CSC owner-approved agreement template, version DG-2026-10-19-v1. Not yet signed by a customer. Customer-specific scope, independent domain authority verification and payment eligibility are required before activation.

CSC Domain Guard — Customer Service Agreement and Monitoring Authorization

CSC OWNER-APPROVED SERVICE AGREEMENT TEMPLATE, version DG-2026-10-19-v1. Approved: Michigan-only customer eligibility; 30-day post-termination export request; 90-day detailed-report retention; the direct-damages liability cap, exceptions and dispute procedure below. Not an executed contract until the identified customer and CSC complete and sign their own agreed scope. Legal review remains recommended. Tax classification and payment collection are not authorized by this approval.

Provider: Case Sensitive Computers, LLC (CSC), Michigan, USA. Support and notices: joshualopez@casesensitivecomputers.com. Business hours: Monday–Friday, 9 AM–5 PM Eastern, excluding observed U.S. federal holidays.

1. Contract, authorized customer and scope

During the initial launch, only businesses with an independently verified Michigan billing address are eligible. CSC may decline out-of-state applications until its tax procedures support them. The customer must be the domain owner or possess documented authority to authorize the read-only monitoring below. The parties will identify the customer's legal organization, authorized representative, one root domain, up to three explicitly named hostnames, designated notice recipient, and verified authority in the signed schedule. No wildcard, unrelated domain, or third-party endpoint is included. Signing this document does not establish authority without CSC's independent review. Any changes to authorized hostnames or scope must be accepted in writing by both parties before scanning.

2. Service

CSC Domain Guard performs scheduled, normally daily, read-only checks of public domain-registration/RDAP details, specified DNS and email-routing records, and TLS certificates for expressly authorized hostnames. CSC provides recorded findings and change notifications to an approved opt-in email. Automated plan includes automated monitoring; Managed includes everything in Automated plus one real human review per calendar month and a plain-language summary. Managed non-emergency inquiries received through the designated support email will be acknowledged within two business days; acknowledgment is not remediation or resolution.

Services do not include registrar access, domain renewals, DNS changes, website hosting, penetration testing, vulnerability assessments, recovery operations, guaranteed incident detection, immediate alerting, 24/7 response or cybersecurity insurance. Third-party registries and network services may provide stale data; unexpected changes are not proof of an attack. CSC does not promise uninterrupted availability or prevention of loss.

3. Plans, charges and renewal

Automated: $49 one-time onboarding and $29/month. First checkout subtotal $78, excluding applicable tax. Managed: $199 one-time onboarding and $79/month. First checkout subtotal $278, excluding applicable tax. Pricing covers one approved root domain and at most three additional named hostnames. Expansion or remediation requires a separate written quote. Payment is collected through Stripe and the monthly subscription begins at checkout; the initial invoice includes setup and the first month. The customer authorizes recurring monthly payments until cancellation under section 5. Any tax lawfully applicable at the time of sale is shown before payment.

4. Activation

CSC will begin the approved monitoring within two business days after both (a) independently verified acceptance of the complete signed scope and (b) confirmed paid subscription. CSC will send an activation confirmation only after the initial authorized monitor actually operates. Payment alone never authorizes a domain scan. If CSC cannot activate within that window and the customer declines a proposed rescheduled activation, CSC will cancel future renewal and refund the full initial charge.

5. Cancellation and refunds

The customer can request cancellation at any time through CSC's verified support email or Stripe's hosted customer management portal. CSC will stop future renewals at the end of the current paid period; authorized monitoring generally continues until that date unless the domain owner withdraws monitoring permission sooner. Upon an immediate scope withdrawal, CSC stops monitoring even if billing cancellation is pending. If the customer cancels before initial activation, CSC will stop future renewal and refund the whole initial onboarding and first-month payment, including taxes collected. After activation there is no routine partial-period refund, except as required by law or when CSC fails to provide the contracted service. Payment or subscription disputes are examined against Stripe's transaction records and applicable law.

