DOMOS

End User License Agreement (EULA)

Version date: 11 February 2026

These end user license terms (“License Terms”) govern your use of DOMOS as a user (“end customer”, “you”) vis-à-vis SECUDOS GmbH (hereinafter SECUDOS), Südfeld 9C, 59174 Kamen, Germany (“provider”, “we”).

§ 1 Subject Matter, Scope

1. These License Terms govern the legal relationship between the parties regarding the use of DOMOS and, where applicable, related services and maintenance services as described in the respective current service description.

2. These License Terms apply worldwide to:

   • provision as an ISO image, VM image, or comparable digital form,
   • provision preinstalled on hardware appliances,
   • B2B and B2C use.
     Mandatory consumer protection rights at the consumer’s habitual residence remain unaffected.

3. Unless otherwise agreed, these License Terms apply in the version valid at the time of ordering, activation, installation, or first use.

4. Legally relevant declarations and notices by the end customer in relation to the contractual relationship (e.g., setting a deadline, notice of defects, termination, withdrawal, reduction) must be made in text form (e.g., email) unless a stricter form is required by law.

5. Deviating, conflicting, or supplementary terms of the end customer become part of the contract only if we expressly agree to their validity in text form. This also applies if we provide services or grant rights of use with knowledge of such terms.

§ 2 Changes to the License Terms

1. B2B: We may change these License Terms with effect for the future if there is an objective reason (e.g., changes in law, security requirements, technical development). We will notify you in text form at least two (2) months before the changes take effect (“change notice”). If you do not object within four (4) weeks of receiving the change notice, the changes are deemed accepted. We will point out the right to object and the consequences in the change notice.

2. B2C: For consumers, changes apply only if permitted by applicable law and reasonable for the consumer. Where required, the consumer’s consent will be obtained.

3. If you object in due time (B2B), the most recently agreed License Terms remain in force until the term of the last acquired license period ends. The right to terminate for cause remains unaffected.

§ 3 Offer and Contract Formation

1. Service descriptions on websites, in documentation, or in marketing materials are non-binding and subject to change unless explicitly designated as a binding offer.

2. Upon request (also via resellers/distributors), you will receive an individual offer in text form. By placing an order, you submit a binding offer to conclude a contract under the conditions stated in the offer.

3. The contract is concluded upon our order confirmation in text form or by providing download/ISO access, a license file/license key, or handing over the appliance, whichever occurs first.

§ 4 Provision, Delivery, Start Date

1. The time of provision results from the order confirmation or the agreed delivery period. The delivery period begins once we have confirmed the order and all information required for performance has been provided.

2. For digital deliveries (ISO/images/downloads), provision is deemed completed upon transmission of a download link, access data, license key, or the license file.

3. For appliances, provision is deemed completed upon handover to the carrier or delivery in accordance with the agreed delivery terms.

4. The start date of the term is the license start date specified in the offer, invoice, or license management.

§ 5 Rights of Use

1. We grant you a simple, non-exclusive right, limited to the term, non-transferable and non-sublicensable, to install, load, display, run, copy, and store the proprietary components of DOMOS within the contractually agreed scope.

2. The specific scope of use (e.g., number of installations/instances/appliances) results from the offer, order, invoice, or license details. In case of doubt, use is limited to the contractually agreed scope.

3. You may make copies only to the extent technically necessary for the contractual use (in particular installation and loading into RAM). In addition, you may create the minimum number of backup copies required and keep them solely for backup purposes. Copyright and protection notices must be retained.

4. Any further rights in open source components arise exclusively from their respective licenses (see § 7).

§ 6 Restrictions on Use, Reverse Engineering, Protection Mechanisms

1. You are prohibited, to the extent permitted by law, from:

   • making proprietary components of DOMOS available to third parties, renting, lending, sublicensing, or making them publicly accessible,
   • changing or modifying proprietary components or creating derivative works thereof,
   • removing, altering, or suppressing copyright notices, serial numbers, license notices, trademarks, labels, or other identifiers,
   • circumventing or removing copy protection or other protection mechanisms.

