SciScope OÜ — legal

SciScope Scanner Feed — Terms of Service

Last updated: 28 July 2026

1. Who we are and what these Terms cover

1.1. The SciScope Scanner Feed (the "Service") is a curated IP threat intelligence data service — a scored IP reputation feed, per-IP lookup API and related data products served at feed.sciscope.ee — provided by SciScope OÜ, a private limited company registered in Estonia, registry code 16731450 VAT (KMKR) EE103007175, registered office Tartu mnt 67/1-13b, 10115 Tallinn, Estonia, contact: hello@sciscope.ee ("SciScope", "we", "us").

1.2. These Terms of Service (the "Terms") form a binding agreement between SciScope and the organization or individual that subscribes to or uses the Service (the "Subscriber", "you"). Browsing our websites is governed separately by the Website Terms of Use.

1.3. Business and consumer customers. The Service is offered both to businesses — companies, public-sector bodies, and persons acting in the course of their trade, business or profession — and to individuals acting wholly or mainly outside their trade, business, craft or profession ("Consumers"). Where the Subscriber is a business, the person accepting these Terms confirms they have authority to bind the Subscriber. Where the Subscriber is a Consumer, clause 16 applies and prevails over any conflicting provision of these Terms, and nothing in these Terms limits mandatory consumer-protection rights under the law of the Consumer's country of residence.

1.4. Acceptance. You accept these Terms by (a) requesting or activating an API key, (b) accessing the Service with an API key, or (c) signing an order or agreement that references them — whichever occurs first. For Enterprise customers, a signed agreement prevails over these Terms to the extent of any conflict.

2. Definitions

• "Feed" — the data products delivered by the Service: the scored IP feed (JSON/CSV), the high-confidence blocklist, the crawler-identity list, per-IP lookup responses, and aggregate statistics.
• "Indicator" — an individual IP address entry in the Feed, together with its score and tags.
• "Evidence" — the per-Indicator supporting data (timestamps, observation counts, categorized breakdowns, geolocation/ASN attributes).
• "API Key" — a credential issued by SciScope that authenticates access to the Service at a given Tier.
• "Tier" — a service level (Free, Entry, Pro, or Enterprise) as described in the Documentation and the current price list.
• "Organization" — the single legal entity, or the individual Consumer, named when the API Key is issued. Affiliates, group companies and clients are not included unless agreed in writing.
• "Consumer" — an individual Subscriber acting wholly or mainly outside their trade, business, craft or profession.
• "Subscription" — the paid right to use the Service at a Tier for the ordered period.
• "Documentation" — the technical documentation for the Service as published or provided by SciScope from time to time.

3. The Service and Tiers

3.1. The Service provides curated IP reputation data derived from SciScope's own distributed sensor network and screening processes. Scores and tags are assessments based on observed network activity at points in time — see clause 11.

3.2. Tiers:

3.3. We continuously develop the Service. We may modify or improve it, provided that during a paid Subscription period we do not materially reduce the core scope of the subscribed paid Tier. The Free Tier and trials are provided as-is and may be modified, limited or discontinued at any time.

3.4. Rate limits and technical usage limits per Tier and per API Key are stated in the Documentation and may be adjusted with reasonable notice; per-key limits agreed in an order prevail.

4. Trials

4.1. Trials are issued manually: a 14-day Pro-level API key, extendable to 30 days at our discretion. No payment details are required and a trial does not convert into a paid Subscription automatically. When the trial period ends without an ordered Subscription, the API Key is not deactivated — it reverts to the Free Tier (aggregate statistics only), so you keep read access to the Service dashboard and to the key's own status endpoint.

4.2. Trial keys are provided as-is, without any service commitment, and may be limited, suspended or revoked at any time. Clauses 6 (License), 7 (Acceptable use), 8 (Data protection), 11 (Disclaimers) and 12 (Liability) apply to trial use in full.

5. API Keys and security

5.1. API Keys are confidential credentials of the Organization. You must protect them, must not publish or share them outside the Organization, and must notify us at hello@sciscope.ee without undue delay if a key may have been compromised. We may rotate or revoke compromised or abused keys.

5.2. You must not circumvent Tier or rate limits (including by pooling multiple Free or trial keys, distributing requests to evade limits, or systematically scraping Indicator-level data out of endpoints not intended for bulk access).

6. License to the Feed

6.1. Licensed, not sold. The Feed and Evidence are licensed, not sold. All rights in the Service and the Feed — including copyright and the sui generis database right under Directive 96/9/EC and the Estonian implementation thereof — remain with SciScope. Extraction or re-utilization of the whole or a substantial part of the Feed outside the license below is prohibited.

