Virtual Vanderbilt SPC Receiver

The Virtual Vanderbilt SPC Receiver Service manages and monitors incoming connections from compatible Vanderbilt SPC alarm panels. It retrieves alarm- and technical messages coming from compatible Vanderbilt SPC alarm panels as well as audio/video data. It supports sending downstream commands to compatible Vanderbilt SPC alarm panels.

Manage and monitor connections from Vanderbilt SPC alarm panels

Receiving alarm- and technical message from SPC alarm panels

Retrieving audio/video data from SPC panels

Stream downstream audio data to SPC panels

Detect configuration problems of SPC panels.

The connectivity between the Vanderbilt SPC alarm panel and the Virtual Vanderbilt SPC Receiver is under the responsibility of the Customer.

The Service is billed by the hour when its status is active. Each hour started is due. The bill for the previous month is finalized at the beginning of each new month. Shortly after, the bill is charged to your selected payment method.

"Flex-C" Flexible Secure Communications Protocol (FlexC) is an IP based communication protocol for Vanderbilt SPC panels

"SPC Panel" Intrusion detection controller that retrieves signals from different intrusion sensors to create alarm and technical messages.

This Service Description makes an integral part of our EVALINK Agreement.

Our private policy marks an integral part of our evalink agreement. Learn how we use our services, collect, use, process, and manage data, billings, and payments.

EVALINK Agreement

This EVALINK Agreement is entered into by and between SITASYS AG, a Swiss société anonyme, with its principal place of business at Industriestrasse 6 4513 Langendorf SO (“Sitasys”), and the entity you represent (“Customer”). This Agreement takes effect when you click on “I Accept” button or check the box presented with these terms (the “Effective Date”). You represent to Sitasys that you have legal authority to bind the Customer and to enter in this EVALINK Agreement for the Customer. You will identify the Customer in the appropriate field of the EVALINK Account you created for Customer’s use of the Services. 

Customer may access and use the Services in accordance with this Agreement. The Services are set forth in the Services Description. Sitasys will provide at least twelve (12) months prior Notice to Customer if Sitasys decides to discontinue a Service, or a material functionality of the Services, that it makes generally available to its customers and that Customer is using. Sitasys will not be obligated to provide the Notice under this Section “Description of the Services” if the Notice period (a) would pose a security or intellectual property issue to Sitasys or the Services, or (b) would cause Sitasys or its Customers to violate a binding regulation, standard or a governmental or administrative authority’s request. Where Sitasys is excused from providing Notice under this Section “Description of the Services”, Sitasys will use commercially reasonable efforts to provide as much advance Notice as is reasonably practicable under the circumstances (which Customer acknowledges may be no prior notice).

Customer acknowledges that access and use of the Services require use of different Elements. Customer may also decide to use, in relation with the Services, additional Elements, including Third-Party Elements, that are not necessary for use of the Services. Elements are not part of the Services and are not governed by this Agreement. Customer is responsible (i) for the selection, set up, maintenance, use and payment of the Elements and (ii) to verify that the Elements are and remain compatible with the Services. Sitasys will not be liable for (i) any failure of the Services or damage that is arising from or related to the Elements or for (ii) the connection of the Services to the Elements or the compatibility of the Services with the Elements.

To access and use the Services, Customer will create an EVALINK Account on EVALINK Site. Customer will only create one EVALINK Account and will access and use the Services via its EVALINK Account.

Via its EVALINK Account, Customer may elect to (i) use the Services to provide Customer’s services to End Users or to (ii) enable End Users to access or use the Services or Customer Content. Sitasys will have no relationship with End Users. Customer will enter into a contract directly with its End Users and Customer will be responsible for End Users’ access and use of the Services and Customer Content. Sitasys will not provide any training or support Services to End Users. 

Sitasys may delegate to a subcontractor a portion of its obligations to provide the Services to Customer under this Agreement (the “Subcontractor”). Sitasys will (a) impose appropriate contractual obligations upon its Subcontractors, and (b) be responsible if the acts or omissions of its Subcontractors cause Sitasys to breach any of its obligations under this Agreement. The use of Subcontractors will not release Sitasys from any of its obligations under this Agreement.

Sitasys will perform the Services in accordance with the service levels as set forth in the Service Level Agreement. Sitasys will provide sixty (60) days’ prior Notice to Customer before materially reducing the benefits offered to Customer under the Service Level Agreement. 

1.7 Training, Support, Professional Services

The Services do not include training, support, or professional services, except as expressly set in the Services Description. The support or training Services may be provided by Sitasys directly or by a partner appointed by Sitasys. The partner will provide the training or support Services as a Subcontractor and Sitasys will remain responsible for the support or training Services provided by the partner. Customer may purchase additional training, support and/or professional services, at additional costs, under a separate agreement entered by Customer with Sitasys or one of Sitasys’ partners. 

Sitasys will implement reasonable and appropriate security measures, including against accidental or unlawful loss, access, or disclosure of Customer Content, as described in the Security Policy. Sitasys will Notify the Customer at least when Sitasys modifies materially the Security Policy. If Customer’s access or use of the Services poses a security risk to the function of the Services, to Sitasys or to a third-party, Sitasys may suspend Customer’s right to access or use the Services providing a prior reasonable Notice except when immediate suspension is necessary to limit and/or contain the security risk. Upon resolution of the security risk, Sitasys will restore full access or use of the Services. Sitasys will not charge Fees for the suspended Services. 

Sitasys may only access, use or disclose Customer Content when, and to the extent, necessary to maintain or provide the Services, or as necessary to comply with the law or a binding order of a governmental or administrative body. When disclosure of Customer Content is necessary to comply with the law or a binding order of a governmental or administrative body, Sitasys will disclose Customer Content only to the extent compelled by law to do so and provided Sitasys gives Customer prior notice of the compelled disclosure (to the extent legally permitted) and, upon Customer’s reasonable request, commercially reasonable assistance, at the Customer’s cost, if the Customer wishes to contest the disclosure.