2. Reverse engineering (proprietary components):
   To the extent permitted by law, it is prohibited to decompile, disassemble, reverse engineer, or otherwise analyze the proprietary components in whole or in part in order to disclose source code, internal structures, or protected functionalities.

3. Mandatory exceptions:
   The restrictions under para. 2 do not apply to the extent and for as long as

   • reverse engineering is mandatorily permitted under applicable law, in particular to achieve interoperability,
   • actions are expressly permitted by applicable open source licenses,
   • an analysis serves exclusively security testing purposes and no protected information is disclosed or published, to the extent permitted by law.

4. It is prohibited to use or perform devices, software, data, or interventions that are suitable to impair or manipulate the physical or logical structure of the systems and services (including update, signature, or provisioning mechanisms).

§ 7 Free and Open Source Software (FOSS)

1. DOMOS contains free and open source software (“FOSS components”) under the respective FOSS licenses.

2. Rights of use in FOSS components are granted to you directly by the respective rights holders in accordance with the applicable FOSS licenses. These License Terms do not restrict your rights under FOSS licenses.

3. The license texts of the open source components contained in DOMOS are available on the system, in particular under: /usr/share/licenses

4. Source code offer (GPL components): We will provide the complete source code of GPL-licensed components, including our modifications, upon request. Provision is generally free of charge via download; if delivery on a data carrier or shipping is desired or required, we may charge reasonable reimbursement for the data carrier and shipping. Requests should be sent to: support@secudos.com. The source code will be kept available for at least three (3) years from provision of the respective version.

5. Any support, warranty, liability, or indemnity commitments we provide apply exclusively in the relationship between us and you. The relationship between you and the rights holders of the FOSS components is governed exclusively by the respective FOSS licenses.

§ 8 Software Bill of Materials (SBOM)

1. For all versions and builds of DOMOS, we provide a Software Bill of Materials (SBOM). It is available in the machine-readable SPDX format (version 3.0.1).

2. The SBOM contains information about software components included in DOMOS and their known dependencies at the time of creation.

3. The respective SBOM can be found on the system under /usr/share/sbom/, if provided.

4. The SBOM is provided solely for transparency, security analysis, and compliance support.

5. To the extent permitted by law, providing an SBOM does not constitute any assurance regarding

   • completeness,
   • freedom from errors,
   • up-to-dateness, or
   • absence of security vulnerabilities, and does not give rise to any further warranty or liability claims.

6. There is no obligation to continuously update SBOMs already provided unless expressly agreed or required by law.

§ 9 Access Data, Downloads, Updates

1. Where required, we will provide access data, download access, license files, or license keys in text form.

2. You are obliged to keep access data and license information confidential, to protect them from access by third parties, and to act promptly in the event of suspected unauthorized use (e.g., password change, blocking, notifying us).

3. No telemetry: DOMOS does not transmit telemetry or usage data to us. This does not affect technical connections that arise solely from update sources, package repositories, or third-party network infrastructure used by you.

4. Updates: We may provide updates, in particular security-relevant updates. Installation and operation are generally your responsibility unless maintenance services have been agreed.

5. Update sources: Where DOMOS accesses external package sources (e.g., distribution repositories), availability and content of those sources are the responsibility of the respective operators. If we provide our own repositories or update mechanisms, their availability and scope are governed by the service description.

6. Support periods and product lifecycle: If support periods, maintenance windows, release lines, or end-of-life information (EOL/EOS) are stated in the offer, service description, or product documents, they define the framework for providing updates and support. Without an explicit commitment, there is no entitlement to updates for a specific duration or frequency.

7. EOL/EOS notice: If we define an end-of-life or end-of-support date for a version, we will, where possible, inform B2B customers with reasonable lead time in text form or via a designated customer portal/download area. Mandatory consumer rights remain unaffected.

