The agreement, short of legal decoration.
These terms cover what you buy here and how you may use it. Where a genuine limit exists it appears as a sentence you can read once and understand, rather than as a clause built to be skipped over.
Posted to the board 28 August 2026CommerceGuard Tech trades as a name of Fortify 24x7. That is who your contract sits with, that is who issues the invoice, and that is who employs the people running the service. It gets said on every page of this site so that it can ambush nobody afterwards.
Heads up: card statements show FORTIFY 24X7 - CommerceGuard Tech is a Fortify 24x7 brand, and your subscription is billed by Fortify 24x7.
A catalogue line is a managed subscription covering one capability. It is delivered on the supplier platform its stall board names, and run by our engineers. What you become entitled to is that capability, at the count purchased, for as long as the subscription is paid and live.
Stall boards belong to this agreement as much as this page does. Every one of them prints a block naming the edge of what its cards reach. Those blocks exist to be relied on, so read them ahead of a purchase rather than after one.
A declined charge is retried and you are notified. An unresolved decline can lead to suspension. Before that point we will make a real effort to reach somebody, because turning off the security on a shop over an expired card helps nobody at all. Bringing a suspended service back to life can involve redeployment work.
Our undertakings run as follows. What you bought gets delivered with reasonable skill and care. The supplier platforms underneath stay properly operated. The desk stays staffed so alerts and slips get answered. Your environment gets described to you truthfully, including on the days a fault turns out to sit at our end.
Plenty of businesses buying here take card payments, so this deserves a paragraph with no ambiguity in it. PCI DSS obligations belong to you as the merchant and to your acquiring bank. What we sell supports technical controls that a self assessment questionnaire or an acquirer might ask about, and the reporting these products generate is genuinely useful as evidence.
None of that makes a business PCI compliant. Nothing sold here certifies anything, and no purchase produces an attestation. Fortify 24x7 is not a Qualified Security Assessor and carries out no PCI assessments. Read the same across any other framework you work to: controls and evidence come from us, and the compliance itself stays with you.
No security product stops every incident, and a supplier implying that one does is describing a thing which has never been built. We warrant neither the catching or halting of every threat, nor that data is never lost, nor uninterrupted availability. Each stall board states its own boundary, and those statements are contractual rather than padding added by a lawyer.
Within whatever limits the law sets:
Anything inside your environment is your property. Our handling of it exists so the service runs, and follows the privacy notice. Protecting a customer database gives us no interest in it, and nothing here licenses us to put your material to any use beyond filling your order.
You may leave at any point, from the trader account or by writing to us. Departure bites once the period you already paid for has closed, and the refund policy explains what happens to money we took.
Suspension or termination can follow a failed payment, unlawful use of the service, or conduct that puts staff of ours or other customers in danger. Except in an urgent case, notice arrives first, together with a chance to put things right.
This board is not fixed forever. Material amendments appear here under a fresh date stamp. Where an amendment lands on a subscription still running, the account holder hears about it directly. Use of the service after a change takes effect is acceptance of it.