Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Aussie Cyber platform operated by DJC Systems Pty Ltd (ABN 50 007 440 191), trading as Aussie Cyber ("Aussie Cyber", "we", "us", "our").

By signing up for or using the platform, the subscribing organisation ("Customer") agrees to these Terms on behalf of itself and all users it adds to the platform. If you do not agree, do not use the platform.

These Terms are governed by the laws of New South Wales, Australia. Any disputes are subject to the exclusive jurisdiction of the courts of New South Wales.

Aussie Cyber provides a cybersecurity SaaS platform for Australian small and medium businesses, which may include:

• Security Awareness Training (SAT) — video-based training modules and quizzes hosted on Cloudflare Stream.
• Phishing Simulations — simulated phishing campaigns to assess and improve user awareness.
• Endpoint Protection — Aussie Cyber Endpoint Manager deployment, threat detection, and patch management.
• Identity Protection — Aussie Cyber Identity Protection connected to Microsoft 365.
• Policy Library — downloadable SMB1001-aligned policy templates.
• SMB1001 Certification — guidance, controls and evidence preparation to help you achieve SMB1001 certification, which is issued by the accredited certification authority.

The modules available to your organisation depend on your subscription plan.

By subscribing to a plan that includes phishing simulations, the Customer expressly acknowledges and agrees that:

• Aussie Cyber will send simulated phishing emails to users within the Customer's organisation as part of the service.
• Individual users will not receive prior notice of specific simulations. This is a necessary and standard component of effective security awareness testing.
• The Customer is responsible for ensuring its use of phishing simulations complies with all applicable Australian laws, including any relevant workplace legislation and employment agreements.
• Simulation results are used solely for security awareness and training purposes and must not be used as grounds for disciplinary action without independent legal advice.

Credential handling: Aussie Cyber's phishing simulations never capture, store, or process actual credential values. If a simulated login form is presented, only a boolean flag (attempted: yes/no) is recorded. This is a platform-level architectural guarantee.

The platform uses Microsoft 365 OAuth exclusively for authentication. Aussie Cyber does not support password-based login and does not store passwords under any circumstances.

You are responsible for maintaining the security of your Microsoft 365 account and for any activity that occurs under your account. Notify us immediately at enquiries@djc.com.au if you suspect unauthorised access.

Subscriptions are priced per user per month and sold on a 12-month agreement. You may choose to pay annually (in advance) or monthly across the term. All prices are in Australian dollars and exclusive of GST unless stated otherwise.

Per-device services: Endpoint protection, managed patching and the web filter are charged per device. The per-user headline assumes one device per user; where the number of protected devices exceeds the number of licensed users, the additional devices are charged at the same per-seat rate.

Certification fees: SMB1001 certification plans include an annual certificate fee, charged per organisation (not per user) and payable to the certifying authority via Aussie Cyber. Certification at higher levels may also require an external audit, quoted separately. These fees are shown before you commit.

Subscription fees are invoiced in advance. You authorise Aussie Cyber to charge your nominated payment method on the billing date.

90-day money-back guarantee: If you are not satisfied within 90 days of your subscription start date, you may request a full refund of the subscription fees you have paid to that date, and your agreement will be cancelled. Third-party certificate and audit fees already incurred are non-refundable. This guarantee is in addition to your rights under the Australian Consumer Law.

We bill in advance so that service is never delivered unpaid. If a scheduled payment fails, we notify you and retry over the days before the paid period ends, with reminders of increasing firmness. Your service continues throughout this period because it is already paid for.

If payment is still outstanding when the paid period expires, portal access and service delivery are suspended until payment is made. If the account remains unpaid after suspension, it moves to pending cancellation and then to cancellation, at which point endpoint and identity protection removal is queued and a data retention notice is issued. You may restore your account at any time before cancellation by updating your payment method.

Suspension for non-payment does not end your 12-month agreement or any amounts owing under it.

All security awareness training videos, quiz content, and course materials made available through the platform are the intellectual property of DJC Systems Pty Ltd t/a Aussie Cyber. You may not reproduce, distribute, or make them publicly accessible outside the platform.

Policy templates provided through the Policy Library may be downloaded and customised for internal use within your organisation. They may not be resold or distributed as your own work.

You retain ownership of your organisational data (user records, training results, endpoint data) and may export it at any time via the platform.

Aussie Cyber helps customers prepare for and achieve SMB1001 certification. Aussie Cyber is not the issuing certification authority; certification is issued by the accredited body under the SMB1001 standard. Guidance and evidence preparation are provided by Aussie Cyber personnel.

SMB1001 certification is issued by CyberCert, the certifying body for the standard in Australia, under the SMB1001 standard published by Dynamic Standards International (DSI). The certificate, its validity period (typically 12 months), and the assessment criteria are set by the certifying body and the standard, not by Aussie Cyber.

Aussie Cyber's role is to help you reach and maintain certification — implementing the required controls, preparing evidence, and guiding you through the process. Aussie Cyber does not issue, award, or withdraw certification, and cannot guarantee a certification outcome, which is determined by the certifying body.

You agree not to use the platform to:

• Conduct unauthorised phishing or social engineering attacks against parties outside your organisation.
• Attempt to access data belonging to other tenants or customers of the platform.
• Reverse engineer, decompile, or attempt to extract the source code of the platform.
• Use the platform in violation of any applicable Australian law or regulation.
• Circumvent, disable, or interfere with security features of the platform.

See our Acceptable Use Policy for full details.

To the maximum extent permitted by Australian law, Aussie Cyber's total liability to you for any claim arising out of or in connection with these Terms or the platform shall not exceed the fees paid by you in the 12 months preceding the claim.

Aussie Cyber is not liable for indirect, incidental, special, or consequential damages, including loss of data, loss of revenue, or business interruption.

Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded under Australian Consumer Law.

Subscriptions are sold on a 12-month agreement. Within the first 90 days you may cancel under our money-back guarantee (see Subscriptions and billing). After the guarantee period, the agreement runs for its 12-month term; you may choose not to renew at the end of the term, and cancellation takes effect at the end of the paid period. Refunds are not provided for unused portions of a paid period outside the money-back guarantee, except where required by the Australian Consumer Law.

Aussie Cyber may suspend or terminate your access immediately if you breach these Terms, fail to pay, or engage in conduct that we reasonably believe poses a risk to other customers or the platform.

On termination, your data will be retained for 90 days before deletion. You may export your data during this period.

We may update these Terms from time to time. We will provide at least 30 days' notice of material changes via email. Continued use of the platform after the effective date of changes constitutes acceptance.

For questions about these Terms, contact DJC Systems Pty Ltd t/a Aussie Cyber (ABN 50 007 440 191) at enquiries@djc.com.au.