01. Scope of Agency
BastionID acts exclusively as a limited enforcement facilitator on behalf of the asset owner ("The Client"). When issuing takedown requests (including DMCA and EUCD notices), we do so based entirely on the representations and claims provided by the Client.
The Client bears full legal responsibility for confirming they hold the legitimate copyright to the targeted assets. BastionID is not a law firm and does not provide legal counsel. Our actions are technical and administrative responses to identified threats.
02. 'Best-Effort' Enforcement Reality
The digital landscape is highly evasive. BastionID utilizes aggressive, commercially reasonable efforts to suppress unauthorized content by targeting hosts, ISPs, and search indexes. However, we do not and cannot mathematically guarantee absolute eradication of any digital asset.
Certain offshore jurisdictions, rogue servers (bulletproof hosting), and decentralized networks (P2P/Dark Web) operate outside standard international legal frameworks. BastionID cannot compel non-compliant, sovereign rogue actors to remove content, though we will deploy maximum allowed network pressure to isolate them.
03. Zero-Knowledge & Data Handling
We operate on a strict need-to-know, minimal-retention architecture. Client telemetry, targeted URLs, and compromised assets gathered during reconnaissance are used solely for the execution of the enforcement protocol.
We do not sell client data. Due to the nature of threat intelligence, some data must be temporarily transmitted to third-party hosts or authorities to execute the takedown. BastionID assumes no liability for how third-party registries handle these mandatory legal submissions.
04. Absolute Limitation of Liability
By deploying BastionID, the Client agrees that our services are provided "AS-IS". Under no circumstances shall BastionID, its operators, or affiliated intelligence nodes be held liable for any direct, indirect, incidental, reputational, or financial damages resulting from leaked content, continued piracy, or the timeline of our suppression efforts.
We provide a tactical mitigation service, not an insurance policy against digital exposure. Refunds are strictly governed by specific service level agreements (SLAs), if applicable, and are not issued simply because a rogue offshore host refuses compliance.