Terms of Service

Effective Date: September 21, 2026

Business Name: LTH Cybersecurity
Legal Name: LTH CYBERSECURITY CORP.
Location: Yorkton, Saskatchewan, Canada

1. Overview

LTH CYBERSECURITY CORP., operating as LTH Cybersecurity ("LTH Cybersecurity", "LTH", "we", "us", or "our"), provides cybersecurity services including managed security services, penetration testing, security assessments, vulnerability assessments, incident response, security consulting, endpoint protection, security monitoring, hardening, and related professional services.

Services may be delivered directly by LTH Cybersecurity, through third-party security platforms or service providers, or through a combination of both. By purchasing, authorizing, or otherwise engaging LTH Cybersecurity to provide services, the client agrees to these Terms of Service together with any applicable proposal, quote, Statement of Work (SOW), Service Level Agreement (SLA), Rules of Engagement (ROE), or other written agreement.

2. Service Types

LTH Cybersecurity provides services under two general engagement models:

2.1 Managed and Recurring Services

Managed services are ongoing or recurring services provided for an agreed subscription or contract period. These may include managed detection and response (MDR), endpoint security, security monitoring, device management, managed security baselines, and other recurring security services.

Managed services may incorporate technology, monitoring, infrastructure, or security operations provided by third-party vendors. Any certifications held by a third-party provider apply to that provider and its applicable services and do not automatically constitute certification of LTH Cybersecurity itself.

2.2 Ad Hoc and Project-Based Services

LTH Cybersecurity also performs ad hoc, one-time, and project-based engagements. These may include penetration testing, vulnerability assessments, security audits, incident response, threat assessments, remediation, server or cloud hardening, consulting, and other professional services.

Ad hoc and project-based engagements are governed by the scope, price, timeline, payment terms, and other conditions specified in the applicable quote, proposal, SOW, ROE, or other written agreement. Unless specifically stated otherwise in that agreement, ad hoc and project-based services do not require a 12-month commitment and are not subject to the managed-services early termination charge described below.

LTH Cybersecurity may also provide cybersecurity, technical, or consulting services not specifically listed on our website or in these Terms on an ad hoc or custom basis. Such services will be subject to the scope, pricing, terms, and conditions agreed upon with the client in the applicable quote, proposal, Statement of Work (SOW), or other written agreement.

3. Contract Terms

3.1 Managed Services

• Managed services may be provided under monthly, annual, or other agreed contract terms.
• A 12-month minimum commitment applies only where it is stated in the applicable managed-services agreement, proposal, order, or SLA.
• If a client terminates a committed managed-services contract before the end of the agreed term, the client will be responsible for an early termination charge equal to 50% of the unpaid recurring service fees remaining in the committed contract term, unless otherwise stated in writing.
• The 50% early termination charge applies only to managed or recurring services subject to a committed contract term. It does not apply to ad hoc or project-based engagements unless expressly agreed to in writing.

3.2 Ad Hoc and Project-Based Services

• Project terms are determined by the applicable quote, proposal, SOW, ROE, or written agreement.
• Payment may be structured as an upfront payment, milestone payments, hourly billing, fixed-price billing, or another agreed arrangement.
• Material changes to an agreed scope may require additional fees, additional time, or a revised agreement.
• Work already performed remains payable if a client cancels or pauses a project after work has begun.

4. Payments

• Payment methods may include Stripe, PayPal, bank transfer, freelance platforms, or other payment methods approved by LTH Cybersecurity.
• Invoices must be paid according to the payment terms and due date stated on the invoice or applicable agreement.
• Late or unpaid invoices may result in suspension of managed services, withholding of final deliverables, or suspension of further work where legally and contractually permitted.
• The client remains responsible for charges for services already performed or delivered.

5. Refunds and Cancellations

• Fees for completed services, completed milestones, onboarding, setup work, and work already performed are non-refundable unless otherwise agreed in writing.
• Managed-services contracts subject to a committed term may be subject to the 50% early termination charge described in Section 3.1.
• Ad hoc and project-based engagements are not subject to the managed-services 50% early termination charge unless the applicable agreement expressly states otherwise.
• If an ad hoc project is cancelled after work has begun, the client remains responsible for completed work, completed milestones, non-refundable third-party expenses, and other amounts already incurred in connection with the engagement.