Sitasys log-in credentials are for Customer’s internal use only and Customer will ensure their confidentiality. Customer may not sell, transfer or sublicense them to any other entity or person, except that Customer may disclose its log-in credentials only to its agents and subcontractors performing work on behalf of Customer and only if such disclosure is strictly required for the performance of the work. Except to the extent caused by Sitasys’ breach of this Agreement, as between the parties, Customer is responsible for all activities that occur under its EVALINK Accounts.

Customer has a variety of options to choose from when configuring the Services via its EVALINK Account. Customer is responsible for properly (i) configuring its EVALINK Account, the Services (ii) selecting and configuring Elements.

3.3 Unauthorized Use or Access Notification

Customer will Notify without delay Sitasys of any unauthorized access to or use of the Services by Customer, an End User or a third-party.

In the contract that Customer enters with End Users, Customer will impose on End Users at least the same obligations than Customer has under this EVALINK Agreement (including, but not limited to, the obligation to comply with applicable laws and regulations, standards and obligations under the Acceptable Use Policy). Customer is sole responsible for End Users’ access and use of Customer Content, the Services, the Elements and Customer’s services.

Customer will pay to Sitasys the Fees for the Services as set forth in the Financial Terms. If Sitasys increases a Service Fee, Sitasys will provide sixty (60) days’ prior Notice.

Sitasys will invoice Customer at the end of each month for all applicable Fees accrued for use of the Service during the month. Customer will pay Sitasys invoiced amounts within thirty (30) days of the date of the invoice. Customer will pay Fees without setoff or counterclaim and without deduction or withholding.

Sitasys may charge Customer interest at the rate of 1.5% per month (or the highest rate permitted by law, whichever is less) on all late payments.

After providing Customer with a thirty (30) days’ prior Notice to pay an overdue amount, Sitasys may limit totally or partially Customer’s right to access or use the Services until full payment of the overdue amount is received by Sitasys.

This Section “Overdue Amounts” does not apply to amounts disputed in good faith by the Customer. Amounts disputed in good faith will be handled as per Section “Disputed Amounts”.

If the Customer disputes in good faith an invoice (partially or totally), Customer will Notify Sitasys the basis for the dispute and any supporting documentation (together “Dispute Basis”) within thirty (30) days of the date of the invoice, and the parties will meet to resolve the dispute within twenty (20) days as from receipt of the Dispute Basis. If the parties fail to resolve the dispute after the last meeting within the twenty (20) days period, and if Sitasys considers reasonably that there is no valid basis to the dispute, then, after providing a ten (10) days’ Notice, Sitasys may partially or totally limit Customer’s right to access or use the Services until the dispute is resolved.

As required under applicable law, each party will identify and pay all taxes and other governmental fees, charges, any penalties, interest, and other additions thereto, that are imposed on that party upon or with respect to the transactions and payments under this Agreement. All Fees payable by Customer are exclusive of Indirect Taxes. Sitasys may charge and Customer will pay applicable Indirect Taxes that Sitasys is legally obligated or authorized to collect from Customer. Customer will provide such information to Sitasys as reasonably required to determine whether Sitasys is obligated to collect Indirect Taxes from Customer. Sitasys will not collect, and Customer will not pay, any Indirect Tax for which Customer furnishes Sitasys a properly completed exemption certificate or a direct payment permit certificate for which Sitasys may claim an available exemption from such Indirect Tax. All payments made by Customer to Sitasys under this Agreement will be made free and clear of any deduction or withholding, as may be required by law. If any such deduction or withholding (including but not limited to cross-border withholding taxes) is required on any payment, Customer will pay such additional amounts as are necessary so that the net amount received by Sitasys is equal to the amount then due and payable under this Agreement. Sitasys will provide Customer with such tax forms as are reasonably requested in order to reduce or eliminate the amount of any withholding or deduction for taxes in respect of payments made under this Agreement.

If the parties have already entered into a nondisclosure agreement (“NDA”) prior to executing this Agreement and provided such NDA covers Confidential Information as defined in this Section below, then the NDA is incorporated by reference into this Agreement, except that the security provisions in Section “Security”, not the NDA, apply to Customer Content.

5.2 Definition of Confidential Information

“Confidential Information” means all information disclosed by a party (“Disclosing Party”) to the other party (“Receiving Party”), whether orally or in writing, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure. Confidential Information includes, without limitation nonpublic information relating to the Disclosing Party’s technology, products, services, promotional and marketing activities, processes, data, customers, business plans and methods, finances and other business affairs, third-party information that the Disclosing Party is obligated to keep confidential, and the nature, content and existence of business discussions, negotiations between the parties, the terms and conditions of this Agreement. Nonpublic information regarding Customer’s services is, without limitation, Customer’s Confidential Information. The Services and related Sitasys’ Contents, are, without limitation, Sitasys Confidential Information. 

Confidential Information does not include any information that (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party, (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party without breach of any obligation owed to the Disclosing Party, (iii) is received from a third-party without breach of any obligation owed to the Disclosing Party, or (iv) was independently developed by the Receiving Party.

5.4 Protection of Confidential Information

The Receiving Party will (i) not use any Confidential Information of the Disclosing Party for any purpose outside the scope of this Agreement and (ii) except as otherwise authorized by the Disclosing Party in writing, limit access to Confidential Information of the Disclosing Party to those of its employees, contractors, Subcontractors, legal counsel and accountants who need that access for purposes consistent with this Agreement and who have signed confidentiality agreements with the Receiving Party containing protections not materially less protective of the Confidential Information than those herein. Access by those employees, contractors, legal counsels, and accounts will be limited to the extent strictly required for the purposes consistent with this Agreement. 

The Receiving Party may disclose Confidential Information of the Disclosing Party to the extent compelled by law to do so, provided the Receiving Party gives the Disclosing Party prior notice of the compelled disclosure (to the extent legally permitted) and reasonable assistance, at the Disclosing Party's cost, if the Disclosing Party wishes to contest the disclosure.

Neither Sitasys nor Customer will issue any press release or make any other public communication with respect to this Agreement or Customer’s use of the Services without the other party express written consent.

