Turaco Labs Breach Protection Warranty

The following information applies to Customers who have purchased service packages or services that also contain a “Breach Protection Warranty" offered by Turaco Labs (the Program)

Description of the Breach Protection Warranty

The Turaco Labs Breach Protection Warranty is provided to all clients that meet the following criteria:

• The website has been enrolled in a Turaco Labs solution/service, which specifies the inclusion of a Breach Protection Warranty, for a minimum of 3 months for that specific service/solution tier.
• The client has fully deployed the solution on their website, ensuring all monitoring components are active and operational for a minimum of 3 months.
• The client has implemented the following additional key security controls on their website:
  • Multi-Factor Authentication for all Admin accounts.
  • No shared user accounts.
  • Logging enabled.
• Any remedial advice from Turaco Labs or our IR partners has been fully implemented.
• All and any malware identified by ThreatView is immediately removed, in any case within 24 hours of detection.
• Client website software is up to date and supported by vendors.
• Critical security patches are deployed within 1 week of release.

If a merchant subsequently suffers a data breach requiring a PCI Forensic Investigation while enrolled, with the solution active on their website and meets the additional criteria above, Turaco Labs will fund the PCI Forensic Investigation costs up to the Breach Protection Warranty limit included in the solution/service tier on behalf of the merchant with a forensic investigation firm of Turaco Labs' choice.

Notification and Claim Process

Please contact Turaco Labs (Breach_Reporting(at)turacolabs.com) as soon as you discover an incident (in any event, within 3 days) and before any costs have been incurred or actions have been taken.  Should the merchant be required (by direct request from the merchant's bank and/or the card brands) to undergo a PCI Forensic Investigation, Turaco Labs will then initiate the investigation process with a forensic investigation partner selected by Turaco Labs.

​

Important to note, Turaco Labs will not be liable for any costs incurred by the merchant should it choose to directly engage an alternative forensic investigation firm to conduct the PCI Forensic Investigation.

Limitation of Liability

TURACO LABS SHALL HAVE NO LIABILITY TO ANY MERCHANT UNDER THE PROGRAM IN THE EVENT, AND TO THE FULLEST EXTENT, OF ANY REGULATORY OR LEGAL DAMAGES ASSOCIATED WITH THE DATA BREACH OR INVESTIGATION.