Essential 8 Dashboard

Maturity Level Assessment, Reporting & Tracking

TERMS OF SERVICE

Last updated August 7, 2026

We are Yast Limited ('Company', 'we', 'us', or 'our'), a company registered in New Zealand at the Address for Service.

We operate the website at https://yast.au, the web application Yast (the 'App'), as well as any other related products and services that refer or link to these legal terms (the 'Legal Terms') (collectively, the 'Services'). We sell non-exclusive, non-transferable licences directly to end-users for simple use of the Services.

The App is a comprehensive cybersecurity audit assessment and reporting tool. The Services are used to assess risk, prioritize vulnerabilities, and strengthen security posture.

These Legal Terms constitute a legally binding agreement made between you, whether personally or on behalf of an entity ( 'you'), and us, concerning your access to and use of the Services. You agree that by accessing the Services, you have read, understood, and agreed to be bound by all of these Legal Terms.

If you do not agree with all of these legal terms, then you are expressly prohibited from using the services and you must discontinue use immediately.

We will provide you with prior notice of any scheduled changes to the Services you are using. The modified Legal Terms will become effective upon posting or notifying you by noreply@yast.au, as stated in the email message. By continuing to use the Services after the effective date of any changes, you agree to be bound by the modified terms.

We recommend that you print a copy of these Legal Terms for your records.

You can contact us via the Contact Form or by postal mail to Address for Service.

Address for Service

15C Chedworth Avenue, Hamilton, New Zealand 3210

TABLE OF CONTENTS

1. OUR SERVICES

Scope of Service

The Services provide software tools designed to assist cybersecurity auditors, assessors, and organizations in evaluating risk, mapping security controls, and generating compliance reporting.

Regulatory Responsibility

While the Services are designed to support assessments aligned with international and regional security standards (such as ASD's Essential Eight), you acknowledge and agree that:

  • Use of the Services does not, in itself, constitute legal, regulatory, or official compliance certification.

  • You and your organization remain solely responsible for ensuring that your data processing practices, security controls, and operational policies comply with all applicable local, national, and international laws and regulations governing your business or industry.

Regional Availability

The information provided through the Services is not intended for distribution to or use by any person or entity in any jurisdiction where such distribution or use would be contrary to local law or regulation.

2. INTELLECTUAL PROPERTY RIGHTS

Our Intellectual Property

We are the owner or the licensee of all intellectual property rights in our Services, including all source code, software architecture, databases, functionality, website designs, audio, video, text, graphics, and trademarks (collectively, the 'Services Material').

Our Services Material is protected by copyright and trademark laws (and various other intellectual property rights and unfair competition laws) in New Zealand, Australia, the United States, and internationally.

Third-Party Frameworks and Standards

The Services may incorporate, reference, or display security controls, framework requirements, guidelines, and audit criteria originating from third-party international standards, government bodies, and industry organizations (including, but not limited to, the Australian Cyber Security Centre's (ASD) Essential Eight controls).

We do not claim ownership of any third-party frameworks, standard text, or government security guidelines referenced within the Services. All third-party standards and controls remain the property of their respective copyright owners and are utilized in accordance with their respective public licenses, fair use principles, or open documentation permissions.

Your Use of Our Services

Subject to your compliance with these Legal Terms, including the Prohibited Activities section, we grant you a non-exclusive, non-transferable, revocable licence to access and use the Services, and to export or print copies of generated assessment and audit reports to which you have properly gained access, solely for your internal business or client-auditing purposes.

Except as expressly permitted herein, no part of the Services or Services Material may be copied, reproduced, aggregated, republished, reverse engineered, sold, licensed, or otherwise exploited for commercial enterprise outside of using the App as intended.

3. USER REPRESENTATIONS

By creating an account or using the Services, you represent and warrant that:

  • You have the legal authority to bind yourself or the entity you represent to these Legal Terms;

  • All registration information you submit is accurate, current, and complete; and

  • Your use of the Services will comply with all applicable laws and regulations.

4. USER REGISTRATION

You may be required to register to use the Services. You agree to keep your password confidential and will be responsible for all use of your account and password. We reserve the right to remove, reclaim, or change a username you select if we determine, in our sole discretion, that such username is inappropriate, obscene, or otherwise objectionable.

5. FEES AND SUBSCRIPTIONS

Payment & Billing

Fees for the Services are billed in advance on a subscription basis (via Stripe) in Australian Dollars (AUD), unless agreed otherwise in writing. You agree to provide current, complete, and accurate billing and payment information.

Automatic Renewal & Cancellation

Your subscription will automatically renew at the end of each billing cycle unless cancelled prior to the renewal date via your account settings. Payments are non-refundable, and cancellation will take effect at the end of the current paid term.

