amber.systems legal documents

Last updated: 18 August 2026

This page collects the public legal documents of amber systems ltd, trading as amber.systems.

Website and privacy

• Website terms of use - use of the public website and links to the security research policy.
• Privacy notice - how we use personal information when acting as controller.
• Data protection complaints procedure - how to raise a data protection complaint.
• Security research and vulnerability disclosure policy - authorised good-faith testing, scope, reporting and safe-harbour commitments.

Customer contract documents

These documents apply only where an Order Form, checkout flow or other written agreement expressly incorporates them.

• General terms of business - the common contractual terms for amber.systems services.
• Acceptable use policy - lawful, secure and responsible use of hosted services, accounts, networks, software and APIs.
• Data processing agreement - terms that apply when amber.systems processes personal data for a customer.
• Subprocessor list - service providers that may process customer data for particular services.
• Service level and support schedule - how any expressly agreed support and availability targets are measured.

Service schedules

• Professional services schedule - consulting, engineering, architecture, research, training and advisory work.
• Security testing schedule - penetration testing, vulnerability assessment and related authorised security work.
• Managed infrastructure and hosting schedule - hosting, cloud, network, storage, backup and managed infrastructure services.
• SaaS and API services schedule - hosted software, accounts, APIs, usage-based services and AI-assisted functionality.
• Software development schedule - bespoke software, integrations, milestones, acceptance and change control.
• Software licence schedule - proprietary software supplied under a business licence.
• Support and maintenance schedule - technical support, patches, updates and maintenance services.

How these documents apply

The applicable Order Form identifies the services, fees, term, selected schedules and document versions. A public document is not incorporated into a customer contract merely because it appears on this website.

Unless the Order Form says otherwise, the order of precedence is:

1. the Data Processing Agreement for a conflict specifically concerning personal-data processing;
2. signed Security Testing Rules of Engagement for a conflict concerning testing authority, scope or safety controls;
3. the Order Form and any Statement of Work;
4. the applicable Service Schedule;
5. the Service Level and Support Schedule;
6. the Acceptable Use Policy; and
7. the General Terms of Business.

The commercial documents are intended for business and professional customers only.

Company information

amber systems ltd, trading as amber.systems, is registered in England and Wales under company number 17349587.

Registered office:

Unit A, 82 James Carter Road
Mildenhall
Bury St Edmunds
IP28 7DE
United Kingdom

• General enquiries: hello@amber.systems
• Privacy: privacy@amber.systems
• Security reports: security@amber.systems
• Abuse reports: abuse@amber.systems
• Telephone: 01223 230001