Nexren Shield1Parties, Definitions & Agreement Execution
Provider Identity
This Enterprise Service Agreement and Terms of Service ("Agreement" or "Terms") is entered into by and between Nexren Shield Bilişim Teknolojileri A.Ş. ("Nexren Shield" or "Provider"), headquartered in the Republic of Turkey, and the Customer.
Customer / User Definition
Refers to any natural or legal person ("Customer" or "User") who creates an account, provisions API keys, configures DNS records, or utilizes the cyber defense services provided by Nexren Shield.
Execution & Electronic Assent
By creating an account, onboarding a domain name, generating API credentials, or routing network traffic through Nexren Shield, the Customer irrevocably accepts all terms and provisions of this Agreement.
Authority & Capacity
If acting on behalf of a legal entity, the individual represents and warrants full corporate authority to bind said entity. Natural persons declare that they are of legal majority and possess full civil capacity.
2Description & Scope of Services
Autonomous Cyber Defense
Nexren Shield provides reverse proxy routing, Web Application Firewall (WAF), L4/L7 volumetric DDoS attack mitigation, automated SSL/TLS provisioning, and Zero Trust access management for web apps and APIs.
Cloud-Native Operations
Services are delivered from our server infrastructure hosted in Turkey using automated filtering rules and heuristic threat analysis, without requiring on-premises hardware or software installation.
Threat Intelligence & Continuous Updates
Platform filtering rules and security engines are continuously and dynamically updated to counter evolving cyber threats without requiring client-side configuration changes.
3Account Security & Customer Obligations
Confidentiality of Credentials & API Keys
The Customer holds sole responsibility for safeguarding administrative passwords, API keys, and authentication tokens. All activities originating under Customer credentials are presumed authorized.
Multi-Factor Authentication
Enabling multi-factor authentication (2FA/TOTP) across administrative consoles is strongly recommended to minimize unauthorized access risks.
Accuracy of Contact Information
The Customer is required to maintain accurate, up-to-date administrative and billing contact records and promptly notify the Provider of any modifications.
4Network Traffic Capacity, ISP Routing & Force Majeure
Network Capacity & Upstream Carrier Limits
The Nexren Shield service runs on single-region server infrastructure hosted in a data center in Turkey and reaches the internet through the hosting provider's network uplink; data transmission is subject to the physical capacity limits of that uplink and of upstream carrier links.
Extreme Volumetric Pipe Saturation
The Provider shall not be held liable for packet loss or temporary degradation resulting from catastrophic volumetric attacks exceeding upstream carrier link capacities.
Independent ISP & Datacenter Route Protections
Emergency routing or filtering protocols independently enforced by third-party transit operators to preserve overall internet backbone stability remain outside the Provider's direct control.
Force Majeure under Statutory Law
Pursuant to statutory force majeure principles, major international fiber ruptures, telecommunication backbone outages, and extreme network saturation constitute objective force majeure, precluding any claim for damages.
Network Integrity & Autonomous Mitigation
To preserve shared network availability and overall infrastructure integrity, automated defensive isolation protocols may be applied to domains subject to extraordinary traffic spikes.
5Origin Server Hardening & Bypass Disclaimer
Responsibility for Origin Server Isolation Rests Solely with the Customer
Nexren Shield functions as a reverse proxy shield. If the origin server IP address is exposed to public routing or bypassed directly by malicious actors, protective WAF and DDoS filtering cannot be applied. The Customer remains solely responsible for configuring firewall rules to restrict inbound web traffic exclusively to the authorized Nexren Shield address.
Confidentiality of Origin IP
Keeping backend host IP addresses unexposed to public discovery and restricting public ingress is entirely the technical responsibility of the Customer.
Disclaimer for Direct Origin Bypass
When traffic circumvents protective proxy edge layers and targets the backend server directly, mitigation rules cannot execute; the Provider disclaims all liability for resulting downtime.
Firewall Hardening & Origin Protection Scripts
The Customer is advised to utilize official origin isolation scripts and configuration directives to restrict backend firewall ingress strictly to verified shield IP ranges.
