1. Company Information

In accordance with Law 34/2002, of 11 July, on Information Society Services and Electronic Commerce (LSSI-CE), the following information is provided regarding the owner and operator of this website:

SECRAILS SL is a company incorporated under Spanish law.

Commercial Registry: Registro Mercantil de Madrid
Registration details: Inscripción 1ª, Hoja M-844826, IRUS: 1000442521552, dated 10 February 2025.

The principal business activity of SECRAILS SL is the development, commercialization, distribution, implementation and maintenance of software and cybersecurity solutions, including cloud security, Cloud Security Posture Management (CSPM), Cloud-Native Application Protection Platform (CNAPP), artificial intelligence, machine learning and cloud computing technologies.

2. Purpose of the Website

This website provides information about SECRAILS SL, its products, technologies and services relating to cybersecurity, cloud security, cloud infrastructure protection, vulnerability management, security posture management and regulatory compliance.

The information available through this website is provided primarily for business and informational purposes.

Access to and use of this website implies acceptance of this Legal Notice.

3. Secrails Products and Services

Secrails develops cybersecurity technology designed to help organizations identify, assess and manage security risks across cloud environments.

Depending on the products and services contracted, Secrails may provide capabilities including:

• Cloud asset discovery and inventory.
• Identification of cloud security misconfigurations.
• Detection and prioritization of vulnerabilities.
• Cloud Security Posture Management (CSPM).
• Security findings and risk analysis.
• Compliance assessment and monitoring.
• Security and compliance reporting.
• Multi-cloud security visibility.
• Security governance and related cybersecurity capabilities.

Product capabilities may vary depending on the applicable subscription, cloud provider, configuration, integrations and contractual agreement.

4. Regulatory and Compliance Information

Secrails products may assist organizations in assessing and managing controls associated with cybersecurity regulations, standards and frameworks, including, among others: NIS2, DORA, GDPR, ISO/IEC 27001, CIS, SOC 2 and PCI DSS.

Any information provided by Secrails concerning such regulations, standards or frameworks is intended to support customers' security and compliance activities.

However, Secrails does not provide legal advice, regulatory advice, audit services or legal certification of compliance.

The use of the Secrails platform does not, by itself, guarantee that an organization complies with any particular law, regulation, standard or framework.

Each organization remains responsible for determining the legal, regulatory, contractual, technical and organizational requirements applicable to its activities and for implementing the appropriate measures necessary to comply with those requirements.

5. Cybersecurity Disclaimer

No cybersecurity technology can completely eliminate cybersecurity risk.

Secrails technologies are designed to assist organizations in identifying, assessing, prioritizing and managing cybersecurity risks. Nevertheless, SECRAILS SL cannot guarantee that its products or services will identify, detect or prevent every:

• vulnerability;
• security misconfiguration;
• cyberattack;
• security incident;
• unauthorized access;
• data breach;
• service interruption; or
• regulatory or compliance violation.

The effectiveness of cybersecurity controls depends on multiple factors, including the customer's infrastructure, configuration, permissions, cloud environment, implementation, security policies and use of the Secrails platform.

Customers remain responsible for the security and configuration of their own systems and environments.

6. Website Use

Users agree to use this website in accordance with applicable Spanish and European Union law, this Legal Notice, good faith and public order.

Users must not use the website to:

• Carry out unlawful or fraudulent activities.
• Attempt unauthorized access to Secrails systems or infrastructure.
• Introduce malware, malicious code or other harmful technologies.
• Interfere with or disrupt the operation or security of the website.
• Obtain unauthorized access to information or systems.
• Infringe the intellectual property or other rights of Secrails or third parties.

SECRAILS SL reserves the right to restrict or suspend access to the website where reasonably necessary to protect its systems, users, customers or legal rights.

7. Intellectual and Industrial Property

Unless expressly stated otherwise, the website and its contents, including but not limited to its software, source code, architecture, designs, interfaces, texts, graphics, logos, trademarks, trade names, documentation, product descriptions, images and other materials, are owned by or licensed to SECRAILS SL.

Such materials are protected by applicable Spanish, European Union and international intellectual and industrial property laws.

No content may be copied, reproduced, modified, distributed, publicly communicated, commercially exploited or otherwise used without prior authorization from SECRAILS SL, except where expressly permitted by applicable law.

All third-party trademarks, logos, product names and company names appearing on this website remain the property of their respective owners.

Their appearance on this website does not imply ownership, sponsorship or endorsement unless expressly stated.

8. Product Information and Roadmap

Information available on this website regarding products, functionalities, integrations, development plans, product roadmaps or future capabilities is provided for informational purposes only.

Secrails continuously develops and improves its products and therefore product functionality may change over time.

Unless expressly incorporated into a written agreement executed by SECRAILS SL, information concerning future products, integrations, features or release dates shall not constitute a contractual commitment or guarantee regarding their development, availability or delivery date.

9. Accuracy of Information

SECRAILS SL makes reasonable efforts to ensure that the information published on this website is accurate and up to date.

However, information may occasionally contain errors, inaccuracies or become outdated.

To the extent permitted by applicable law, SECRAILS SL does not guarantee the completeness, accuracy, availability or continuous updating of all information available through this website.

SECRAILS SL reserves the right to modify, update or remove website content without prior notice.

10. Limitation of Liability

To the maximum extent permitted by applicable law, SECRAILS SL shall not be liable for damages resulting from improper or unlawful use of this website or reliance upon general informational content published through it.

Nothing contained in this Legal Notice shall exclude or limit liability where such exclusion or limitation is prohibited under applicable Spanish or European Union law.

Contractual liability relating to Secrails products or services shall be governed by the applicable agreement entered into between SECRAILS SL and the relevant customer or partner.

11. Third-Party Websites and Links

This website may contain links to websites, applications or services operated by third parties.

SECRAILS SL does not control such third-party services and is not responsible for their content, availability, security, privacy practices or terms and conditions.

The inclusion of a third-party link does not necessarily imply endorsement, sponsorship, partnership or approval by SECRAILS SL.

Users accessing third-party websites do so subject to the terms and policies applicable to those services.

12. Data Protection

SECRAILS SL processes personal data in accordance with applicable Spanish and European Union data-protection legislation, including:

Regulation (EU) 2016/679 - General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

Information regarding the processing of personal data, purposes of processing, legal bases, retention periods, recipients and the exercise of data-protection rights is provided separately in the Secrails Privacy Policy.

13. Cookies and Similar Technologies

This website may use cookies and similar technologies.

Technical cookies that are strictly necessary for the operation of the website may be used without requiring consent where permitted by applicable law.

Analytics, advertising, personalization or other non-essential cookies will only be used after obtaining the user's consent where required by applicable law.

Users must be able to manage their preferences and withdraw consent through the cookie management mechanism available on the website.

Additional information is available in the Secrails Cookie Policy.

14. Privacy and Security Communications

Questions concerning privacy or personal data may be addressed to:

Security researchers or other persons wishing to report a potential security vulnerability affecting Secrails systems should use the security contact mechanism provided by Secrails, where available.

15. Applicable Law and Jurisdiction

This website and this Legal Notice shall be governed by Spanish law and applicable European Union law.

Any dispute arising from the interpretation or use of this website shall be submitted to the competent courts and tribunals determined in accordance with applicable law.

Where mandatory consumer, data-protection or other jurisdictional rules apply, such mandatory provisions shall prevail.

16. Changes to this Legal Notice

SECRAILS SL reserves the right to modify this Legal Notice when necessary to reflect changes in applicable legislation, website functionality, company information or Secrails products and services.

The current version will always be made available through this website.