TechDD Terms of Service

Article 1 (Purpose and Definitions)

“Company” means Knowverse; “Service” means TechCheck, an AI technical self-assessment run on an air-gapped network, and TechDD Pro, technical due diligence support for businesses; “Member” means a person who has created an account; “VDR” means the isolated data room used to upload materials; and “Report” means the output generated from the materials that a Member selects and submits.

Article 2 (Posting and Amendment of the Terms)

The Company posts its trade name, representative, address, contact details, business registration number, mail-order business registration number, and these Terms on the initial screen. The Company may amend these Terms to the extent that doing so does not violate applicable law, and will give notice from 7 days before the effective date. Material changes that are unfavorable to Members will be announced 30 days in advance and notified to each Member individually.

Article 3 (Service Agreement)

The agreement is formed when a Member consents to the mandatory terms and to the collection and use of personal information, applies for membership, and the Company accepts the application. Persons under the age of 14 may not sign up. The Company may reject or suspend an application that uses another person’s information, false information, or materials the applicant is not authorized to use.

Article 4 (Accounts and Security)

Members must provide an accurate email address and keep their account access credentials secure. Passwords are stored as bcrypt hashes that cannot be decrypted, and TLS is applied to all public web communications.

Article 5 (Service Content and Changes)

The Company operates features for uploading materials, security scanning, AI analysis, and providing scores, grades, evidence, improvement recommendations, and reports. The Company may change features where required for legal, security, or technical reasons, and will give advance notice of any essential change to a paid service.

Article 6 (Orders and Payment)

Before payment, the Company displays the plan, price, what is provided, when it is provided, and the refund conditions. Where an external payment method is introduced, card information is processed directly by the payment processor, and the Company does not store full card numbers. Order and approval results and receipt identifiers are retained in accordance with applicable law.

Article 7 (Withdrawal and Refunds)

TechCheck is a digital service in which analysis is performed upon order. A full refund is available before the AI technical due diligence is run (while in the received or collecting status). Once the Member has separately confirmed and run it and the analysis pipeline has started, withdrawal for a change of mind may be restricted to the extent provided by Article 17(2) of the Act on the Consumer Protection in Electronic Commerce (전자상거래 등에서의 소비자보호에 관한 법률). However, this does not limit the Member’s statutory rights where the service differs from what was displayed or advertised or is not performed as agreed in the contract.

Article 7-2 (Terms for Products, Credits and Subscriptions)

This Article applies to scan products (single products, bundles, packages and add-ons), credit packs and the monthly monitoring subscription, together with Article 7. The price, composition, turnaround and rescan rights of each product follow what is shown on the product detail page and the checkout page.

① Product Composition, Turnaround and Launch Pricing

• The scope, deliverables, required materials, price and turnaround of each product are shown before payment, and the composition at the time of the order applies to that assessment. Later changes to a product do not affect assessments already ordered.
• Turnaround is counted from the time all required materials have been submitted. For products shown in “business days”, Saturdays, Sundays and public holidays in the Republic of Korea are excluded; other products follow the hours shown. If turnaround is delayed due to an outage or similar event, the Company will notify the Member.
• Launch pricing applies to orders placed before the end date shown on screen (Korea Standard Time); the list price applies afterwards. The final amount charged is the amount calculated by the Company's server at the time of the order.

② Refunds

• As notified in advance on the checkout page, scan products follow the rule “Full refund before analysis starts; no refund after it starts.”. This rule does not limit the statutory rights described in Article 7.
• Add-ons paid together with a product, bundle or package (such as the expert opinion for the vendor deliverable audit) form a single payment and are refunded together under the same rule; parts of a payment are not refunded separately.
• If an assessment paid with credits is canceled before analysis starts, the credits used are restored with their original expiry dates.