The obligations set forth in this Section Confidentiality will remain in full force during the term of this Agreement and for a period of two years after its termination for any reasons.

Each party will comply with all privacy laws and regulations applicable to it and binding on it. When acting on behalf of Customer, Sitasys will process Customer’s personal data in accordance with the Data Processing Agreement accessible on EVALINK Site as it may be modified by Sitasys from time to time to address changes in privacy laws and regulations, in the Services (description or operational changes). Sitasys will provide a Notice to Customer of changes to the Data Processing Agreement. If Customer does not accept the modifications to the Data Processing Agreement, Customer will terminate the EVALINK Agreement in accordance with Section the “Termination” of the EVALINK Agreement. 

Customer is responsible for determining what personal data it submits to the Services and for ensuring that personal data collection and the processing instructions are compliant with applicable privacy laws and regulations (including, but not limited to, as it may be applicable, inform data subjects and obtain their consents, rely on a valid legal basis for the processing, comply with sensitive data processing rules). 

Processing of personal data for training and support Services, for billing and for contract and commercial relationship management, are described in the Sitasys’ policy on privacy and cookies that is available on EVALINK Site for information purposes and may be modified from time to time.

Customer grants Sitasys, and its Subcontractors, a worldwide license to host, copy, encrypt, transmit and display Customer Content as strictly necessary for the provision of the Services to the Customer in accordance with this Agreement. Subject to this limited license right required for Sitasys to provide the Services to Customer, as between Customer and Sitasys, Customer (or Customer’s licensors) owns and will continue to own all right, title, and interest including all related intellectual property rights, in and to Customer Content. Except as provided in this Agreement, Sitasys obtains no rights under this Agreement from Customer (or Customer’s licensors) to Customer Content.

Sitasys owns and will continue to own all right, title and interest, including all related intellectual property rights, in and to the Services and all related technology and Contents including, but not limited to, application program interfaces (API)s, WSDLs, sample code, software libraries, command line tools, proofs of concept, templates. Subject to the terms of this Agreement, Sitasys grants Customer a limited, revocable, worldwide, non-exclusive, non-sublicensable, non-transferrable license to access and use the Services and related technology and Contents solely in accordance with this Agreement and solely for Customer’s permitted use of the Services. The Fees set forth in this Agreement include the price of the Services license. Some limited parts of the Services or Sitasys’ Content may be provided under a separate open-source license as identified in the Services Description or directly in the notice file or on the download page. 

Neither Customer nor any End Users may use the Services or related Sitasys’ Content in any manner or for any purpose other than as expressly permitted by this Agreement. Neither Customer nor any End User may, or may attempt to (i) copy, modify, alter, repair, tamper with, create derivative works on the Services, any element, Content of the Services (including, but not limited to, features, functions, designs, code, architecture or graphs of the Services) or Sitasys’ Content, (ii) access or use the Services in a way intended to avoid incurring Fees, reduce Fees or exceeding usage limits or quotas, (iii) reverse engineer, disassemble, or decompile the Services or apply any other process or procedure to derive the source code of any software included in the Services or in Sitasys’ Content, or (iv) resell or sublicense the Services.

Customer acknowledges that any trademarks, Services marks (including, but not limited to, “evalink”), Services or trade names, logos, and other designations of Sitasys that Sitasys may make available to Customer in connection with this Agreement are trademarks of Sitasys, and no license to Sitasys’ trademarks is granted herein. Customer will not misrepresent or embellish the relationship between Sitasys and Customer nor imply any relationship or affiliation between Sitasys and Customer except as expressly permitted by this Agreement or a separate written agreement between the parties.

Customer may elect, at its sole discretion, to provide to Sitasys an improvement suggestion to the Services. If Customer elects to provide such improvement suggestion, then Customer grants to Sitasys, for the maximum duration permitted by applicable law, a royalty-free, worldwide, transferable, sub-licensable, license to use or incorporate into the Services such improvement suggestion.

Sitasys may collect and aggregate data derived from the operation of the Services provided that the data is completely anonymized (“Aggregated Data”), and Sitasys may use such Aggregated Data for purposes of operating and monitoring performance of the Services, and improvement of the Services.

Sitasys will defend Customer and its employees, officers, and directors against any third-party claim alleging that the Services infringe or misappropriate that third-party’s intellectual property rights and will pay the amount of any adverse final judgment or settlement. The obligations under this Section “Indemnification by Sitasys” will apply provided that Customer: (a) gives Sitasys Notice of the third-party claim promptly after receiving it (b) permits Sitasys to control the defense and settlement of the third-party claim; and (c) reasonably cooperates with Sitasys (at Sitasys’ expense) in the defense and settlement of the third-party claim. In no event will Sitasys agree to any settlement of any claim that involves any commitment, other than the payment of money, without the written consent of the other.

The obligations under this Section “Indemnification by Sitasys” will not apply to claims to the extent arising from (i) unauthorized modification of the Services or (ii) combinations of the Services with any other product, service, software, data, content, or method. 

For any claim covered by this Section “Indemnification by Sitasys”, when Sitasys becomes aware of such third-party claim, or Sitasys reasonably believes such a claim will occur, Sitasys may, at its sole option: (i) obtain for Customer the right to continue use of the portion of the Services alleged to be infringing; (ii) replace or modify the alleged infringing portion of the Services so that it is no longer alleged to be infringing; or, (iii) terminate the alleged portion of the Services or the Agreement.

The remedies provided in this Section “Indemnification by Sitasys” are the sole and exclusive remedies for third-party claims of infringement or misappropriation of intellectual property rights by the Services. 

