Terms of use of the portal

1. Subject matter and acceptance

These terms govern access to and use of the portal cias-multisphera.com (the "Portal"), made available by CIAS Elettronica S.r.l. ("CIAS") to manage the licences of the MultiSphera software. Accessing the Portal implies full acceptance of these terms. If you do not accept them, do not use the Portal.

These terms supplement, without replacing, the supply, distribution and licence agreements in force between CIAS and the members of the chain; in case of conflict the specific contractual conditions prevail.

2. Restricted access

The Portal is reserved to registered users belonging to the CIAS commercial chain: CIAS staff, branches, distributors, installers/integrators and end users holding a MultiSphera licence. Self-registration is not available: accounts are created exclusively by CIAS or, for the lower levels, by the higher-level member of the chain (for instance CIAS creates the account of a branch or a distributor), who sends the user an invitation to set their own password. CIAS may refuse or revoke access to anyone not belonging to the chain.

Each user operates with the assigned authorisation level and sees only the licences and users within their responsibility.

3. Account and safekeeping of credentials

• Credentials are personal and non-transferable. The user is responsible for every operation performed with their account.
• The user must keep passwords, multi-factor authentication codes and trusted devices safe, choose strong passwords and not reuse them on other services.
• In case of loss, theft or suspected compromise of the credentials the user must promptly inform CIAS and reset the password.
• Account data must be truthful and kept up to date.

4. Permitted and prohibited use

The Portal may be used exclusively for the purposes for which access was granted: managing licences, subscriptions, users and support requests within your responsibility. By way of example, it is forbidden to:

• access or attempt to access unauthorised areas, data or functions, including by exploiting errors of the Portal;
• circumvent, disable or interfere with security measures, authentication or the licensing system;
• generate, alter or distribute activation keys, licence files or software packages outside the intended procedures;
• use automated tools (bots, scrapers) without CIAS written authorisation;
• introduce malicious code, overload the Portal or compromise its availability;
• include in tickets, messages or attachments irrelevant personal data of third parties or special categories of data;
• use the Portal for unlawful purposes or in breach of third-party rights.

5. Licences, subscriptions and add-ons

The Portal is the technical tool through which MultiSphera licences and add-ons (including CyberShield and Sphera+) are requested, activated and administered, and through which subscriptions are renewed. Prices, duration, usage limits and warranties of the licences are governed by the supply contracts and by the software licence conditions; the Portal is neither a public offer nor a consumer shop.

The CyberShield add-on is a perpetual licence to use the advanced security functions included in the installed version of the software: once activated it does not expire and does not require renewal. Later evolutions of CyberShield are included in the Sphera+ Gold subscription; security updates are provided free of charge to every installation for the support period, as required by Regulation (EU) 2024/2847 (Cyber Resilience Act). In the trial licence CyberShield is included only for the duration of the trial. The functions and services enabled by a subscription (for instance Sphera+) remain available for the duration of the subscription and for any grace period provided by the contract; on expiry they are disabled as documented in the software. Renewing subscriptions in good time is the responsibility of the licence holder.

6. Support and diagnostic packages

Support requests may be accompanied by a diagnostic package generated by the MultiSphera software. The package is pseudonymised and is sent to the Portal only upon explicit authorisation of the installation administrator, who remains responsible for its content. CIAS and iDev use it exclusively to resolve the request and keep it only for as long as necessary to resolve it.

7. Updates and security advisories

Through the Portal CIAS distributes software updates and communicates vulnerabilities and security incidents, in compliance with the manufacturer's obligations under Regulation (EU) 2024/2847 (Cyber Resilience Act). The user undertakes to read the advisories and to apply security updates within the indicated time; CIAS is not liable for damage resulting from the failure to apply the updates made available.

Security advisories are sent to all the users concerned in the Portal and by e-mail, including those who have not consented to communications by e-mail, and cannot be switched off.

Anyone who discovers a vulnerability of the Portal or of the software is invited to report it to security@cias-multisphera.com without disclosing it publicly before it is fixed. How to report it and what happens next is described in the vulnerability disclosure policy.

