STANDARD TERMS AND CONDITIONS OF SALE

FRANCE & EUROPEAN UNION

Coup International Security Consulting (Sebastien Coupellier)

SIREN: 990691727

Head office:466 Route de Braguillou

82170 Fabas

Article 1 – Purpose and scope

1.1.These General Terms and Conditions of Sale (hereinafter "GTC") aim to define the conditions under which Coup International Security Consulting (hereinafter "the Provider" or "Sebastien Coupellier") commits, within the framework of a best-efforts obligation, to provide the Client with the following services and products (hereinafter "the Services"):

Security audits and safety consulting
Design and sizing of custom security solutions
Support for tenders
Support and management of security projects
Optimization and compliance of existing systems
Sale of digital documents (templates, guides)

1.2.These GTC apply to the exclusion of all other conditions, particularly the Client's general purchasing conditions. They prevail over any document from the Client.

1.3.The Client acknowledges having read these GTC and accepts them without reservation prior to any order. The validation of an order implies the Client's full and unconditional acceptance of these GTC.

Article 2 – Proposed Services

2.1.Consulting, Audit, and Project Support Services

The Provider offers the following services in the field of safety and security:

Audit & Consulting:

Needs analysis and recommendations to enhance security
Field diagnosis and vulnerability assessment
Detailed audit report with recommendations
Risk analysis according to recognized methodologies (APSAD R81/R82, ISO 31000)

Design & Sizing:

Development of customized solutions in video surveillance, access control, alarms, intercom, fire detection
Technical specifications
Design plans and diagrams
Functional and technical specifications

Tenders:

Support in responding to tenders
Drafting technical proposals
Support in commercial negotiation

Project Support:

Drafting complete specifications
Creation of plans and synoptic diagrams
Monitoring and validation of installation (on-site or remotely via reports/photos)
Technical files and As-Built Dossier (DOE)
Assistance with regulatory compliance and prefectural declarations

Optimization & Compliance:

Improvement of existing systems
Integration of new technologies
Compliance with APSAD standards and current regulations
Compliance audit

2.2.Sale of digital documents

The Provider sells downloadable digital documents in Word, Excel, or

PDF format, including:

Prevention plan templates
Unique risk assessment document templates (DUER)
Methodological guides
Specifications templates
Other documentary resources

These documents are provided under an adaptation license allowing modification and unlimited use within the client company. Any resale or redistribution is strictly prohibited.

Article 3 – Orders and contract

3.1.Any order for Services is subject to a prior quote established by the Provider. Unless otherwise stated, quotes are valid for 30 days from their date of issue.

3.2.Formation of the contract

The contract is formed and becomes final only when:

The Client signs the quote with the mention "Approved" or proceeds to an electronic acceptance
of the quote
The signed quote expressly refers to these General Terms and Conditions
The whole constitutes: Signed quote + GTC = Complete contract

No separate contract is necessary. The quote and the GTC alone form the entirety of the

contract binding the Parties.

3.3.The commitment to the Service is supplemented by:

Payment of the deposit if applicable (see article 5)
For digital documents: full payment and signature of the adaptation license

3.4.Any firm and definitive order can only be canceled by the Client with the express and written agreement of the Provider. In the event of an accepted cancellation after the effective commitment of services or resources, the amounts already paid remain with the Provider as reimbursement for incurred costs, including: analysis, preparation, resource blocking, and team mobilization costs.

Article 4 – Price

4.1.The prices of the Services are indicated in euros, excluding taxes (HT), unless otherwise stated.

4.2.The applicable prices are those in effect on the day of the order. They include, unless otherwise stipulated:

For consulting, auditing, and support services: preparation, analysis, and reporting costs
For digital documents: the adaptation license and electronic delivery

4.3.The following will be charged as additional lines on the quote:

Travel expenses for missions: transport, tolls, fuel, mileage
Accommodation costs (hotel, lodging) if the mission requires one or more overnight stays
Meal costs (breakfast, lunch, dinner) according to the days of on-site intervention
Additional services not included in the initial quote
Emergency interventions or outside of business hours

These costs are detailed and quantified in an additional line on the quote, billed in addition to the main service.

4.4.The Provider reserves the right to revise its rates at any time. The new rates apply to orders placed after their entry into force.

Article 5 – Payment Terms

5.1.Digital Documents

Payment for digital documents is made in full and upfront at the time of the

order, by:

Credit card (secure online payment)
Bank transfer
PayPal
Stripe
Any other means that may be made available will be displayed at the time of payment.

