Terms of Use
Effective Date: May 5, 2026
Last Updated: May 5, 2026
These Terms of Use (these "Terms") govern access to and use of the websites, pages, technical research pages, upload portals, contact forms, email addresses, communications channels, blog pages, and related online services made available by Dataflow Forensics Inc., a Delaware corporation, doing business as Dataflow Forensics ("DFF," "we," "us," or "our"), including without limitation the DFF Labs pages and any related inquiry or submission workflow (collectively, the "Site"). By accessing or using the Site, you agree to these Terms. If you do not agree, do not access or use the Site.
If you submit information or materials through a click-through a form that references these Terms, you agree to these Terms and any additional submission terms presented there. If you submit materials by email or another off-portal channel, these Terms apply to the maximum extent permitted by law to that submission and any resulting interaction. You acknowledge that submitting materials through such channels constitutes acceptance of these Terms with respect to that specific submission, even in the absence of acceptance via click. However, DFF does not guarantee that such acceptance will be sufficient in all jurisdictions, and we encourage you to use channels with explicit acceptance where available. If you are using the Site on behalf of an organization, you represent and warrant that you have authority to bind that organization to these Terms, and "you" includes both you and that organization.
The Site is intended for lawful use by adults and authorized representatives of organizations. The Site, including the DFF Labs pages, technical research content, contact workflows, and submission channels, is intended primarily for professional, enterprise, institutional, academic, and research audiences.
You may not use the Site if doing so would violate any applicable law, regulation, sanctions program, export-control restriction, confidentiality duty, court order, contractual restriction, or third-party right.
The Site is provided for general informational purposes and to facilitate potential business, research, licensing, and collaboration inquiries. The Site may describe research areas, technical tools, publications,
licensing opportunities, and potential categories of assistance or review.
Nothing on the Site is an offer to provide services, a commitment to investigate, a promise to review any materials, or an undertaking to provide incident response, forensic analysis, legal reporting support,
technical advice, remediation, or follow-up. We may, in our sole discretion, choose whether to receive, review, respond to, analyze, retain, delete,
ignore, or act on any submission or inquiry. No service level, review obligation, response obligation, support obligation, or timeline commitment is created by use of the Site.
Any preliminary communication is exploratory only and may be stopped, ignored, or discontinued at any time.
Unless expressly stated otherwise in writing on the Site or communicated separately, the Site does not constitute, incorporate, or advertise a bug bounty program, vulnerability disclosure program (VDP), or any other reward program for security reports. No vulnerability, defect, exploit, or security issue report submitted through the Site or any DFF channel entitles the submitter to compensation, public recognition, immunity from legal action, or any other benefit, unless otherwise agreed in a separate written agreement
signed by an authorized representative of DFF.
Your use of the Site does not create any attorney-client, consultant-client, forensic engagement, incident- response engagement, investigative retention, expert relationship, fiduciary relationship, bailment, custodial relationship, any other special obligation, nor any agency, partnership, joint venture, consortium, joint partnership, or joint enterprise relationship, unless and until a separate written agreement is signed by an authorized representative of DFF, or other special duty unless and until a separate written agreement is signed by an authorized representative of DFF.
DFF assumes no duty to monitor, review, respond to, investigate, preserve, escalate, remediate, notify, warn, report, return, or act on any inquiry, submission, or circumstance described on the Site or reflected
in any material you send us. You agree not to rely on the Site, on any automated acknowledgment, on any silence or non-response, or on any informal communication as legal, forensic, security, compliance, business, or investigative advice, or as an undertaking by DFF to do or refrain from doing anything.
The Site may permit you to submit inquiries, names, organizational details, email addresses, logs, malware
samples, archives, crash data, forensic artifacts, diagnostic packages, or other information or content
(collectively, "Submissions") through contact forms, upload portals, or email addresses identified on the Site.