Customer will defend Sitasys and its employees, officers, and directors against any third-party claim alleging that any Customer Content infringes or misappropriates such third-party’s intellectual property rights and will pay the amount of any adverse final judgment or settlement (“Third-Party IP Claim against Sitasys”). Customer will defend, indemnify and hold harmless Sitasys, and their respective employees, officers, directors, and representatives against any damages, losses, liabilities, costs and expenses (including reasonable attorneys’ fees) arising from or related to any third-party claim that arises from (i) a breach of this Agreement by Customer or End Users, or (ii) from any dispute between Customer and any End User (“Third-Party Breach or Dispute Claim against Sitasys”) (Third-Party IP Claim against Sitasys and Third-Party Breach or Dispute Claim against Sitasys together the “Third-Party Claims against Sitasys”). The obligations under this Section “Indemnification by Customer” will apply provided that Sitasys: (a) gives Customer Notice of the Third-Party Claims against Sitasys promptly after receiving it, (b) permits Customer to control the defense and settlement of the Third-Party Claims against Sitasys; and (c) reasonably cooperates with Customer (at Customer’s expense) in the defense and settlement of the Third-Party Claims against Sitasys. In no event will Customer agree to any settlement of any claim that involves any commitment, other than the payment of money, without the written consent of the other.

The remedies provided in this Section “Indemnification by Customer” are the sole and exclusive remedies for Third-Party Claims against Sitasys.

Sitasys represents and warrants to Customer that the Services will perform substantially in accordance with the Services Description.

Sitasys represents and warrants to Customer that it will perform this Agreement in compliance with all laws and regulations applicable to its performance of the Services.

Customer warrants and guarantees that Customer Content and Customer’s access and use of the Services and the Elements will be and remain compliant with the Agreement and any applicable laws, regulations, and standards. Without prejudice to any Sitasys’ rights and remedies under this Agreement, if Customer Content, Customer’s access or use of the Services or the Elements violates the Agreement or any applicable laws, regulation or standards and poses a liability, costs, exposure or security risk to the function of the Services or to Sitasys or to a third-party, then Sitasys may suspend, totally or partially, Customer’s right to access or use the Service providing a prior reasonable Notice except when immediate suspension is necessary to limit, contain the risk. Upon resolution of the risk, Sitasys will restore full access and use of the Services. Sitasys will not charge Fees for the suspended Services access or use.

Customer acknowledges that to access and use the Services, Customer must be a professional alarm and security expert. Customer warrants and guarantees that Customer’s access and use of the Services and the Elements will be and remain, at all times, compliant with applicable security and alarm industry state of the art and best practices related to Customer’s access and use of the Services.

Each party represents and warrants to the other that it has full power and authority to enter into and perform this Agreement.

EXCEPT AS EXPRESSLY SET FORTH IN SECTIONS 9.1 AND 9.3, AND EXCEPT TO THE EXTENT PROHIBITED BY LAW, SITASYS AND ITS LICENSORS MAKE NO REPRESENTATIONS OR WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY OR OTHERWISE, REGARDING THE SERVICES OR THE THIRD-PARTY ELEMENTS, AND DISCLAIM ALL OTHER WARRANTIES, INCLUDING ANY IMPLIED OR EXPRESS WARRANTIES (A) OF MERCHANTABILITY, SATISFACTORY QUALITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR QUIET ENJOYMENT, (B) ARISING OUT OF ANY COURSE OF DEALING OR USAGE OF TRADE, (C) THAT THE SERVICES OR THE THIRD-PARTY ELEMENTS WILL BE UNINTERRUPTED, ERROR FREE, OR FREE OF HARMFUL COMPONENTS, AND (D) THAT ANY ELEMENT OR CONTENT, INCLUDING, BUT NOT LIMITED TO, CUSTOMER CONTENT OR THIRD PARTY ELEMENT, WILL BE SECURE OR NOT OTHERWISE LOST OR DAMAGED. THIS SECTION 9.4 DOES NOT LIMIT SITASYS' EXPRESS OBLIGATIONS UNDER THIS AGREEMENT. 

EXCEPT FOR BREACH OF SECTION “SERVICES LICENSE” OR SECTION “TRADEMARKS” OR FOR PAYMENT OBLIGATIONS ARISING UNDER SECTION “INDEMINIFICATION BY CUSTOMER” FOR THIRD-PARTY BREACH OR DISPUTE CLAIM AGAINST SITASYS, NEITHER SITASYS NOR CUSTOMER, NOR ANY OF LICENSORS, WILL BE LIABLE TO THE OTHER UNDER ANY CAUSE OF ACTION OR THEORY OF LIABILITY, EVEN IF A PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, FOR LOSS OF PROFITS, REVENUES, CUSTOMERS, OPPORTUNITIES, OR GOODWILL, PROFESSIONAL ACTIVITY, BUSINESS INTERUPTION OR DISRUPTION, THE LOSS OF CUSTOMER CONTENT, INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL OR EXEMPLARY DAMAGES.

EXCEPT FOR (I) PAYMENT OBLIGATIONS ARISING UNDER SECTION “THIRD-PARTY CLAIMS” OR (II) BREACH OF SECTION “SERVICES LICENSE” OR SECTION “TRADEMARKS”, IN NO EVENT SHALL THE AGGREGATE LIABILITY OF EACH PARTY ARISING OUT OF OR RELATED TO THIS AGREEMENT EXCEED THE TOTAL AMOUNT PAID BY CUSTOMER FOR THE SERVICES GIVING RISE TO THE LIABILITY IN THE TWELVE (12) MONTHS PRECEDING THE FIRST INCIDENT OUT OF WHICH THE LIABILITY AROSE. THE FOREGOING LIMITATION WILL APPLY WHETHER AN ACTION IS IN CONTRACT OR TORT AND REGARDLESS OF THE THEORY OF LIABILITY BUT WILL NOT LIMIT CUSTOMER'S PAYMENT OBLIGATIONS UNDER THE SECTION “FEES AND PAYMENT”.

This Agreement commences on the Effective Date and will remain in effect until terminated pursuant to the terms of this Agreement.

Legal: The evalink Agreement, Privacy and Security Policy

Virtual TNA Receiver

The Virtual TNA Receiver manages and monitors incoming connections from Sitasys TNA alarm transmitters. It retrieves alarm- and technical messages coming from Sitasys TNA alarm transmitters. It supports sending downstream commands Sitasys TNA alarm transmitters.

