validation and Installation Data

The DFIRe software sends data to our license server when it registers and then every hour. These requests never carry case data, evidence or investigation content. The personal data in them is the contact email and the username of the administrator who accepted the EULA. We also see the public IP address of each request, which can be personal data. The software sends:

  • Registration and license data (always sent): the installation ID, a system identifier, the configured host name, the license key, and your organization name and contact email. At registration it also sends the EULA acceptance record: version, time and the accepting administrator's username. We use this data to validate your license, to keep a record of the agreement and to know who our customer is. We also use it to detect a license key used on more than one installation, and to contact you about your license and support requests.
  • Technical details (always sent): DFIRe and Python versions, operating system platform, time zone, timestamps, and configuration flags. A configuration flag is a yes or no value that says whether a capability, such as single sign-on, is in use. It carries none of that capability's settings or keys. We use these details for support and troubleshooting, and to guide development and testing.
  • Usage metrics (on by default, can be turned off): five counts of user accounts, cases and evidence items. When you turn them off, the software sends zero for each. We use them to guide development. Where your agreement sets a user limit or requires the counts, we also use them to check that the installation stays within it.
  • Connection data: our server sees the public IP address of each request.

An installation with an offline license does not check in. The License page of the software also shows an uptime badge for our license server, which the administrator's browser loads from healthchecks.io. That service sees the browser's IP address.

3.4 Support Requests

When you ask for support, you may send us files from your installation, such as a support package. These files can contain personal data, such as usernames and audit log entries. We use them only to resolve your request.

4. Legal Basis for Processing

We process your data on these legal bases:

  • Performance of a Contract: delivering and validating your license and supporting you, when you are our customer yourself.
  • Legal Compliance: tax and accounting records.
  • Legitimate Interest: contacting the people our customers name, and keeping a record of who accepted the EULA. We also rely on it to troubleshoot support requests, to develop and test DFIRe, to detect license misuse, and to count visits to our website.

We do not rely on consent as the legal basis for installation data.

5. Data Retention

  • License records: Retained for the duration of your license plus 7 years for tax compliance.
  • Server logs: Retained for up to 90 days.

6. Data Sharing

We share personal data only with specific third-party providers required to operate our service:

  • Email and Communication Providers: We use Mailgun and Google Workspace to send and manage our communications with you, including license delivery and support correspondence. Your name and email address are shared with these providers to facilitate these communications.
  • Payment provider: Stripe (Stripe Payments Europe, Limited, Ireland) processes card payments. Stripe receives your card details, billing address and email address to process the payment and to prevent fraud. Stripe's privacy policy applies to that data.
  • Infrastructure providers: Hosting services that process data on our behalf under strict confidentiality agreements.

7. International Transfers

Your data may be processed in countries outside the EEA (e.g., via Mailgun, Google Workspace, or Stripe). We ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs).

8. Your Rights

Under GDPR, you have the right to access, rectify, erase, or restrict the processing of your data. You can also object to processing based on our legitimate interest. In the software, you can turn off the usage metrics at any time, and an offline license stops the license check-in entirely. To exercise these rights, contact us at contact@dfire.fi.

9. Cookies

Our website uses only essential cookies required for basic functionality. No tracking or advertising cookies are used.

10. Contact

For privacy-related inquiries, contact: contact@dfire.fi