All Submissions are voluntary and at your sole risk. DFF has no responsibility for loss, corruption, deletion,
interception, alteration, quarantine, delay, non-receipt, routing failure, inability to open, inability to analyze, or inability to return any Submission.
DFF may use automated scanning, classification, triage, filtering, and analysis tools to process Submissions before, during, or instead of human review, and may decide whether to open, review, respond to, or delete a Submission based on automated or manual criteria. If a Submission contains personal data related to third parties, you represent and warrant that you have a valid legal basis under applicable data protection law to share such data with DFF. You are solely responsible to such third parties for any violation of data protection laws resulting from your sharing. DFF will process any personal data contained in the Submissions in accordance with its Privacy Notice and policies and, to the extent it qualifies as the data controller, in compliance with applicable legal
obligations.
Do not submit confidential, privileged, proprietary, trade secret, regulated, classified, export-controlled, sanctions-restricted, or, more generally, illegal contents that cause any harm to third parties (non- competition agreements, intellectual or industrial property rights, etc.) or otherwise sensitive materials
unless you are legally authorized to do so and DFF has expressly agreed in writing beforehand to receive them under specific handling terms.
Except to the extent required by applicable law or expressly set out in a separate written agreement signed by DFF, unsolicited Submissions are not confidential. DFF assumes no duty of confidentiality, segregation, non-use, preservation, return, destruction, or special handling with respect to unsolicited Submissions.
The fact that personal data may appear in a Submission does not create confidentiality or handling obligations beyond those that cannot lawfully be disclaimed and those described in our Privacy Notice.
Grant of License. By making a Submission (“Submission” means any communication, upload, file, sample, log, data, feedback, idea, suggestion, vulnerability report, or other material transmitted to DFF through
the Site or through any channel referenced by the Site), and to the fullest extent permitted by applicable law, you grant DFF and its affiliates, contractors, consultants, service providers, successors, and assigns a
worldwide, perpetual, irrevocable, non-exclusive, royalty-free, and fully paid-up license to receive, host, copy, store, transmit, process, analyze, test, emulate, execute, decompile, perform reverse engineering to the extent permitted by law, modify, adapt, transform, create Derivative Outputs (“Derivative Outputs” means any analysis, detection, signature, methodology, workflow, model, publication, product feature, know-how, or other result developed by DFF that incorporates, derives from, or is informed by one or more Submissions, in a generalized or transformed form) , and otherwise use the Submission for any lawful purpose, including research, threat analysis, development of detections, product improvement, internal operations, academic and commercial publications, training of automated systems, and the development and commercialization of products and services. Derivative Outputs. You acknowledge that DFF is and will remain the sole owner of all Intellectual Property Rights in the Derivative Outputs. The Derivative Outputs are not subject to any obligation of attribution, notice, accounting, profit-sharing, or compensation to you, even if a Submission has contributed substantially to their creation.
Reservation of Pre-Existing IP. This license does not transfer to DFF ownership of your Pre-Existing IP (“Pre-Existing IP” means Intellectual Property Rights developed, acquired, or licensed by a party independently of these Terms and prior to any Submission) that may be incorporated into a Submission.
However, you acknowledge that DFF cannot and does not undertake to isolate, segregate, or return elements of your Pre-Existing IP once incorporated into a processed Submission. Therefore, do not include in Submissions trade secrets, unpublished patents, proprietary source code, or other Pre-Existing IP that
you are not willing to license under the terms of Section 6. DFF assumes no obligation to treat such elements as confidential or to limit their use beyond what cannot be legally excluded. Third-Party IP. You represent and warrant that your Submission does not incorporate third-party Intellectual Property Rights (“Intellectual Property Rights” means all patents, copyrights, trademarks, trade secrets, sui generis database rights, moral rights, rights of publicity, know-how, and any other intellectual or industrial property rights recognized under any legal system) without having obtained all necessary licenses, authorizations, and consents to grant DFF the license set forth in Section 6. You will indemnify and hold DFF harmless from any third-party claims arising from a breach of this warranty, in accordance with Section 18.