Manage and monitor connections from Sitasys TNA alarm transmitters

Receiving alarm- and technical message from Sitasys TNA alarm transmitters

Send downstream commands to Sitasys TNA alarm transmitters.

The connectivity between the Sitasys TNA transmitter and TNA-receiver is the responsibility of the Customer.

"TNA" TNA is a range of transmitters developed by Sitasys that use a proprietary secure IP communication protocol.

evalink talos UI

The Service provides access to evalink talos for configuration and alarm management tasks. It is a web-based application that is accessed with a browser. It is mainly used for the following tasks:

The talos UI offers a role-based authorization system that allows administrators to restrict access of users by assigning different roles to them.

The talos UI provides visualization only, all data and processing are kept server-side.

The connectivity between the web browser is under the responsibility of the Customer.

The Service is billed by the hour when a user is successfully registered. Each hour started is due. The bill for the previous month is finalized at the beginning of each new month. Shortly after, the bill is charged to your selected payment method.

evalink talos AMS

The Alarm Management for Sites & Devices Service is used to process and manage alarms for Sites and Devices. Customer can choose to manage alarms with either manual or automated workflows that are triggered by incoming/processed alarms.

The Alarm Management for Sites & Devices Service stores and manages information about Devices and Sites.

The Alarm Management for Sites & Devices is used to create and store alarms. During the alarm creation, the alarm-service processes the alarm in accordance with the configuration made by the Customer.

The Alarm Management for Sites & Device stores and executes manual and automatic workflows, that are triggered by incoming/processed alarms. A workflow consists of so-called workflow steps, which are executed individually.

The Alarm Management for Sites & Device stores logging information about processed alarms, executed workflows, and user actions for a duration defined by the Customer.

The customer may choose to use Alarm Management for Sites & Device to forward alarms to 3rd party applications supporting one or multiple of the following protocols:

Security Policy

All candidates need to undergo an extensive security clearance. Further, we carefully assess all candidates in a multistage interview process.

During onboarding, all new employees go through general information security training, where they are made aware of their responsibilities and applicable policies and procedures that they need to follow. Further, they undergo in-depth training appropriate to their role.

With periodical training, we keep our employees updated regarding information security, policies, and procedures. The security clearance is re-assessed at regular intervals.

We established principles and tools for continuous improvement within our organization. We regularly practice various scenarios to make sure employees have all the skills and knowledge they need.

During regular assessments done by external advisors, we challenge our operational excellence, to improve it constantly.

With our microservices architecture, we follow principles of least privilege and shared nothing. All services are designed to have to authenticate against our central IAM, authorizing the service to perform the only designated actions.

All newly written code must be peer-reviewed ideally with multiple but at minimum one peer. Continuously extended checklists help to provide a general baseline for peer code review. This baseline ensures that the review includes checking for security and resiliency as well as complying with coding standards. Peer code review also ensures continuous sharing of knowledge between employees.

Before deploying our services to production, we run security and resiliency tests with both automated and manual testing. We test in realistic environments and with realistic load and data.

When code is pushed, it automatically triggers several pipelines to start testing on our staging system.

After peer review and testing, features are thoroughly checked by team leads and the CTO before they are considered for deployment.

After successfully passing testing and all review processes new code is ready for deployment. Even though fully automated, deployments to production can only be triggered by a small set of people with the necessary security clearance and expertise. We only do rolling deployments that we test for zero-downtime rollout.

We use a two-region setup with using at least 3 availability zones (AZs) in each region. We built this setup for resiliency. The data center at AWS are built to meet the highest industry standards.

We use AWS Global Accelerator to improve resiliency, availability and latency of our endpoints. Using AWS Global Accelerator traffic will take a direct route from the nearest available AWS edge location in the global AWS network. The AWS Global Accelerator endpoints are protected by default from Distributed Denial of Service (DDos) attackes with AWS Shield.

With cloud AMQP we use the RabbitMQ service. The Cloud AMQP clusters are connected to our VPCs (Virtual Private Cloud) using VPC pairing, which is designed to secure to the connection.

We use Auth0 for authentication and authorization.

Sitasys’ web endpoints enforce the use of TLS/SSLWe use AWS services designed to encrypt data in transit.

We use AWS services designed to encrypt data at rest.

All our systems are closely monitored and experts are on call-duty 24/7. Running anomaly detection on important KPIs, allow us to detect irregularities at an early stage. Together with continuous tests, automated failover and autoscaling most issues are solved before they become a problem and affect the Services.

We ensure the security of our software and Services by conducting penetration tests by renowned security external companies.

As off this security policy date, we are certified against ISO 9001 and ISO 27001

We use the AWS Well Architected Framework to continuously assess and improve our architecture, practices and processes. We regularly let AWS Well Architected partners review our implementation of the AWS Well Architected Framework.

This Security Policy makes an integral part of our EVALINK Agreement.

EVALINK Services List

Site management and storing alarms, executing manual or automated workflows based on trigger conditions.

User access to evalink talos UI, manual alarm management, configuration.

Description: Managing connections to, receiving alarms from, and sending downframes to SIA DC-09 alarm systems.

Description: Managing connections to, receiving alarms from, and sending downframes to Sitasys alarm transmitters.

evalink talos Virtual Vanderbilt SPC Receiver

Description: Managing connections and receiving alarms including audio/video data from Vanderbilt SPC panels. Sending down-stream messages to SPC panels.

Description: Managing connections to, receiving alarms from,
and sending downframes to VdS 2465-S2 and VdS SecurIP alarm systems.

Privacy Policy

When you open the EVALINK Site, our servers automatically record information that your browser sends. This data may include information such as your device's IP address, browser type and version, operating system type and version, language preferences or the webpage you were visiting before you came to the EVALINK Site and Services, pages of the EVALINK Site and Services that you visit, the time spent on those pages, information you search for on the EVALINK Site, access times and dates, and other statistics.

Information collected automatically is used only to identify potential cases of abuse and establish statistical information regarding the usage and traffic of the EVALINK Site and Services. This statistical information is not otherwise aggregated in such a way that would identify any particular EVALINK Account of the system.