6. Client Responsibilities and Authorization

The client is responsible for providing accurate information, appropriate access, and any authorization reasonably required for LTH Cybersecurity to perform the agreed services.

For penetration testing, vulnerability testing, or other activities involving active security testing, the client represents that it owns the systems being tested or has sufficient authority to authorize the testing. Testing will be limited to the scope and conditions established in the applicable Rules of Engagement, SOW, or other written authorization.

LTH Cybersecurity is not responsible for delays or inability to complete work caused by unavailable systems, inaccurate scope information, revoked access, lack of authorization, or other circumstances outside our reasonable control.

7. Third-Party Services

Certain services may rely on third-party software, security platforms, hosting providers, monitoring services, or other vendors. Third-party services may be subject to their own terms, availability, technical limitations, and service conditions.

LTH Cybersecurity is not responsible for outages, product changes, discontinuation, or failures caused solely by third-party systems outside our reasonable control.

8. Security and Liability Disclaimer

Cybersecurity services reduce risk but cannot eliminate all security risk. No cybersecurity product, penetration test, assessment, monitoring service, or security control can guarantee that a system will be completely secure or that every vulnerability, attack, or compromise will be detected or prevented.

LTH Cybersecurity is not responsible for losses resulting from circumstances outside the agreed scope or our reasonable control, including:

• Client misconfiguration, negligence, or unauthorized changes;
• Client or user actions, including phishing and social engineering;
• Previously unknown or zero-day vulnerabilities;
• Failure to implement recommended remediation;
• Third-party service failures or vulnerabilities; or
• Events outside the scope of the applicable engagement.

To the maximum extent permitted by applicable law, LTH Cybersecurity, its officers, employees, contractors, agents, and service partners shall not be liable for indirect, incidental, special, consequential, or punitive damages, including loss of revenue, profits, data, business opportunity, or reputation.

To the maximum extent permitted by applicable law, LTH Cybersecurity's aggregate liability arising from an engagement shall not exceed the amount paid by the client to LTH Cybersecurity for the specific service giving rise to the claim.

9. Support Policy

• Standard support is generally available Monday to Friday, 9:00 AM – 5:00 PM Saskatchewan time, excluding holidays.
• Specific managed services may include 24/7 monitoring or support where stated in the applicable SLA or service agreement.
• Support may be provided through email, secure messaging, remote sessions, or other approved methods.
• Emergency incident response or work outside the contracted scope may incur additional charges unless specifically included in the client's service agreement.

10. Pricing and Scope Changes

Pricing is determined according to the service, scope, environment, organization size, complexity, risk, and other requirements of the engagement. Custom pricing may apply to complex or higher-risk environments.

Requests that materially expand the original scope of an engagement may require a revised quote, change order, additional milestone, or separate agreement before additional work is performed.

11. Indigenous Organization Discount

LTH Cybersecurity is committed to supporting Indigenous communities by offering a 7% discount on eligible services and packages to verified Indigenous organizations.

Eligibility requires majority Indigenous ownership or control, or recognition as an Indigenous government, band office, nonprofit organization, or similar Indigenous entity.

Verification documentation may be requested before the discount is applied. Documentation collected solely for eligibility verification will be handled securely and deleted when it is no longer required for that purpose.

Discount eligibility is subject to approval. LTH Cybersecurity may decline or revoke a discount where eligibility requirements are not satisfied. Discounts may not be combined with other promotions or contract-specific pricing unless agreed in writing.

12. Order of Precedence

Where an applicable SOW, SLA, ROE, proposal, quote, or other written agreement contains terms that conflict with these general Terms of Service, the terms of the more specific written agreement will govern with respect to that engagement.

13. Policy Updates

LTH Cybersecurity may update these Terms of Service from time to time. Updated terms will apply prospectively from their stated effective date. Changes will not retroactively alter the material commercial terms of an existing fixed-term agreement unless agreed to by the parties or otherwise permitted by that agreement or law.