§ 10 Restriction or Blocking of Use

1. We are entitled to restrict or block the use of DOMOS and/or related services if

   • you materially breach these License Terms,
   • the use is unlawful or abusive,
   • this is necessary to mitigate security risks or to protect system integrity,
   • we are required to do so by law, authorities, or a court.

2. In the case of planned maintenance work, services may be temporarily restricted. Where reasonable, we will announce maintenance windows with appropriate advance notice.

3. If a block is due to reasons attributable to you, costs for blocking/unblocking may be charged according to the current price list, if agreed and permissible under applicable law. You may prove lower costs.

§ 11 End Customer Responsibility for Content and Operation

1. You are solely responsible for ensuring that you have the necessary rights to use your own or third-party content and that such use is lawful.

2. We are not obliged and are generally not able to review content processed by you for legal violations.

3. You are responsible for all activities carried out via your accounts. Access data must not be shared with third parties. If you suspect unauthorized use, you must inform us without undue delay.

4. You are obliged to implement appropriate IT security measures, in particular regular backups, patch management, access protection, and malware protection.

§ 12 Prices and Payment Terms (where applicable)

1. Unless otherwise agreed, the prices of the respective current price list apply in euros plus statutory VAT (where applicable).

2. Payment periods result from the invoice. In case of late payment, the statutory rules apply. For entrepreneurs, the statutory default interest applies; further damages remain reserved.

3. If circumstances become known after contract conclusion that materially impair creditworthiness, we may request appropriate security or refuse performance in accordance with statutory provisions.

§ 13 Assignment, Set-off, Right of Retention

1. Assignment of claims against us is permitted only with our prior consent in text form, unless mandatory law provides otherwise. § 354a of the German Commercial Code (HGB) remains unaffected.

2. Set-off and rights of retention are permitted only with undisputed or legally established claims. For consumers, this applies only to the extent permitted by applicable law.

§ 14 Technical Notices, Documents, Data Carriers

1. We may inform you by email about security-critical events, technical changes, and relevant updates. You will provide a suitable contact address and keep it up to date.

2. Documents provided by us (documentation, manuals, plans, service descriptions, drawings) remain our property and/or subject to our rights unless otherwise agreed. Disclosure to third parties is permitted only with prior consent in text form, unless mandatory law provides otherwise.

§ 15 Term, Termination, End of Use

1. The term results from the offer/order/invoice or license details. Unless otherwise agreed, the initial term is twelve (12) months and is extended by twelve (12) months each unless terminated with three (3) months’ notice before the end of the term. Mandatory consumer rules may provide otherwise.

2. The right to terminate for cause remains unaffected. Cause exists in particular if

   • you materially exceed the license scope and do not remedy the breach within a reasonable period despite notice,
   • you are significantly in arrears with due payments (for paid licenses),
   • insolvency proceedings are applied for or opened (B2B) or comparable circumstances exist,
   • the use is unlawful or endangers security.

3. Upon termination of the right of use, you must cease using the proprietary components and remove installed copies. Backup copies must be deleted or destroyed unless statutory retention obligations apply. Rights and obligations under open source licenses remain unaffected.

4. Where data or files are stored with us (e.g., in optional support or download portals), they may be deleted after contract end. You are obliged to back up your data in good time. Statutory retention obligations and preservation of evidence remain unaffected.

§ 16 Liability

1. Unless otherwise provided in these License Terms, we are liable in accordance with statutory provisions.

2. We are liable for damages, regardless of legal basis, in cases of intent and gross negligence.

3. In cases of simple negligence, we are liable only

   • for damages arising from injury to life, body, or health,
   • and for breach of essential contractual obligations (cardinal obligations).
     In this case, liability is limited to the foreseeable damage typical at the time of contract conclusion.