8. Notifications, communications and messages

The Portal sends service notifications and security advisories, allows CIAS and iDev to send communications to users and allows users of the same organisation to exchange messages, including attachments. Communications from the operator and notices of messages arrive by e-mail only to those who have given consent, which can be withdrawn at any time from the profile or from the link in every e-mail; service notifications and security advisories always arrive by e-mail as well.

Messaging is meant for the exchange of work information related to the use of the Portal and of the MultiSphera products. Allowed attachments are images, text files and PDFs, up to 5 MB each; the Portal rejects any other type of file. In particular, it is forbidden to:

• send unsolicited, repetitive or advertising messages (spam);
• send content that is unlawful, offensive, defamatory, discriminatory or that infringes the rights of third parties, including intellectual property rights;
• send files containing malicious code or try to circumvent the checks on attachments;
• include personal data not necessary for the purpose of the message, special categories of data (for instance health data) or data relating to criminal convictions;
• use messaging for purposes unrelated to the relationship with the CIAS chain.

Notifications, messages and attachments are deleted automatically 24 months after sending. The Portal is not an archiving tool: anyone who needs to keep a message or an attachment saves a copy of it.

9. Liability for the content of messages

Messages and attachments are written and sent by users under their own responsibility. CIAS and iDev do not check their content in advance and have no general obligation to monitor it. Each user is liable for the content they send and for compliance with these terms and with applicable law, also towards the recipients and third parties.

To the extent permitted by law, CIAS and iDev are not liable for the content of the messages and attachments sent by users, nor for any damage arising from them, except in cases of wilful misconduct or gross negligence and other liabilities that cannot be excluded by law.

Anyone who believes that a message or an attachment breaches these terms or the law can report it to CIAS (info@cias.it), indicating the conversation, the message and the reason. Upon receiving a substantiated report, or at the request of the authorities, CIAS may have the content or the attachment removed and suspend the account of the sender, in accordance with section 10.

10. Suspension and closure of the account

CIAS may suspend or close the account, even without notice, in case of breach of these terms, abusive or fraudulent use, termination of the relationship with the chain or upon request of an authority. Suspension does not affect licences already activated for end users, unless otherwise provided by contract. The user may ask for the closure of their account by contacting the relevant member of the chain or CIAS.

11. Intellectual property

The MultiSphera software, the SpheraCore component, the Portal and the related documentation are protected works. The software is developed by iDev S.r.l., which holds the rights; CIAS Elettronica S.r.l. is its exclusive licensee for distribution and marketing. "MultiSphera" and "SpheraCore" are names chosen by CIAS to identify the product. Trademarks, logos and distinctive signs shown on the Portal belong to their respective owners.

Access to the Portal transfers no right on the software, the source code, the documentation or the content, which may not be copied, modified, decompiled or distributed beyond what the law and the licence agreements allow.

12. Availability of the service and limitation of liability

CIAS strives to keep the Portal available and secure, but does not warrant that it is free from interruptions or errors. The Portal may be suspended for maintenance, updates or force majeure; CIAS will inform users, where possible, with reasonable notice.

To the extent permitted by law, CIAS is not liable for indirect damage, loss of data or profit arising from the use or the inability to use the Portal, nor for damage caused by non-compliant use, unprotected credentials, failure to apply updates or events not attributable to CIAS. Mandatory liabilities provided by law, including those for wilful misconduct or gross negligence, remain unaffected.

13. Changes to the terms

CIAS may amend these terms to reflect the evolution of the service or of the law. The updated version, with its date, is published on this page; substantial changes are communicated to registered users. Using the Portal after the changes are published implies their acceptance.

14. Governing law and jurisdiction

These terms are governed by Italian law. Any dispute concerning access to and use of the Portal is subject to the exclusive jurisdiction of the Court of Milan, without prejudice to any mandatory jurisdiction provided by law.

15. Contacts

CIAS Elettronica S.r.l. — Via Durando 38, 20158 Milan (Italy) — Tel. +39 02 3767161 — E-mail: info@cias.it. For data protection matters see the privacy notice and the Data subject rights page.