6.2. Pro license. During an active Pro Subscription, SciScope grants the Subscriber a non-exclusive, non-transferable, non-sublicensable, worldwide license to access, download and store the Feed, and to use it solely for the internal network and information security of the Organization, namely to:

• (a) enforce and alert in security systems operated by or exclusively for the Organization (firewalls, IDS/IPS, WAF, mail security, SIEM/SOAR, EDR and comparable tooling);
• (b) perform internal analysis, correlation, triage and incident response concerning the Organization's own systems, networks and users; and
• (c) create internal derived artifacts (rules, configurations, watchlists) for the purposes in (a)–(b).

6.3. Free license. For the Free Tier, the license is limited to viewing and internal use of the aggregate statistics. You may quote or reproduce Free Tier aggregate statistics publicly with attribution: "Source: SciScope Scanner Feed (feed.sciscope.ee), retrieved [date]".

6.4. Restrictions. Except as expressly permitted in clause 6.5 or agreed in an Enterprise agreement, the Subscriber must not:

• (a) resell, redistribute, publish, disclose or otherwise make the Feed, Indicators in bulk, or Evidence available to any third party;
• (b) use the Feed to provide services to third parties — including managed security services, consulting deliverables that embed the Feed, or any product or data service that incorporates Feed data (these require an Enterprise agreement);
• (c) operate public mirrors of, or public lookup services over, the Feed;
• (d) use the Feed or Evidence to build, train, enrich or validate a product or dataset that substitutes for or competes with the Service;
• (e) remove or obscure proprietary notices or attribution (including the DB-IP attribution in clause 6.7); or
• (f) attempt to reverse-engineer or derive SciScope's non-public curation methodology beyond what the Documentation describes.

6.5. Incident-response exception. The Subscriber may disclose individual Indicators and their Evidence — in non-bulk form and in confidence — where reasonably necessary to investigate, respond to or report a specific security incident: to affected parties, contracted incident responders, CERT/CSIRT teams, and competent authorities; with attribution to "SciScope Scanner Feed" where practicable.

6.6. Freshness and retention. Threat data ages; SciScope decays and delists Indicators continuously. The Subscriber must refresh enforcement copies of the Feed regularly (at least every 7 days; the Documentation recommends more frequent refresh) so that removed Indicators drop out. Upon termination or expiry of the Subscription, the Subscriber must stop enforcement use within 7 days and delete stored copies of the Feed within 30 days, except that Indicators already embedded in historical logs, incident records, tickets and routine backups may be retained per the Subscriber's ordinary retention practice and legal obligations.

6.7. Third-party attribution. Geolocation and ASN attributes in the Feed are derived in part from DB-IP (db-ip.com) under CC BY 4.0. The attribution "IP geolocation by DB-IP" must be retained wherever the Feed's geolocation attributes are displayed or passed on under a permitted use.

7. Acceptable use

7.1. The Service may be used only for lawful, defensive security purposes. You must not use it to facilitate unlawful access, harassment, or wrongful interference with third-party systems.

7.2. You must not interfere with or disrupt the Service, probe or test its infrastructure except through the documented API surface, or attempt to access data or keys of other customers. Suspected vulnerabilities: report to hello@sciscope.ee (coordinated disclosure welcomed).

7.3. Sanctions and export control. You represent that the Organization is not subject to EU, UN, UK or US sanctions and is not established in a comprehensively embargoed territory, and you must not use or make the Service available in violation of applicable sanctions or export-control law.

8. Data protection

8.1. Indicators are IP addresses and may constitute personal data under the GDPR. SciScope processes them for network and information security purposes on the basis of legitimate interest (Article 6(1)(f) GDPR; see Recital 49). Details are set out in SciScope's Privacy Notice at https://sciscope.ee/privacy.

8.2. Independent controllers. For Feed data, each party is an independent controller of its own processing. Nothing in these Terms creates joint controllership or a controller–processor relationship between the parties.

8.3. The Subscriber undertakes, with respect to personal data in the Feed, to:

• (a) process it solely for the network and information security of the Organization (the purposes in clause 6.2);
• (b) ensure it has its own lawful basis for that processing;
• (c) not attempt to identify the natural person behind an Indicator except as necessary to investigate or respond to a specific security incident;
• (d) not use the Feed for marketing, credit, insurance or eligibility assessment, or for any decision producing legal or similarly significant effects concerning a natural person;
• (e) apply appropriate technical and organizational security measures; and
• (f) honour upstream removals by complying with the refresh obligation in clause 6.6.