4. We are not liable for indirect damages or consequential damages (in particular loss of profit, business interruption, data loss) unless mandatory law provides otherwise or the damage is due to intent/gross negligence.

5. You are obliged to take appropriate measures to prevent and mitigate damage, in particular by creating regular backup copies of data and performing security checks.

6. The liability limitations also apply in favor of our corporate bodies, employees, representatives, and vicarious agents.

7. Force majeure: We are released from the obligation to perform for as long and to the extent an event of force majeure exists (e.g., natural events, war, riots, sabotage, governmental interventions, outages of networks/providers outside our control). Statutory privileges remain unaffected.

§ 17 Warranty, Defect Rights

1. For open source components, the respective FOSS licenses apply.

2. B2B (entrepreneurs): For proprietary components, to the extent permitted by law, no warranty applies beyond expressly warranted characteristics. Otherwise, statutory provisions apply insofar as they cannot be effectively excluded or limited.

3. B2C (consumers): Your statutory defect rights remain unaffected. This applies in particular to statutory rules for digital products, including conformity requirements and statutory obligations to provide updates, insofar as applicable to the contract.

4. Assurances, guarantees, or agreed qualities exist only if expressly agreed in text form (e.g., in the offer, service description, or a separate guarantee statement).

§ 18 Data Protection

1. Where we process personal data, this is done exclusively in accordance with our privacy notice at:
   https://secudos.de/de/datenschutz

2. If you obtain maintenance services and we thereby gain access to personal data within your responsibility, a data processing agreement pursuant to Art. 28 GDPR must be concluded where required. For such an agreement, please contact us at datenschutz@secudos.com.

3. You remain responsible for complying with data protection obligations within your area of responsibility, including informing data subjects and safeguarding data subject rights.

§ 19 Confidentiality

1. Both parties undertake to keep confidential information secret. This obligation continues for two (2) years after the end of the contract.

2. Excluded are information that

   • was demonstrably already known,
   • becomes publicly known without breach of duty,
   • is lawfully obtained from third parties without a confidentiality obligation,
   • must be disclosed due to a legal obligation or an official/court order.
     Where permitted, the disclosing party will inform the other party in advance.

3. Access to confidential information is granted only to persons who need it for contract performance and who are bound by confidentiality.

§ 20 Trademarks, Project Separation, Hardware

1. DOMOS, logos and marks of SECUDOS are protected. You do not receive any rights to our trademarks.

2. AlmaLinux is an independent open source distribution. These License Terms do not establish any economic or organizational connection to the AlmaLinux OS Foundation.

3. For appliances, hardware components may originate from third parties. For hardware, the respective manufacturer terms apply. To the extent not mandatorily required by law, we assume no liability for hardware defects not caused by us.

§ 21 Governing Law, Language, Jurisdiction

1. The laws of the Federal Republic of Germany apply, excluding the UN Convention on Contracts for the International Sale of Goods (CISG), to the extent permitted.

2. Consumers: This choice of law applies only insofar as it does not deprive you of the protection of mandatory provisions of the law of the state in which you have your habitual residence.

3. If translations of these License Terms exist, the German version prevails in case of doubt, to the extent permitted by applicable law.

4. Jurisdiction (B2B): Exclusive jurisdiction for all disputes arising directly or indirectly from the contractual relationship and all disputes related to the contractual relationship is the registered office of SECUDOS in Kamen. SECUDOS is also entitled to bring an action at the place of performance pursuant to these provisions or a prevailing individual agreement, or at the general place of jurisdiction of the end customer. Mandatory statutory provisions, in particular on exclusive jurisdiction, remain unaffected.
   Regardless, both parties should, where possible, seek an amicable settlement by contacting each other before taking legal action.

§ 22 Severability Clause

If any provision of these License Terms is or becomes invalid, the validity of the remaining provisions remains unaffected. The invalid provision will be replaced by a valid provision that comes closest to the intended economic purpose, to the extent permitted by applicable law.

Our general terms and conditions apply.