Disclaimer

1. General information only

The content of this website describes our company, services, products and research in general terms. It is written for a broad professional audience and does not take account of any particular organization, system or circumstance.

2. No professional advice

Nothing on this website is security, technical, legal, regulatory, financial or other professional advice. Articles and guides in Resources and material from Security Labs are published for information. Test any technique, configuration or recommendation in your own environment, under your own change controls, before relying on it.

Descriptions of laws, regulations and standards are summaries. They are not legal opinions. Take advice from qualified counsel on how a law applies to you.

3. No client relationship

Using this website, sending an enquiry or receiving a reply does not create a client, advisory or fiduciary relationship with Onion Infosec. A relationship begins only when both parties sign a written agreement. Please do not send confidential information until a non-disclosure agreement is in place.

4. Forward-looking product statements

Statements about products in development or in research describe our current intent. They are not commitments, and they are not a promise of any feature, release or date. Plans may change or stop. Interface visuals for these products are design concepts. See Products for the current status of each product.

5. Third-party names and trademarks

Product names, company names, logos and trademarks of other organizations that appear on this website belong to their owners. We name a technology only to describe the kind of work we do with it. Naming a technology or vendor does not mean that we are a partner, reseller or authorized representative of that vendor, or that the vendor endorses or sponsors us.

6. Frameworks and standards

This website names frameworks, standards and regulations such as ISO/IEC 27001, SOC 2, NIST CSF, IEC 62443, PCI DSS and the GDPR. We name them to describe work we carry out for clients, such as assessments, readiness work and audit support.

Naming a framework does not mean that Onion Infosec is certified, accredited, attested or empanelled under it. It does not mean that we can certify a client, and it does not guarantee that a client will achieve certification or compliance.

Professional certifications mentioned on this website are held by members of our team as individuals. They are not company accreditations.

7. Accuracy and availability

We take care to keep the website accurate and current, but we do not warrant that it is complete, correct or up to date. Content may change or be removed without notice. We do not warrant that the website will be available at all times or free of errors.

To the extent the law permits, we accept no liability for loss arising from reliance on the content of this website. See the Terms of Use.

8. Corrections and contact

If you believe something on this website is inaccurate, or that it uses your trademark incorrectly, tell us at legal@onioninfosec.com or through the contact page. We will review it.