Product Terms of Service — Lens Ecosystem

1. Agreement to Terms

By accessing or using the Lens Ecosystem platform (“Platform”), you agree to be bound by these Terms of Service (“Terms”). If you do not agree to these Terms, you must not use the Platform. These Terms constitute a binding legal agreement between you (“User”, “you”, “your”) and 2cnot2 Pty Ltd (“2cnot2”, “we”, “us”, “our”).

If you are using the Platform on behalf of an organisation, you represent and warrant that you have authority to bind that organisation to these Terms.

2. Description of Service

Lens Ecosystem is a cloud-based platform that provides:

Environment discovery and configuration snapshot services for Microsoft 365 (“M365”) and Microsoft Azure tenants
Security scoring and benchmarking against industry frameworks including NIST, CIS, Essential Eight, and ISO 27001
AI-powered risk analysis, trend prediction, and compliance insights
Migration readiness and dependency mapping for M365 and Azure environments
Realtime analytics, dashboards, and reporting

The Platform operates on a read-only basis. At no time does 2cnot2 write to, modify, or alter your M365 or Azure tenant environment.

3. Account Registration and Access

Access to the Platform is granted through Microsoft Entra ID (formerly Azure Active Directory) via one of two methods, at the user's choice and discretion:

App Registration: a registered application is configured within your Azure AD tenant with read-only permissions
Delegated Authority:access is granted via delegated OAuth permissions under the authenticated user's identity

Authentication and identity management are handled entirely by Microsoft Entra ID. 2cnot2 does not store, handle, or have access to your login credentials at any time.

Access to the Platform is individual and non-transferable. Each user's session is tied to their Entra ID identity and cannot be shared. You are responsible for:

All activity that occurs under your individual Entra ID session
Ensuring all users within your organisation comply with these Terms
Notifying 2cnot2 immediately of any unauthorised access or security breach

2cnot2 reserves the right to suspend or terminate accounts that violate these Terms.

4. Permitted Use

You may use the Platform solely for your internal business purposes in accordance with these Terms and all applicable laws. You must not:

Use the Platform for any unlawful purpose
Attempt to gain unauthorised access to any part of the Platform or its infrastructure
Reverse engineer, decompile, or disassemble the Platform
Resell, sublicence, or otherwise commercialise access to the Platform without written consent from 2cnot2
Use the Platform to collect or harvest data about other organisations without authorisation
Interfere with the operation or integrity of the Platform

5. Data and Privacy

The Platform collects configuration metadata from your M365 and Azure tenant only. It does not access, store, or transmit the content of your tenant's data (such as emails, files, or messages).

All metadata collected by the Platform is encrypted at rest and in transit. Metadata is visible only to users within the tenant that generated it. 2cnot2 cannot access, view, or use any metadata or content gathered by users within the Platform. 2cnot2's visibility is strictly limited to telemetry data relating to Platform usage (e.g. feature interactions, session counts, error rates).

All data is processed and stored in Australian data centres hosted on Microsoft Azure. Please refer to our Privacy Policy for full details.

6. Intellectual Property

All intellectual property rights in the Platform, including software, algorithms, branding, documentation, and reports generated by the Platform, are owned by or licensed to 2cnot2. These Terms do not transfer any intellectual property rights to you.

You retain all rights to your own data and configuration metadata. By connecting your tenant, you grant 2cnot2 a limited, non-exclusive licence to process your configuration metadata solely for the purpose of delivering the Platform services to you.

7. Professional Services

2cnot2 may separately offer professional services including migration planning, security consulting, and implementation support. Any such services will be governed by a separate Statement of Work or Services Agreement and are not covered by these Terms unless expressly stated. Please refer to our Professional Services T&Cs for details.

8. Availability and Modifications

2cnot2 will use reasonable endeavours to ensure the Platform is available, but does not guarantee uninterrupted or error-free operation. We reserve the right to:

Modify, suspend, or discontinue any part of the Platform at any time
Update these Terms, with notice provided to users via email or in-Platform notification
Introduce new features, pricing tiers, or access models

Continued use of the Platform after changes to these Terms constitutes acceptance of the updated Terms.

9. Limitation of Liability

To the maximum extent permitted by applicable law, 2cnot2 excludes all liability for any loss or damage arising from your use of the Platform, including but not limited to:

Loss of data, revenue, or profits
Business interruption
Security incidents affecting your M365 or Azure environment
Reliance on reports, scores, or recommendations generated by the Platform

Where liability cannot be excluded by law, 2cnot2's total liability is limited to the amount paid by you to 2cnot2 in the three (3) months preceding the relevant claim.

The Platform provides information and analysis only. Nothing in the Platform constitutes legal, security, or compliance advice. You should engage qualified professionals for such advice.

10. Indemnification

You agree to indemnify and hold harmless 2cnot2, its officers, employees, and agents from and against any claims, damages, losses, or expenses arising from your use of the Platform, your breach of these Terms, or your violation of any applicable law.

11. Governing Law

These Terms are governed by the laws of New South Wales, Australia. You submit to the exclusive jurisdiction of the courts of New South Wales for any disputes arising under these Terms.

For international users, you agree that Australian law governs and that disputes will be resolved in Australia, without regard to conflict of law principles.

12. Termination

Termination is managed at the tenant level, not the individual user level. Either party may terminate the tenant's access to the Platform at any time. Upon termination of a tenant:

All user access associated with that tenant will cease immediately
All metadata, configuration data, and tenant-specific information stored on the Platform will be permanently deleted
Deletion will be completed within 30 days of termination
Provisions of these Terms that by their nature should survive termination (including limitation of liability and governing law) will continue to apply

Individual users may be removed from a tenant by their tenant administrator at any time, without affecting the tenant's overall access to the Platform.

13. Contact

For questions about these Terms, contact us at: hello@2cnot2.com