General Terms of use

Welcome to our platform. If you continue to browse and use this platform, you are agreeing to comply with and be bound by the following terms and conditions of use, which together with our privacy policy govern Dornet LTD's relationship with you concerning this platform. If you disagree with any part of these terms and conditions, please do not use our platform.

The term ‘Dornet, or ‘us’ or ‘we’ refers to the owner of the platform the term ‘you’ refers to the user or viewer of our platform. The use of this platform is subject to the following terms of use:

The use of this platform is subject to the following terms of use: The content of the pages of this platform is for your general information and use only. It is subject to change without notice.

Neither we nor any third parties provide any warranty or guarantee as to the accuracy, timeliness, performance, completeness, or suitability of the information and materials found or offered on this platform for any particular purpose. You acknowledge that such information and materials may contain inaccuracies or errors and we expressly exclude liability for any such inaccuracies or errors to the fullest extent permitted by law.

All the funds generated through this platform or domain are directly invested on projects or program.

Schedule 2

Trademarks

Trademark number: 

Schedule 3

Vendor Security and Audit Requirements

THESE TERMS SHALL ONLY APPLY TO CUSTOMERS WHO ARE RECEIVING DATA SERVICES 

INTRODUCTION

The vendor must appropriately protect data.  

The vendor must keep all information confidential and secure and must take appropriate measures to protect against misuse and/or unauthorized access.

The vendor must implement an audit program.   

The vendor must develop and implement a defined audit program designed to detect unauthorized use of the Dornet Products, Software or information.

Upon request, the vendor agrees to provide Dornet with any documentation related to above.

1. VENDOR SECURITY REQUIREMENTS    

USE RESTRICTIONS  

The vendor acknowledges that the Dornet Products and information available therein may include personally identifiable information and vendor required to keep all such information confidential and secure.  Accordingly, the vendor shall take appropriate measures to protect against the misuse and/or unauthorized access through or to User ids and passwords. The vendor shall: (a) restrict access to the Dornet Products to those employees who have a need to know as part of their official duties; (b) ensure that none of its employees (i) obtain and/or use any information from the Dornet Products for personal reasons, or (ii) transfer any information received through the Dornet Products to any party except as permitted hereunder; (c) keep all User ids and related passwords, or other security measures used to access the Dornet Products confidential and prohibit the sharing of User ids; (d) immediately deactivate the User ID of any employee who no longer has a need to know, or for terminated employees on or prior to the date of termination; (e)  take all commercially reasonable measures to prevent unauthorized access to, or use of, the Dornet Products or Dornet data received there from, whether the same is in electronic form or hard copy, by any person or entity; (f) maintain and enforce data destruction procedures to protect the security and confidentiality of all information obtained through Dornet Products as it is being disposed; (g) unless otherwise required by law, purge all information received through the Dornet Products and stored electronically or on hard copy by the vendor which is not required for the purposes of providing access to the results data obtained to provide to the Customer’s customers within ninety (90) days of initial receipt; (h) be capable of receiving the Dornet Products where the same are provided utilizing “secure socket layer,” or such other means of secure transmission as is deemed reasonable by Dornet; (i) not access and/or use the Dornet Products via mechanical, programmatic, robotic, scripted or other automated search means, other than through batch or machine-to-machine applications approved by Dornet; and (k) take all steps to protect its networks and computer environments, or those used to access the Dornet Products, from compromise. The vendor agrees that on at least a quarterly basis, it will review searches performed by its User ids to ensure that such searches were performed for a legitimate business purpose and in compliance with all terms and conditions herein and shall use commercially reasonable efforts to follow additional policies and procedures for account maintenance as may be communicated to vendor by Dornet from time to time.  

Further, the vendor shall ensure that personal data shall be processed in a manner that ensures appropriate security, integrity, and confidentiality of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.

SECURITY POLICIES AND PROCEDURES AND INCIDENT NOTIFICATION  

The vendor will implement policies and procedures to prevent unauthorized use of User ids and the Dornet Products and information related thereto and will immediately notify Dornet if the vendor suspects, has reason to believe or confirms that a User ID or the Dornet Products (or data derived directly or indirectly there from) is or has been lost, stolen, compromised, misused or used, disclosed, accessed or acquired in an unauthorized manner or by any unauthorized person, or for any purpose other than legitimate business reasons.  The vendor shall, without undue delay, investigate all such instances.  The vendor solely liable for all costs associated therewith and shall further reimburse Dornet for any expenses Dornet or its Data Providers incur due to the Customer’s failure to prevent such impermissible use or access of User ids and/or the Dornet Products, or any actions required as a result thereof.

Furthermore, in the event that the Dornet Products provided to the vendor include personally identifiable information (including, but not limited to, social security numbers, driver’s license numbers or dates of birth), the following shall apply: the vendor acknowledges that, upon unauthorized acquisition or access of or to such personally identifiable information, including but not limited to that which is due to use by an unauthorized person or due to unauthorized use (a “Security Event”), the vendor shall, in compliance with law or as may be requires at Dornet’ discretion, notify the individuals whose information was potentially accessed or acquired that a Security Event has occurred, and also notify any other parties (including but not limited to regulatory entities and credit reporting agencies).  

The vendor agrees that such notification shall not reference Dornet or its Data Providers or the Dornet Products through which the data was provided, nor shall Dornet or the Dornet Products be otherwise identified or referenced in connection with the Security Event, without Dornet’ express written consent.  

The vendor shall be solely responsible for any other legal or regulatory obligations that may arise under Legislation in connection with a Security Event and shall bear all costs associated with complying with legal and regulatory obligations in connection therewith.  

