SciScope OÜ — legal

SciScope Scanner Feed — Terms of Service

Last updated: 22 July 2026

1. Who we are and what these Terms cover

1.1. The SciScope Scanner Feed (the "Service") is a curated IP threat intelligence data service — a scored IP reputation feed, per-IP lookup API and related data products served at feed.sciscope.ee — provided by SciScope OÜ, a private limited company registered in Estonia, registry code 16731450 VAT (KMKR) EE103007175, registered office Pärnu mnt 105, 11312 Tallinn, Estonia, contact: hello@sciscope.ee ("SciScope", "we", "us").

1.2. These Terms of Service (the "Terms") form a binding agreement between SciScope and the organization that subscribes to or uses the Service (the "Subscriber", "you"). Browsing our websites is governed separately by the Website Terms of Use.

1.3. Business customers only. The Service is offered exclusively to companies, public-sector bodies, and persons acting in the course of their trade, business or profession. By accepting these Terms you confirm that you are acting for business purposes, that you are not a consumer, and that the person accepting has authority to bind the Subscriber. Consumer-protection rules for distance contracts do not apply.

1.4. Acceptance. You accept these Terms by (a) requesting or activating an API key, (b) accessing the Service with an API key, or (c) signing an order or agreement that references them — whichever occurs first. For Enterprise customers, a signed agreement prevails over these Terms to the extent of any conflict.

2. Definitions

• "Feed" — the data products delivered by the Service: the scored IP feed (JSON/CSV), the high-confidence blocklist, the crawler-identity list, per-IP lookup responses, and aggregate statistics.
• "Indicator" — an individual IP address entry in the Feed, together with its score and tags.
• "Evidence" — the per-Indicator supporting data (timestamps, observation counts, categorized breakdowns, geolocation/ASN attributes).
• "API Key" — a credential issued by SciScope that authenticates access to the Service at a given Tier.
• "Tier" — a service level (Free, Pro, or Enterprise) as described in the Documentation and the current price list.
• "Organization" — the single legal entity named when the API Key is issued. Affiliates, group companies and clients are not included unless agreed in writing.
• "Subscription" — the paid right to use the Service at a Tier for the ordered period.
• "Documentation" — the technical documentation for the Service as published or provided by SciScope from time to time.

3. The Service and Tiers

3.1. The Service provides curated IP reputation data derived from SciScope's own distributed sensor network and screening processes. Scores and tags are assessments based on observed network activity at points in time — see clause 11.

3.2. Tiers:

3.3. We continuously develop the Service. We may modify or improve it, provided that during a paid Subscription period we do not materially reduce the core scope of the Pro Tier. The Free Tier and trials are provided as-is and may be modified, limited or discontinued at any time.

3.4. Rate limits and technical usage limits per Tier and per API Key are stated in the Documentation and may be adjusted with reasonable notice; per-key limits agreed in an order prevail.

4. Trials

4.1. Trials are issued manually: a 14-day Pro-level API key, extendable to 30 days at our discretion. No payment details are required and a trial does not convert into a paid Subscription automatically.

4.2. Trial keys are provided as-is, without any service commitment, and may be limited, suspended or revoked at any time. Clauses 6 (License), 7 (Acceptable use), 8 (Data protection), 11 (Disclaimers) and 12 (Liability) apply to trial use in full.

5. API Keys and security

5.1. API Keys are confidential credentials of the Organization. You must protect them, must not publish or share them outside the Organization, and must notify us at hello@sciscope.ee without undue delay if a key may have been compromised. We may rotate or revoke compromised or abused keys.

5.2. You must not circumvent Tier or rate limits (including by pooling multiple Free or trial keys, distributing requests to evade limits, or systematically scraping Indicator-level data out of endpoints not intended for bulk access).

6. License to the Feed

6.1. Licensed, not sold. The Feed and Evidence are licensed, not sold. All rights in the Service and the Feed — including copyright and the sui generis database right under Directive 96/9/EC and the Estonian implementation thereof — remain with SciScope. Extraction or re-utilization of the whole or a substantial part of the Feed outside the license below is prohibited.

6.2. Pro license. During an active Pro Subscription, SciScope grants the Subscriber a non-exclusive, non-transferable, non-sublicensable, worldwide license to access, download and store the Feed, and to use it solely for the internal network and information security of the Organization, namely to:

• (a) enforce and alert in security systems operated by or exclusively for the Organization (firewalls, IDS/IPS, WAF, mail security, SIEM/SOAR, EDR and comparable tooling);
• (b) perform internal analysis, correlation, triage and incident response concerning the Organization's own systems, networks and users; and
• (c) create internal derived artifacts (rules, configurations, watchlists) for the purposes in (a)–(b).

6.3. Free license. For the Free Tier, the license is limited to viewing and internal use of the aggregate statistics. You may quote or reproduce Free Tier aggregate statistics publicly with attribution: "Source: SciScope Scanner Feed (feed.sciscope.ee), retrieved [date]".

