Terms & Conditions

These Terms and Conditions govern all engagements between Hamlaoui & Co. (SIRET: 102 404 456 00018), registered in France, and any client engaging our services — including IT auditing, penetration testing, security automation, and SaaS development.

Engagements are formalised through a signed Statement of Work (SoW) or service agreement. These Terms apply to all such engagements unless explicitly superseded by a bespoke contract agreed in writing.

Hamlaoui & Co. provides the services described in the applicable Statement of Work. All deliverables, timelines, and acceptance criteria are defined per engagement.

We reserve the right to decline or discontinue engagements that conflict with applicable law, regulatory requirements, or our ethical standards. Engagements involving unlawful activity, unauthorised system access, or misuse of security knowledge will not be accepted.

Fees are defined in the Statement of Work. Unless otherwise agreed:

• —Invoices are payable within 30 days of issue
• —Late payment attracts statutory interest under French commercial law (Article L. 441-10 of the French Commercial Code)
• —A fixed recovery indemnity of €40 applies to each late payment, in addition to interest
• —All fees are exclusive of VAT, which is applied at the applicable French rate where required

All information exchanged in the course of an engagement — including client infrastructure details, vulnerability findings, source code, business data, and audit results — is treated as strictly confidential by default.

We operate under NDA terms by default for all engagements. A formal NDA will be executed prior to the commencement of any work involving access to sensitive client systems or data.

This obligation survives termination of the engagement for a period of five (5) years.

For penetration testing and security auditing engagements, the client must provide explicit written authorisation for all systems, IP ranges, and environments in scope prior to the start of testing.

Hamlaoui & Co. will not conduct testing outside the agreed scope. The client is responsible for ensuring that all necessary third-party authorisations (e.g. cloud provider, hosting provider, co-tenant approvals) are obtained before testing commences.

Any expansion of scope during an engagement must be agreed in writing.

Deliverables (audit reports, pentest reports, code, documentation) produced specifically for a client engagement become the property of the client upon receipt of full payment.

Hamlaoui & Co. retains ownership of all methodologies, tools, frameworks, and pre-existing intellectual property used in the course of delivering services. No licence to underlying tooling is granted unless explicitly stated in the Statement of Work.

Law4Devs and all associated code, SDKs, and platform infrastructure remain the exclusive property of Hamlaoui & Co.

Hamlaoui & Co.'s liability to the client for any claim arising from an engagement is limited to the total fees paid by the client under the applicable Statement of Work in the twelve (12) months preceding the claim.

We are not liable for indirect, consequential, incidental, or punitive damages, loss of profit, loss of data, or business interruption — even if advised of the possibility of such losses.

Security testing carries inherent risks. While we take all reasonable precautions, clients acknowledge that penetration testing may cause system instability in rare cases. Testing is conducted with care, but residual risk cannot be entirely eliminated.

These Terms are governed by French law. Any dispute arising from or related to an engagement shall be subject to the exclusive jurisdiction of the competent French courts.

For disputes with clients established outside France, we are open to agreeing alternative dispute resolution mechanisms (arbitration, mediation) prior to the commencement of the engagement.

We may update these Terms from time to time. For ongoing engagements, changes do not apply retroactively. New or renewed engagements are governed by the Terms in effect at the time of signing.

The current version of these Terms is always available at hamlaoui.fr/terms.