8.4. Delisting and corrections. Requests concerning listed IP addresses (removal, correction, objection) can be sent to hello@sciscope.ee. We review such requests promptly; removals propagate to Subscribers through the normal Feed refresh. If a data-subject request received by the Subscriber concerns SciScope's processing, the Subscriber will refer it to the same address without undue delay.

8.5. Suspected false positives may be reported to hello@sciscope.ee. We welcome such reports but retain sole editorial control over the Feed.

8.6. International transfers. Where SciScope makes Feed data available to a Subscriber established outside the European Economic Area, the transfer is made under an appropriate Chapter V GDPR safeguard — normally the European Commission's Standard Contractual Clauses (controller-to-controller, Module One), which the Subscriber agrees to enter into with SciScope where required. Subscribers established in the EEA are unaffected by this clause.

9. Fees, invoicing and taxes

9.1. Fees are per the current price list or the order. Unless stated otherwise, Subscriptions are invoiced in advance in euros, payment within 14 days of the invoice date.

9.2. Prices in the price list are stated exclusive of VAT and other applicable taxes, with the VAT-inclusive amount shown alongside them. VAT is added where required by law. For EU business customers with a valid VAT number the reverse-charge mechanism applies (Article 196 of Directive 2006/112/EC); the Subscriber is responsible for providing a valid VAT number at signup, and where no valid number is provided the Subscriber is charged VAT at the applicable rate. For Consumers, the amount payable is the VAT-inclusive amount shown at the point of purchase.

9.3. Early-adopter price. Prices designated as early-adopter prices are available for Subscriptions commenced on or before 31 December 2026. We may publish a later date to extend that availability; we will not bring it forward. Where a Subscription is taken at a price designated as an early-adopter price, that unit price remains fixed for as long as the Subscription remains continuously active, including across renewals and tier changes within a continuously active Subscription. If the Subscription lapses or is terminated, the price list current at the time applies to any new Subscription. Otherwise, we may change prices with at least 30 days' notice, effective from the next renewal.

9.4. Late payments accrue statutory late-payment interest under Estonian law. We may suspend the Service for non-payment 14 days after a written reminder.

9.5. Fees for elapsed periods are non-refundable. Prepaid, unused periods are refunded pro rata only where clause 10.4 or 13.2 so provides, or where mandatory law requires.

10. Term, renewal and termination

10.1. A Subscription runs for the ordered period and renews automatically for successive periods of the same length, unless either party gives notice of non-renewal by email at least 14 days before the end of the current period.

10.2. Either party may terminate for material breach if the breach is not cured within 14 days of written notice.

10.3. SciScope may suspend or terminate immediately if (a) the Subscriber breaches clause 6 (License), 7 (Acceptable use) or 8.3 (data-protection undertakings); (b) continued provision would create a security risk or breach applicable law; or (c) the Subscriber becomes insolvent.

10.4. If SciScope terminates for convenience or permanently discontinues the paid Service, prepaid unused fees are refunded pro rata.

10.5. On termination or expiry: API Keys are revoked; the Subscriber's duties under clause 6.6 (cease-use and deletion) apply; accrued payment obligations survive; and clauses 6.1, 6.4, 6.6, 6.7, 8, 11, 12, 14 and 15 survive.

11. Warranties and disclaimers

11.1. The Service and the Feed are provided "as is" and "as available", to the maximum extent permitted by law, without warranties of any kind, express or implied, including accuracy, completeness, currency, merchantability or fitness for a particular purpose.

11.2. Nature of threat intelligence. The Feed reflects probabilistic assessments derived from SciScope's own sensors and screening at points in time. Despite curation, false positives and false negatives can occur: an Indicator may belong to legitimate infrastructure, and hostile infrastructure may be absent from the Feed. Scores are opinions based on observed activity, not statements of fact about any person.

11.3. Your decisions remain yours. The Feed is an input into the Subscriber's own security decision-making, not a substitute for it. The Subscriber is solely responsible for how it deploys the Feed (including testing, staged rollout, and choice of block vs. alert) and for the consequences of enforcement decisions — including blocking legitimate traffic and failing to block hostile traffic.

11.4. Statistics, measurements and comparisons published on our websites are point-in-time measurements provided for information; they are not contractual warranties of future Feed content or performance.

11.5. Free Tier and trial use carry no availability or support commitment. For Pro, we operate the Service with reasonable skill and care; any specific service levels apply only if agreed in an Enterprise agreement.

12. Liability

12.1. To the maximum extent permitted by law, neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill or data.

12.2. SciScope's aggregate liability arising out of or in connection with the Service in any 12-month period is limited to the fees paid by the Subscriber for the Service in the 12 months preceding the first event giving rise to liability; for Free Tier and trial use, to EUR 100.