③ Credits

• Credit packs are purchased in the top-up unit shown on the checkout page, and bonus credits equal to 10% of the top-up amount are added.
• Top-up credits and bonus credits may be used for 1 year from the top-up date and expire afterwards. Credits that expire first are used first; where expiry dates are the same, top-up principal is used before bonus credits.
• Credits are held per organization to which the Member belongs and separately for each currency (KRW and USD). Credits cannot be converted between currencies, transferred, or exchanged for cash.
• Refunds may be requested through customer support and cover only unused top-up principal within its validity period. Bonus credits are not refundable, and when a top-up is refunded, the remaining bonus credits from that top-up expire with it.

④ Monthly Monitoring Subscription

• The subscription scans one repository from a completed assessment submitted by repository URL once a month and sends an email only when a secret exposure or dependency vulnerability (CVE) not present in the previous result is found.
• Monthly billing and USD annual billing renew and are charged automatically on the same cycle until the Member cancels. KRW annual billing is a one-time payment that does not renew automatically; paying the renewal following the reminder before expiry extends the term by one year. Annual prices are shown on the checkout page.
• The Member may cancel at any time, and monitoring continues until the end of the period already paid. Cancellation alone does not refund fees for a period already paid, which does not limit the statutory rights described in Article 7.
• If an automatic payment fails or a renewal payment is not confirmed, scheduled scans stop after a grace period and resume once payment is confirmed.
• During the subscription, the Company does not keep the original source code; it keeps only the repository URL (and encrypted access credentials, if provided) and deletes the credentials once cancellation is final.

⑤ Rescan Rights

• When the Member buys a product that includes rescan rights, or the rescan product, rescan rights for the number of times and period shown on the product page are granted from the time the original assessment report is issued. The remaining count and expiry date are shown on the dashboard.
• Remaining rights expire at the end of the period. Rights used are not restored even if a rescan is canceled after it has been started.

⑥ Vendor Deliverable Audit

• The audit pass rate is a reference indicator calculated from an automated comparison (found, partial, not found) between the deliverable list entered by the Member and the submitted source code. Items that cannot be determined are excluded from the calculation and shown separately.
• The pass rate and item results are not a decision on contractual acceptance; the decision on acceptance rests with the ordering party.
• The expert opinion option is prepared within the effort cap shown on screen, and the report is issued after the opinion has been written.

⑦ Overseas (USD) Payments and Taxes

• Prices shown in USD are final amounts, and the Company does not add taxes to them. Any local taxes that may apply in the Member's country, such as VAT or sales tax, are the Member's responsibility to report and pay.
• The Company collects the Member's country at the time of a USD order for tax and legal compliance and payment verification.
• KRW prices include Korean value-added tax.

Article 8 (Self-Assessment Pledge and Rights to Materials)

TechCheck may be used only for the internal technical self-assessment and improvement of the applicant’s own company, of which the applicant is the representative or a current employee. Members must not upload materials of third-party companies without authorization, such as for investment review or M&A. In case of violation, service suspension, termination of the agreement, invalidation of the Report, and refund restrictions may apply, and the Member may be held liable for infringement of copyrights or trade secrets.

Article 9 (Processing and Deletion of Materials)

Members must secure the rights necessary for the materials they upload. The Company processes materials solely for the purposes of providing the Service, security scanning, and analysis, and does not use them to train or fine-tune general-purpose AI models. Working copies of source code are deleted when static analysis ends, and submitted source ZIP files, repository links, and encrypted read-only tokens are automatically purged when the assessment is complete. Other source materials are deleted when a deletion event under the Company’s policy occurs, such as a refund, approval, or expiry of the retention period, and an audit trail may be kept.

Article 9-2 (Compensation for Source Code Leaks)

The Company processes source code submitted by Members only in an automated, air-gapped analysis environment without human viewing, and deletes working copies when static analysis ends. The Company bears liability for compensation for source code leaks subject to the requirements and limits below.

① Requirements for Compensation

Only where all of the following are met will the Company pay compensation equal to 100 times the amount the Member actually paid for the assessment concerned.

