Assay™

Legal

Terms of service

Effective 14 August 2026 · Version 1.0. These terms govern your use of the Assay website and tools. Paid engagements are additionally governed by a signed engagement letter, which takes precedence where the two differ.

1. Who these terms are with

This website and the services described on it are provided by Assay Technologies Private Limited, H. No. 438, Sr. No. 179, Pandharkar Wasti, Akurdi, Pune 411035, Maharashtra, India (“Assay”, “we”). By using this site or our tools you agree to these terms. If you do not agree, please do not use them.

2. The free analysis tool

The browser-based analysis tool is provided free of charge and without warranty. It parses a file you select, entirely within your browser. You are responsible for ensuring you are authorised to analyse any file you use it on.

Output from the free tool is a reading for your own information. It is not an attestation, carries no assurance opinion, and should not be represented to a third party as one.

3. Attestations and what they mean

An Assay attestation states configuration facts observed in a specific file, as of a specific date, against a published control set. It is expressly not:

  • a security certification, accreditation or seal of approval;
  • an assessment of runtime behaviour, since we analyse configuration and do not observe execution;
  • a statement about anything absent from the file supplied;
  • legal, regulatory or compliance advice.

Controls that cannot be answered from an export are reported as not assessed rather than passed. You should not infer a pass from an absence of findings.

4. Your responsibilities

  • Ensure you are authorised to supply any file you send us, and that doing so does not breach an agreement with a third party including your platform vendor.
  • Do not send credentials, secrets or personal data that is not necessary for the engagement.
  • Provide accurate information; findings depend on the completeness of what you supply.
  • Use the outputs within your organisation and its advisers, not for onward resale.

5. Independence and conflicts

Assay does not perform remediation of issues it reports. Where you ask for a referral to an implementation partner and we receive a referral fee, that fee is disclosed in the attestation. We have no commercial relationship with Okta, Inc.

6. Intellectual property

We retain ownership of the Assay software, control library, report formats and methodology. You receive a perpetual, non-exclusive licence to use the attestation and its outputs for your own internal purposes, including sharing with your auditors, regulators, insurers and professional advisers.

You retain all rights in the files you supply. We claim no ownership over your configuration data.

We may publish anonymised, aggregated statistics derived from engagements — never anything identifying you, your organisation, your systems or your findings, without your written consent.

7. Fees and payment

Fees are as published on our pricing page or as set out in your engagement letter. Baselines are invoiced on delivery; continuous engagements annually in advance. Invoices are payable within 30 days. Prices exclude taxes, which are added where applicable.

8. Confidentiality

Each party will keep the other’s confidential information confidential, use it only for the engagement, and protect it with no less care than its own. This survives termination. Information that is public, independently developed, or required to be disclosed by law is excluded.

9. Warranties and disclaimers

We warrant that we will perform engagements with reasonable skill and care, in line with the stated methodology. Beyond that, and to the fullest extent permitted by law, the website, the free tool and all outputs are provided “as is” without warranties of any kind, express or implied, including merchantability, fitness for a particular purpose and non-infringement.

We do not warrant that findings are exhaustive. An analysis reflects a point-in-time file and a published control set; it cannot identify every issue that may exist.

10. Limitation of liability

Nothing in these terms limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for anything else that cannot lawfully be limited.

Subject to that, our total aggregate liability arising from or connected with an engagement is limited to the fees paid by you for that engagement in the 12 months preceding the claim. For the free tool, where no fees are paid, our liability is limited to the maximum extent permitted by law.

Neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill or anticipated savings.

11. Term and termination

Either party may terminate an engagement on 30 days’ written notice. Fees for work already performed remain payable. Clauses that by their nature should survive — confidentiality, intellectual property, liability — do so.

12. Governing law

These terms are governed by the laws of India, with the courts at Pune, Maharashtra, and the courts of India, with the courts at Pune, Maharashtra have exclusive jurisdiction, without prejudice to any mandatory consumer or data protection rights available to you locally.

13. Trademarks

Okta and Okta Workflows are trademarks of Okta, Inc. Assay is not affiliated with, endorsed by, sponsored by, or a reseller of Okta, Inc. All references are for identification only and constitute nominative fair use. Other marks belong to their respective owners.

14. Changes

We may update these terms. The effective date above shows when. Continued use after a change constitutes acceptance; for existing engagements, the terms in force at signature continue to apply.

15. Contact

legal@theassayco.com · Assay Technologies Private Limited, H. No. 438, Sr. No. 179, Pandharkar Wasti, Akurdi, Pune 411035, Maharashtra, India