You can access and use the EVALINK Site and Services without telling us who you are or revealing any information by which someone could identify you as a specific, identifiable individual. If, however, you wish to use some of the features on the EVALINK Site, you may be asked to provide certain Personal Information (for example, your name and e-mail address). We receive and store any information you knowingly provide to us when you create an EVALNK Account, make a purchase, or fill any online forms on the EVALINK Site. When required, this information may include the following:

Personal details such as name, country of residence, etc.

Contact information such as email address, address, etc.

Account details such as user name, unique user ID, password, etc.

Proof of identity such as photocopy of a government ID.

Payment information such as credit card details, bank details, etc.

Geolocation data such as latitude and longitude.

Information about other individuals such as your family members, friends, etc.

Any other materials you willingly submit to us such as articles, images, feedback, etc.

Some of the information we collect is directly from you via the EVALINK Site and Services. However, we may also collect Personal Information about you from other sources such as public databases, social media platforms, third-party data providers, and our joint marketing partners. Personal Information we collect from other sources may include demographic information, such as age and gender, device information, such as IP addresses, location, such as city and state, and online behavioral data, such as information about your use of social media websites, page view information and search results and links. You can choose not to provide us with your Personal Information, but then you may not be able to take advantage of some of the features on the EVALINK Site.

3. Use and processing of collected information

In order to make the EVALINK Site and Services available to you, or to meet a legal obligation, we need to collect and use certain Personal Information. If you do not provide the information that we request, we may not be able to provide you with the requested products or services. Any of the information we collect from you may be used for the following purposes:

Create and manage EVALINK Account and End User

Send marketing and promotional communications

Enforce terms and conditions and policies

Respond to legal requests and prevent harm

Run and operate the EVALINK Site and Services

Processing your Personal Information depends on how you interact with the EVALINK Site and Services, where you are located in the world and if one of the following applies: (i) you have given your consent for one or more specific purposes; this, however, does not apply, whenever the processing of Personal Information is subject to California Consumer Privacy Act or European data protection law; (ii) provision of information is necessary for the performance of an agreement with you and/or for any pre-contractual obligations thereof; (iii) processing is necessary for compliance with a legal obligation to which you are subject; (iv) processing is related to a task that is carried out in the public interest or in the exercise of official authority vested in us; (v) processing is necessary for the purposes of the legitimate interests pursued by us or by a third party.

Note that under some legislations we may be allowed to process information until you object to such processing (by opting out), without having to rely on consent or any other of the following legal bases below. In any case, we will be happy to clarify the specific legal basis that applies to the processing, and in particular whether the provision of Personal Information is a statutory or contractual requirement, or a requirement necessary to enter into a contract.

We use third party payment processors to assist us in processing your payment information securely. Such third party processors' use of your Personal Information is governed by their respective privacy policies which may or may not contain privacy protections as protective as this Policy. We suggest that you review their respective privacy policies.

You are able to delete certain Personal Information we have about you. The Personal Information you can delete may change as the EVALINK Site and Services change. When you delete Personal Information, however, we may maintain a copy of the unrevised Personal Information in our records for the duration necessary to comply with our obligations to our affiliates and partners, and for the purposes described below. If you would like to delete your Personal Information or permanently delete your EVALINK Account, you can do so on the settings page of your EVALINK Account on the EVALINK Site.

Depending on the requested Services or as necessary to complete any transaction or provide any service you have requested, we may contract with other companies and share your information with your consent with our trusted third parties that work with us, any other affiliates and subsidiaries we rely upon to assist in the operation of the EVALINK Site and Services available to you. We do not share Personal Information with unaffiliated third parties. These service providers are not authorized to use or disclose your information except as necessary to perform services on our behalf or comply with legal requirements. We may share your Personal Information for these purposes only with third parties whose privacy policies are consistent with ours or who agree to abide by our policies with respect to Personal Information. These third parties are given Personal Information they need only in order to perform their designated functions, and we do not authorize them to use or disclose Personal Information for their own marketing or other purposes.

We will disclose any Personal Information we collect, use or receive if required or permitted by law, such as to comply with a subpoena, or similar legal process, and when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.

In the event we go through a business transition, such as a merger or acquisition by another company, or sale of all or a portion of its assets, your EVALINK Account, and Personal Information will likely be among the assets transferred.

We will retain and use your Personal Information for the period necessary to comply with our legal obligations, resolve disputes, and enforce our agreements unless a longer retention period is required or permitted by law. We may use any aggregated data derived from or incorporating your Personal Information after you update or delete it, but not in a manner that would identify you personally. Once the retention period expires, Personal Information shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after the expiration of the retention period.

Depending on your location, data transfers may involve transferring and storing your information in a country other than your own. You are entitled to learn about the legal basis of information transfers to a country outside the European Union or to any international organization governed by public international law or set up by two or more countries, such as the UN, and about the security measures taken by us to safeguard your information. If any such transfer takes place, you can find out more by checking the relevant sections of this Policy or inquire with us using the information provided in the contact section.

You may exercise certain rights regarding your information processed by us. In particular, you have the right to do the following: (i) you have the right to withdraw consent where you have previously given your consent to the processing of your information; (ii) you have the right to object to the processing of your information if the processing is carried out on a legal basis other than consent; (iii) you have the right to learn if information is being processed by us, obtain disclosure regarding certain aspects of the processing and obtain a copy of the information undergoing processing; (iv) you have the right to verify the accuracy of your information and ask for it to be updated or corrected; (v) you have the right, under certain circumstances, to restrict the processing of your information, in which case, we will not process your information for any purpose other than storing it; (vi) you have the right, under certain circumstances, to obtain the erasure of your Personal Information from us; (vii) you have the right to receive your information in a structured, commonly used and machine readable format and, if technically feasible, to have it transmitted to another controller without any hindrance. This provision is applicable provided that your information is processed by automated means and that the processing is based on your consent, on a contract which you are part of or on pre-contractual obligations thereof.

