Website terms & engagement terms

These terms cover two things: your use of talltree.tech, and a summary of how our services are sold. They are published by Software Systems Limited, trading as TallTree® Technologies (“we”, “us”) — Company No. 14466340, registered in England & Wales. Registered office: 7 Bell Yard, London WC2A 2JR, United Kingdom. VAT GB 456838449.

Using this website

• Information, not advice — and no liability for it. The content on this site is general information about firmware security regulation and about our services. It is provided as-is, without warranty of any kind, and we accept no liability for reliance on website content — it is not legal, compliance, or engineering advice for your specific product. The only advice we stand behind is advice given directly as part of a signed engagement; even then, website content remains general information outside that engagement’s scope and liability.
• The content is ours. Everything on this site is © Software Systems Limited unless otherwise stated. You are welcome to link to any page. You may not scrape, republish, or reproduce the content without our written permission.
• Third-party services. Some links lead to services run by others — Stripe’s checkout pages, Google Calendar’s booking pages. Those services operate under their own terms and policies, and we are not responsible for them.
• Changes. We may update these terms from time to time. The date at the foot of this page shows when they last changed.

How engagements are sold

The website describes two kinds of work:

• Productised offers — fixed scope, posted prices: a free sample report (requested by form), the Readiness Snapshot (£950 + VAT, one-off), and the Firmware Readiness Review (£9,500 + VAT, fixed scope, 10 working days).
• Bespoke engagements — Gather, Build, and Retainer — scoped and quoted in writing, per engagement.

Every paid engagement is governed by a signed proposal or Statement of Work and, where one exists, a master services agreement. If those documents differ from this page, they prevail. This page is a summary, not the contract.

Prices and payment

• All prices exclude VAT, which is added where applicable.
• The Readiness Snapshot is paid online at purchase, via a Stripe Payment Link on Stripe’s own checkout pages.
• All other engagements are invoiced as set out in the signed proposal.
• Credits. The Snapshot fee is credited in full toward a Firmware Readiness Review started within 90 days. The Review fee is credited toward the next engagement started within 90 days: in full against a project engagement (Evidence Gathering or Technical File Build); against the Evidence Retainer as a discount of up to 20% of each monthly fee until the credit is used up — the retainer’s six-month minimum term and monthly invoicing are unaffected. Credits are not transferable and have no cash value.
• Refunds (priced offers). The Snapshot is refundable in full any time before we begin work (we confirm the start by email); once research has begun it is non-refundable — it is a fixed-scope desk study, and the credit above still applies. If we find the public surface too thin to produce a useful Snapshot, we will say so and refund in full. The Readiness Review is refundable in full before kickoff, 50% after kickoff but before draft delivery, and non-refundable from draft delivery. Bespoke engagements are governed by their signed contracts, not this page.
• What the Snapshot is — and is not. The Readiness Snapshot is built entirely from public information: no access to your code, hardware or systems, no scanning of your infrastructure, and — unless you ask for the optional 30-minute readout — it can complete with no call at all. Its deliverable is the ranked findings summary described at purchase; it is a first read, not an audit, certification or substitute for a Readiness Review.

Confidentiality and access

• NDA before access. We sign a non-disclosure agreement before any access to your code, hardware, or internal documents.
• Confidential by default. We never name a client, or describe an engagement in a way that could identify one, without written consent.

What we do — and what we do not

We provide technical assessment, evidence, and advisory services. We do not provide certification, we do not provide legal advice, and we do not guarantee regulatory approval or the absence of vulnerabilities — no honest review can. Compliance decisions, and the decision to place a product on the market, remain your responsibility.

Liability

Our total liability arising out of an engagement is capped at the fees paid for the engagement giving rise to the claim. We are not liable for indirect or consequential loss, including loss of profit or business. Nothing in these terms excludes or limits any liability that cannot lawfully be excluded or limited — including liability for death or personal injury caused by negligence, or for fraud. A signed proposal or master agreement may set different limits; where it does, it prevails.

Governing law

These terms, and any dispute arising out of them or out of your use of this website, are governed by the law of England and Wales. The courts of England and Wales have exclusive jurisdiction.

Privacy

How we handle personal data collected through this site is described in the privacy notice. What the site stores in your browser is itemised on the cookies & website storage page.

Contact

Questions about these terms: info@talltree.tech

Software Systems Limited, 7 Bell Yard, London WC2A 2JR, United Kingdom · Company No. 14466340 (England & Wales) · VAT GB 456838449.