The delivery of the document is instantaneous after the effective collection of payment and electronic signature of the adaptation license.

5.2.Consulting, audit, and support services

5.2.1.For services amounting to less than €1,500 excluding tax: payment in full at the time of order or upon receipt of invoice according to the terms defined in the quote.

5.2.2.For services amounting to €1,500 excluding tax or more, the Client chooses from the following options at the time of signing the quote:

Option A - Simple payment in two installments:

30% deposit of the amount excluding tax upon signing the quote
70% balance upon receipt of the final invoice

Option B - Payment by progress (based on milestones):

The quote details the service milestones and the associated amounts. Typical milestones are:
Milestone 1 (Start/Preparation): 30% upon signing the quote
Milestone 2 (Intermediate Work): 40% upon delivery of intermediate elements (plans, reports
partial, technical proposals)
Milestone 3 (Finalization/Delivery): 30% upon complete receipt of final deliverables

For services outside of Digital Documents, a final validation milestone (after receipt report) must be planned.

5.2.3.Accepted payment methods:

Bank transfer
Check (for French companies only)
Credit card (secure online payment)
PayPal
Stripe
Any other means that may be made available will be displayed at the time of payment.

5.3.No discount will be granted in case of early payment.

5.4.Invoices are payable to the bank details indicated on the invoice. Payment must be made without deduction or compensation.

Article 6 – Payment terms and late payment

6.1.Agreed payment terms

6.1.1.Unless otherwise expressly stated in the quote, the payment term is set as follows:

For digital documents: payment in full (before delivery)
For deposits: payment in full (before work begins or upon signing the quote)
For interim invoices (progress payment): payment upon receipt of the
deliverables corresponding to the milestone
For the final invoice: payment within 30 calendar days from the invoice date

6.1.2.Deadlines start from the date the invoice is issued by the Provider. The invoice is deemed received the day after it is sent by email, unless proven otherwise.

6.1.3.The payment term may be shortened to on demand (immediate payment) if the Client presents a proven or historical financial risk of late payment, at the sole discretion of the Provider.

6.2.Late payment and penalties

6.2.1.In accordance with articles L. 441-10 and following of the French Commercial Code, any late payment automatically and without prior notice results in:

Late payment penalties calculated based on three times the legal interest rate in effect, applied to the total amount due, starting from the day after the due date indicated on the invoice.
A flat fee of €40 for recovery costs, in accordance with article D. 441-5 of the Commercial Code.

These penalties are added to the principal amount due and are payable without prior notice.

6.2.2.Example of calculation: For an unpaid invoice of €1,000 excluding tax (€1,200 including tax) at J+35:

Legal interest rate = 3.15% (example)
Late payment penalty = €1,200 × (3 × 3.15%) / 365 days × 5 days late = ~€6.18
Flat fee = €40
Total to be paid = €1,200 + €6.18 + €40 = €1,246.18

6.2.3.In case of a delay exceeding 15 days after the due date, the Provider reserves the right to:

Suspend the execution of any ongoing Service without prejudice to damages.
Require payment in full for all ongoing orders
Charge additional administrative fees (reminders, collections)

6.2.4.In case of a delay exceeding 30 days, the Provider may terminate the contract by right after a formal notice by registered letter that remains unsuccessful for 8 days.

6.3.Judicial or extrajudicial collection fees remain the responsibility of the defaulting Client.

Article 7 – Delivery and execution of Services

7.1.Digital documents

7.1.1.Digital documents are delivered by instant download after:

Payment validation
Signing of the adaptation license

7.1.2.A download link is sent by email to the address provided at the time of the order. This link remains valid for 30 days.

7.1.3.It is the Client's responsibility to download and save the document within this timeframe. After this period, a new request for a link may be subject to billing.

7.2.Consulting, auditing, and support services

7.2.1.Execution times are specified in the quote. They are given as an indication and run from the receipt of the deposit and the provision by the Client of all necessary elements.

7.2.2.Services are performed during business days and hours (Monday to Friday, from 8 AM to 6 PM), unless otherwise stipulated in the quote. Any intervention outside these hours will incur an additional charge.

7.2.3.In case of delays attributable to the Client (late provision of documents, rescheduling of appointments, denied access to premises), the deadlines are extended accordingly without the possibility of claims or compensation.