Where Personal Information is processed for the public interest, in the exercise of an official authority vested in us or for the purposes of the legitimate interests pursued by us, you may object to such processing by providing a ground related to your particular situation to justify the objection. You must know that, however, should your Personal Information be processed for direct marketing purposes, you can object to that processing at any time without providing any justification. To learn, whether we are processing Personal Information for direct marketing purposes, you may refer to the relevant sections of this document.

If you are a resident of the European Economic Area (EEA), you have certain data protection rights and Sitasys aims to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Information. If you wish to be informed what Personal Information we hold about you and if you want it to be removed from our systems, please contact us. In certain circumstances, you have the following data protection rights:

You have the right to request access to your Personal Information that we store and have the ability to access your Personal Information.

You have the right to request that we correct any Personal Information you believe is inaccurate. You also have the right to request us to complete the Personal Information you believe is incomplete.

You have the right to request the erase your Personal Information under certain conditions of this Policy.

You have the right to object to our processing of your Personal Information.

You have the right to seek restrictions on the processing of your Personal Information. When you restrict the processing of your Personal Information, we may store it but will not process it further.

You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.

You also have the right to withdraw your consent at any time where Sitasys relied on your consent to process your Personal Information.

You have the right to complain to a Data Protection Authority about our collection and use of your Personal Information. For more information, please contact your local data protection authority in the European Economic Area (EEA).

In addition to the rights as explained in this Policy, California residents who provide Personal Information (as defined in the statute) to obtain products or services for personal, family, or household use are entitled to request and obtain from us, once a calendar year, information about the Personal Information we shared, if any, with other businesses for marketing uses. If applicable, this information would include the categories of Personal Information and the names and addresses of those businesses with which we shared such personal information for the immediately prior calendar year (e.g., requests made in the current year will receive information about the prior year). To obtain this information please contact us.

Any requests to exercise your rights can be directed to Sitasys through the contact details provided in this  document. Please note that we may ask you to verify your identity before responding to such requests. Your request must provide sufficient information that allows us to verify that you are the person you are claiming to be or that you are the authorized representative of such person. You must include sufficient details to allow us to properly understand the request and respond to it. We cannot respond to your request or provide you with Personal Information unless we first verify your identity or authority to make such a request and confirm that the Personal Information relates to you.

We do not knowingly collect any Personal Information from children under the age of 18. If you are under the age of 18, please do not submit any Personal Information through the EVALINK Site and Services. We encourage parents and legal guardians to monitor their children's Internet usage and to help enforce this Policy by instructing their children never to provide Personal Information through the EVALINK Site and Services without their permission. If you have reason to believe that a child under the age of 18 has provided Personal Information to us through the EVALINK Site and Services, please contact us. You must also be at least 16 years of age to consent to the processing of your Personal Information in your country (in some countries we may allow your parent or guardian to do so on your behalf).

The EVALINK Site and Services use "cookies" to help personalize your online experience. A cookie is a text file that is placed on your hard disk by a web page server. Cookies cannot be used to run programs or deliver viruses to your computer. Cookies are uniquely assigned to you, and can only be read by a web server in the domain that issued the cookie to you.

We may use cookies to collect, store, and track information for statistical purposes to operate the EVALINK Site and Services. You have the ability to accept or decline cookies. Most web browsers automatically accept cookies, but you can usually modify your browser setting to decline cookies if you prefer. If you choose to decline cookies, you will not be able to use and experience the features of the EVALINK Site and Services. To learn more about cookies and how to manage them, visit internetcookies.org

Some browsers incorporate a Do Not Track feature that signals to websites you visit that you do not want to have your online activity tracked. Tracking is not the same as using or collecting information in connection with a website. For these purposes, tracking refers to collecting personally identifiable information from consumers who use or visit a website or online service as they move across different websites over time. How browsers communicate the Do Not Track signal is not yet uniform. As a result, the EVALINK Site and Services are not yet set up to interpret or respond to Do Not Track signals communicated by your browser. Even so, as described in more detail throughout this Policy, we limit our use and collection of your personal information.

We may permit certain third party companies to help us tailor advertising that we think may be of interest to End User and to collect and use other data about user activities on the EVALINK Site. These companies may deliver ads that might place cookies and otherwise track End User behavior.

We may disclose information about you to our affiliates for the purpose of being able to offer you related or additional products and services. Any information relating to you that we provide to our affiliates will be treated by those affiliates in accordance with the terms of this Policy.

We offer electronic newsletters to which you may voluntarily subscribe at any time. We are committed to keeping your e-mail address confidential and will not disclose your email address to any third parties except as allowed in the information use and processing section or for the purposes of utilizing a third party provider to send such emails. We will maintain the information sent via e-mail in accordance with applicable laws and regulations.

In compliance with the CAN-SPAM Act, all e-mails sent from us will clearly state who the e-mail is from and provide clear information on how to contact the sender. You may choose to stop receiving our newsletter or marketing emails by following the unsubscribe instructions included in these emails or by contacting us. However, you will continue to receive essential transactional emails.

The EVALINK Site and Services contain links to other resources that are not owned or controlled by us. Please be aware that we are not responsible for the privacy practices of such other resources or third parties. We encourage you to be aware when you leave the EVALINK Site and Services and to read the privacy statements of each and every resource that may collect Personal Information.

We secure information you provide on computer servers in a controlled, secure environment, protected from unauthorized access, use, or disclosure. We maintain reasonable administrative, technical, and physical safeguards in an effort to protect against unauthorized access, use, modification, and disclosure of Personal Information in its control and custody. However, no data transmission over the Internet or wireless network can be guaranteed. Therefore, while we strive to protect your Personal Information, you acknowledge that (i) there are security and privacy limitations of the Internet which are beyond our control; (ii) the security, integrity, and privacy of any and all information and data exchanged between you and the EVALINK Site and Services cannot be guaranteed; and (iii) any such information and data may be viewed or tampered with in transit by a third party, despite best efforts. 

