These Terms of Engagement ("Terms") govern the provision of advisory services by Meridian Cyber Ltd. They apply to all engagements unless varied by a signed Statement of Work (SOW) specific to a mandate.
Our services
Meridian Cyber Ltd provides cybersecurity advisory services including, but not limited to:
- Fractional Chief Information Security Officer (CISO) services
- ISO 27001, PCI DSS, GDPR and PDPL compliance gap analysis and readiness advisory
- Vendor evaluation, negotiation, and independent procurement advisory
- AI automation and agent architecture advisory
- Infrastructure transformation and Zero Trust architecture design
Engagement structure
All engagements commence with a free, no-obligation 30-minute strategic consultation. Where there is mutual fit, a written Statement of Work is issued within 72 hours, detailing scope, deliverables, timeline, and commercial terms.
Retainer engagements are monthly, month-to-month, and may be paused, scaled, or terminated with 30 days' written notice.
Fees and payment
Fees are set out in the applicable SOW and are invoiced monthly in advance. Payment terms are 14 days net from invoice date unless otherwise agreed. VAT is applied in accordance with applicable UK and international tax legislation.
Confidentiality
Every engagement is covered by a mutual Non-Disclosure Agreement (NDA). Meridian Cyber treats all client information, systems access, and commercial data as strictly confidential. Client identities are never disclosed in marketing, case studies, or public communications without explicit written permission.
Independence
Meridian Cyber operates on a strict independence principle. We do not accept vendor commissions, channel-partner revenue, or resale agreements. All technology recommendations are made solely on client merit.
Intellectual property
Deliverables created specifically for a client engagement (reports, policies, roadmaps) become the client's property upon full payment. Meridian Cyber retains ownership of pre-existing methodologies, frameworks, templates, and know-how used in delivery.
Liability
Nothing in these Terms excludes or limits liability for death or personal injury caused by negligence, fraud, or fraudulent misrepresentation, or any other liability which cannot be excluded or limited by English law. Subject to the foregoing, Meridian Cyber's total aggregate liability arising under or in connection with any engagement shall not exceed the total fees paid under the relevant SOW in the twelve months preceding the claim.
Governing law & jurisdiction
These Terms and any engagement entered into under them are governed by the laws of England and Wales. The parties submit to the exclusive jurisdiction of the English courts.
Changes to these Terms
We may update these Terms from time to time. The "last updated" date reflects the most recent revision. Material changes will be communicated to active engagement clients directly.