AppCheck service terms

Who provides AppCheck

AppCheck is provided by Opsenium Ltd, a private limited company registered in England and Wales (company number 17197622), registered office 82a James Carter Road, Mildenhall, IP28 7DE, United Kingdom. These terms apply together with the website terms of use and the privacy notice. If Opsenium agrees different terms with you in writing, those terms take precedence.

What is included

• A review of one product, using one supplied build or environment.
• An agreed set of priority user journeys and user roles, which you tell us after payment and we confirm before the review.
• Three hours of hands-on, risk-based exploratory testing by an experienced Opsenium engineer, performed asynchronously. You do not attend.
• A branded, prioritised PDF report delivered within two working days of the confirmed review date. Working days are Monday to Friday, excluding bank holidays in England and Wales.
• One focused recheck of up to 30 minutes, requested within 30 days of the report being delivered. The recheck covers the original reported findings only, not additional exploratory testing.

Price and payment

AppCheck is a fixed price of £300 in pounds sterling.

No payment is requested until Opsenium has confirmed that your product is suitable. Payment is made through a Stripe-hosted payment page; Opsenium does not see or store your card details, and Stripe sends your receipt. Payment must be completed within 48 hours of acceptance, and no later than 24 hours before the review. Reviews start at 09:00 UK time on the review date.

Review dates

The date you select in the questionnaire is held provisionally while your request is assessed. It remains provisional until payment is received, at which point it is confirmed. There is no separate booking step.

If your request is declined, or payment is not received by the deadline in your acceptance email, the date is released and may be selected by another customer.

Suitability

Opsenium may decline a request, before any payment, where the product requires specialist hardware, physical access, access that cannot be arranged safely or is prohibited, or expertise substantially different from exploratory software testing, or where three hours would not provide a useful review.

Rescheduling and access

One free reschedule is allowed with at least 48 hours’ notice before the confirmed review date, subject to another date being available. Changes with less than 48 hours’ notice, and failure to provide working access at the start of the review date, may result in the loss of the slot.

If access does not work when the review starts, Opsenium will tell you by email and try to resolve it with you that morning. Opsenium will not work around the agreed access method, for example by using other credentials or a different environment.

Your responsibilities

• You confirm that you are authorised to permit Opsenium to test the product and environment you describe.
• You tell Opsenium about any activity that must not be performed and any third-party systems that must remain out of scope.
• You provide working access by the agreed method, preferably temporary test accounts on a staging or test environment without real customer data.
• You do not send passwords, API keys, permanent administrator credentials or customer data through the questionnaire or by ordinary email. A safe access method is agreed separately.
• Exploratory testing creates test records and may send notifications from your product. Use an environment where that is acceptable, and tell us where it is not.

Testing a live product

A staging or test environment is strongly preferred. If you ask Opsenium to test a production environment, you agree in writing beforehand what may be created, changed or sent, which accounts and data may be used, and how test records will be identified and removed. You remain responsible for your production system, its data and its backups. Opsenium does not perform load testing, attempt to bypass security controls, or take any action you have prohibited, and it will stop and contact you if testing appears to affect real customers, real payments or undeclared personal data.

What AppCheck is not

AppCheck is an independent, time-boxed quality review. It is not certification, verification, accreditation, formal assurance or approval of your product, and it is not:

• A penetration test.
• A formal security audit.
• A compliance certification.
• A complete accessibility audit.
• A source-code audit.
• Exhaustive testing of every screen, role, device or permutation.
• A guarantee that no defects remain.

Security and privacy observations are limited to warning signs visible from using the product. They are not the result of security testing.

Limitations

AppCheck is risk-based and non-exhaustive. It does not guarantee that every defect or risk will be found. The report reflects the product and environment as observed during the review, and states the areas that were not tested. Decisions about whether and when to release your product remain yours.

Confidentiality and data

Opsenium uses the information in your request to assess it and to deliver the service, as described in the privacy notice. Your product, your answers and your report are not published or shared with third parties without your permission. Please revoke temporary test accounts once any recheck is complete.

Your statutory rights

Nothing in these terms affects any rights you have under the law that applies to you and that cannot be excluded.

Governing law

These terms are governed by the law of England and Wales, and the courts of England and Wales have jurisdiction.

Contact

Questions about these terms: hello@opsenium.com.