Terms of Use
Effective Date: May 5, 2026
Last Updated: May 5, 2026
These Terms of Use (these "Terms") govern access to and use of the websites, pages, technical research pages, upload portals, contact forms, email addresses, communications channels, blog pages, and related online services made available by Dataflow Forensics Inc., a Delaware corporation, doing business as Dataflow Forensics ("DFF," "we," "us," or "our"), including without limitation the DFF Labs pages and any related inquiry or submission workflow (collectively, the "Site").
By accessing or using the Site, you agree to these Terms. If you do not agree, do not access or use the Site.
If you submit information or materials through a click-through a form that references these Terms, you agree to these Terms and any additional submission terms presented there. If you submit materials by email or another off-portal channel, these Terms apply to the maximum extent permitted by law to that submission and any resulting interaction. You acknowledge that submitting materials through such channels constitutes acceptance of these Terms with respect to that specific submission, even in the absence of acceptance via click. However, DFF does not guarantee that such acceptance will be sufficient in all jurisdictions, and we encourage you to use channels with explicit acceptance where available.
If you are using the Site on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms, and "you" includes both you and that organization.
The Site is intended for lawful use by adults and authorized representatives of organizations. The Site, including the DFF Labs pages, technical research content, contact workflows, and submission channels, is intended primarily for professional, enterprise, institutional, academic, and research audiences.
You may not use the Site if doing so would violate any applicable law, regulation, sanctions program, export-control restriction, confidentiality duty, court order, contractual restriction, or third-party right.
The Site is provided for general informational purposes and to facilitate potential business, research, licensing, and collaboration inquiries. The Site may describe research areas, technical tools, publications, licensing opportunities, and potential categories of assistance or review.
Nothing on the Site is an offer to provide services, a commitment to investigate, a promise to review any materials, or an undertaking to provide incident response, forensic analysis, legal reporting support, technical advice, remediation, or follow-up.
We may, in our sole discretion, choose whether to receive, review, respond to, analyze, retain, delete, ignore, or act on any submission or inquiry. No service level, review obligation, response obligation, support obligation, or timeline commitment is created by use of the Site.
Any preliminary communication is exploratory only and may be stopped, ignored, or discontinued at any time.
Unless expressly stated otherwise in writing on the Site or communicated separately, the Site does not constitute, incorporate, or advertise a bug bounty program, vulnerability disclosure program (VDP), or any other reward program for security reports. No vulnerability, defect, exploit, or security issue report submitted through the Site or any DFF channel entitles the submitter to compensation, public recognition, immunity from legal action, or any other benefit, unless otherwise agreed in a separate written agreement signed by an authorized representative of DFF.
Your use of the Site does not create any attorney-client, consultant-client, forensic engagement, incident- response engagement, investigative retention, expert relationship, fiduciary relationship, bailment, custodial relationship, any other special obligation, nor any agency, partnership, joint venture, consortium, joint partnership, or joint enterprise relationship, unless and until a separate written agreement is signed by an authorized representative of DFF, or other special duty unless and until a separate written agreement is signed by an authorized representative of DFF.
DFF assumes no duty to monitor, review, respond to, investigate, preserve, escalate, remediate, notify, warn, report, return, or act on any inquiry, submission, or circumstance described on the Site or reflected
in any material you send us.
You agree not to rely on the Site, on any automated acknowledgment, on any silence or non-response, or on any informal communication as legal, forensic, security, compliance, business, or investigative advice, or as an undertaking by DFF to do or refrain from doing anything.
The Site may permit you to submit inquiries, names, organizational details, email addresses, logs, malware samples, archives, crash data, forensic artifacts, diagnostic packages, or other information or content (collectively, "Submissions") through contact forms, upload portals, or email addresses identified on the Site.
All Submissions are voluntary and at your sole risk. DFF has no responsibility for loss, corruption, deletion, interception, alteration, quarantine, delay, non-receipt, routing failure, inability to open, inability to analyze, or inability to return any Submission.