7.2.4.The deliverables (audit reports, recommendations, plans, specifications, technical files) are delivered to the Client within the contractual deadline by email or upload to a secure platform.

Article 8 – Client Obligations

The Client agrees to:

8.1.Provide the Service Provider, in a timely manner, with all documents, information, and access necessary for the proper execution of the mission (plans, technical data, historical data, access to premises, etc.).

8.2.Designate a single point of contact authorized to make decisions and validate the deliverables.

8.3.Comply with the safety instructions in effect at its sites and inform the Service Provider of any specific rules (access badges, mandatory PPE, ATEX zones, etc.).

8.4.In case of the presence of asbestos or hazardous materials, provide the Asbestos Technical File (DTA) and any regulatory documentation before any intervention on site.

8.5.For digital documents: use the documents in strict compliance with the adaptation license (internal use only, no resale or redistribution).

8.6.Obtain appropriate insurance covering its professional liability and the risks related to its activity. The Services of the Service Provider do not replace any insurance policy.

Article 9 – Service Provider Obligations

The Service Provider agrees to:

9.1.Perform the services diligently, in accordance with the rules of the trade, the standards and regulations in force (Labor Code, APSAD standards, NF, ISO, etc.).

9.2.Respect the agreed indicative deadlines, subject to the Client's cooperation and the absence of force majeure.

9.3.Ensure the confidentiality of the information and data communicated by the Client in the context of the mission (see article 13).

9.4.Provide professional quality deliverables, based on the information communicated by the Client. The Service Provider shall not be held responsible for omissions or errors resulting from incomplete or incorrect information provided by the Client.

9.5.Inform the Client without delay of any difficulty that may affect the proper execution of the mission.

Article 10 – Right of withdrawal and refund

10.1.Digital documents

In accordance with article L. 221-28 of the Consumer Code, the 14-day right of withdrawal does not apply to digital content provided on an intangible medium whose execution has begun with the express prior agreement of the consumer and express waiver of their right of withdrawal.

The Client expressly agrees that downloading the digital document constitutes a waiver of their right of withdrawal.

No refunds will be made for downloaded digital documents.

10.2.Service provision

For consulting, auditing, and support services, the Client has a withdrawal period of 14 days from the date of signing the quote, in accordance with Article L. 221-18 of the Consumer Code, unless the execution of the Service has begun before the expiration of this period with the express agreement of the Client.

In the event of exercising the right of withdrawal, the Client is liable for the amount corresponding to the services already performed up to the communication of their decision to withdraw.

10.3.Any request for withdrawal must be notified by email toscoupellier@gmail.comor by registered mail with acknowledgment of receipt.

Article 11 – Liability, warranties, and limitation

11.1.Two liability regimes depending on the type of service

The Provider operates under two distinct regimes according to the quote:

Regime A: Consulting/auditing/design services (without installation follow-up)

In this context (audit, design, specifications, technical recommendations):

The Provider is only liable for material and direct errors or omissions in the design, technical plans, specifications, and

recommendations that it has explicitly provided in writing.

The Provider is NEVER liable for:
Implementation, installation, or commissioning by the Client or third parties
Non-application or partial/incorrect application of the recommendations
Defects, malfunctions, or vulnerabilities of equipment provided by third parties
Delays, deadlines, or incompetence of the installer/integrator
Attacks, intrusions, damages, or security incidents resulting from non-compliance with recommendations

Total exemption:If the Client or the installer has not followed the written recommendations of the Provider, the Provider is fully exempt from liability.

Example:Audit recommending an application firewall. If the Client omits this measure and suffers an attack → Provider is fully exempt.

Scheme B: Project support services with installation follow-up

When the quote explicitly includes support, follow-up, or installation validation:

11.1.1.Provider's validation scope

The Provider commits to validate the implementation via:

Technical test reports (firewall, access control, detection, etc.)
Photographs of equipment and physical installations
Screenshots of software settings and configurations
Remote access to systems (with written authorization from the Client)
Implementation documentation provided by the installer
Configuration logs and setting files

All these elements are compiled in an Installation Validation Report signed by the Provider and the Client.

