// LEGAL
Terms of Engagement
Last updated: April 2026
These are the standard terms under which Tessera Cyber — a trading name of Pepaco Systems LLC (Dubai, UAE) — provides services. They apply unless overridden by a signed Statement of Work.
1. Scope
Each engagement is governed by a written Statement of Work or quote describing the deliverables, timeline and price. Fixed-scope advisory and compliance services (for example the DORA Quick-Start Assessment, RoI Build, Full Framework Build, NIS2 Readiness Pack, and DORA Governance Retainer) are delivered to a defined Statement of Work scope agreed in writing before any work begins.
2. Fees and invoicing
Invoiced by Pepaco Systems LLC in EUR unless otherwise agreed. VAT treatment depends on the buyer's status and jurisdiction (typically reverse-charge or zero-rated for B2B EU buyers). Payment is due within 14 days of invoice.
3. Confidentiality
All client information is treated as confidential. Tessera and any vetted delivery specialists engaged on a project operate under written confidentiality obligations.
4. Liability
Tessera's aggregate liability for any engagement is capped at the fees paid for that engagement. Tessera does not exclude liability for fraud or anything that cannot be excluded by law.
5. Independence
Tessera provides advisory and assessment services. The client remains responsible for the operation of its own systems and decisions taken in response to Tessera's recommendations.
6. Governing law
These terms are governed by the laws of Cyprus, with non-exclusive jurisdiction of the Cyprus courts. Specific engagements may specify a different governing law in their Statement of Work.
Contact
Pepaco Systems LLC (trading as Tessera Cyber) · ciso@tesseracyber.com