DFF may use automated scanning, classification, triage, filtering, and analysis tools to process Submissions before, during, or instead of human review, and may decide whether to open, review, respond to, or delete a Submission based on automated or manual criteria.
If a Submission contains personal data related to third parties, you represent and warrant that you have a valid legal basis under applicable data protection law to share such data with DFF. You are solely responsible to such third parties for any violation of data protection laws resulting from your sharing. DFF will process any personal data contained in the Submissions in accordance with its Privacy Notice and policies and, to the extent it qualifies as the data controller, in compliance with applicable legal obligations.
Do not submit confidential, privileged, proprietary, trade secret, regulated, classified, export-controlled, sanctions-restricted, or, more generally, illegal contents that cause any harm to third parties (non- competition agreements, intellectual or industrial property rights, etc.) or otherwise sensitive materials unless you are legally authorized to do so and DFF has expressly agreed in writing beforehand to receive them under specific handling terms.
Except to the extent required by applicable law or expressly set out in a separate written agreement signed by DFF, unsolicited Submissions are not confidential. DFF assumes no duty of confidentiality, segregation, non-use, preservation, return, destruction, or special handling with respect to unsolicited Submissions.
The fact that personal data may appear in a Submission does not create confidentiality or handling obligations beyond those that cannot lawfully be disclaimed and those described in our Privacy Notice.
Grant of License. By making a Submission (“Submission” means any communication, upload, file, sample, log, data, feedback, idea, suggestion, vulnerability report, or other material transmitted to DFF through the Site or through any channel referenced by the Site), and to the fullest extent permitted by applicable law, you grant DFF and its affiliates, contractors, consultants, service providers, successors, and assigns a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, and fully paid-up license to receive, host, copy, store, transmit, process, analyze, test, emulate, execute, decompile, perform reverse engineering to the extent permitted by law, modify, adapt, transform, create Derivative Outputs (“Derivative Outputs” means any analysis, detection, signature, methodology, workflow, model, publication, product feature, know-how, or other result developed by DFF that incorporates, derives from, or is informed by one or more Submissions, in a generalized or transformed form) , and otherwise use the Submission for any lawful purpose, including research, threat analysis, development of detections, product improvement, internal operations, academic and commercial publications, training of automated systems, and the development and commercialization of products and services.
Derivative Outputs. You acknowledge that DFF is and will remain the sole owner of all Intellectual Property Rights in the Derivative Outputs. The Derivative Outputs are not subject to any obligation of attribution, notice, accounting, profit-sharing, or compensation to you, even if a Submission has contributed substantially to their creation.
Reservation of Pre-Existing IP. This license does not transfer to DFF ownership of your Pre-Existing IP (“Pre-Existing IP” means Intellectual Property Rights developed, acquired, or licensed by a party independently of these Terms and prior to any Submission) that may be incorporated into a Submission. However, you acknowledge that DFF cannot and does not undertake to isolate, segregate, or return elements of your Pre-Existing IP once incorporated into a processed Submission. Therefore, do not include in Submissions trade secrets, unpublished patents, proprietary source code, or other Pre-Existing IP that you are not willing to license under the terms of Section 6. DFF assumes no obligation to treat such elements as confidential or to limit their use beyond what cannot be legally excluded.
Third-Party IP. You represent and warrant that your Submission does not incorporate third-party Intellectual Property Rights (“Intellectual Property Rights” means all patents, copyrights, trademarks, trade secrets, sui generis database rights, moral rights, rights of publicity, know-how, and any other intellectual or industrial property rights recognized under any legal system) without having obtained all necessary licenses, authorizations, and consents to grant DFF the license set forth in Section 6. You will indemnify and hold DFF harmless from any third-party claims arising from a breach of this warranty, in accordance with Section 18.