Taxes & Fee Changes

All fees are exclusive of applicable sales tax, GST, or VAT, which will be added at checkout where required by law. We reserve the right to change our subscription fees upon reasonable prior notice to you.

6. PROHIBITED ACTIVITIES

You may not access or use the Services for any purpose other than that for which we make the Services available. The Services are intended solely for legitimate business operations and authorized cybersecurity auditing.

As a condition of your use of the Services, you agree not to:

  • System Security & Abuse: Circumvent, disable, probe, scan, or otherwise interfere with security-related features of the Services, or attempt to gain unauthorized access to any portion of the Services, other accounts, or computer systems connected to the Services.

  • Malicious Software: Upload, transmit, or introduce any viruses, Trojan horses, worms, logic bombs, or other malicious or technologically harmful material into the Services.

  • Infrastructure Burden: Take any action that imposes, or may impose in our reasonable discretion, an unreasonable or disproportionately large load on our infrastructure, or engage in automated query launching, excessive scraping, or unauthorized data mining.

  • Reverse Engineering: Except to the extent expressly permitted by applicable law, copy, modify, decipher, decompile, disassemble, or reverse engineer any software, source code, or underlying technology comprising the Services.

  • Competitive Use: Access or use the Services to build, benchmark, or assist a third party in building a competing product or service.

  • Misrepresentation & Impersonation: Impersonate another user, entity, or person, or misrepresent your affiliation with a person or entity when registering or using the Services.

  • Illicit Activity: Use the Services in any manner that violates any applicable local, national, or international law, rule, or regulation, or to conduct unauthorized security audits against target systems without the express authorization of the target system's owner.

7. YOUR DATA & CONFIDENTIALITY

Ownership of Your Data

As between the parties, you retain all right, title, and interest (including all intellectual property rights) in and to any data, audit reports, vulnerability assessments, information, or materials submitted, uploaded, or processed through the Services by you or your authorized users ("Your Data"). We acquire no rights in Your Data except the limited license expressly granted herein.

Limited License to Your Data

You hereby grant us a non-exclusive, worldwide, royalty-free, non-transferable license to host, store, copy, transmit, display, and process Your Data solely and strictly as necessary to:

  • Provide, maintain, and support the Services;
  • Prevent or address technical, operational, or security issues; and
  • Comply with applicable law or a valid governmental order.

We will not use, view, or process Your Data for any other purpose—including marketing, training public AI models, or sharing with third parties—without your prior express written consent.

Confidentiality

Each party ("Receiving Party") agrees that all information disclosed by the other party ("Disclosing Party") under these Legal Terms that is marked or identified as confidential, or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure (including Your Data, security assessments, network topologies, and audit results), shall be held in strict confidence.

The Receiving Party shall:

  • Use at least the same degree of care to protect the Disclosing Party’s confidential information as it uses for its own confidential information of like nature (but not less than reasonable care);

  • Not disclose any confidential information to any third party, except to its employees, contractors, and legal/financial advisors who need to know such information for the purposes of these Legal Terms and who are bound by confidentiality obligations at least as restrictive as those herein; and

  • Not use any confidential information for any purpose outside the scope of providing or using the Services.

Data Security & Backups

We will implement and maintain appropriate administrative, physical, and technical safeguards designed to protect the security, confidentiality, and integrity of Your Data. However, you acknowledge that you remain responsible for maintaining independent backups of Your Data where necessary for your business compliance requirements.

8. THIRD-PARTY WEBSITES AND CONTENT

The Services may contain links to third-party websites ("Third-Party Websites") or include third-party articles, documentation, or other content ("Third-Party Content"). Such Third-Party Websites and Third-Party Content are not investigated, monitored, or checked for accuracy, appropriateness, or completeness by us.

We are not responsible for any Third-Party Websites accessed through the Services or any Third-Party Content posted on, available through, or installed from the Services, including their accuracy, privacy practices, or other policies. Inclusion of, linking to, or permitting the use of any Third-Party Websites or Third-Party Content does not imply our approval or endorsement.

If you decide to leave the Services and access Third-Party Websites, you do so at your own risk, and these Legal Terms no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any website to which you navigate from the Services. You agree to hold us harmless from any losses or harm resulting from your access to or reliance on any Third-Party Content or Websites.

9. SERVICES MANAGEMENT

We reserve the right, but not the obligation, to:

  • Monitor Compliance: Monitor the Services for violations of these Legal Terms and ensure the proper operation of the Services.

  • Enforce Legal Protections: Take appropriate legal action against anyone who, in our sole discretion, violates applicable laws or these Legal Terms, including reporting such violations to law enforcement authorities.

