Terms of Service

Last updated: March 2026

1. Service Provider

Open SIEM Deployer (hereinafter "OSD" or "the Service") is operated by Shelaon Partners, a cybersecurity consulting firm registered in France.

Shelaon Partners — SARL au capital de 5 000,00 €
SIREN: 899 165 872 — RCS Paris
Siège social: 54 Avenue Hoche, 75008 Paris, France
Website: shelaon.com
Contact: support@shelaon.com

2. Nature of the Service

OSD is a deployment automation platform that provisions SIEM instances on Hetzner Cloud infrastructure. OSD acts exclusively as an automation layer on top of Hetzner's cloud services.

OSD's mission is to make the most widely-used open-source security tools accessible through automated, one-click deployment. The platform launched with Wazuh as its first supported SIEM solution. Additional open-source tools (such as Splunk Free, UTMStack, and others) are planned and will be progressively added to the catalog. The availability of each tool is subject to development timelines and may change without prior notice.

OSD is not a hosting provider. The infrastructure is provided by Hetzner Online GmbH ("Hetzner"), a German cloud provider. By using OSD, you acknowledge that:

• Your server is hosted on Hetzner Cloud infrastructure in the European Union (Germany and/or Finland).
• Hetzner's own Terms of Service and Acceptable Use Policies apply in addition to these terms.
• Hetzner is ISO 27001 certified and operates GDPR-compliant European datacenters.
• OSD is not responsible for Hetzner infrastructure outages, hardware failures, or any incident originating from Hetzner's platform.

3. Service Level Agreement (SLA)

OSD targets a 99% uptime SLA for the deployment automation platform. This SLA covers:

• The OSD website and ordering system availability.
• Automated deployment pipeline functionality.

This SLA does not cover:

• The provisioned Wazuh server itself — once deployed, uptime depends on your server configuration and Hetzner's infrastructure.
• Outages caused by Hetzner Cloud maintenance, incidents, or force majeure.
• Issues caused by the customer's own actions (misconfiguration, security incidents, etc.).

4. Customer Responsibilities

The customer is fully responsible for the security, maintenance, and administration of their deployed server. This includes but is not limited to:

• Changing default credentials immediately after deployment.
• Maintaining system updates and security patches.
• Configuring and hardening firewall rules for their specific environment.
• Managing Wazuh agent enrollment and configuration.
• Ensuring data backups are adequate for their needs.
• Complying with applicable laws and regulations regarding data processed by their Wazuh instance.
• Not exceeding the purchased agent count. The server is sized for the number of agents selected at purchase. Connecting more agents than provisioned may cause performance degradation or instability of the SIEM instance.

OSD provides an initial hardened deployment with pre-configured firewall rules and automated Wazuh installation. Beyond this initial deployment, OSD assumes no responsibility for server security or data integrity.

5. Refund Policy & Cancellation

All payments are non-refundable. Due to the nature of the service (instant provisioning of cloud resources upon payment), OSD cannot offer refunds once a deployment has been initiated.

OSD is a no-commitment service. You can cancel your subscription at any time by sending an email to support@shelaon.com. There is no minimum commitment period and no cancellation fee. Upon cancellation:

• Your subscription will not renew at the next billing cycle.
• You retain access to your server until the end of the current billing period.
• Once the subscription expires, the server and all associated data are permanently deleted.
• You are solely responsible for exporting your data before the subscription ends.

6. Pricing & Payment

All prices are displayed in Euros (EUR), exclusive of applicable taxes (VAT). VAT may be added at checkout depending on your country of residence. Payments are processed securely via Stripe. Subscriptions are billed monthly. Accepted payment methods include credit/debit cards and SEPA direct debit.

Pricing is based on the number of agents and the selected tier:

• POC (1–4 agents): From €15/month.
• Starter (5–25 agents): From €24/month base + per-agent fee.
• Growth (26–110 agents): From €48/month base + per-agent fee.
• Scale (111–150 agents): From €96/month base + per-agent fee.

Optional add-ons: Dedicated IPv4 (+€2/month), daily backups (+50% of server base cost). Storage is included in the server disk, sized according to your agent count. If a backup restoration is required, additional fees may apply, up to a maximum of €70 per restoration.

For deployments exceeding 150 agents, please contact support@shelaon.com for a custom quote.