Independent Development. Nothing in these Terms limits DFF’s right to develop, acquire, license, or distribute products, services, analyses, or research that may be similar to or compete with any Submission, without any obligation to you, provided that DFF does not directly use your identifiable, untransformed Pre-Existing IP beyond what is permitted under the license in Section 6.
Moral Rights. To the fullest extent permitted by applicable law, you irrevocably and unconditionally waive any moral rights, rights of attribution, rights of integrity, or similar rights that may subsist in any Submission in any jurisdiction.
You may not:
The Site may reference operating-system internals, kernel behavior, malware analysis, exploitation classes, reverse engineering methods, security-sensitive tooling, and similar technical subject matter.
Such content is provided solely for general informational, educational, research, or lawful professional purposes. You are solely responsible for how you access, interpret, and use the Site and any related content. DFF disclaims responsibility for any misuse of the Site or of any concepts, techniques, research, or capabilities described on the Site.
Any descriptions of XN00p, DFFIND, research outputs, or related capabilities are illustrative only and may be incomplete, outdated, changed, withdrawn, or unavailable at any time. Nothing on the Site guarantees any product availability, licensing decision, service capability, technical suitability, lawful use case, or support commitment.
Any actual product, licensing, service, support, or access rights will be governed exclusively by separate written agreements, if any.
The Site and its content, including text, layout, graphics, logos, research writeups, audiovisual materials, software, code, and compilations, are owned by DFF or its licensors and are protected by applicable intellectual-property laws.
Subject to these Terms, DFF grants you a limited, revocable, non-exclusive, non-transferable license to access and use the Site for your internal, lawful, non-infringing purposes. No other rights are granted.
Ownership. The Site, the DFF Content (“DFF Content” means all text, code, graphics, logos, user interfaces, trademarks, photographs, audiovisual material, data and compilations of data, as well as any software contained on or displayed on the Website, excluding Submissions), and all Intellectual Property Rights embodied therein are and will remain the exclusive property of DFF or its licensors. These Terms do not transfer any Intellectual Property Rights in or to DFF or the DFF Content. All rights not expressly granted are reserved.
Limited License to User. Subject to these Terms, DFF grants you a limited, personal, revocable, non- exclusive, non-transferable, and non-sublicensable license to access and view the Site and the DFF Content solely for your internal, lawful, non-commercial purposes, unless otherwise agreed in writing. This license does not include the right to: (a) copy, reproduce, distribute, retransmit, or publish any portion of the DFF Content; (b) modify, adapt, translate, or create derivative works from the DFF Content; (c) reverse engineer, decompile, or disassemble any software of the Site; (d) remove or alter copyright, trademark, or other proprietary notices; (e) use scraping, crawling, data mining, or automated data collection techniques on the Site without DFF’s prior written consent; or (f) sublicense or otherwise transfer any rights in the DFF Content to third parties.
Trademarks. The names, logos, trademarks, and distinctive signs of DFF displayed on the Site are registered or unregistered trademarks of DFF or its licensors. Nothing in these Terms grants you the right to use such trademarks without DFF’s prior written consent. Unauthorized use of DFF’s trademarks is expressly prohibited.
Infringement Notices. If you believe that the DFF Content infringes your Intellectual Property Rights, you are invited to contact us at privacy@df-f.com. We will review notices in good faith in accordance with the governing laws
If you provide suggestions, ideas, comments, or other feedback relating to the Site, our products, or our research ("Feedback"), you grant DFF a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid-up right to use, reproduce, modify, distribute, publish, commercialize, and otherwise exploit that Feedback without restriction, attribution, or compensation, unless otherwise agreed in a separate signed writing.
Our processing of personal data collected through the Site is described in our Privacy Notice incorporated into this Terms by reference. By using the Site, you acknowledge that internet transmissions are never completely secure. We make every effort to ensure that the Site is equipped with adequate security measures. In providing the Site and with respect to personal data that you share through the use of the Site, DFF acts as a data controller. DFF assumes no liability for the processing of personal data carried out by third parties who are independent data controllers and are present on the site through links, cookies, or other existing technologies.