The vendor shall remain solely liable for all costs and claims that arise from a Security Event, including, but not limited to, costs for litigation (including attorneys’ fees), and reimbursement sought by individuals, including but not limited to, costs for credit monitoring or allegations of loss in connection with the Security Event, and to the extent that any claims are brought against Dornet, shall indemnify Dornet from such claims. The vendor shall provide samples of all proposed materials to notify consumers and any third parties, including regulatory entities, to Dornet for review and approval prior to distribution.  In the event of a Security Event, Dornet may, in its sole discretion, take immediate action, including suspension or termination of the Customer’s account, without further obligation or liability of any kind. If the vendor contacted by a government or law enforcement agency regarding suspected or actual misuse of Dornet Products, the vendor will immediately notify Dornet unless expressly prohibited from doing so by the government or law enforcement agency. 

SECURITY OF DORNET DATA

The vendor certifies that it has not been the subject of any proceeding regarding any trust related matter including, but not limited to, fraud, counterfeiting, identity theft and the like, and that the vendor has not been the subject of any civil, criminal, or regulatory matter that would create an enhanced security risk to Dornet or its data. If any such matter has occurred or occurs during the course of the Customer’s relationship with Dornet, the vendor shall provide to Dornet a signed statement, along with all relevant supporting documentation, providing all details of such matter.  

CUSTOMER’S COMPREHENSIVE INFORMATION SECURITY PROGRAM

The vendor shall establish and implement, and thereafter maintain, a comprehensive information security program that is reasonably designed to protect the security, confidentiality, and integrity of the data received from Dornet. This program shall include, but is not limited to, the implementation of industry best practice controls such as current and updated anti-virus software on systems, appropriate use of firewalls and intrusion detection systems, and periodic monitoring of user activity. Such program, the content and implementation of which must be fully documented in writing, shall contain administrative, technical, and physical safeguards appropriate to the Customer’s size and complexity, the nature and scope of Customer’s activities, and the sensitivity of the information received from Dornet, including:

The designation of an employee or employees to coordinate and be accountable for the information security program.

The identification of material internal and external risks (both known and reasonably anticipated) to the security, confidentiality, and integrity of personal information that could result in the unauthorized disclosure, misuse, loss, alteration, destruction, or other compromise of such information, and assessment of the sufficiency of any safeguards in place to control these risks. At a minimum, this risk assessment should include consideration of risks in each area of relevant operation, including, but not limited to: (a) employee training and management; (b) information systems, including network and software design, information processing, storage, transmission, and disposal; and (c) prevention, detection, and response to attacks, intrusions, or other systems failures.

The design and implementation of reasonable safeguards to control the risks identified through risk assessment, and regular testing or monitoring of the effectiveness of the safeguards’ key controls, systems, and procedures.

The evaluation and adjustment of the Customer’s information security program in light of the results of the testing and monitoring required by subparagraph 3, any material changes to the Customer’s operations or business arrangements, or any other circumstances that the vendor knows or has reason to know may have a material impact on the effectiveness of its information security program.

The vendor shall promptly remediate any deficiencies identified above.

Specifically, the information security program shall implement the following requirements:

All Batching must be tracked by the vendor using a specific vendor user ID.

Dornet may require the vendor to enhance their authentication procedures using multi-factor authentication for access to certain types of data.

All Customers are required to have FTP servers in place for receiving batch requests.  Security measures should include Standard PGP encryption (Public Keys Exchange) or a secure SFTP using SSH as a method of encryption.

Customers are required to take reasonable and appropriate steps to ensure that information that is mailed to their clients and consumers is appropriately secured. These steps include using confidential envelopes for mailing, not marking the outside of the envelope with any information regarding its contents, and masking or truncating sensitive information in printed and mailed documents wherever possible.

VENDOR AUDIT AND TRAINING REQUIREMENTS

AUDIT PROGRAM 

In addition to Dornet’ own stringent security and audit programs, Dornet contractually requires its customers to have a defined audit program in place that will be designed to reasonably prevent unauthorized usage and will detect unauthorized or inappropriate use of Dornet data.  Customers must appropriately monitor use of the Dornet Data and ensure compliance with the Dornet’ standards, legal and regulatory obligations and contractual obligations made by the vendor to Dornet.  

Upon request by Dornet, the vendor shall provide copies of such audit files to confirm compliance with these terms and conditions set forth herein.  Dornet reserves the right to monitor and audit the Customer’s Audit Program as it deems appropriate, in its sole iscretion, and Dornet requires all Customers to co-operate fully and provide, without undue delay, responses to such monitoring and auditing.   Violations, as determined by Dornet in its sole discretion, may be grounds for immediate changes without notice to account status, including but not limited to, suspension, change in service level provided, and/or termination of account.   The vendor shall randomly audit a representative number of its existing and new Customers per year (for example, by applying the “95/5” statistical methodology to their account selection for such random audit program). The vendor shall maintain, during the Term and for five years following termination of the agreement, accurate and complete books and records related to its audits and investigations.  

MONITORING AND LOGGING REQUIREMENTS

The Vendor Audit Program must include sufficient monitoring and logging capability to track individual transactions. Specifically, Dornet must be able to identify the following information for each search performed by its customers:

Dornet must monitor its customers to ensure that it is in compliance with its contract for Dornet Products, and that its customers are in compliance with all laws and regulations. Customers are required to take reasonable and appropriate steps to ensure that their use abides by all terms and conditions of their relationship with Dornet.