Terms Binadit Code Scan

2026-11-03-v1 · 3 November 2026

The Dutch text is leading. Nederlands

1. Binadit. This service is provided by Binadit B.V., Seinhuiswachter 2, 3034 KH Rotterdam, KVK 80923216, btw NL861852990B01, contact@binadit.com, +31 10 477 5362.
2. Application. These conditions apply to every order of Binadit Code Scan and the server scan. Our general terms and conditions also apply to business customers. In the event of a conflict, these conditions take precedence. General terms and conditions do not affect the legal rights of consumers.
3. Service. We check supplied source code for security flaws with automated checks and human review. The contents of each package are listed on the package page at the time of ordering.
4. Size. Each order applies to one repository and the package limit. For larger or different scopes we propose an additional price. If the customer does not accept this, we will refund the full amount, unless the parties agree otherwise.
5. Jurisdiction. The customer declares that he is the owner of the code and systems, or that he is authorized to give orders. The customer indemnifies us against claims from third parties if that statement is incorrect, to the extent permitted by law.
6. Price and payment. The customer pays in advance via Mollie. Consumers see the total price including VAT. Business prices are shown excluding and including VAT.
7. Delivery. We deliver within 7 calendar days after payment and full access have been received. In case of emergency, we will deliver on the next working day before 6:00 PM, if payment and access are received before 2:00 PM on a working day. If we deliver urgently too late due to our error, the customer will receive the emergency surcharge back. Legal rights continue to exist.
8. Collaboration. The customer ensures working access and correct data. If access is not forthcoming, the period will not start. If a business customer does not provide access within 30 days, we may close the order and refund the amount minus any work performed.
9. Method. We do not run customer code or do any attacks or load testing. We do not test found keys on external systems.
10. Server scan. The server scan only takes place on servers that the customer specifies, with access provided by the customer himself. The customer makes a backup before the scan if necessary, and revokes access afterwards. We will confirm when the scan is ready.
11. Confidentiality. We treat code, reports and access data as confidential. We only use them for the assignment and do not provide them to third parties, unless required by law. The code does not go to external services. Upon request, we will sign an NDA before the start.
12. Save. We delete code and access data no later than 30 days after delivery, or 30 days after the rescan at Compleet. The customer can request removal earlier. We keep invoices and order administration for as long as legally necessary.
13. Personal data. If the supplied code contains personal data, we process it as a processor in accordance with our processing agreement. The customer avoids as much production data as possible in the supplied code. Our privacy statement describes how we process customer data.
14. Nature of the service. This is a best efforts obligation. The report describes what we found in the supplied code or server on the scan date. We do not guarantee that all vulnerabilities have been found or that the software is safe. The service is not a pen test, legal advice, certification or proof of compliance.
15. Findings. If we find a critical problem, we try to warn the customer immediately. The customer remains responsible for assessing, solving and reporting, also to supervisors and those involved.
16. Patch proposals. Patch proposals are proposals. The customer tests and assesses them himself before they go into production. Within Compleet, one rescan takes place within 30 days of delivery.
17. Scan statement. At Compleet we provide a statement with scan date, scope and status. The customer may share it, but not change it and not present it as a warranty or certificate.
18. Withdrawal by consumers. A consumer can terminate the agreement within 14 days without giving reasons. This can be done via the button on the order status page, the model form or contact@binadit.com. If the service commences upon explicit request within that period, and the consumer withdraws during the execution, he will pay a proportionate part for what has already been delivered. The right of withdrawal expires as soon as we have fully performed the service, if the consumer has expressly agreed to this in advance and has waived this right. Refund will follow within 14 days via the same payment method.
19. Cancellation by business customers. As long as we have not started, a business customer can cancel free of charge. We then calculate the part that has already been carried out.
20. Complaints. Complaints can be sent to support@binadit.com. We will respond within 14 days. Consumers in the EU can also go to the competent court or dispute resolution in their country.
21. Liability. Our liability towards business customers is limited to the amount of the order in question, except in the event of intent or deliberate recklessness on the part of our management. We are not liable to business customers for indirect damage, such as lost profits or fines. Mandatory legal rules apply to consumers.
22. Intellectual property. The code remains the customer's. The customer may use the report for his own organization, advisors, customers and supervisors.
23. Right. Dutch law applies to these conditions. Disputes with business customers go to the Rotterdam court. Consumers retain the protection of mandatory law of their country of residence.