Terms of service

Last changed 14 October 2026.

These terms apply between Bivaro AB, Jönköping, Sweden ("Bivaro") and the company using Cybono ("the customer"), and to every user the customer gives access to the service.

Acceptance of the terms

The customer accepts these terms by registering an account, signing in or starting to use Cybono. The agreement takes effect on acceptance. Anyone entering into the agreement on the customer's behalf confirms that they have authority to represent and bind the company. The customer's users must follow these terms when using the service.

The service

Cybono monitors and advises on a company's cybersecurity: leaked accounts, email and website settings, the security posture of the Microsoft 365 and Google Workspace tenants, training and self-assessment, with risk events and suggested actions. The service gives information and advice; it does not replace the customer's own responsibility for its security or an IT provider's work, and it does not guarantee that a company is protected against intrusion.

Checks rely on available data and cannot be guaranteed to detect every security weakness, breach or intrusion. The customer is responsible for assessing the advice and taking appropriate security measures.

Account and users

The customer is responsible for the users it invites, for keeping credentials secret, and for using two-factor authentication where the service offers it. The customer may only add domains, websites, email addresses and other resources it owns or has the right to monitor.

Microsoft 365 check

By connecting its Microsoft 365 tenant, the customer grants Cybono the read permissions Microsoft shows at approval; Cybono only reads, it changes nothing. The customer can remove the connection at any time, in Cybono and in its own Microsoft tenant. Microsoft's own terms apply to Microsoft 365.

Google Workspace check

By connecting its Google Workspace, the customer grants Cybono the read permissions Google shows at approval; Cybono only reads, it changes nothing. The customer can remove the connection at any time, in Cybono and in its own Google Admin console. Google's own terms apply to Google Workspace.

Subscription and payment

Cybono is provided as a subscription, directly from Bivaro or through a partner. Price, payment terms, commitment and notice period follow from the order or the partner's agreement. If an invoice is not paid on time, Bivaro may suspend the service until payment is made.

If a partner funds the customer's access, the funding is governed by the agreement between Bivaro and the partner. Add-ons purchased separately by the customer are subject to the prices and terms stated when ordering.

Acceptable use

The service may not be used to monitor someone else's assets without permission, to attempt to access other customers' data, or in a way that disrupts the service. Bivaro may immediately suspend an account that breaches this. Suspension restricts access to the service; termination of the agreement is governed by Termination.

Personal data

How Bivaro processes personal data is described in the privacy policy. For personal data that Bivaro processes on the customer's behalf and under the customer's instructions, the customer is the controller and Bivaro the processor. That processing must be governed by a data processing agreement forming part of the customer agreement. The customer is responsible for having a legal basis for this processing. Bivaro is the controller for processing where Bivaro determines the purposes and means of the processing.

Availability and changes

Bivaro aims to keep the service available around the clock but does not guarantee uninterrupted operation. Planned downtime is announced in advance when possible. Bivaro may develop and change the service; a change that materially worsens it for the customer is announced at least 30 days in advance, and the customer may then terminate the subscription as of the date of the change.

Changes to the terms

Bivaro may update these terms. Material changes are announced by email or in Cybono at least 30 days before they take effect. Continued use of the service after that date means the customer accepts the new terms.

Liability

Bivaro's total liability for direct damage is limited to an amount equivalent to the fees paid to Bivaro for the customer's access to Cybono during the six months before the damage. Bivaro is not liable for indirect damage, such as lost profit. The fact that an intrusion was not detected or a warning was not given does not in itself make the damage indirect; the service's limitations are described under The service. The limitation of liability does not apply in case of intent or gross negligence.

Intellectual property

Cybono, its content, trainings and trademarks belong to Bivaro. The customer may use them within the service during the subscription. What the customer enters belongs to the customer.

Termination

On ordinary termination, access to the service ends when the subscription period expires. In the event of a material breach, Bivaro may terminate the agreement if the customer does not remedy the breach within 30 days after Bivaro gives notice of it. Termination may then take effect once the remedy period has expired. During the remedy period, Bivaro may suspend an account under Acceptable use. The customer's data is deleted as described in the privacy policy.

Partner-funded access ends at the end of the funded period if the customer's agreement with the partner or Bivaro's partnership ends. Continued access then requires a separate order.

Contact

Questions about these terms can be sent through the contact form.

Governing law

Swedish law applies. Disputes are settled by the Swedish general courts, with Jönköping District Court as the court of first instance.