Terms of use

1. Scope and acceptance

1.1. These Terms of use (the “Terms”) govern access to and use of the Security Portal, available at securityportal.it (the “Portal”), provided by Unleaf Advisoring S.R.L.S., with registered office at Via Sebino 11, 00199 Rome (RM), Italy, tax code and VAT no. 17905611004, certified email (PEC) company@pec.unleaf.it (“Unleaf” or the “Provider”).

1.2. Use of the reserved area of the Portal is subject to acceptance of these Terms. The user accepts them by ticking the relevant box when accepting the invitation (or, for accounts that are already active, at the first login after these Terms are published), and the Provider records the acceptance together with its date and the version of the Terms. The clauses listed in Article 16 are subject to specific approval under Article 1341(2) of the Italian Civil Code.

1.3. The Portal is a business-to-business service, intended for professionals and organisations (CISOs, security managers, security professionals, company staff). It is not intended for consumers or for persons under 18. By requesting access, the user declares that they are acting solely for professional or business purposes, or for those of the organisation they belong to, and not as a consumer.

2. Description of the service

2.1. The Portal offers, in Italian and English:

• editorial content on security (cyber, physical, travel security, information security): guides, checklists, glossaries, advisories, case studies, periodic digests;
• a conversational AI assistant that answers questions based solely on the Portal’s indexed content, as a rule indicating the sources used (RAG technique — retrieval-augmented generation);
• a personal dashboard with the history of the user’s own interactions with the assistant (audit log, whose text remains viewable for 90 days), notifications, preferences and report export;
• download of content in Markdown and PDF format.

2.2. The pages of the Portal accessible without registration may be freely consulted. The AI assistant, the dashboard, the personal features and the other reserved pages are accessible only to registered and approved users.

2.3. The Provider may modify, extend or discontinue features of the Portal; substantial changes to these Terms are notified in accordance with Article 13.

3. Registration, account and security

3.1. Access upon approval. There is no open registration: applicants submit a request through the “Request access” form (first name and surname, email, organisation, requested role and an optional message); the Provider assesses it at its discretion and, if it is approved, sends an invitation by email. The Provider may reject the request without being required to give reasons.

3.2. Roles. Each account is assigned a role (employee, professional, security manager, CISO) which adjusts the depth of the assistant’s answers. The role is assigned by the Provider on the basis of what is declared in the request; the user undertakes to provide truthful information.

3.3. Credentials. The account is personal and non-transferable. The user is responsible for safeguarding their credentials and for all activities carried out through their account, and undertakes to notify the Provider promptly of any unauthorised use. Two-factor authentication (TOTP MFA) is available — and recommended — and can be enabled from the Account page.

3.4. Security checks. The system applies automatic security measures, including the rejection of known compromised passwords and limits on login attempts. The Portal may also block, for 7 days, IP addresses that send requests to paths typically used by automated vulnerability scanners: the block does not affect users with an active session and lifts automatically when it expires. Anyone who believes they have been blocked in error may write to the contact in Article 15.

3.5. Personal data. The processing of users’ personal data is described in the Portal’s privacy notice.

4. Permitted use

4.1. The user may use the Portal for their own internal professional purposes or those of their organisation, in particular: consulting the content, querying the AI assistant, downloading the content in the formats made available and reusing it internally, citing the source (“Security Portal — Unleaf Advisoring”) as indicated in the downloaded files.

5. Prohibited use

5.1. Unless authorised in writing by the Provider, it is forbidden to:

• resell, sublicense or publicly redistribute the Portal’s content or the assistant’s answers, in whole or in part, even free of charge;
• use scraping, crawlers, bots or automated access on the reserved area, or otherwise circumvent the technical protection measures (authentication, usage limits);
• use the content or the assistant to build competing products or services, including the training of AI models or systems;
• share credentials or allow access by third parties who do not hold the account;
• enter into the assistant unlawful content, unnecessary personal data of third parties, or confidential or classified information that the user has no right to dispose of;
• use the Portal for unlawful purposes or in breach of applicable rules.

6. AI assistant: nature of the service and limits

6.1. The assistant is an artificial intelligence system: the user is interacting with a machine, not with a human operator. This is made clear in the interface (transparency note below the chat).

6.2. Answers are generated automatically from the Portal’s indexed content only and, as a rule, indicate the sources used. When the Portal has no relevant information, the assistant says so instead of answering.

6.3. Answers may contain errors, inaccuracies or omissions. The user must verify the information against the cited sources before relying on it, in particular before taking operational, organisational or security decisions. How the assistant works is described in the Portal’s “AI notice” and “Sources & method” pages, which are provided for information only and do not alter the obligations and limitations set out in these Terms.

6.4. The user remains solely responsible for the use they make of the answers, for the decisions taken on the basis of them and for any onward transmission of them within their organisation.

