Skip to content
bynh
AR
Start free

Legal

Terms of service.

The agreement between your company and bynh when you use our trust center, status page and disclosure tools.

Version 1.2

  1. 01About these terms
  2. 02Accounts
  3. 03Workspaces and seats
  4. 04Trial and billing
  5. 05Acceptable use
  6. 06Your content and evidence
  7. 07Confidentiality and NDAs
  8. 08Security
  9. 09Availability and status page
  10. 10Disclosure program safe harbor
  11. 11Termination and data export
  12. 12Liability
  13. 13Governing law
  14. 14Changes to these terms
  15. 15Contact

The short version

  1. 01Your content and evidence stay yours. We use them only to run bynh for you.
  2. 02You pay per seat, monthly or yearly, in US dollars or Saudi riyals (your choice at sign-up), plus 15% VAT. Viewers are free.
  3. 03Expired certificates stay visible on your trust center. Nobody can hide them, including you.
  4. 04You can leave at any time and take your data with you for 30 days after.
  5. 05Saudi law applies. Disputes go to the competent courts in Jeddah.

About these terms

These terms are an agreement between Dokan Application Co., a company registered in Jeddah, Kingdom of Saudi Arabia (“bynh”, “we”), and the company or organisation that creates a workspace (“you”). They cover the bynh app, your public trust center, status page, disclosure program and the API.

If you sign an order form with us, the order form wins where the two disagree. The data processing agreement (DPA) forms part of these terms.

Accounts

You sign in with a one-time code sent to your work email, or through SAML single sign-on where your workspace has it on. There are no passwords to lose. You are responsible for who can reach the email accounts and identity provider you connect.

  1. 2.1Each account belongs to one person. Don’t share sign-in codes.
  2. 2.2Tell us at security@bynh.io within 72 hours if you think an account has been accessed without permission.

Workspaces and seats

A workspace holds one company’s trust center and everything behind it. A seat is a person who can edit: add certificates, publish policies, triage reports. Viewers who only read your trust center, including people you grant access under an NDA, are free and unlimited.

Workspace owners decide who holds a seat and can remove anyone at any time. Workspaces with 10 seats or more move to an Enterprise agreement.

Trial and billing

Every workspace starts with a 30-day free trial. We don’t ask for a card. When the trial ends, you choose a plan or editing pauses until you do. Nothing is deleted, and your trust center and status page stay online.

Price
Per seat, as listed on the pricing page when you subscribe
Cycle
Monthly or yearly, paid in advance
Currency
US dollars ($) or Saudi riyals (), chosen when you set up your workspace. It can be changed during the trial; after your first payment, contact us to change it
Tax
15% VAT on a ZATCA e-invoice. Dollar invoices also show the VAT and total in riyals at 3.75 to the dollar
Changes
Added or removed seats are billed to the day
  1. 4.1We’ll give you 30 days’ notice by email before any price change. It applies from your next renewal, never mid-term.
  2. 4.2If a renewal payment fails, we email you and try again over the next 5 days. If it still hasn’t gone through, editing pauses until it’s paid. Your public trust center stays online.

Acceptable use

A trust center only works if people can believe it. So you agree not to publish certificates, reports or claims you know to be false or out of date, and not to use bynh to:

  • Probe, scan or load-test systems you don’t own or have written permission to test.
  • Upload malware, or content that breaks Saudi law or someone else’s rights.
  • Resell the service or copy it to build a competing product.

Your content and evidence

Everything you put into bynh stays yours: certificates, audit reports, policies, evidence files and reports from researchers. You give us a limited licence to host, process and display it only as you configure, to run the service for you.

We don’t sell your content, and we don’t use it to train AI models. Certificates you mark as public are shown with their real status. If one expires, your trust center says so. That rule protects everyone who relies on bynh, so it can’t be switched off.

Confidentiality and NDAs

Each of us will keep the other’s confidential information private and use it only for this agreement. That duty lasts 3 years after the agreement ends, and for as long as the information stays a trade secret.

When you gate documents behind an NDA, bynh records who accepted which version and when. The NDA is between you and the viewer. We keep the signed record so you can prove it.

Security

We host customer data with Amazon Web Services in Frankfurt, Germany, encrypt it in transit and at rest, and follow the security measures published on our own trust center at trust.bynh.io. If we confirm a breach that affects your data, we’ll tell you without undue delay and within 72 hours.

Availability and status page

We aim for 99.9% monthly uptime for the app and your public pages, and we report it openly at status.bynh.io, incidents included. Planned maintenance is announced at least 72 hours ahead. Service credits for paid plans are set out in the service level agreement.

Disclosure program safe harbor

If you run a disclosure program on bynh, you set its scope, rules and any rewards, and you are responsible for honouring the safe-harbor terms you publish. bynh passes reports to you and keeps the record. We are not a party to your program and don’t decide rewards.

For bynh’s own systems: if you test in good faith, stay within the scope in bynh.io/.well-known/security.txt and report to us first, we won’t pursue legal action against you.

Termination and data export

Owners and admins can cancel at any time from Settings, Billing. Your plan runs to the end of the period you’ve paid for, and yearly plans aren’t refunded pro rata unless we end the agreement without cause.

  1. 11.1We may end the agreement if you seriously breach these terms and don’t fix it within 30 days of our notice.
  2. 11.2After the end date you have 30 days to download your files and export your records as CSV. Then we delete them within 60 days, except what the law requires us to keep.

Liability

Neither of us is liable for indirect or consequential losses, such as lost profits. Each side’s total liability is capped at the fees you paid in the 12 months before the claim. The cap doesn’t apply to your payment obligations, a breach of confidentiality, or anything the law doesn’t allow us to limit.

bynh shows the evidence you publish. It doesn’t certify your compliance; your auditors and regulators do.

Governing law

These terms are governed by the laws of the Kingdom of Saudi Arabia. We’ll try to settle any dispute by talking first, for at least 30 days. If that fails, the competent courts in Jeddah decide. If the Arabic and English versions differ, the Arabic version prevails.

Changes to these terms

When we change these terms, we email workspace owners at least 30 days before the change takes effect and keep every earlier version public.

Contact

Legal
legal@bynh.io
Security
security@bynh.io
Post
Dokan Application Co., Ar Riyadh District, Jeddah 23839