11.1.2.Provider's responsibility in follow-up

The Service Provider agrees to:

Verify that the tested and documented elements comply with the specifications
Detect any discrepancies or apparent non-compliance based on the provided documents
Validate in writing via report the compliant elements
Report in writing any detected non-compliance

11.1.3.Validation limitations

The Client acknowledges that:

Validation pertains to the documented and tested elements during the mission
Some hidden or masked defects (complex network configuration, encrypted settings, unprecedented software vulnerabilities) may not be detected
Validation = compliance at the time of inspection, not a guarantee of perpetual security
Defects discovered after the report is signed are not the responsibility of the Service Provider
Failures of third-party hardware/software remain their responsibility

11.1.4. Mandatory Receipt Report

At the end of the installation follow-up, a Receipt and Closure Report is jointly established between the Service Provider and the Client (or their representative).

This report:

Lists the validated and compliant elements
Lists the non-compliant elements or those to be corrected (with requested corrective actions)
Sets the end date of the mission
Is signed by both parties
Serves as the reference document for the end of the Service Provider's responsibility

11.1.5.End of responsibility: after the report is signed

After signing the Receipt Report:

The Service Provider's responsibility regarding the implementation ends definitively
The Client becomes responsible for maintenance, updates, ongoing security
Any modification post-closure must be subject to a revalidation request by the Service Provider (billable)
Defects discovered after the signing of the report are not the responsibility of the Provider, except for obvious hidden defects discovered within 15 days following the signature.

Example:Installation follow-up over 2 weeks. Reports + tests + validated access. Report signed January 15. 3 months later (April 15), a Firewall vulnerability is discovered → Provider exempted (post-closure). Client responsible for keeping it updated.

11.2.Limitation of liability in case of proven error.

In case of a proven and demonstrated error by the Provider (in design OR installation follow-up):

Liability is capped at the amount of sums actually received for the service in question.
Minimum amount: 100 EUR.
Maximum amount: 2 × the pre-tax fees of the service in question.
This limitation applies even in the case of gross negligence (except for fraud or intentional deceit).

11.3.Exemption from liability of the Provider.

The Provider is completely exempt from liability if:
The Client or the installer did not follow the written recommendations of the Provider.
The Client or the installer modified, adapted, or transformed the provided specifications without prior written agreement from the Provider.
A third party not controlled by the Provider (installer, integrator, publisher, supplier) is responsible for the implementation or defects.
The incident, attack, or disaster results from a cause external to the recommendations (zero-day vulnerability, unprecedented attack, change in threat, force majeure).
The Client has not implemented one or more of the essential recommended measures
Defects are discovered after the signing of the Acceptance Report (except for obvious hidden defects within 15 days)

11.4.Operational responsibility of the Client

The Client acknowledges and agrees that:

They are solely responsible for the complete implementation of the Provider's recommendations
They are solely responsible for validating with the installer that the recommendations have been correctly applied
They are solely responsible for the actual security of their infrastructure once the report is signed
They are solely responsible for keeping security measures up to date (fixes, updates, patches)
They must request revalidation from the Provider in case of post-implementation changes
The Provider's recommendations are a starting point and must be validated, tested, and adjusted by the Client according to their operational context

11.5.General exclusions of liability

Are expressly excluded from the Provider's coverage:

Indirect damages (loss of business, loss of revenue, business interruption, data loss, damage to reputation, etc.)
Damages resulting from unilateral decisions made by the Client based on the recommendations
Incidents caused by third parties not supervised by the Provider
Failures of third-party hardware/software (equipment manufacturers, publishers, suppliers)
Force majeure events (coordinated massive attacks, zero-day vulnerabilities, government restrictions)
Incidents occurring after the date of signing the Receipt Report
Installation defects attributable to the installer or integrator

11.6.Warranty on digital documents

For digital documents, the Provider only guarantees the compliance of the file with the description and its accessibility. In the event of a corrupted or unreadable file, the Provider commits to providing a new download link at no additional charge, within 48 business hours.

Article 12 – Force majeure

12.1.The Parties shall not be held liable if the non-performance or delay in the performance of any of their obligations results from a case of force majeure as defined in Article 1218 of the Civil Code.

12.2.The following shall be considered as cases of force majeure, in addition to those usually recognized by the case law of French courts: total or partial strikes, internal or external to the company, lockouts, exceptional weather conditions, epidemics, blockage of means of transport or supply, natural disasters, fire, government or legal restrictions, failure of telecommunications networks or difficulties specific to telecommunications networks external to the Parties.

12.3.The Party observing the event must promptly inform the other party of its inability to perform its service and justify this to the other party.