12.3. Nothing in these Terms excludes or limits liability for intentional breach or gross negligence (§ 106(2) of the Estonian Law of Obligations Act) or any other liability that cannot be excluded or limited under mandatory law.

13. Changes to these Terms

13.1. We may update these Terms. Material changes will be notified at least 30 days in advance by email to the Subscriber's registered contact and/or a notice on the Service. Continued use after the effective date constitutes acceptance.

13.2. If a material change adversely affects the Subscriber, the Subscriber may terminate the Subscription effective on the change's effective date, in which case prepaid unused fees are refunded pro rata.

14. Miscellaneous

14.1. These Terms, the applicable order and the Documentation form the entire agreement regarding the Service and supersede prior discussions. In case of conflict: signed agreement/order → these Terms → Documentation.

14.2. Neither party may assign this agreement without the other's consent, except that SciScope may assign it within its group or in connection with a merger or sale of the business.

14.3. Notices are given by email: to SciScope at hello@sciscope.ee; to the Subscriber at the contact registered when the API Key was issued.

14.4. Neither party is liable for failure caused by events beyond its reasonable control (force majeure); payment obligations are unaffected.

14.5. If a provision is held invalid, the remainder stays in force; the invalid provision is replaced by a valid one closest to its intent. Failure to enforce is not a waiver. These Terms are drawn up in English; the English text governs.

15. Governing law and disputes

15.1. These Terms are governed by Estonian law, excluding its conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods (CISG).

15.2. Subject to clause 16.7, disputes not settled by negotiation are subject to the exclusive jurisdiction of Harju County Court (Harju Maakohus), Estonia.

16. Consumers

16.1. Scope. This clause applies only where the Subscriber is a Consumer. It prevails over any conflicting provision of these Terms. Nothing in these Terms excludes or limits rights a Consumer has under mandatory law, including the statutory remedies for digital content and digital services that do not conform to the contract.

16.2. Right of withdrawal. A Consumer may withdraw from the contract within 14 days of its conclusion, without giving reasons. To withdraw, send an unambiguous statement to hello@sciscope.ee before the period expires; the model withdrawal form may be used but is not required. We refund all payments received within 14 days of being informed, using the same means of payment unless agreed otherwise.

16.3. Immediate access and loss of the withdrawal right. The Service is supplied immediately: an API Key gives access to the Feed as soon as it is issued. If a Consumer expressly requests that supply begin during the withdrawal period and acknowledges that the right of withdrawal is lost once the contract is fully performed, then the right of withdrawal is lost when supply has been fully performed. Where a Consumer withdraws after supply has begun but before full performance, the Consumer pays an amount proportionate to what was supplied up to that point. We ask for that request and acknowledgement at signup; a Consumer who does not give them keeps the full 14-day right and access begins after the period ends.

16.4. Conformity. Clause 11 ("as is") does not apply to Consumers to the extent it would exclude the statutory conformity guarantee for digital content and digital services. If the Service does not conform to the contract, a Consumer may require it be brought into conformity, or obtain a proportionate price reduction or termination, as provided by law.

16.5. Liability. The limitations in clause 12 do not apply to liability that cannot lawfully be limited towards a Consumer, including liability for death or personal injury, for intent or gross negligence, and under mandatory product- and consumer-protection law.

16.6. Changes and renewal. Material changes under clause 13 are notified at least 30 days in advance and a Consumer may terminate free of charge before they take effect. A Consumer may give notice of non-renewal at any time up to the end of the current period, and prepaid unused periods are refunded pro rata where the Consumer terminates for a reason attributable to SciScope.

16.7. Jurisdiction and applicable law. A Consumer may bring proceedings against SciScope in the courts of Estonia or of the Consumer's country of residence, and may be sued by SciScope only in the courts of the Consumer's country of residence. The choice of Estonian law in clause 15.1 does not deprive a Consumer of the protection of mandatory provisions of the law of their country of residence.

16.8. Out-of-court dispute resolution. A Consumer may refer a dispute to the Consumer Disputes Committee at the Estonian Consumer Protection and Technical Regulatory Authority (Tarbijakaitse ja Tehnilise Järelevalve Amet), Endla 10a, 10122 Tallinn, https://ttja.ee. Consumers resident elsewhere in the EU may seek assistance from their national European Consumer Centre. We are not obliged to participate in, and have not committed to, any particular out-of-court dispute-resolution scheme.

SciScope OÜ · registry code 16731450 · VAT EE103007175 · Tartu mnt 67/1-13b, 10115 Tallinn, Estonia · hello@sciscope.ee