⚖ Legal

Customer User Agreement

Last updated: 11 April 2026

This Customer User Agreement ("Agreement") is entered into between SecureAZ Limited ("SecureAZ") and the organisation subscribing to the SecureAZ platform ("Customer"). This Agreement supplements the Terms of Service and governs the specific operational obligations between SecureAZ and the Customer.

1. Scope & Platform Access

SecureAZ grants the Customer a non-exclusive, non-transferable licence to access and use the SecureAZ platform during the subscription term, solely for the Customer's internal business purposes of conducting cyber security awareness training for its employees. This Agreement supplements the Terms of Service and governs the specific operational relationship between SecureAZ and the Customer.

2. User Seats

The Customer may create accounts for the number of users ("seats") specified in their subscription plan. Users must be employees, contractors, or volunteers of the Customer. User seats may not be shared between individuals or transferred to third parties outside the Customer's organisation. Additional seats can be added at any time and will be prorated to the next billing date.

3. Phishing Simulations

The Customer agrees that phishing simulation campaigns will only be conducted against their own employees with appropriate internal notice that security testing may occur. The Customer warrants that:

  • All simulation targets are employees, contractors, or authorised personnel of the Customer
  • The Customer has appropriate authority and internal policies to conduct such testing
  • Simulation campaigns will not be used to target individuals or organisations outside the Customer's organisation
  • The Customer has notified its employees in general terms that phishing testing may occur, where required by NZ employment law

4. Data Processing

SecureAZ processes personal data (including employee training records and phishing simulation results) on behalf of the Customer as a data processor under the NZ Privacy Act 2020. The Customer is the data controller and is responsible for:

  • Ensuring they have a lawful basis to process employee data
  • Informing employees about data processing in accordance with the NZ Privacy Act 2020
  • Ensuring employee data provided to SecureAZ is accurate and up to date

5. Customer Responsibilities

  • Maintain accurate user records and promptly remove users who are no longer employed
  • Ensure the platform is used in accordance with these Terms and applicable NZ law
  • Promptly notify SecureAZ of any security incidents or unauthorised access to the platform
  • Not circumvent, disable, or interfere with security-related features of the platform
  • Provide accurate billing information and keep payment details current

6. Service Level

SecureAZ will use commercially reasonable efforts to ensure platform availability of 99.5% uptime per calendar month, excluding scheduled maintenance. We will provide at least 48 hours' notice for scheduled maintenance that affects platform availability. Service level credits are not automatically applied — contact us if you experience extended downtime.

7. Support

SecureAZ provides email and phone support during NZ business hours (Monday–Friday, 8AM–6PM NZST) at [email protected] or 0800 001 136. Response time targets are one business day for standard requests. Scale plan customers receive priority support with same-day response targets during business hours.

8. Billing & Payment

All pricing is in NZD and is exclusive of GST, which will be added where applicable. Subscription fees are invoiced in advance — monthly or annually as selected. Annual subscriptions are non-refundable except in the case of a material service failure by SecureAZ. Monthly subscriptions may be cancelled with 30 days notice with no further charges.

9. Confidentiality

Both parties agree to keep confidential any non-public information disclosed by the other party in connection with this Agreement, and not to disclose such information to third parties without prior written consent. This obligation survives termination of this Agreement for a period of two years.

10. Amendments

SecureAZ may amend this Agreement with 30 days' written notice sent to the Customer's registered email address. Continued use of the platform after the effective date of changes constitutes acceptance. If you do not agree to the updated Agreement, you must notify us in writing and we will work with you to find an appropriate resolution.

11. Questions

If you have any questions about this Agreement or your subscription, please contact us:

SecureAZ Limited
Auckland, New Zealand
[email protected] · 0800 001 136