Terms of Service for the people who open the link.
The contract between Guard.ch and the security teams that detonate suspicious URLs inside our isolated remote browser.
1. Introduction and acceptance
These Terms of Service (the "Terms") govern access to and use of Guard.ch (the "Service"), operated by Zesiger.net Individual Enterprise ("Guard.ch", "we", "us"). The Service lets a customer open a suspicious URL inside an isolated remote browser, captures the resulting session, and stores the replay against a workspace for later review by authorised users.
By creating an account, accepting these Terms in the dashboard, or otherwise using the Service, the customer enters into a binding agreement with us. If the person accepting these Terms does so on behalf of a company or other legal entity, that person represents that they have authority to bind the entity, and "Customer" refers to that entity.
These Terms incorporate the Privacy Policy, the Data Processing Addendum, the Security Statement, and the Subprocessors register. They contain limitations of liability and a choice of Swiss law; read them carefully.
2. Definitions
- Service
- The Guard.ch platform, including the dashboard at guard.ch, the remote browser fleet, the replay viewer, and any related software made available by us.
- Customer
- The legal entity (or natural person, where the plan permits) that has contracted with us under these Terms.
- User
- A natural person authorised by Customer to access the Service under Customer's workspace, including analysts, administrators, and read-only reviewers.
- Session
- A single, time-bounded interaction during which a User opens a target URL inside one of our isolated remote browsers. Sessions are capped at the duration listed on the applicable plan.
- Capture
- The artefacts produced by a Session, including video stream, network log, DOM snapshots, screenshots, and derived indicators, stored against the workspace that initiated the Session.
- Workspace
- The tenant container holding a Customer's Users, Captures, billing settings, and audit log. A Customer may operate one or more Workspaces depending on plan.
- Subscription Term
- The period for which Customer has purchased the Service, as shown on the order or invoice (monthly or annual, unless otherwise agreed for Enterprise).
- Confidential Information
- Non-public information disclosed by one party to the other in connection with the Service, whether marked confidential or reasonably understood to be confidential given its nature and the circumstances of disclosure.
3. Account registration and security
Customer must register an account to use the Service. Customer agrees to provide accurate, current information and to keep it up to date. Users must be at least 16 years old, or the age of legal majority in their jurisdiction, whichever is higher.
- Customer is responsible for credentials issued to its Users, including passwords, passkeys, session tokens, and SSO configuration. Sharing of personal accounts between Users is not permitted; seats are per-User.
- Customer must notify us at [email protected] without undue delay if it suspects unauthorised access to its workspace, a leaked session token, or compromise of a User account.
- We may suspend a User or workspace if we observe credential stuffing, brute force, or other behaviour that endangers the Service or other customers, and will restore access once the risk is addressed.
4. The service
Guard.ch is a session replay viewer for suspicious URLs. We provide remote browsers in isolated containers, record what happens when a User opens a target URL, and make the resulting Capture available inside the Customer's workspace.
The Service surfaces analytical signals (for example, redirect chains, third-party requests, credential form detection, and known abuse indicators) to help analysts assess a URL. These signals are observations, not legal determinations. We do not warrant that the Service will detect, classify, or block any specific threat, malicious payload, phishing kit, or category of content. Customer remains responsible for the conclusions it draws and the actions it takes based on a Capture.
We may add, modify, or remove features during a Subscription Term provided the Service's core capability (open a URL in an isolated browser and review the resulting Capture) remains materially available. We will give reasonable notice through the dashboard or by email for changes that remove a documented feature relied on by paying Customers.
5. Acceptable use
Customer agrees that it and its Users will not, and will not allow any third party to, use the Service for any of the following.
- Target any system, network, or person without lawful basis. The Service exists to inspect suspicious URLs as part of a defensive workflow; it is not a launchpad for unauthorised access, intrusion, or denial-of-service activity.
- Open content that is illegal under Swiss law or under the law of the jurisdiction in which the User operates, including child sexual abuse material, content inciting violence, or content otherwise prohibited by criminal statute.
- Use Guard.ch to evade controls put in place by a third party (for example, IP-based geofencing, anti-fraud throttling, or terms of use) at a scale that resembles abuse rather than a defensive investigation.
- Scrape, mirror, or systematically harvest third-party sites through the Service, including by automating the creation of Sessions to extract data at scale. Burst investigation patterns tied to a clear incident are fine; continuous extraction is not.
- Reverse engineer, decompile, or attempt to derive the source code of the Service, except to the extent expressly permitted by applicable law.
- Resell, sublicense, or expose the Service to third parties as a paid product, including white-label resale, without our prior written consent. Internal use by Customer's subsidiaries and affiliates is permitted; consulting use that incidentally involves opening a client URL inside a Customer workspace is permitted.
- Interfere with the integrity or performance of the Service, including by tampering with the isolation layer, attempting to escape the container, or probing other customers' workspaces.