6. Customer responsibilities

Customer maintains current contact and billing information, registrar access and renewal obligations, hosting and backup controls, incident response capabilities, and accurate proof of authority. Customer must notify CSC promptly of changes to authorized scope or loss of domain authority. CSC can stop monitoring when authority is withdrawn, payment cannot be verified or material scope discrepancies arise. Unauthorized requests do not entitle CSC to perform checks.

7. Notifications and contacts

Customer designates a security email and affirmatively opts in to automatic notices. CSC sends only operational findings and service/account notices necessary for the service. Email delivery and receipt can be affected by providers, spam filters, or connectivity. No emergency hotline, on-call escalation, or 24/7 availability is included. CSC will notify the customer of a material disruption when reasonably practicable.

8. Confidentiality, privacy and approved retention policy

CSC restricts access to authorized domain scopes, findings, contacts and payment identifiers. Stripe processes payment card information; CSC does not store card numbers. Customer monitoring results are not published or sold. Owner-approved retention: detailed findings remain privately accessible while service is active. After service termination, the customer may request a private export of reports and recorded findings within 30 calendar days. Requests must be made from a verified customer contact; CSC may require identity verification before transfer. Detailed reports and alert history are normally purged after 90 days following verified termination. A pending export request, legal hold or written alternate lawful preservation requirement pauses that purge. Customer contact, signed authorization, transaction references and minimal security audit evidence may be kept longer for legitimate accounting, contractual defense and legal compliance, subject to the published privacy notice. CSC may use vetted infrastructure/email providers to deliver services without giving them independent marketing rights. CSC will maintain the necessary administrative records of signed authorization, scope, billing, reviews and service communications after report deletion where legitimate accounting or legal obligations require it. The retention schedule has been approved by the owner and is implemented with protected automated cleanup.

9. Ownership and permitted use

No transfer of domain ownership, registrar rights, software code or intellectual property occurs. Monitoring observations are delivered to the named customer for internal business use. CSC retains its monitoring tools and generalized know-how, without rights to publish customer secrets.

10. Risk allocation and applicable law — OWNER-APPROVED TERMS

Read-only monitoring is informational, is not an insurance product, and is not a promise of uninterrupted performance or prevention of cyber incidents. Contractual limitation: subject to mandatory applicable law and the exceptions below, CSC’s aggregate liability for direct damages arising from Domain Guard will not exceed the greater of (a) $500 and (b) the Domain Guard service fees actually paid by that customer during the 12 months preceding the event giving rise to the claim. To the extent legally permitted, neither party is responsible for the other party’s lost profits or indirect, special, incidental or consequential damages. These limitations do not waive express contract refunds or liabilities for fraud, willful misconduct, gross negligence, intentional violation of the other party’s confidentiality obligations, or any right/remedy that applicable law prohibits limiting. Nothing prevents a customer from exercising lawful payment-dispute, consumer or statutory rights.

Dispute resolution: the parties first exchange written notice identifying a disagreement and attempt good-faith informal resolution for 30 calendar days, unless immediate court relief is necessary or applicable law requires otherwise. Any unresolved lawsuit shall be governed by Michigan law to the extent lawfully applicable, with jurisdiction in the competent state or federal courts serving Wayne County, Michigan, subject to mandatory jurisdiction and venue rules. There is no mandatory arbitration provision or class-action waiver in this agreement. CSC will not access a customer registrar or change a domain to resolve a billing dispute.

CSC approved these liability and dispute provisions on October 19, 2026. The terms remain subject to mandatory applicable law, and a Michigan attorney or insurer may be consulted before CSC enters individual contracts.

11. Acceptance and separate scope schedule

Final agreement version and date: __________. Customer legal organization: __________. Authorized representative name/title: __________. Approved root domain: __________. Additional hostnames (0–3): __________. TLS handshake hostnames from the approved scope: __________. Opt-in alerts email: __________. Domain-control evidence verified by CSC: __________. Plan: [ ] Automated [ ] Managed. Customer authorized signature/date: __________. CSC authorized signature/date: __________. Verified Stripe subscription ID (post-checkout): __________. Activation confirmation/date: __________.

This owner-approved template is not an executed agreement. A customer-specific signed schedule, independently verified domain authority, billing eligibility and a verified paid subscription are still mandatory before any monitoring.