The Site is not intended as a channel for highly sensitive, regulated, or special-category data unless we expressly say otherwise in writing. We do not guarantee the security of any information transmitted to or from the Site or any DFF communication channel.
Users residing in the European Union, the United Kingdom or other jurisdictions with specific data protection regulations may have additional rights in relation to their personal data that cannot be waived. Nothing in these Terms limits such rights to the extent that they cannot be lawfully excluded. To exercise these rights or for any questions regarding data protection, please contact.
Where DFF transfers personal data from the US territory or other jurisdictions with restrictions on international data transfers, such transfers will be made in accordance with the applicable law.
By using the Site or submitting information through the Site, you consent to receive electronic communications from DFF relating to your inquiry, submission, or use of the Site, including notices, acknowledgments, follow-up questions, and legally required communications. You understand that DFF may elect not to respond.
The Site may contain links to third-party resources, repositories, publications, or services. DFF does not control and is not responsible for any third-party content, services, availability, security, or practices, and such links do not imply endorsement.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SITE, ALL CONTENT, ALL PORTALS, ALL FORMS, ALL COMMUNICATION CHANNELS, AND ALL MATERIALS MADE AVAILABLE THROUGH THE SITE ARE PROVIDED "AS IS," "AS AVAILABLE," AND WITH ALL FAULTS.
DFF AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, AGENTS, LICENSORS, AND SERVICE PROVIDERS DISCLAIM ALL WARRANTIES, REPRESENTATIONS, AND CONDITIONS OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY WARRANTY OF ACCURACY, COMPLETENESS, TIMELINESS, SECURITY, NON-INFRINGEMENT, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, QUIET ENJOYMENT, AVAILABILITY, OR ERROR-FREE OPERATION.
WITHOUT LIMITING THE FOREGOING, DFF DISCLAIMS ANY RESPONSIBILITY OR LIABILITY ARISING FROM OR RELATING TO USER SUBMISSIONS, INCLUDING ANY FAILURE TO RECEIVE, REVIEW, ANALYZE, ACT ON, RESPOND TO, STORE, DELETE, PROTECT, RETURN, PRESERVE, OR MAINTAIN THE CONFIDENTIALITY OF ANY SUBMISSION.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL DFF OR ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, AGENTS, LICENSORS, OR SERVICE PROVIDERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, OR ENHANCED DAMAGES, OR FOR ANY LOSS OF DATA, PROFITS, REVENUE, OPPORTUNITY, BUSINESS, GOODWILL, OR EXPECTED SAVINGS, ARISING OUT OF OR RELATING TO THE SITE OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DFF'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SITE OR THESE TERMS WILL NOT EXCEED THE GREATER OF US$100 OR THE AMOUNT, IF ANY, YOU PAID DIRECTLY TO DFF FOR THE SPECIFIC SITE FEATURE GIVING RISE TO THE CLAIM DURING THE TWELVE MONTHS PRECEDING THE CLAIM.
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, DFF WILL NOT BE LIABLE FOR ANY DAMAGES ARISING FROM RELIANCE ON ANY CONTENT, PRODUCT DESCRIPTION, STATED CAPABILITY, SERVICE AVAILABILITY, OR INFORMAL COMMUNICATION PUBLISHED OR COMMUNICATED THROUGH THE SITE, REGARDLESS OF HOW SUCH CONTENT MAY BE REASONABLY INTERPRETED.
You will defend, indemnify, and hold harmless DFF and its affiliates, officers, directors, employees, contractors, agents, licensors, and service providers from and against any and all claims, actions, liabilities, damages, judgments, awards, losses, costs, and expenses, including reasonable attorneys' fees, arising out of or relating to your use of the Site, your Submissions, your Feedback, your breach of these Terms, your violation of applicable law, or any allegation that DFF's receipt, handling, analysis, disclosure, storage, deletion, or non-action with respect to your Submission caused harm or violated rights.