- Misuse our IP space or rDNS to send unsolicited communications, conduct credential phishing against third parties, or otherwise damage the reputation of our network.
We may suspend Sessions, throttle a workspace, or terminate access if we observe a material violation of this section. Where the conduct is reportable under Swiss law, we may also report it to the competent authority.
6. Customer data and data protection
As between the parties, Customer owns all data submitted through, generated by, or otherwise associated with its workspace, including target URLs, Capture content, annotations, and audit logs ("Customer Data").
Customer Data may include personal data of Users and of third parties whose content appears inside a Capture (for example, a phishing page that mimics a real person). For that processing, Customer is the controller and Guard.ch is the processor. The Data Processing Addendumsets out the scope of processing, the technical and organisational measures we apply, the approved subprocessors, and the parties' respective obligations under the Swiss FADP and, where applicable, the GDPR.
Capture retention is tied to the active plan and is documented at the point of purchase. Captures are deleted, or placed in a recoverable bin and then deleted, when the retention window expires, when Customer deletes them manually, or when the agreement ends as described in section 11. Customer is responsible for exporting Captures it wishes to retain beyond the retention window.
7. Plans, payment, renewal, taxes
Plan details, including the pool of investigations, session duration cap, retention window, and seat count, are shown on the pricing page and reflected on the order confirmation. Plans renew automatically at the end of each Subscription Term unless cancelled as described in section 8.
- Billing. Monthly plans are billed at the start of each month. Annual plans are billed at the start of the Subscription Term. Enterprise terms follow the order form.
- Currency and payment. Prices are stated in Swiss francs or US dollars on the order. Payment is taken by card or, for Enterprise, by invoice on net 30 terms.
- Overages. If Customer exceeds the investigation pool in a billing period, additional investigations are billed at the overage rate shown in the dashboard, or, if the plan does not include overage, new Sessions may be paused until the next period.
- Price changes.We may change list prices for future Subscription Terms; price changes do not apply mid-term and Customer will see the new price at renewal with at least 30 days' notice.
- Taxes. Prices are exclusive of Swiss VAT and any other applicable taxes, which we collect where we are legally required to do so. Customer is responsible for any withholding taxes that apply in its jurisdiction.
- Refunds. Fees are non-refundable except where required by mandatory law. We may issue a pro-rata credit at our discretion in cases of extended unavailability covered by section 9.
8. Trial and cancellation
Paid plans (other than Enterprise) are available on a 30-day trial. During the trial, Customer may cancel from the dashboard at any time and will not be charged. If Customer does not cancel before the trial ends, the plan converts to a paid Subscription Term at the stated price.
Customer may cancel an active subscription from the billing area of the dashboard. Cancellation takes effect at the end of the current Subscription Term; access continues until that date and no refund is issued for the unused portion. Customer may also delete its workspace, which terminates the agreement immediately and removes Captures subject to section 11.
9. Service availability
We operate the Service on a best-effort basis with the engineering and operational practices described in our Security Statement. Self-serve plans do not carry a contractual uptime commitment; Enterprise customers may agree a separate service level in an order form.
Planned maintenance is announced through the status page and, where significant, by email. Unplanned incidents are handled per the incident response process documented in the Security Statement, including disclosure timelines for incidents that affect Customer Data.
10. Beta features
We sometimes release features marked beta, preview, or experimental. These are provided as-is, may be changed or withdrawn without notice, and are excluded from any service level or warranty. Captures or settings created with a beta feature may not survive its removal; we will give reasonable notice where data export is feasible.
11. Termination
- By Customer. Customer may terminate this agreement at any time by cancelling its subscription and deleting its workspace as described in section 8.
- By Guard.ch for breach. We may suspend or terminate access if Customer materially breaches these Terms, including the acceptable use policy, and does not cure the breach within 14 days of written notice to the billing contact. We may suspend immediately, without notice, where the breach poses an active risk to the Service, to other customers, or to third parties.
- For non-payment. We may suspend access if an invoice is unpaid 14 days after its due date, and terminate if it remains unpaid 30 days after the due date.
- Effect of termination. Captures are retained for up to 1 month after the effective date of termination to allow export, after which they are deleted along with workspace metadata. Customer may request earlier deletion in writing. Sections that by their nature survive (definitions, intellectual property, confidentiality, disclaimers, limitation of liability, indemnification, governing law) continue after termination.
12. Intellectual property
The Service, including the platform code, the replay viewer, the analytical signals, the documentation, and any improvements, is and remains the property of Guard.ch and its licensors. These Terms grant Customer a limited, non-exclusive, non-transferable, revocable right to access and use the Service during the Subscription Term in accordance with the plan.
Customer retains ownership of Customer Data. Customer grants us a limited, non-exclusive licence to host, process, and display Customer Data solely to provide and support the Service. We do not use Customer Data to train models offered to other customers.
Feedback Customer provides about the Service is non-confidential, and we may use it without restriction or obligation. Statutory exceptions for private use, education, and press citation under Swiss copyright law (URG) remain unaffected.