Prices are subject to monthly revision based on changes in underlying infrastructure costs (hosting, bandwidth, storage) and innovation-related investments (platform improvements, security updates, new features). Customers will be notified at least 15 days in advance of any price change via email. Continued use of the service after the effective date of a price change constitutes acceptance of the new pricing.

7. Backups & Data Protection Recommendations

If the backup option is enabled, OSD configures daily automated snapshots via Hetzner Cloud. These snapshots provide a basic recovery capability in case of accidental data loss or server misconfiguration.

Important: Even with the backup option enabled, we strongly recommend implementing an additional externalized backup strategy for professional archiving and compliance purposes. Hetzner snapshots alone are not a substitute for a comprehensive disaster recovery plan. Consider:

• Exporting critical logs to S3-compatible external storage.
• Setting up offsite backups (NAS, cold storage).
• Regularly testing backup restoration procedures.

OSD is not responsible for data loss resulting from inadequate backup strategies.

8. Log Retention

The default configuration provides storage sized for 90 days (3 months) of log retention, based on Wazuh's recommended capacity per agent type. For extended retention requirements beyond 90 days, contact us for a custom quote with additional storage provisioning.

9. Server Upgrades

Server upgrades (increasing capacity, adding storage) must be requested through our support team at support@shelaon.com. Self-service upgrades are not available at this time.

10. Data Protection (GDPR)

All servers are deployed exclusively in European Union datacenters operated by Hetzner (Germany / Finland). Hetzner is ISO 27001 certified and GDPR compliant. Your data never leaves the EU.

OSD collects the following personal data for service delivery:

• Name, email address, and company name (for account management and communication).
• FQDN and SSH public key (for server deployment configuration).
• Payment information (processed and stored by Stripe — OSD does not store payment card details).

OSD does not access, process, or store any data that transits through your Wazuh instance (logs, alerts, agent data). All such data resides exclusively on your Hetzner server.

Password non-retention policy: OSD does not store, retain, or have access to any password associated with your deployed instance. This includes the server root password, the Wazuh dashboard admin password, and any agent enrollment password you may configure. These credentials are generated and/or configured directly on your server during deployment. Once the deployment process is complete, OSD has no means of recovering these passwords. You are solely responsible for securely storing your credentials. If you lose access to your passwords, OSD support may assist with password reset procedures, but this may require server-level intervention and cannot be guaranteed.

11. Privacy Policy

For detailed information about how we collect, use, and protect your personal data, please refer to our Privacy Policy. In summary:

• We process personal data only for service delivery and communication.
• Payment processing is handled by Stripe Inc. under their own privacy policy.
• Infrastructure is provided by Hetzner Online GmbH under their privacy policy.
• Transactional emails are sent via Mailgun (Sinch), EU region.
• Website analytics are provided by Vercel Analytics (anonymized).
• You may request data access, correction, or deletion by contacting support@shelaon.com.

12. Acceptable Use & Service Suspension

The server provided by OSD must be used exclusively for lawful purposes and in accordance with these Terms of Service, Hetzner's Acceptable Use Policy, and applicable laws.

OSD reserves the right to immediately suspend or terminate the service, without prior notice or refund, in the following cases:

• Malicious or abusive use: Use of the server for attacks (DDoS, scanning, exploitation), spam, hosting malicious content, or any activity that may harm third parties or OSD's infrastructure.
• Exceeding the provisioned agent count: If OSD determines that the number of Wazuh agents deployed exceeds the number included in the purchased subscription, the service may be suspended without notice and without reservation. The server is provisioned with resources sufficient for a specific agent count.
• Failure to provide requested information: OSD may request additional information to verify the legitimate use of the service. Failure to respond within a reasonable timeframe may result in service suspension.
• Violation of these Terms: Any breach of these Terms of Service or Hetzner's policies.

OSD may also request additional information about your usage at any time, and suspend the service pending verification if deemed necessary.

13. Modification of Terms

OSD reserves the right to modify these Terms of Service at any time during the course of the service. Customers will be notified of material changes by email at least 15 days in advance. Continued use of the service after the effective date of changes constitutes acceptance of the updated terms. If you do not agree with the modifications, you may cancel your subscription before the changes take effect.

14. Business Transfer

In the event that Shelaon Partners ceases operations, is acquired, or undergoes a restructuring, the OSD service, including customer accounts, subscriptions, and associated data, may be transferred to a successor entity. Customers will be notified of any such transfer. The successor entity will be bound by the terms of this agreement with respect to your personal data.

