Research Submission & Upload Terms
Effective Date: May 3, 2026
Last Updated: May 3, 2026
These Research Submission & Upload Terms ("Submission Terms") apply when you send or upload any files, data, packages, logs, archives, malware samples, reports, idea, suggestion, forensic artifacts, inquiry materials, vulnerability report or other content (collectively, "Submitted Materials") transmitted to
Dataflow Forensics Inc. ("DFF," "we," "us," or "our"), whether through an upload portal, contact form, email, linked storage location, or any other channel identified by DFF.
If you submit materials through a click-through portal or form, you agree to these Submission Terms at the time of submission. If you submit materials by email or another off-portal channel after being directed
by the Site to send materials to us, these Submission Terms apply to the maximum extent permitted by law. If you do not agree, do not submit materials.
Submission of materials to DFF is entirely voluntary and at your sole risk. DFF may accept, reject, ignore, quarantine, delete, store, access, review, analyze, stop handling, or transfer a submission as described in these Submission Terms at any time, for any reason or no reason.
DFF does not guarantee receipt, human review, analysis, response, preservation, return, deletion,
confidentiality, secure transmission, secure storage, or any particular handling outcome.
You must not use any DFF submission channel for emergencies, active incidents requiring immediate response, mandatory breach notifications, or any matter where delay, non-response, or inaction could cause harm. DFF is not a 24/7 incident response provider. If you are experiencing an active security incident, contact qualified incident response professionals directly.
DFF may use automated scanning, classification, triage, filtering, and analysis tools to process Submitted Materials before, during, or instead of human review, and may rely on automated results in deciding whether to open, review, respond to, or take any further action regarding a submission.
Submitting materials does not create any client relationship, investigative engagement, forensic retention, incident-response engagement, fiduciary relationship, bailment, custodial obligation, expert retention, or other duty.
DFF assumes no obligation to preserve evidence, maintain chain of custody, warn, notify, remediate, report, escalate, respond, or take action based on any submitted material.
You may not rely on any acknowledgment of receipt, silence, delay, informal communication, or occasional response as an undertaking by DFF to act or refrain from acting.
Do not submit personal data, sensitive personal data, credentials, secrets, privileged information, regulated data, payment-card data, protected health information, classified material, export-controlled material, sanctions-restricted material, or other restricted content unless you are legally authorized to do
so and DFF has expressly agreed in writing beforehand to receive that category of material.
Even where DFF has agreed to receive a category of material, DFF may still refuse, limit, stop, delete, or disclose handling if operational, legal, security, or safety concerns arise.
Where reasonably possible, you must remove or minimize personal data and other sensitive information before submission.
Except to the extent required by applicable law or expressly set out in a separate written agreement signed by DFF, unsolicited submissions are not confidential. DFF assumes no duty of confidentiality, segregation, non-use, preservation, return, or destruction with respect to Submitted Materials.
You should not expect privacy, restricted use, or special handling with respect to Submitted Materials beyond what cannot lawfully be disclaimed and what is expressly stated in our Privacy Notice. You expressly acknowledge that the existence of a designated technical channel for receiving specific types of
Submitted Materials — including malware samples, forensic artifacts, vulnerability reports, or system logs — does not, by itself, create any reasonable expectation of confidentiality, any implied non-disclosure obligation, or any fiduciary or custodial relationship. The designation of such channels is solely for DFF's operational and security purposes.
If you need confidential treatment, restricted use, preservation obligations, incident-specific handling protocols, or legal hold procedures, do not submit the materials unless and until DFF expressly agrees in writing.
The license and intellectual property framework set out in Section 6 of the Site Terms of Use (as amended from time to time, and including any improved or restated version thereof, "the IP Framework") is incorporated by reference into these Submission Terms in its entirety and applies to all Submitted
Materials. In the event of any conflict between this Section 5 and the IP Framework, the IP Framework shall control, except where this Section 5 expressly and specifically expands DFF's rights with respect to Submitted Materials for operational, forensic, or security-research purposes, in which case the broader provision applies. The parties intend that the IP Framework sets the minimum protective floor for both DFF and submitters, and that this Section 5 builds upon — and does not derogate from — that floor.
