Terms of Service

Acceptance of Terms

By accessing and using whitesec.id, you confirm that you have read, understood, and agreed to these terms and conditions. If you do not agree with them, please do not continue using our site.

This site is operated by PT Topi Putih Siberindo, trading as Whitesec ID.

Use of the Site

You agree to use this site reasonably and not to do any of the following:

• Access systems, data, or areas of the site without authorisation
• Conduct security testing without our written permission
• Copy, modify, or redistribute content for commercial purposes without consent
• Use the site to distribute malicious software or unlawful material
• Disrupt service availability or the experience of other users

Intellectual Property

All material on this site — including text, layout, visual elements, methodologies, frameworks, and downloadable documents — belongs to us or our licensors and is protected by applicable law.

You may quote portions of the content for internal reference or non-commercial publication, provided the source is clearly attributed.

Nature of Information on the Site

The service information shown here is general and intended as an initial overview. It does not constitute legal advice, audit advice, or a binding offer.

Scope of work, timelines, fees, and the responsibilities of each party are set out in a separate engagement agreement signed by both parties.

Professional Services

We act as an implementation consultancy and technical service provider. We do not act as a certification body or as an independent auditor of work we ourselves supported — we maintain that separation to protect the objectivity of our clients' audits.

Decisions on certificate issuance, licensing approval, or regulatory assessment rest entirely with the relevant institution. We commit to preparing documentation and controls to the applicable requirements, but cannot guarantee the outcome of a third party's decision.

Security Testing

We carry out security testing only after obtaining written permission from the system owner, with the scope, schedule, and rules of engagement agreed before work begins.

Testing results are confidential and are shared only with the parties the client nominates.

Confidentiality

We treat all client information as confidential and use it only for the performance of the work. More detailed confidentiality provisions are set out in a separate non-disclosure agreement where required.

Personal Data Protection

The processing of personal data you submit through this site is described in our Privacy Policy, which is written with reference to Law No. 27 of 2022 on Personal Data Protection.

Third-Party Links

Our site may contain links to third-party sites. We neither control nor take responsibility for their content, policies, or security practices.

Limitation of Liability

To the extent permitted by applicable law, we are not liable for indirect, incidental, or consequential loss arising from use of this site.

Liability relating to the performance of work is governed specifically by the engagement agreement between us and the client.

Changes to These Terms

We may update these terms and conditions at any time. The latest version is always available on this page along with the date of its update. Continued use of the site after an update is taken as acceptance of the terms in force.

Governing Law

These terms and conditions are governed by the laws of the Republic of Indonesia. Any dispute will first be settled by consultation; failing agreement, it will be resolved through the legal channels applicable within the jurisdiction of the Republic of Indonesia.