You may not use the Site or submit any material to DFF in violation of applicable export-control or sanctions laws. You are solely responsible for determining whether any software, technical data, malware sample, encryption-related item, exploit material, or related content may lawfully be transferred to us.
DFF may reject, quarantine, or delete Submissions where legal status is unclear or where we believe receipt or handling could create legal or operational risk.
DFF may suspend, restrict, or terminate your access to the Site or reject any Submission at any time, with or without notice, for any reason or no reason.
DFF may preserve, access, review, or disclose information if we believe doing so is appropriate to comply with law, legal process, or governmental request; to protect DFF, its users, or others; to investigate misuse; or to enforce these Terms and our rights.
DFF may cooperate with law enforcement, regulators, or other governmental authorities in connection with the Site or any Submission and is not obligated to notify you before or after any disclosure unless required by law.
DFF will not be liable for any delay, failure, interruption, or impairment resulting from causes beyond its reasonable control, including acts of God, war, terrorism, civil unrest, labor disputes, internet or telecommunications failures, cloud or hosting outages, malware events, utility failures, governmental actions, or supply-chain disruptions.
These Terms are governed by the laws of the State of Delaware, without regard to conflict-of-laws principles, subject to any non-waivable rights under applicable law.
To the maximum extent permitted by applicable law, any dispute, claim, or controversy arising out of or relating to the Site or these Terms will be resolved by final and binding arbitration on an individual basis.
Either party may seek temporary, preliminary, or permanent injunctive relief in a state or federal court located in New York, New York to protect intellectual property, confidential information, system security, or against unauthorized access or misuse. Court proceedings may also be used to compel arbitration, stay litigation pending arbitration, or confirm, modify, or enforce an arbitration award.
You and DFF waive any right to a jury trial to the fullest extent permitted by law. You and DFF also waive any right to participate in a class, collective, representative, coordinated, consolidated, or mass action or arbitration, and agree that disputes will be brought only in an individual capacity.
If any part of this Section is found unenforceable as to a particular claim or request for relief, the remainder of this Section will still apply to the maximum extent permitted by law.
If you are using the Site on behalf of a governmental entity, you remain responsible for ensuring that your use, submissions, and commitments are authorized and lawful. Nothing in these Terms modifies, waives, or overrides any non-waivable legal limits applicable to governmental entities, but to the maximum extent permitted by law these Terms still govern your use of the Site.
We may modify, suspend, or discontinue any part of the Site at any time without notice. We may update these Terms from time to time by posting a revised version on the Site. The updated Terms become effective when posted unless otherwise stated.
These Terms constitute the entire agreement between you and DFF regarding the Site and supersede prior or contemporaneous understandings regarding the Site.
If any provision of these Terms is held invalid, illegal, or unenforceable, the remaining provisions will remain in full force and effect, and the invalid provision will be enforced to the maximum extent permitted.
DFF's failure to enforce any provision is not a waiver of that provision or any other provision.
You may not assign or transfer these Terms without DFF's prior written consent. DFF may assign these Terms in whole or in part at any time.
Sections 5 (No Confidentiality for Unsolicited Materials), 6 (License to Submitted Materials; Operational Rights; Retention of Pre-existing Intellectual Property Rights), 12 (Feedback), 16 (Disclaimers), 17 (Limitation of Liability), 18 (Indemnification), 19 (Export Controls and Sanctions), 21 (Force Majeure), 22 (Governing Law), 23 (Binding Arbitration; Limited Court Proceedings; Class Action Waiver), and 26 (Miscellaneous) survive any termination, expiration, or cessation of these Terms or your use of the Site.
Dataflow Forensics Inc.
General contact: business@df-f.com
Privacy inquiries: privacy@df-f.com