  • System Protection: In our sole discretion and without notice or liability, remove from the Services, limit access to, or disable any accounts, data, or files that are excessive in size, impose an unreasonable burden, or threaten the security or stability of our systems.

  • Maintain Operations: Manage the Services in a manner designed to protect our rights and property and to facilitate the secure, continuous functioning of the Services.

10. PRIVACY POLICY

We care about data privacy and security. Please review our Privacy Policy. By using the Services, you agree to be bound by our Privacy Policy, which is incorporated into these Legal Terms. Please be advised the Services are hosted in Australia, United States and New Zealand. If you access the Services from any other region of the world with laws or other requirements governing personal data collection, use, or disclosure that differ from applicable laws in Australia, United States and New Zealand, then through your continued use of the Services, you are transferring your data to Australia, United States and New Zealand, and you expressly consent to have your data transferred to and processed in Australia, United States and New Zealand.

11. TERM AND TERMINATION

Term

These Legal Terms shall take effect on the date you first access the Services or purchase a subscription and shall remain in effect for the duration of your active subscription term, unless terminated earlier in accordance with this section.

Termination for Cause

Either party may terminate these Legal Terms and your account immediately upon written notice if:

  • The other party commits a material breach of these Legal Terms (including non-payment of fees) and fails to remedy such breach within fourteen (14) days of receiving written notice requiring it to do so; or

  • The other party becomes subject to bankruptcy, insolvency, liquidation, or enters into receivership or statutory management under New Zealand law.

Termination for Convenience

You may cancel your subscription at any time via your account settings. Your cancellation will take effect at the end of your current paid billing cycle, and you will retain access to the Services until that date.

Effect of Termination & Data Export

Upon termination or expiry of these Legal Terms:

  • Your right to access and use the Services will cease at the end of the applicable billing cycle.

  • We will provide you with a reasonable opportunity (not less than thirty (30) days following termination) to download or export Your Data and generated audit reports.

  • Following the data export period, we reserve the right to permanently delete Your Data from our active systems, except as required for accounting or legal compliance purposes.

12. MODIFICATIONS AND SERVICE AVAILABILITY

We reserve the right to update, modify, or enhance the features and functionality of the Services from time to time. While we strive to maintain maximum system availability, you acknowledge that the Services may occasionally experience routine maintenance, updates, or temporary technical interruptions. We will use commercially reasonable efforts to provide advance notice of scheduled maintenance that may impact availability.

13. GOVERNING LAW AND JURISDICTION

These Legal Terms and any non-contractual obligations arising out of or in connection with them shall be governed by, and construed in accordance with, the laws of New Zealand.

Subject to the following Dispute Resolution section, the Parties irrevocably submit to the exclusive jurisdiction of the courts of New Zealand to settle any dispute or claim arising out of or in connection with these Legal Terms or their subject matter.

14. DISPUTE RESOLUTION

Informal Negotiations

To expedite resolution and control the cost of any dispute, controversy, or claim related to these Legal Terms (each a "Dispute" and collectively, the "Disputes") brought by either you or us (individually, a "Party" and collectively, the "Parties"), the Parties agree to first attempt to negotiate any Dispute informally for at least thirty (30) days before initiating formal arbitration or court proceedings. Such informal negotiations commence upon written notice from one Party to the other Party.

Binding Arbitration

If the Parties are unable to resolve a Dispute through informal negotiations within thirty (30) days, the Dispute shall be referred to and finally resolved by arbitration in accordance with the Arbitration Act 1996 of New Zealand.

  • Arbitration Body: The arbitration shall be administered by the New Zealand International Arbitration Centre (NZIAC) in accordance with its Arbitration Rules.

  • Seat & Language: The seat, or legal place, of arbitration shall be Auckland, New Zealand. The language of the proceedings shall be English.

  • Tribunal: The arbitration shall be conducted by a single sole arbitrator appointed in accordance with the NZIAC Arbitration Rules.

  • Governing Law: The substantive law governing the dispute shall be the laws of New Zealand.

Class Action Waiver & Restrictions

The Parties agree that any dispute resolution proceedings will be conducted only on an individual basis and not in a class, consolidated, or representative action. To the full extent permitted by law, no arbitration or proceeding shall be joined with any other, and there is no right or authority for any Dispute to be arbitrated on a class-action basis.

Exceptions to Negotiation and Arbitration

The Parties agree that the following Disputes are not subject to the provisions concerning informal negotiations and binding arbitration above:

  • Any Disputes seeking to enforce, protect, or concerning the validity of any intellectual property rights of a Party;

  • Any Dispute related to, or arising from, allegations of unauthorized access, theft, or breach of the Prohibited Activities clause; and

  • Any claim for urgent injunctive relief.