15. Limitation of Liability

OSD is provided "as is." To the maximum extent permitted by law:

• OSD's total liability is limited to the amount paid by the customer in the 3 months preceding the claim.
• OSD is not liable for indirect, consequential, incidental, or special damages.
• OSD is not liable for data loss, security breaches, or unauthorized access resulting from the customer's configuration or third-party infrastructure failures.
• OSD is not responsible for Hetzner infrastructure incidents.

16. Open Source Software

OSD deploys open-source software, starting with Wazuh, which is distributed under the GNU General Public License v2 (GPLv2). By using OSD, you receive the deployed software with all rights granted by the applicable open-source license, including the right to use, study, modify, and redistribute the software.

OSD's restrictions apply solely to the infrastructure service (server sizing, deployment automation, platform access) — not to the open-source software itself. The software on your server remains governed by its original open-source license.

After deployment, OSD does not retain access to your server. The customer receives full root access and is the sole administrator of the deployed instance. OSD does not store, retain, or have access to any credentials associated with your server.

For complete license information, source code links, and your rights under the GPLv2, please refer to our Open Source Licenses page.

17. Governing Law

These terms are governed by French law. Any disputes arising from the use of OSD shall be subject to the exclusive jurisdiction of the competent courts of Paris, France.

18. Trademark Notice

Wazuh is a registered trademark of Wazuh, Inc. Splunk is a registered trademark of Splunk Inc. (Cisco). OSD (Open SIEM Deployer) is not affiliated with, endorsed by, or sponsored by Wazuh, Inc., Splunk Inc., Cisco, or any other trademark holder referenced on this platform. OSD is an independent deployment automation service operated by Shelaon Partners. All references to third-party products on this website are for descriptive purposes only, to identify the open-source software that OSD deploys.

19. MSP Partner Program

OSD offers a partner program for Managed Service Providers (MSPs), Managed Security Service Providers (MSSPs), IT consulting firms, and Value-Added Resellers. The following terms apply to all participants in the MSP Partner Program.

19.1 Referral & Resale

MSP Partners receive a unique referral identifier and may refer clients to OSD. Partners are free to resell the OSD service at any price they determine. The margin between the OSD subscription price and the price billed to the end client is entirely retained by the Partner.

In addition, Partners earn a recurring commission on referred subscriptions: 15% of the Monthly Recurring Revenue (MRR) for the first 12 months, and 10% of MRR thereafter, for as long as the referred customer maintains an active subscription.

19.2 Referral Attribution

Referral attribution is tracked via a URL parameter (?ref=PARTNER_ID) and stored in the end user's browser via localStorage. Attribution persists indefinitely until the end user clears their browser data. The first referral code recorded takes precedence; it cannot be overwritten by a subsequent referral.

19.3 Managed Deployments — Responsibility

If a Partner deploys and manages OSD instances on behalf of their clients (including but not limited to: ordering, configuring, monitoring, and maintaining the Wazuh SIEM), the Partner is considered the operator of those instances. In this capacity:

• The Partner is solely responsible for the security, maintenance, and proper operation of the deployed servers.
• The Partner acts as the data controller (or joint controller with their end client) under GDPR for any personal data processed by the Wazuh instances they manage.
• The Partner must ensure that their end clients are informed about the data processing and that all applicable data protection obligations are fulfilled.
• OSD's liability remains limited to the deployment automation platform as described in Section 15. OSD is not liable for any incident, data breach, or loss arising from the Partner's management of deployed instances.
• The Partner shall indemnify and hold OSD harmless from any claim, loss, or damage arising from the Partner's management of client instances.

19.4 Verification File

As part of the onboarding process, Partners may be asked to place a verification file (osd-partnership.html) on their company website. This file serves to verify the Partner's identity and to enable search-engine-discoverable referral redirects. The Partner may remove this file at any time, but doing so may affect referral attribution from organic search.

19.5 Termination

Either party may terminate the MSP partnership at any time with 30 days written notice. Upon termination, the Partner will continue to receive commissions for existing referred clients for a period of 6 months, after which all commission payments cease. OSD reserves the right to terminate a partnership immediately in case of fraud, misrepresentation, or violation of these Terms of Service.