1. The leaked material is source code that the Member submitted to the Service.
2. The fact that the leak occurred within the TechDD system operated by the Company is proven by technical records such as access logs, audit trails, and transmission records.
3. The Member notifies the Company in writing (including by email) within 30 days of becoming aware of the leak and within 1 year of the completion date of the assessment concerned, and cooperates with the investigation to determine the cause.

② Exclusions

The following are not eligible for compensation:

1. Exposure caused by the Member’s side, such as negligent management of account information, misoperation, or sharing with third parties by the Member or persons associated with the Member
2. Code that was already public before the time of the alleged leak, such as through a public repository, open-source distribution, or disclosure by the Member
3. Cases where the code was obtained outside the Company’s systems, such as from the Member’s repositories, devices, or networks
4. Claims raised solely on the basis of circumstances, inference, or assertion without technical proof

③ Compensation Limit

Compensation under this Article is limited to 100 times the amount paid for the assessment concerned, and this is deemed the Company’s total limit of liability for damages for the same leak incident. However, this does not limit liability for damages caused by the Company’s intent or gross negligence, or liability that cannot be excluded under applicable law.

Article 10 (Nature and Limitations of Reports)

A TechCheck Report is an AI-assisted self-assessment based on the materials selected by the applicant, and is not a due diligence report for submission to third parties. All B2C Reports bear the label “SELF-ASSESSMENT — NOT FOR THIRD-PARTY DD”. The results do not replace investment, acquisition, warranty, or legal judgments.

Reports for scan products, packages and subscriptions (including the IR consistency self-check, vendor deliverable audit results, rescan comparisons and monitoring results) are also for the Member's self-check and do not replace third-party due diligence.

Article 11 (No Legal Judgment Provided)

Features linked to legal due diligence only mechanically verify and extract technical facts about source code and infrastructure, and do not provide any final legal judgment, interpretation, or legal advice.

Article 12 (Intellectual Property Rights)

Rights in the source materials lawfully held by a Member remain with the Member or the rightful owner. Rights in the Service UI, analysis framework, software, and content provided by the Company belong to the Company. Reports may be used within the agreed scope of use.

Article 13 (Prohibited Conduct)

• Uploading other companies’ materials without authorization, infringing rights, or processing information unlawfully
• Reverse engineering the Service, exploiting vulnerabilities, or causing excessive load
• Misrepresenting a self-assessment Report as an independent third-party due diligence report
• Using another person’s account, submitting false information, or violating the law

Article 14 (Service Interruption and Liability)

The Service may be temporarily suspended for maintenance, natural disasters, telecommunications or cloud failures, or responses to security incidents. The Company does not exclude liability for its intent or gross negligence or liability under applicable law; liability for damages arising from free features or from causes attributable to the Member may be limited to the extent permitted by applicable law.

Article 15 (Personal Information Protection)

The processing of personal information is governed by the separate Privacy Policy. Members can use the core Service without giving optional marketing consent.

Article 16 (Notices and Advertising Information)

The Company may send notifications necessary to perform the agreement, such as verification, payment, and assessment completion. Advertising information is sent only to those who have separately opted in, with “(Ad)” marked in the subject line and a way to unsubscribe provided.

Article 17 (Dispute Resolution)

Customer inquiries: 070-4442-6680, support@knowverse.net. The Company and Members will negotiate disputes in good faith, and consumers may use statutory dispute mediation bodies such as the E-Commerce Mediation Committee (전자거래분쟁조정위원회). Jurisdiction is determined in accordance with the Civil Procedure Act (민사소송법).

Addendum

These Terms take effect on July 18, 2026.

Article 9-2 (Compensation for Source Code Leaks) was newly added on September 3, 2026 and takes effect on the same date. As this Article is a new provision favorable to Members, it applies to assessments received on or after its effective date.

Article 7-2 (Terms for Products, Credits and Subscriptions) was newly added on October 9, 2026 and applies to orders, top-ups and subscriptions made on or after that date.

Official References

• Korea Fair Trade Commission, Standard Terms and Conditions for Internet Cyber Malls No. 10023
• Korea Law Information Center, Act on the Consumer Protection in Electronic Commerce