15. CORRECTIONS

There may be information on the Services that contains typographical errors, inaccuracies, or omissions, including descriptions, pricing, availability, and various other information. We reserve the right to correct any errors, inaccuracies, or omissions and to change or update the information on the Services at any time, without prior notice.

16. DISCLAIMER OF WARRANTIES

"As-Is" Provision

To the maximum extent permitted by applicable law, the Services and all associated Content and features are provided on an "as-is" and "as-available" basis. Your use of the Services is at your sole risk.

Warranty Exclusions

We expressly disclaim all warranties, conditions, representations, or guarantees of any kind, whether express, implied, or statutory, including but not limited to:

  • Implied warranties of merchantability, fitness for a particular purpose, and non-infringement;

  • Warranties that the Services will be uninterrupted, timely, secure, or error-free; and

  • Warranties regarding the accuracy, completeness, or reliability of any audit outputs, or compliance guidance provided through the Services.

Security Assessment & Compliance Disclaimer

You acknowledge and agree that:

  • No Guarantee of Absolute Security: The use of our Services, or generated reporting does not guarantee complete security against cyber threats, data breaches, or unauthorized system access.

  • Independent Professional Judgment: The Services are designed to assist cybersecurity auditors and businesses in evaluating risk, but do not replace independent legal, regulatory, or technical professional advice. You remain solely responsible for your system configurations and regulatory compliance.

17. LIMITATION OF LIABILITY

To the maximum extent permitted by applicable New Zealand law:

  • Exclusion of Consequential Loss: Neither party shall be liable to the other for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, loss of business revenue, loss of data, or operational interruption, arising out of or in connection with the Services or these Legal Terms.

  • Liability Cap: Our total cumulative aggregate liability to you for all claims of any kind arising out of or in connection with the Services or these Legal Terms shall be limited to the total fees actually paid by you to us for the Services in the twelve (12) month period immediately preceding the event giving rise to the claim.

  • Business Use Contracting Out: You acknowledge that the Services are acquired for the purposes of a business. To the maximum extent permitted by law, the Consumer Guarantees Act 1993 and Sections 9, 12A, and 13 of the Fair Trading Act 1986 shall not apply to the supply of the Services under these Legal Terms.

18. INDEMNIFICATION

You agree to defend, indemnify, and hold us harmless, including our subsidiaries, affiliates, and all of our respective officers, agents, partners, and employees, from and against any loss, damage, liability, claim, or demand, including reasonable attorneys’ fees and expenses, made by any third party due to or arising out of:

  • Your Data;
  • use of the Services;
  • breach of these Legal Terms;
  • any breach of your representations and warranties set forth in these Legal Terms;
  • your violation of the rights of a third party, including but not limited to intellectual property rights; or
  • unauthorized security assessments or tests conducted by you against target systems using the Services without proper authorization.

Notwithstanding the foregoing, we reserve the right, at your expense, to assume the exclusive defence and control of any matter for which you are required to indemnify us, and you agree to cooperate, at your expense, with our defence of such claims. We will use reasonable efforts to notify you of any such claim, action, or proceeding which is subject to this indemnification upon becoming aware of it.

19. ELECTRONIC COMMUNICATIONS AND CONTRACTING

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive communications from us electronically. You agree that all agreements, notices, disclosures, and other communications provided to you electronically via email or through the Services satisfy any legal requirement that such communications be in writing.

Pursuant to Part 4 of the New Zealand Contract and Commercial Law Act 2017, the parties consent to the use of electronic signatures, contracts, orders, and records to execute transactions and deliver notices under these Legal Terms.

20. MISCELLANEOUS

  • Entire Agreement: These Legal Terms constitute the complete and exclusive agreement between you and us regarding the Services and supersede all prior understandings or agreements.

  • Waiver & Severability: Our failure to enforce any right or provision of these Legal Terms shall not operate as a waiver. If any provision is found unlawful, void, or unenforceable under New Zealand law, that provision shall be deemed severable and shall not affect the validity of remaining provisions.

  • Assignment: We may assign or transfer our rights and obligations under these Legal Terms in connection with a merger, acquisition, or sale of assets upon written notice to you. You may not assign your rights without our prior written consent.

  • Force Majeures: Neither party shall be liable for any failure or delay in performance caused by events beyond its reasonable control, including acts of God, power or network outages, cyberattacks, or government restrictions.

21. CONTACT US

In order to resolve a complaint regarding the Services or to receive further information regarding use of the Services, please contact us:

Logo

Back to top