Backend Resource Exhaustion & Origin Timeouts
HTTP 502/504 gateway timeout errors caused by origin server resource depletion, unoptimized database queries, or server stalls represent Customer infrastructure constraints and do not constitute shield outages.
6Security Configurations & Application Vulnerabilities
Zero-Day Vulnerabilities
The Provider cannot guarantee preemptive prevention of previously unknown zero-day exploits prior to the discovery and release of threat intelligence signatures.
Application Logic & Architecture Flaws
Flaws within Customer application source code, business logic loopholes, and insecure direct object references remain exclusively within the Customer's maintenance remit.
Misconfigured Rules & Overly Permissive Allowlisting
The Provider bears no liability for security incidents caused by the Customer intentionally or erroneously disabling WAF security filters or configuring overly permissive IP bypass rules.
7Acceptable Use Policy (AUP) & Prohibited Activities
Phishing, Spoofing & Brand Impersonation
Deploying credential harvesting pages, deceptive financial clones, or domain spoofing impersonating financial institutions or commercial entities is strictly prohibited.
Malware Distribution & Botnet C2
Distributing ransomware, trojans, rootkits, or hosting command-and-control (C2) infrastructure for malicious botnets will result in immediate termination without notice.
Unauthorized Cyber Attacks & Network Probes
Operating stresser/booter attack services, orchestrating cyber attacks against external targets, or conducting unauthorized network probing is strictly disallowed.
Unlawful & Exploitative Material
Child sexual abuse material (CSAM), terrorist propaganda, violent extremism, and related criminal content are subject to immediate zero-tolerance removal and criminal referral.
Illegal Gambling & Unlicensed Financial Fraud
Hosting illegal gambling portals, unauthorized betting schemes, or unlicensed fraudulent investment platforms is strictly barred under applicable legal regulations.
Intellectual Property & Copyright Infringement
Unauthorized distribution of copyrighted creative works, pirated software, or intellectual property without appropriate licenses is subject to immediate suspension upon notice.
Unsolicited Bulk Messaging (SPAM)
Transmitting unsolicited bulk email (SPAM) or engaging in activities that cause network IP addresses to be listed on global email reputation blacklists is forbidden.
8Immediate Termination, Suspension & Strict NO-REFUND Policy
Strict No-Refund Policy
Pursuant to distance contracts consumer protection statutes covering services executed and delivered immediately in electronic form, statutory rights of withdrawal do not apply. Upon subscription purchase, domain activation, early cancellation, or termination resulting from Acceptable Use Policy violations, ALL PAYMENTS ARE STRICTLY NON-REFUNDABLE UNDER ALL CIRCUMSTANCES.
Statutory Exemption from Right of Withdrawal
Due to the immediate provisioning of digital network services, the Customer acknowledges that statutory cooling-off and withdrawal rights are inapplicable.
Non-Refundable Fee Structure
Because the service (protection configuration, SSL certificate and security rules) is provisioned to the account immediately upon payment, processed fees are non-refundable.
Immediate Termination for AUP Violations
Violations of acceptable use policies empower the Provider to terminate accounts and revoke network routing immediately without prior warning.
Fraudulent Chargeback Remediation
Submitting fraudulent or unfounded payment chargebacks with banking institutions will prompt legal recovery proceedings and administrative collection fees.
9Pricing, Billing, Payment Terms & Default
Pre-Paid Subscription Model
Nexren Shield services operate strictly on a pre-paid billing basis. Active service terms commence immediately upon confirmed receipt of full subscription fees.
Payment Processing
Payments are processed securely via encrypted online merchant gateways supporting recognized debit/credit cards and authorized bank transfers.
Auto-Renewal & Service Suspension
If payment processing fails at subscription renewal, protective proxy routing will be suspended following the expiration of the standard grace period.
Taxes & Statutory Fiscal Duties
All applicable value-added taxes (VAT) and statutory fiscal assessments are calculated and applied pursuant to current tax regulations.