Without limiting the IP Framework, and to the fullest extent permitted by applicable law, and subject only to non-waivable legal restrictions, you grant DFF and its affiliates, contractors, advisors, vendors, service
providers, collaborators, successors, and assigns a worldwide, perpetual, irrevocable, non-exclusive, royalty-free, fully paid-up right to receive, host, copy, store, scan, transmit, process, analyze, test,emulate, detonate, reverse engineer to the extent permitted by applicable law (including without
limitation for purposes of interoperability, security research, and malware analysis), modify, adapt, transform, create derivative works from, disclose as described in these Submission Terms and in the
Terms of Use if more protective for DFF, publish generalized or derived learnings from, commercialize, and otherwise use the Submitted Materials for any lawful purpose, without attribution or compensation.
This includes use for research, validation, debugging, malware analysis, reverse engineering, safety review, detection development, product improvement, internal operations, publications, documentation,
training, demonstration, commercial productization, and any other lawful business purpose. DFF is and shall remain the sole owner of all intellectual property rights in any Derived Outputs. "Derived
Outputs" means any analysis, detection, signature, methodology, workflow, model, publication, product feature, know-how, or other result developed by DFF that incorporates, originates from, or is informed by one or more Submitted Materials, in generalized or transformed form. Derived Outputs are not subject to any obligation of attribution, notice, accounting, profit-sharing, or compensation to you, even where a Submitted Material contributed substantially to their creation. You acknowledge and agree that DFF may already be developing, or may later independently develop,
acquire, license, or distribute ideas, workflows, products, analyses, detections, or research that are similar to or competitive with any Submitted Materials, and you waive any claim arising from such independent or parallel development.
This license does not transfer to DFF ownership of your Pre-Existing IP that may be incorporated in a Submitted Material. "Pre-Existing IP" means intellectual property rights developed, acquired, or licensed
by you independently of these Submission Terms and prior to any submission. However, you acknowledge that DFF cannot and does not undertake to isolate, segregate, or return elements of your Pre-Existing IP once incorporated in a processed Submitted Material. Accordingly, do not include in any Submitted
Material trade secrets, unpublished patents, proprietary source code, or other Pre-Existing IP that you are not willing to license on the terms set out in the paragraphs before this one. DFF assumes no obligation to treat such elements as confidential or to restrict their use beyond what cannot be lawfully
disclaimed. To the maximum extent permitted by applicable law, you irrevocably and unconditionally waive any moral rights, rights of attribution, rights of integrity, or analogous rights that may exist in any Submitted Materials in any jurisdiction.
Unless expressly agreed in a separate written instrument signed by an authorized representative of DFF, you will not receive payment, royalties, reimbursement, credit, attribution, notice, or other compensation
in connection with any submission, any use of Submitted Materials, or any Derived Outputs. This Section restates and reinforces Section 9 of these Submission Terms and shall be read consistently with it.
You represent, warrant, and agree that:
Submitted Materials may contain malicious, unstable, offensive, or dangerous code or data. By submitting
such materials, you authorize DFF to use technical means it considers appropriate to receive, isolate, test,
emulate, detonate, reverse engineer, or otherwise analyze them, but DFF makes no promise that it will
do so safely, successfully, or at all.
To the maximum extent permitted by law, DFF is not liable for consequences arising from the receipt,
processing, testing, detonation, emulation, or non-handling of dangerous Submitted Materials, except to
the extent such liability cannot lawfully be excluded.
DFF may refuse to open or execute any materials in its sole discretion.
DFF has no obligation to preserve, archive, export, certify, return, or delete Submitted Materials on anyschedule.
Notwithstanding the foregoing, DFF may be required by law, court order, regulatory directive, or legal hold obligation to preserve Submitted Materials for defined periods, regardless of any request by you for deletion or return. In such cases, DFF's preservation obligations under applicable law take precedence over any commitment or expectation of deletion. DFF is not obligated to notify you of any suchpreservation requirement unless required by law.
DFF may retain, archive, anonymize, destroy, or delete Submitted Materials and associated metadata in accordance with its legal, operational, research, security, and business needs, subject to applicable law and any separate written agreement actually entered into by DFF.