Independent Development. Nothing in these Terms limits DFF’s right to develop, acquire, license, or distribute products, services, analyses, or research that may be similar to or compete with any Submission, without any obligation to you, provided that DFF does not directly use your identifiable, untransformed Pre-Existing IP beyond what is permitted under the license in Section 6. Moral Rights. To the fullest extent permitted by applicable law, you irrevocably and unconditionally waive any moral rights, rights of attribution, rights of integrity, or similar rights that may subsist in any Submission in any jurisdiction.
You may not:
The Site may reference operating-system internals, kernel behavior, malware analysis, exploitation classes, reverse engineering methods, security-sensitive tooling, and similar technical subject matter.
Such content is provided solely for general informational, educational, research, or lawful professional purposes. You are solely responsible for how you access, interpret, and use the Site and any related content. DFF disclaims responsibility for any misuse of the Site or of any concepts, techniques, research, or capabilities
described on the Site.
Any descriptions of XN00p, DFFIND, research outputs, or related capabilities are illustrative only and may be incomplete, outdated, changed, withdrawn, or unavailable at any time. Nothing on the Site guarantees any product availability, licensing decision, service capability, technical suitability, lawful use case, or support commitment.
Any actual product, licensing, service, support, or access rights will be governed exclusively by separate
written agreements, if any.
The Site and its content, including text, layout, graphics, logos, research writeups, audiovisual materials, software, code, and compilations, are owned by DFF or its licensors and are protected by applicable intellectual-property laws. Subject to these Terms, DFF grants you a limited, revocable, non-exclusive, non-transferable license to access and use the Site for your internal, lawful, non-infringing purposes. No other rights are granted.
Ownership. The Site, the DFF Content (“DFF Content” means all text, code, graphics, logos, user interfaces, trademarks, photographs, audiovisual material, data and compilations of data, as well as any
software contained on or displayed on the Website, excluding Submissions), and all Intellectual Property Rights embodied therein are and will remain the exclusive property of DFF or its licensors. These Terms do not transfer any Intellectual Property Rights in or to DFF or the DFF Content. All rights not expressly granted are reserved.
Limited License to User. Subject to these Terms, DFF grants you a limited, personal, revocable, non- exclusive, non-transferable, and non-sublicensable license to access and view the Site and the DFF Content solely for your internal, lawful, non-commercial purposes, unless otherwise agreed in writing. This license does not include the right to: (a) copy, reproduce, distribute, retransmit, or publish any portion of the DFF Content; (b) modify, adapt, translate, or create derivative works from the DFF Content; (c) reverse
engineer, decompile, or disassemble any software of the Site; (d) remove or alter copyright, trademark, or other proprietary notices; (e) use scraping, crawling, data mining, or automated data collection techniques on the Site without DFF’s prior written consent; or (f) sublicense or otherwise transfer any
rights in the DFF Content to third parties. Trademarks. The names, logos, trademarks, and distinctive signs of DFF displayed on the Site are
registered or unregistered trademarks of DFF or its licensors. Nothing in these Terms grants you the right to use such trademarks without DFF’s prior written consent. Unauthorized use of DFF’s trademarks is expressly prohibited.
Infringement Notices. If you believe that the DFF Content infringes your Intellectual Property Rights, you are invited to contact us at privacy@df-f.com. We will review notices in good faith in accordance with the governing laws
If you provide suggestions, ideas, comments, or other feedback relating to the Site, our products, or our
research ("Feedback"), you grant DFF a worldwide, perpetual, irrevocable, non-exclusive, royalty-free,
fully paid-up right to use, reproduce, modify, distribute, publish, commercialize, and otherwise exploit
that Feedback without restriction, attribution, or compensation, unless otherwise agreed in a separate
signed writing.