Invoice Dispute & Default
Invoices must be disputed within 8 business days pursuant to commercial law; undisputed unpaid invoices accrue statutory default interest.
10Service Level Targets (SLA), Maintenance & Exclusions
99.9% Network Availability Target
Nexren Shield targets 99.9% service availability, calculated across each complete calendar month.
SLA Exclusions
Downtime caused by force majeure events, upstream transit pipe saturation, backend origin failures, or global DNS propagation delays is excluded from SLA calculations.
Scheduled Maintenance Windows
Scheduled system upgrades and routine infrastructure maintenance are performed during off-peak hours and communicated via our status portal.
Service Credit Remedies
Upon verified SLA non-compliance, eligible Customers may receive account service credits applied against subsequent billing cycles; cash refunds are not provided.
11Intellectual Property & License Terms
Proprietary Software Rights
Nexren Shield proprietary source code, mitigation algorithms, specialized WAF signatures, and user interfaces are the exclusive intellectual property of the Provider.
Prohibition of Reverse Engineering
Decompiling, disassembling, reverse engineering, or attempting to discover the underlying source code of platform services is strictly prohibited.
Trademark Protection
The Nexren Shield name, logomarks, and visual identities may not be used, copied, or displayed for commercial or marketing purposes without prior written consent.
12Indemnification & Customer Responsibility
Customer Indemnity Obligation
The Customer agrees to indemnify, defend, and hold harmless the Provider against any claims, liabilities, losses, or legal damages arising from Customer violations of this Agreement or applicable laws.
Recourse for Regulatory Fines
Any regulatory fines, penalties, or statutory sanctions imposed upon the Provider as a result of Customer conduct shall be indemnified and repaid in full by the Customer.
Legal Defense & Attorney Fees
The Customer shall bear all reasonable court costs, expert witness expenses, and legal attorney fees incurred by the Provider in defending indemnified disputes.
13Limitation of Liability & Waiver of Consequential Damages
Waiver of Consequential Damages
In no event shall Nexren Shield be liable for any indirect, special, incidental, punitive, or consequential damages, including loss of profits, commercial goodwill, or business disruption.
Backend Data Backup Responsibility
Regular backup and disaster recovery of origin web applications and databases is strictly the Customer's obligation; the Provider disclaims liability for data corruption on origin hosts.
Aggregate Liability Cap
The total cumulative liability of the Provider for any verified claims arising out of this Agreement shall not exceed the total fees actually paid by the Customer in the preceding one (1) month.
Wilful Misconduct Boundary
Subject to mandatory legal provisions governing intentional misconduct or gross negligence, no claims for compensatory damages shall arise.
14Evidence Contract, Confidentiality & Notices
Conclusive Evidence Agreement
Pursuant to civil procedure evidence statutes, automated server logs, cryptographic audit trails, network telemetry records, and system timestamps constitute exclusive conclusive evidence between the parties.
Confidentiality Commitments
Both parties mutually commit to safeguarding proprietary technical architectures, operational rules, and confidential commercial information disclosed during the service engagement.
Electronic Service of Process
The administrative email address provided by the Customer during account registration shall be deemed a valid legal address for electronic service of notices.
15Governing Law, Jurisdiction & Effectiveness
Exclusive Governing Law
This Agreement shall be governed by, construed, and enforced in accordance with the laws of the Republic of Turkey without regard to conflict of laws principles.
Exclusive Legal Jurisdiction
The Istanbul Central (Çağlayan) Courts and Execution Directorates shall have exclusive jurisdiction over all claims, suits, and legal disputes arising under or related to this Agreement.
Severability & Platform Updates
If any provision of this Agreement is held invalid, the remainder shall remain in full force. Revised terms become binding upon publication on the platform website.
Full Agreement & Enforceability
Comprising 15 core articles, this Enterprise Service Agreement becomes fully binding and enforceable upon account registration, API activation, or domain onboarding.
For your questions: contact@nexren.net