// LEGAL

Terms of Engagement

Last updated: April 2026

These are the standard terms under which Tessera Cyber — a trading name of Pepaco Systems LLC (Dubai, UAE) — provides services. They apply unless overridden by a signed Statement of Work.

1. Scope

Each engagement is governed by a written Statement of Work or quote describing the deliverables, timeline and price. Fixed-scope advisory and compliance services (for example the DORA Quick-Start Assessment, RoI Build, Full Framework Build, NIS2 Readiness Pack, and DORA Governance Retainer) are delivered to a defined Statement of Work scope agreed in writing before any work begins.

2. Fees and invoicing

Invoiced by Pepaco Systems LLC in EUR unless otherwise agreed. VAT treatment depends on the buyer's status and jurisdiction (typically reverse-charge or zero-rated for B2B EU buyers). Payment is due within 14 days of invoice.

3. Confidentiality

All client information is treated as confidential. Tessera and any vetted delivery specialists engaged on a project operate under written confidentiality obligations.

4. Liability

Tessera's aggregate liability for any engagement is capped at the fees paid for that engagement. Tessera does not exclude liability for fraud or anything that cannot be excluded by law.

5. Independence

Tessera provides advisory and assessment services. The client remains responsible for the operation of its own systems and decisions taken in response to Tessera's recommendations.

6. Governing law

These terms are governed by the laws of Cyprus, with non-exclusive jurisdiction of the Cyprus courts. Specific engagements may specify a different governing law in their Statement of Work.

Contact

Pepaco Systems LLC (trading as Tessera Cyber) · ciso@tesseracyber.com