Terms of use

1. Scope and acceptance

1.1. These Terms of use (the “Terms”) govern access to and use of the Security Portal, available at securityportal.it (the “Portal”), provided by Unleaf Advisoring S.R.L.S., registered office in Via Sebino 11, 00199 Rome (RM), Italy, tax code/VAT no. 17905611004, certified email (PEC) company@pec.unleaf.it (“Unleaf” or the “Provider”).

1.2. Use of the reserved area of the Portal is subject to acceptance of these Terms.

1.3. The Portal is a business-to-business service, intended for professionals and organisations (CISOs, security managers, security professionals, company staff). It is not intended for consumers or persons under 18.

2. Description of the service

2.1. The Portal offers, in Italian and English:

• editorial content on security (cyber, physical, travel security, information security): guides, checklists, glossaries, advisories, case studies, periodic digests;
• a conversational AI assistant that answers questions based solely on the Portal’s indexed content, citing the sources it uses (RAG — retrieval augmented generation);
• a personal dashboard with the history of your interactions (audit log), notifications, preferences and report export;
• content download in Markdown and PDF format.

2.2. The public pages of the Portal (home, catalogue, articles, digest archive) are freely accessible; the AI assistant, the dashboard and personal features are reserved for registered, approved users.

2.3. The Provider may modify, extend or discontinue Portal features; substantial changes to these Terms are communicated pursuant to art. 13.

3. Registration, account and security

3.1. Access upon approval. There is no open registration: applicants submit a request through the “Request access” form (name, email, organisation, requested role and an optional message); the Provider evaluates it at its discretion and, if approved, sends an invitation by email. The Provider may reject a request without any obligation to state reasons.

3.2. Roles. Each account is assigned a role (staff, professional, security manager, CISO) which modulates the depth of the assistant’s answers. The role is assigned by the Provider based on what is declared in the request; the user undertakes to provide truthful information.

3.3. Credentials. The account is personal and non-transferable. The user is responsible for safeguarding their credentials and for all activities carried out through their account, and undertakes to promptly notify the Provider of any unauthorised use. Two-factor authentication (TOTP MFA) is available — and recommended — from the Account page.

3.4. Security checks. The system applies automatic security measures, including the rejection of known compromised passwords and limits on login attempts.

4. Permitted use

4.1. The user may use the Portal for their own internal professional purposes or those of their organisation, in particular: consulting the content, querying the AI assistant, downloading content in the formats made available and reusing it internally, citing the source (“Portale Sicurezza — Unleaf Advisoring”) as indicated in the downloaded files.

5. Prohibited use

5.1. Unless authorised in writing by the Provider, it is forbidden to:

• resell, sublicense or publicly redistribute the Portal’s content or the assistant’s answers, in whole or in part, even free of charge;
• use scraping, crawlers, bots or automated access on the reserved area, or otherwise circumvent technical protection measures (authentication, usage limits);
• use the content or the assistant to build competing products or services, including training AI models or systems;
• share credentials or allow access by third parties who do not hold the account;
• submit to the assistant unlawful content, unnecessary personal data of third parties, or confidential/classified information the user has no right to dispose of;
• use the Portal for unlawful purposes or in breach of applicable rules.

6. AI assistant: nature of the service and limits

6.1. The assistant is an artificial intelligence system: the user interacts with a machine, not a human operator. This is disclosed in the interface (transparency note below the chat).

6.2. Answers are generated automatically from the Portal’s indexed content only, and report the sources used. When the Portal has no relevant information, the assistant says so instead of answering.

6.3. Answers may contain errors, inaccuracies or omissions. The user must verify information against the cited sources before relying on it, in particular before taking operational, organisational or security decisions. How the assistant works is described in the AI notice and in the Sources & method pages of the Portal, which form an integral part of these Terms.

6.4. The user remains solely responsible for the use they make of the answers, for the decisions taken on their basis and for their possible transmission within their organisation.

7. No professional advice

7.1. The Portal’s content and the assistant’s answers are for general informational and educational purposes only. They do not constitute, and in no case replace, personalised professional advice — legal, technical, security, insurance or otherwise — relating to the specific situation of the user or their organisation.

7.2. For specific needs (e.g. handling a real incident, regulatory obligations, tailored risk assessments) the user must consult qualified professionals. Use of the Portal does not establish any advisory relationship between the user and Unleaf.

8. Usage limits and availability

8.1. The AI assistant is subject to a limit of 100 queries per user per calendar month; once exceeded, the feature is suspended until the following month. The Provider may change the limit by giving notice in the interface.

8.2. The Portal is provided “as is” and “as available”, with no guarantee of continuity, response times or absence of interruptions. The Provider may temporarily suspend the service for maintenance, security or technical reasons.

8.3. Access to the Portal is currently free of charge, by invitation (pilot phase). Any introduction of paid plans will be communicated to registered users with reasonable notice.

9. Intellectual property

9.1. The Portal, its editorial content, structure, trademarks and distinctive signs are owned by Unleaf or their respective owners, and are protected by copyright and industrial property rules. Making the content available does not transfer any rights, only the limited licence of use under art. 4.

9.2. Some content incorporates excerpts and re-elaborations from public and institutional sources, selected according to the policy described in the Sources & method page, with the attributions required by the respective licences (shown in citations and metadata). Rights to such materials remain with their respective owners; any reuse of those materials by the user remains subject to the original licences.

9.3. The assistant’s answers are generated automatically from Portal content: they may be used by the user within the limits of art. 4 and with the prohibitions of art. 5.

10. Reports, corrections and complaints

10.1. Anyone who believes that Portal content infringes their rights (intellectual property, reputation, personal data) or contains errors may submit a report following the correction and takedown procedure published in the “Reports & corrections” section of Sources & method. Reports are examined within the timeframes indicated there.

11. Limitation of liability

11.1. To the maximum extent permitted by law, Unleaf is not liable for indirect or consequential damages, loss of profits, loss of data or reputational damage arising from use or non-use of the Portal, nor for damages arising from: (a) decisions taken by the user on the basis of the content or the assistant’s answers in breach of arts. 6-7; (b) temporary unavailability of the service; (c) events attributable to third-party infrastructure providers that cannot be controlled with ordinary diligence.

11.2. Unleaf’s liability remains unaffected in cases of wilful misconduct or gross negligence and in the other cases where the law does not allow limitations.

12. Account suspension and closure

12.1. The Provider may suspend or close an account, with reasoned notice where possible, in case of: breach of these Terms (in particular arts. 3 and 5), anomalous or abusive use of the service, risk to the security of the Portal or other users, or untruthful information provided in the access request.

12.2. In serious or urgent cases (e.g. account compromise, ongoing abuse) suspension may be immediate and notice given at the same time or afterwards.

12.3. The user may request closure of their account at any time by writing to the contact in art. 15. Upon closure, the retention terms indicated in the privacy notice and the data retention policy apply.

13. Changes to the Terms

13.1. The Provider may update these Terms. Substantial changes are communicated to registered users with reasonable notice (email or notice in the interface); use of the Portal after the changes take effect constitutes acceptance. The current version is always published on the Portal with its last-updated date.

14. Governing law and jurisdiction

14.1. These Terms are governed by Italian law.

14.2. Any dispute relating to these Terms or the use of the Portal falls under the exclusive jurisdiction of the Court of Rome, without prejudice to any mandatory forum provided by law.