7. No professional advice

7.1. The Portal’s content and the assistant’s answers are solely for general information and training purposes. They do not constitute, and in no case replace, personalised professional advice — legal, technical, security, insurance or other — relating to the specific situation of the user or their organisation.

7.2. For specific needs (e.g. handling a real incident, regulatory compliance, tailored risk assessments) the user must consult qualified professionals. Use of the Portal does not establish any advisory relationship between the user and Unleaf.

8. Usage limits and availability

8.1. The AI assistant is subject to a limit of 60 queries per user per calendar month; once the limit is exceeded, the feature is suspended until the following month. The Provider may change the limit by giving notice in the interface.

8.2. The Portal is provided “as is” and “as available”, with no guarantee of continuity, response times or freedom from interruptions. The Provider may temporarily suspend the service for maintenance, security or technical reasons.

8.3. Access to the Portal is currently free of charge and by invitation (pilot phase). The Provider may introduce paid plans or restrict features that are currently free, notifying registered users at least 30 days in advance; no fee will be charged without their express acceptance, and the user may close their account at any time in accordance with Article 12.3.

9. Intellectual property

9.1. The Portal, its editorial content, its structure, its trademarks and its distinctive signs belong to Unleaf or to their respective owners and are protected, to the extent that the relevant requirements are met, by the rules on copyright, databases and industrial property. Making the content available does not entail any transfer of rights, but only the limited licence of use referred to in Article 4.

9.2. Some content incorporates excerpts and adaptations from public and institutional sources, selected according to the policy described in the “Sources & method” page, with the attributions required by the respective licences (shown in the citations and metadata). The rights in such materials remain with their respective owners; any reuse of those materials by the user remains subject to their original licences.

9.3. The assistant’s answers are generated automatically from the Portal’s content: the user may use them within the limits of Article 4 and subject to the prohibitions of Article 5. Unleaf claims no rights in the answers as such, but in the Portal content that is reproduced or adapted in them. Answers are generated automatically and Unleaf does not guarantee that they are original, exclusive, eligible for protection or free from third-party rights; for the parts that reproduce excerpts from external sources, the original licences referred to in Article 9.2 continue to apply.

10. Reports, corrections and complaints

10.1. Anyone who believes that content on the Portal infringes their rights (intellectual property, reputation, personal data) or contains errors may submit a report by writing to the contact indicated in Article 15, following the procedure described in the “Reports & corrections” section of the “Sources & method” page. Reports are examined within the timeframes stated there.

11. Limitation of liability

11.1. To the fullest extent permitted by law, Unleaf shall not be liable for indirect or consequential damage, loss of profits, loss of data or reputational damage arising from the use or non-use of the Portal, nor for damage arising from: (a) decisions taken by the user on the basis of the content or of the assistant’s answers in breach of Articles 6 and 7; (b) temporary unavailability of the service; (c) events attributable to third-party infrastructure providers that cannot be controlled with ordinary diligence.

11.2. Unleaf’s liability remains unaffected in cases of wilful misconduct or gross negligence, for personal injury and in the other cases in which the law does not permit limitations or exclusions of liability.

12. Suspension and closure of the account

12.1. The Provider may suspend or close the account, with reasoned notice where possible, in the event of: breach of these Terms (in particular Articles 3 and 5), anomalous or abusive use of the service, a risk to the security of the Portal or of other users, or untruthful information provided in the access request.

12.2. In serious or urgent cases (e.g. account compromise, ongoing abuse) the suspension may be immediate and notice may be given at the same time or afterwards.

12.3. The user may ask for their account to be closed at any time by writing to the contact in Article 15. On closure, the retention periods stated in the privacy notice apply. The account and the associated data are deleted within 30 days of closure, except as necessary to comply with legal obligations or to establish, exercise or defend a legal claim.

13. Changes to the Terms

13.1. The Provider may update these Terms. Substantial changes are notified to registered users at least 30 days in advance (by email or by a notice in the interface), unless they are required by law or by urgent security needs; use of the Portal after the changes take effect constitutes acceptance of them, without prejudice to the user’s right to close their account before that date in accordance with Article 12.3. Changes to the clauses listed in Article 16 require a new specific approval. The current version is always published on the Portal with its last-updated date.

14. Governing law and jurisdiction

14.1. These Terms are governed by Italian law.

14.2. Any dispute relating to these Terms or to the use of the Portal shall be subject to the exclusive jurisdiction of the Court of Rome, without prejudice to any mandatory forum provided by law.

14.3. In the event of any discrepancy between the Italian and the English versions of these Terms, the Italian version prevails.

15. Contacts

Unleaf Advisoring S.R.L.S. — Via Sebino 11, 00199 Rome (RM), Italy · PEC company@pec.unleaf.it
General contact: info@securityportal.it
IP and legal reports (Article 10): compliance@securityportal.it
Personal data: privacy@unleaf.it