13. Confidentiality
Each party will protect the other's Confidential Information with at least the same degree of care it uses for its own confidential information of similar importance, and not less than reasonable care. Confidential Information may be used only to perform under, or exercise rights under, these Terms.
Confidential Information does not include information that is (a) publicly available without breach of these Terms, (b) known to the receiving party without obligation of confidence before disclosure, (c) lawfully received from a third party without restriction, or (d) independently developed without reference to the disclosing party's information. A party may disclose Confidential Information to the extent required by law or court order, provided it gives prompt notice where lawful so the other party can seek a protective order.
14. Disclaimers
EXCEPT AS EXPRESSLY STATED IN THESE TERMS, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE". TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, GUARD.CH DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.
WE DO NOT WARRANT THAT THE SERVICE WILL DETECT, BLOCK, OR CORRECTLY CLASSIFY ANY GIVEN URL, PAYLOAD, OR ATTACK TECHNIQUE. ANALYTICAL SIGNALS ARE PROVIDED FOR ANALYST CONTEXT, NOT AS A SUBSTITUTE FOR PROFESSIONAL JUDGEMENT. CUSTOMER ACKNOWLEDGES THAT INVESTIGATING A SUSPICIOUS URL IS INHERENTLY RESIDUAL-RISK ACTIVITY AND THAT GUARD.CH IS ONE LAYER IN A WIDER DEFENSIVE PROGRAMME.
15. Limitation of liability
TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, GOODWILL, ANTICIPATED SAVINGS, OR BUSINESS OPPORTUNITY, ARISING OUT OF OR IN CONNECTION WITH THESE TERMS OR THE SERVICE, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), OR ANY OTHER LEGAL THEORY, AND EVEN IF THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
EACH PARTY'S AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS IS CAPPED AT THE FEES PAID BY CUSTOMER TO GUARD.CH IN THE 12 MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM, OR ONE THOUSAND SWISS FRANCS (CHF 1,000), WHICHEVER IS GREATER.
THE LIMITATIONS IN THIS SECTION DO NOT APPLY TO LIABILITY THAT CANNOT BE LIMITED UNDER MANDATORY SWISS LAW, INCLUDING LIABILITY FOR INTENT OR GROSS NEGLIGENCE, FOR DEATH OR PERSONAL INJURY, OR FOR INFRINGEMENT OF THE OTHER PARTY'S INTELLECTUAL PROPERTY RIGHTS UNDER SECTION 12.
16. Indemnification
Customer will defend, indemnify, and hold harmless Guard.ch and its officers, employees, and agents from and against any third-party claim, and any resulting damages, judgments, and reasonable legal fees, arising out of (a) Customer's or a User's breach of section 5 (acceptable use), (b) Customer Data uploaded to or generated inside the workspace that violates law or the rights of a third party, or (c) use of the Service to target a system or person without lawful basis. We will give Customer prompt notice of the claim, reasonable cooperation, and sole control of the defence (subject to Customer not settling any claim in a way that imposes obligations on us without our consent).
17. Force majeure
Neither party is liable for any delay or failure to perform (other than payment obligations) caused by events beyond its reasonable control, including natural disasters, war, civil unrest, government action, labour disturbances, internet or upstream provider outages, and large-scale denial-of-service attacks. The affected party will use reasonable efforts to mitigate the impact and resume performance.
18. Changes to these terms
We may revise these Terms from time to time. Each version carries an effective date; the version in force at the time a Subscription Term renews applies to that renewal. For material changes we will give at least 30 days' notice through the dashboard or by email to the billing contact.
If Customer does not accept a material change, it may terminate the affected Subscription Term at the end of the then-current billing period and receive a pro-rata refund of any fees paid in advance for the unused portion. Continued use of the Service after the effective date of a change constitutes acceptance.
19. Governing law and dispute resolution
These Terms are governed by the substantive laws of Switzerland, without regard to its conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.
The parties will first attempt to resolve any dispute in good faith by direct discussion between the billing contact and [email protected]. Consumer customers may also bring the matter to the Swiss Conciliation Authority for E-Commerce (c/o Handelsverband Schweiz, Hohlstrasse 550, 8048 Zürich, www.handelsverband.ch).
If a dispute cannot be resolved that way, the courts at the seat of Guard.ch in Schmiedrued, Switzerland have exclusive jurisdiction, subject to any mandatory consumer-protection jurisdiction available to a natural-person customer under Swiss law.
20. Contact
For questions about these Terms or to send a formal notice, contact the operator below.
- Service name
- Guard.ch
- Operator
- Zesiger.net Individual Enterprise
- Legal representative
- Janis Zesiger
- Legal form
- Einzelunternehmen (Sole Proprietorship)
- Address
- Mügeri 340, 5046 Schmiedrued, Switzerland
- UID
- CHE-488.503.816
- [email protected]
See the Imprint for the full set of registry identifiers and the regulatory authority.