Unless expressly agreed in a separate signed writing, you will not receive payment, royalties, reimbursement, credit, attribution, notice, or other compensation in connection with any submission, any
use of Submitted Materials, or any insights, detections, methodologies, publications, or product improvements derived from them.
DFF may screen submissions for legality, sanctions/export-control concerns, abuse, security issues, and compliance risk.
DFF may preserve, access, review, disclose, or provide copies of Submitted Materials and related information if we believe doing so is appropriate to comply with law, legal process, or governmental request; to protect DFF or others; to investigate misuse; to enforce our terms and rights; or to support safety, abuse-prevention, or internal governance functions. DFF may cooperate with law enforcement, regulators, or other governmental bodies also disclosing Submitted Materials to these subjects or other authorities where DFF reasonably believes such materials evidence a violation of computer fraud and abuse laws, cybercrime statutes, or other applicable criminal law, without prior notice to you and without liability to you for such disclosure.
If you are submitting materials from outside the United States, you are solely responsible for ensuring that your submission complies with all applicable laws in your jurisdiction, including laws governing the export, transfer, or sharing of security-related technical data, personal data, or evidentiary materials. DFF
makes no representation that the submission portal or these Submission Terms comply with the laws of any jurisdiction other than the United States. Cross-border submissions of personal data must comply with applicable data transfer requirements, including EU Standard Contractual Clauses or equivalent
mechanisms where required.
Submissions must comply with any file size, format, naming, or technical requirements posted on the
upload portal or otherwise communicated by DFF. DFF may reject, discard, quarantine, or delete
submissions that do not comply.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DFF DISCLAIMS ALL WARRANTIES, REPRESENTATIONS,
AND CONDITIONS OF ANY KIND WITH RESPECT TO THE PORTAL, SUBMISSION CHANNELS, AND HANDLING OF
SUBMITTED MATERIALS, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY WARRANTY OF
RECEIPT, REVIEW, ANALYSIS, SAFETY, SECURITY, PRESERVATION, RETURN, DELETION, CONFIDENTIALITY, OR FITNESS
FOR A PARTICULAR PURPOSE.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DFF SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, OR ENHANCED DAMAGES, OR FOR ANY LOSS OF
Dataflow Forensics Inc. | 299 Park Ave FL 2, New York, NY 10171
6 DATA, PROFITS, REVENUE, OPPORTUNITY, BUSINESS, GOODWILL, OR EXPECTED SAVINGS, ARISING OUT OF OR RELATING TO ANY SUBMISSION OR THESE SUBMISSION TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DFF'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO ANY SUBMISSION OR THESE SUBMISSION TERMS SHALL NOT EXCEED US$100.
You will defend, indemnify, and hold harmless DFF and its affiliates, officers, directors, employees, contractors, agents, licensors, and service providers from and against any and all claims, actions, liabilities, damages, judgments, awards, losses, costs, and expenses, including reasonable attorneys' fees, arising out of or relating to your Submitted Materials, your breach of these Submission Terms, or any allegation that DFF's receipt, handling, analysis, disclosure, storage, deletion, publication of derived findings from, or non-action with respect to Submitted Materials caused harm or violated rights.
These Submission Terms supplement the Site Terms of Use and Privacy Notice. In the event of a conflict between these Submission Terms and the general Site Terms regarding Submitted Materials, these Submission Terms control the submission workflow. Separate written agreements signed by DFF may supersede these Submission Terms to the extent of any direct conflict.
These Submission Terms are governed by Delaware law, without regard to conflict-of-laws principles, subject to any non-waivable rights under applicable law. The arbitration, class-action waiver, jury-trial waiver, and limited-court-proceedings provisions in the Site Terms of Use apply to disputes arising under these Submission Terms.
Sections 4 (No Confidentiality; Limited Privacy Expectations), 5 (License, Handling Rights, Publication Rights, and Independent Development), 7 (Dangerous Content and Malware), 8 (No Preservation, Return, or Deletion Commitment), 9 (No Compensation or Attribution), 10 (Compliance Screening and Disclosure), 12 (Disclaimer of Warranties), 13 (Limitation of Liability), 14 (Indemnification), and 16 (Governing Law and Dispute Resolution) survive any termination, expiration, or cessation of these Submission Terms or your use of any DFF submission channel.
