ENDPOINT RADAR / ASSESS1. Who provides Assess
Endpoint Radar Assess is provided by Expliso, Marconiweg 5, 4207 HH Gorinchem, the Netherlands. Contact for account, service and privacy questions: support@endpointradar.com. These terms cover the Assess account and request process. Any separately agreed assessment scope, price and delivery terms form part of your assessment agreement; specific agreed terms take precedence for that assessment.
2. Your account
You may create a free Assess account for business use without subscribing to the Endpoint Radar Platform. Provide accurate contact and organisation details, verify your email address and protect your sign-in credentials. Only act for an organisation when you have authority to do so. Tell us promptly if you suspect unauthorised account access.
3. Requesting an assessment
Submitting a request does not start an analysis or authorise access to Microsoft. We first confirm the organisation, tenant, scope, authorised contacts, report recipients and applicable service terms. An authorised Microsoft administrator must separately grant the necessary read permissions. Do not connect an organisation you are not authorised to represent.
4. What the review provides
Assess reviews information available within the agreed scope, such as devices, policies, applications, scripts, assignments, security settings and deployment results. The report explains findings, available evidence, risk and impact priorities, recommendations and an action plan. Design reconstruction describes relationships supported by the collected evidence; an assignment alone does not prove successful application on every device.
5. Read-only scope and customer responsibilities
Assess does not implement recommendations or change tenant configuration. You remain responsible for your environment, your staff notices and authority to share information, and decisions to implement changes. Validate recommendations against business requirements, test changes and plan recovery before deployment. Never submit passwords, private keys or other secrets in request fields.
6. Evidence and limitations
An assessment is a snapshot, not continuous monitoring or a guarantee that every issue will be detected. Missing permissions, unsupported sources, incomplete status data and collection limits can affect coverage. Risk scores help prioritise work; they are not a prediction of an incident. Vendor versions and vulnerability information may change after collection. References to ISO or other frameworks are informative mappings and do not constitute certification or a formal compliance audit.
7. Reports and confidentiality
Reports are reviewed before release and are made available only through the authorised process and agreed recipients. Treat reports and exports as confidential security information. You may use them internally and share them with advisers who need the information and are bound to confidentiality. Do not misrepresent draft findings as an approved report or use another organisation’s data.
8. Fees and orders
Creating an Assess account is free and does not activate a paid Platform subscription. The scope, package, applicable price, VAT and delivery arrangements are confirmed before a paid order. Account creation is not an order for a paid assessment. Where a payment flow is explicitly marked as test or dummy mode, no real payment is collected and a test transaction does not create a paid entitlement. Any assessment provided without payment or under a separately invoiced agreement requires a documented service authorisation.
9. Personal data
The Assess privacy notice explains account and service data processing. Acknowledging that notice is not consent to marketing or blanket permission to collect tenant data. Where we process tenant personal data on your organisation’s instructions, the applicable processing agreement must be settled before that processing starts.
10. Availability, ending access and concerns
The service may be temporarily unavailable during maintenance, updates or incidents. No uptime commitment applies unless separately agreed. Contact us to close your account, cancel a request or report a problem. We may restrict access where reasonably necessary to protect data or address misuse. Closing an account does not revoke Microsoft permissions: an authorised tenant administrator can revoke those in Microsoft Entra. Data retention is described in the privacy notice; ending access does not instantly erase backups or records that must lawfully be retained.
11. Changes and legal rights
We identify these terms by version and date and record the version accepted during registration. Material changes will be communicated before applying to ongoing services; a new document version does not retroactively change an agreed assessment. Nothing here removes rights or liabilities that cannot lawfully be excluded. Contact the provider above first with a question or dispute.