In the event we become aware that the security of the EVALINK Site and Services has been compromised or End User Personal Information has been disclosed to unrelated third parties as a result of external activity, including, but not limited to, security attacks or fraud, we reserve the right to take reasonably appropriate measures, including, but not limited to, investigation and reporting, as well as notification to and cooperation with law enforcement authorities. In the event of a data breach, we will make reasonable efforts to notify affected individuals if we believe that there is a reasonable risk of harm to the End User as a result of the breach or if notice is otherwise required by law. When we do, we will send you an email.

This Privacy Policy makes an integral part of our EVALINK Agreement.

Data Processing Agreement

This Data Processing Agreement (“DPA”) entered into by and between Customer and SITASYS AG, a Swiss société anonyme, with its principal place of business at Industriestrasse 6 4513 Langendorf SO (“Sitasys”) supplements the agreement between Customer and Sitasys governing Customer’s use of the Services (the “Agreement”) when the GDPR applies to Customer’s processing of Customer Data using/via the Services. This DPA is integrated by reference in the Agreement.

The parties agree that all terms that begins with a capital letter have the meaning ascribed to them in the Agreement or in this DPA.

Customer may process Customer Data as a Controller or as a Processor. Sitasys will process Customer Data as a Processor to Customer when Customer acts as a Controller and Sitasys will process Customer Data as a sub-processor to Controller when Customer acts as a Processor.

Sitasys processes Customer Data as a Controller for the training and support Services. Thus, the DPA does not apply to the processing of Customer Data for the training and support Services.

Each party will comply with all laws and regulations applicable to it and binding on it in the performance of this DPA, including the GDPR. Sitasys does not determine whether Customer Data includes Special Category of Personal Data or information subject to any specific law or regulation. Customer is responsible for determining whether the Services are appropriate for storage and processing of Special Category of Personal Data or information subject to any specific law or regulation and for using the Services in a manner consistent with Customer’s legal and regulatory obligations.

2.1. Sitasys will process Customer Data only on documented instructions from Customer. Customer agrees that this DPA, the Agreement and the provision of instructions via the EVALINK Account, use of the Services, configuration tools and APIs made available by Sitasys constitute Customer’s documented instructions regarding Sitasys’ processing of Customer Data (“Documented Instructions”).

2.2. When Customer acts as a Processor, Customer warrants to Sitasys that Customer's Documented Instructions, including appointment of Sitasys as a sub-processor, have been authorized by the relevant Controller.

2.3. Customer may request a change to the Documented Instructions or new additional instructions. Requested change or addition to the Documented Instruction require the parties to agree in writing to such change or addition and to the associated additional fees payable by Customer to Sitasys for implementing agreed change or addition. If Sitasys does not agree to a change or addition to the Documented Instructions requested by Customer or if the parties do not agree on the associated fees, then Customer is entitled to terminate this DPA and the Agreement in accordance with Section Termination of the Agreement.

The subject-matter of the processing is limited to Customer Data;

The duration of the processing is determined by the Customer via its EVALINK Account and will not exceed the duration of the Agreement (except as may be required by applicable law);

The purpose of the processing is to provide the Services pursuant to the Agreement;

The types of Personal Data processed by Sitasys while providing the Services are the types of Personal Data that the Customer elects to include in Customer Data.

The categories of data subjects may include Customer and End-Users such as Customer’s or End User’s employees, contractors, suppliers, and customers.

4.1. Sitasys will only process, or disclose to a third party, Customer Data, as necessary to (i) provide or maintain the Services, or (ii) comply with the law or a valid and binding order of a governmental body.

4.2. Sitasys will disclose Customer Data only to the extent compelled by law or a governmental body to do so. Sitasys will provide Customer a prior Notice of the compelled disclosure (to the extent legally permitted) and commercially reasonable assistance, at Customer's cost, if Customer wishes to contest the disclosure request.

4.3. Sitasys imposes appropriate contractual confidentiality obligations upon its personnel authorized to process Customer Data.

In a manner consistent with the nature, functionality of the Services, Sitasys will make available to Customer, features, functionalities to assist Customer to the fulfilment of Customer’s obligation to respond to data subject requests to exercise their rights under the GDPR. If a data subject contacts Sitasys to exercise its rights under chapiter III of the GDPR, Sitasys will forward such requests to Customer, or redirect the data subject to the Customer.

6.1. Sitasys may engage sub-processor(s) for carrying out processing activities on Customer Data on behalf of Customer (“Sub-processor(s)”). Sitasys provides a list of the Sub-processors on the EVALINK Site (“Sub-processors List”). Customer authorizes Sitasys to subcontract the processing of Customer Data to the Sub-processors in accordance with this DPA.

6.2. From time to time, Sitasys may engage new Sub-processors, Sitasys will update the Sub-processors List and Notify Customer of that update at least ninety (90) days before Sitasys provides new Sub-processors with access to Customer Data. If Customer objects to a new Sub-processor, then Customer may terminate the Agreement in accordance with Section Termination of the Agreement.

6.3. Sitasys will restrict Sub-processors’ access to Customer Data only to what is necessary to provide or maintain the Services to Customer in accordance with the Agreement and Sitasys will prohibit Sub-processors from accessing Customer Data for any other purpose. Sitasys will enter into a written agreement with Sub-processors and will impose on the Sub-processors at least the level of Customer Data protection required of Sitasys by the DPA.

6.4. Sitasys will remain responsible for its compliance with the obligations of this DPA and for any acts or omissions of the Sub-processors that cause Sitasys to breach any of Sitasys’ obligations under this DPA.

Sitasys will implement technical and organizational measures against accidental or unlawful loss, access, or disclosure of Customer Data, as described in the Security Policy to the Agreement and Section Security of the Agreement.

Customer will only provide Customer Data to Sitasys when Customer determines that the technical and organizational measures implemented by Sitasys provide a level of security appropriate to the risk with respect to Customer Data.

8.1. Upon request, Sitasys will make available to Customer information to demonstrate Sitasys’ compliance with the obligations set forth in this Agreement.

1. Features & Capabilities

General

Device & Site Management

Alarm Processing

Workflow Processing

Logging

Alarm Forwarding