6.4. Restrictions. Except as expressly permitted in clause 6.5 or agreed in an Enterprise agreement, the Subscriber must not:

• (a) resell, redistribute, publish, disclose or otherwise make the Feed, Indicators in bulk, or Evidence available to any third party;
• (b) use the Feed to provide services to third parties — including managed security services, consulting deliverables that embed the Feed, or any product or data service that incorporates Feed data (these require an Enterprise agreement);
• (c) operate public mirrors of, or public lookup services over, the Feed;
• (d) use the Feed or Evidence to build, train, enrich or validate a product or dataset that substitutes for or competes with the Service;
• (e) remove or obscure proprietary notices or attribution (including the DB-IP attribution in clause 6.7); or
• (f) attempt to reverse-engineer or derive SciScope's non-public curation methodology beyond what the Documentation describes.

6.5. Incident-response exception. The Subscriber may disclose individual Indicators and their Evidence — in non-bulk form and in confidence — where reasonably necessary to investigate, respond to or report a specific security incident: to affected parties, contracted incident responders, CERT/CSIRT teams, and competent authorities; with attribution to "SciScope Scanner Feed" where practicable.

6.6. Freshness and retention. Threat data ages; SciScope decays and delists Indicators continuously. The Subscriber must refresh enforcement copies of the Feed regularly (at least every 7 days; the Documentation recommends more frequent refresh) so that removed Indicators drop out. Upon termination or expiry of the Subscription, the Subscriber must stop enforcement use within 7 days and delete stored copies of the Feed within 30 days, except that Indicators already embedded in historical logs, incident records, tickets and routine backups may be retained per the Subscriber's ordinary retention practice and legal obligations.

6.7. Third-party attribution. Geolocation and ASN attributes in the Feed are derived in part from DB-IP (db-ip.com) under CC BY 4.0. The attribution "IP geolocation by DB-IP" must be retained wherever the Feed's geolocation attributes are displayed or passed on under a permitted use.

7. Acceptable use

7.1. The Service may be used only for lawful, defensive security purposes. You must not use it to facilitate unlawful access, harassment, or wrongful interference with third-party systems.

7.2. You must not interfere with or disrupt the Service, probe or test its infrastructure except through the documented API surface, or attempt to access data or keys of other customers. Suspected vulnerabilities: report to hello@sciscope.ee (coordinated disclosure welcomed).

7.3. Sanctions and export control. You represent that the Organization is not subject to EU, UN, UK or US sanctions and is not established in a comprehensively embargoed territory, and you must not use or make the Service available in violation of applicable sanctions or export-control law.

8. Data protection

8.1. Indicators are IP addresses and may constitute personal data under the GDPR. SciScope processes them for network and information security purposes on the basis of legitimate interest (Article 6(1)(f) GDPR; see Recital 49). Details are set out in SciScope's Privacy Notice at https://sciscope.ee/privacy.

8.2. Independent controllers. For Feed data, each party is an independent controller of its own processing. Nothing in these Terms creates joint controllership or a controller–processor relationship between the parties.

8.3. The Subscriber undertakes, with respect to personal data in the Feed, to:

• (a) process it solely for the network and information security of the Organization (the purposes in clause 6.2);
• (b) ensure it has its own lawful basis for that processing;
• (c) not attempt to identify the natural person behind an Indicator except as necessary to investigate or respond to a specific security incident;
• (d) not use the Feed for marketing, credit, insurance or eligibility assessment, or for any decision producing legal or similarly significant effects concerning a natural person;
• (e) apply appropriate technical and organizational security measures; and
• (f) honour upstream removals by complying with the refresh obligation in clause 6.6.

8.4. Delisting and corrections. Requests concerning listed IP addresses (removal, correction, objection) can be sent to hello@sciscope.ee. We review such requests promptly; removals propagate to Subscribers through the normal Feed refresh. If a data-subject request received by the Subscriber concerns SciScope's processing, the Subscriber will refer it to the same address without undue delay.

8.5. Suspected false positives may be reported to hello@sciscope.ee. We welcome such reports but retain sole editorial control over the Feed.

8.6. International transfers. Where SciScope makes Feed data available to a Subscriber established outside the European Economic Area, the transfer is made under an appropriate Chapter V GDPR safeguard — normally the European Commission's Standard Contractual Clauses (controller-to-controller, Module One), which the Subscriber agrees to enter into with SciScope where required. Subscribers established in the EEA are unaffected by this clause.

9. Fees, invoicing and taxes

9.1. Fees are per the current price list or the order. Unless stated otherwise, Subscriptions are invoiced in advance in euros, payment within 14 days of the invoice date.

9.2. Prices are exclusive of VAT and other applicable taxes. Estonian VAT is added where required by law. For EU business customers with a valid VAT number, the reverse-charge mechanism applies (Article 196 of Directive 2006/112/EC); the Subscriber is responsible for providing a valid VAT number.

