Terms of service
Scanning service terms
These terms apply to the External Attack Surface Monitoring service on every plan. They sit alongside the plan you choose when you subscribe. Last updated 28 October 2026.
What you are authorising
You warrant that you own or control every domain, subdomain and IP address you submit to DCS, and you authorise DCS to perform external, non-intrusive scanning of them. Scanning only ever looks at what is already visible from the public internet. We do not attempt to exploit anything we find, bypass authentication or do anything designed to disrupt your systems. If you submit something you do not have the right to have scanned, tell us and we will remove it from the service straight away.
Where the scans come from
Scanning originates from a fixed IP address, which DCS publishes. That lets you recognise our traffic in your logs and allow-list it if you want to. If the address changes, we publish the new one before it is used.
What the findings mean
Findings are provided for information. They describe what an outside observer could see at the time of the scan. A clean report does not guarantee the absence of vulnerabilities, and the service is not a penetration test, an audit or a certification. What you do with the findings, and in what order, is your decision.
Subscriptions and cancellation
Subscriptions are billed monthly. You can cancel at any time with 30 days' notice. Scans and reports continue until the notice period ends, and nothing further is charged after that. There is no minimum term.
Scan data retention
Scan results and the reports built from them are retained for 12 months from the date of each scan, then deleted. Any personal data involved is handled as described in our Privacy Policy.
Consultancy terms
These terms apply to Cyber Essentials, Cyber Essentials Plus and NHS DSPT readiness work, and to any other fixed-scope compliance engagement DCS quotes for.
Scope
The engagement covers exactly what the proposal describes, at the fixed price stated in it. If something outside that scope comes up, we say so and quote it before doing any of it. Nothing is added to the bill without your agreement.
What is not included
Unless the proposal says otherwise, the price excludes assessment and certification fees charged by the certification body, new hardware, software licences, and work on systems not listed in the proposal.
Certification
Certification is awarded by the certification body, not by DCS. We prepare you properly and review your answers before submission, but we cannot guarantee a pass, and the certification body's decision is final.
Remediation
Fixes identified in the gap report are quoted separately. You can have DCS do them, do them in-house or use another provider. The consultancy price is the same whichever you choose.
General terms
These terms apply to every service DCS provides.
Who you are contracting with
DCS IT Support is a trading name of DEFINEDCOMPLEXSOLUTIONS LTD. Registered in England and Wales. Company number: 15374102. VAT number: GB 460987358. Registered office: 3rd Floor, 86-90 Paul Street, London, EC2A 4NE, United Kingdom — registered office only, not a customer collection point, returns address or warehouse. Please contact DCS before sending goods or order-related correspondence.
Governing law
These terms are governed by the law of England and Wales, and the courts of England and Wales have exclusive jurisdiction over any dispute arising from them.
Questions
If anything here is unclear, ask. Call 01224 600337 or email [email protected] and the engineer who runs the service answers.