9.3. Founding price. Where a Subscription is taken at a price designated as a founding/early-adopter price, that unit price remains fixed for as long as the Subscription remains continuously active. Otherwise, we may change prices with at least 30 days' notice, effective from the next renewal.

9.4. Late payments accrue statutory late-payment interest under Estonian law. We may suspend the Service for non-payment 14 days after a written reminder.

9.5. Fees for elapsed periods are non-refundable. Prepaid, unused periods are refunded pro rata only where clause 10.4 or 13.2 so provides, or where mandatory law requires.

10. Term, renewal and termination

10.1. A Subscription runs for the ordered period and renews automatically for successive periods of the same length, unless either party gives notice of non-renewal by email at least 14 days before the end of the current period.

10.2. Either party may terminate for material breach if the breach is not cured within 14 days of written notice.

10.3. SciScope may suspend or terminate immediately if (a) the Subscriber breaches clause 6 (License), 7 (Acceptable use) or 8.3 (data-protection undertakings); (b) continued provision would create a security risk or breach applicable law; or (c) the Subscriber becomes insolvent.

10.4. If SciScope terminates for convenience or permanently discontinues the paid Service, prepaid unused fees are refunded pro rata.

10.5. On termination or expiry: API Keys are revoked; the Subscriber's duties under clause 6.6 (cease-use and deletion) apply; accrued payment obligations survive; and clauses 6.1, 6.4, 6.6, 6.7, 8, 11, 12, 14 and 15 survive.

11. Warranties and disclaimers

11.1. The Service and the Feed are provided "as is" and "as available", to the maximum extent permitted by law, without warranties of any kind, express or implied, including accuracy, completeness, currency, merchantability or fitness for a particular purpose.

11.2. Nature of threat intelligence. The Feed reflects probabilistic assessments derived from SciScope's own sensors and screening at points in time. Despite curation, false positives and false negatives can occur: an Indicator may belong to legitimate infrastructure, and hostile infrastructure may be absent from the Feed. Scores are opinions based on observed activity, not statements of fact about any person.

11.3. Your decisions remain yours. The Feed is an input into the Subscriber's own security decision-making, not a substitute for it. The Subscriber is solely responsible for how it deploys the Feed (including testing, staged rollout, and choice of block vs. alert) and for the consequences of enforcement decisions — including blocking legitimate traffic and failing to block hostile traffic.

11.4. Statistics, measurements and comparisons published on our websites are point-in-time measurements provided for information; they are not contractual warranties of future Feed content or performance.

11.5. Free Tier and trial use carry no availability or support commitment. For Pro, we operate the Service with reasonable skill and care; any specific service levels apply only if agreed in an Enterprise agreement.

12. Liability

12.1. To the maximum extent permitted by law, neither party is liable for indirect or consequential loss, loss of profit, revenue, business, goodwill or data.

12.2. SciScope's aggregate liability arising out of or in connection with the Service in any 12-month period is limited to the fees paid by the Subscriber for the Service in the 12 months preceding the first event giving rise to liability; for Free Tier and trial use, to EUR 100.

12.3. Nothing in these Terms excludes or limits liability for intentional breach or gross negligence (§ 106(2) of the Estonian Law of Obligations Act) or any other liability that cannot be excluded or limited under mandatory law.

13. Changes to these Terms

13.1. We may update these Terms. Material changes will be notified at least 30 days in advance by email to the Subscriber's registered contact and/or a notice on the Service. Continued use after the effective date constitutes acceptance.

13.2. If a material change adversely affects the Subscriber, the Subscriber may terminate the Subscription effective on the change's effective date, in which case prepaid unused fees are refunded pro rata.

14. Miscellaneous

14.1. These Terms, the applicable order and the Documentation form the entire agreement regarding the Service and supersede prior discussions. In case of conflict: signed agreement/order → these Terms → Documentation.

14.2. Neither party may assign this agreement without the other's consent, except that SciScope may assign it within its group or in connection with a merger or sale of the business.

14.3. Notices are given by email: to SciScope at hello@sciscope.ee; to the Subscriber at the contact registered when the API Key was issued.

14.4. Neither party is liable for failure caused by events beyond its reasonable control (force majeure); payment obligations are unaffected.

14.5. If a provision is held invalid, the remainder stays in force; the invalid provision is replaced by a valid one closest to its intent. Failure to enforce is not a waiver. These Terms are drawn up in English; the English text governs.

15. Governing law and disputes

15.1. These Terms are governed by Estonian law, excluding its conflict-of-laws rules and the UN Convention on Contracts for the International Sale of Goods (CISG).

15.2. Disputes not settled by negotiation are subject to the exclusive jurisdiction of Harju County Court (Harju Maakohus), Estonia.

SciScope OÜ · registry code 16731450 · VAT EE103007175 · Pärnu mnt 105, 11312 Tallinn, Estonia · hello@sciscope.ee