12.4.If the impediment is temporary, the execution of the obligation is suspended unless the resulting delay justifies the termination of the contract. If the impediment is definitive or lasts more than 90 days, the contract is automatically terminated without compensation on either side.

Article 13 – Confidentiality and Intellectual Property

13.1.Confidentiality

13.1.1.The Parties agree to treat all information, data, documents, know-how, of any nature whatsoever, exchanged in the context of the execution of the contract as strictly confidential.

13.1.2.This confidentiality commitment applies throughout the duration of the contract and remains in effect for 5 years after its termination, regardless of the cause.

13.1.3.The following information is excluded from this obligation:

Already public at the time of communication
Made public without violating this commitment
Whose communication is required by a judicial or administrative authority

13.2.Intellectual Property

13.2.1.All deliverables (reports, studies, recommendations, plans, specifications, digital documents) remain the exclusive intellectual property of the Service Provider.

13.2.2.The Client has a non-exclusive and non-transferable right to use the deliverables, strictly limited to its internal use and within the framework defined by the mission.

13.2.3.For digital documents, the Client benefits from an adaptation license allowing it to modify and customize the document for its internal use.

Any resale, redistribution, publication, or transfer to a third party is strictly prohibited and would constitute an infringement punishable by Articles L. 335-2 and following of the Intellectual Property Code.

13.2.4.The Client is prohibited from reproducing, representing, distributing, or exploiting all or part of the deliverables for commercial purposes or communicating them to third parties without prior written authorization from the Provider.

13.2.5. Any commercial reference (logo, Client's name) on the Provider's website or its communication materials requires the prior agreement of the Client.

Article 14 – Protection of Personal Data

14.1.In accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act, the Provider collects and processes the Client's personal data strictly within the framework of contract execution.

14.2.The collected data includes: identity, professional contact details, billing information. They are retained for the duration of the contract and for 3 years thereafter for accounting and tax obligations.

14.3.The Client has the right to access, rectify, delete, object to, and port their data, which they can exercise by contacting:

contact@cisc-fr.com.

14.4.The data is in no case transferred to third parties for commercial purposes.

Article 15 – Termination

15.1.In the event of a serious breach by either Party of its contractual obligations, not remedied within 15 days following the sending of a formal notice by registered letter with acknowledgment of receipt that remains unsuccessful, the other Party may terminate the contract by right.

15.2.The termination will take effect immediately, without prejudice to any damages that the injured Party may be entitled to claim.

15.3.In the event of termination attributable to the Client, any sums already paid shall be definitively acquired by the Service Provider. Any outstanding balance for services rendered must be settled immediately.

15.4.The termination does not affect the confidentiality, intellectual property, and dispute resolution clauses, which remain in effect.

Article 16 – Business References

The Service Provider reserves the right to mention the Client's name among its business references, unless expressly and in writing opposed by the Client.

This mention will only include the name of the company and its business sector, excluding any confidential information.

Article 17 – Assignment of the quote and the contract

17.1.The signed quote and the General Terms and Conditions together form the complete and irrevocable contract between the Parties.

17.2.The Client may not assign, transfer, or delegate its obligations or rights arising from this contract without the prior written and express consent of the Service Provider.

17.3.The Service Provider reserves the right to assign or delegate all or part of its contract to:

Any company in its group
Any acquirer of its business
Any qualified technical partner, subject to prior written notice to the Client

Article 18 – Miscellaneous Provisions

18.1.Partial nullity: If one or more provisions of these General Terms and Conditions are deemed invalid or declared as such by the application of a law or regulation, or as a result of a final decision by a competent court, the other provisions will retain their full force and scope.

18.2.Tolerance: The fact that one of the Parties does not invoke a breach by the other Party of any of the obligations referred to herein shall not be interpreted as a waiver of the obligation in question.

18.3.Entirety of the contract: These General Terms and Conditions and the quote signed by the Client together constitute the entirety of the contract between the Parties and cancel and replace any prior agreement, letter, offer, or other document having the same subject. No separate contract is necessary. The quote must expressly state: "This quote, signed and accepted by the Client, along with the General Terms and Conditions of Sale of the Service Provider, constitutes the complete and final contract."

18.4.Modification: Any modification of the General Terms and Conditions or the contract must be the subject of a written amendment signed by both Parties.

Article 19 – Applicable law and competent jurisdiction

19.1.These General Terms and Conditions are subject to French law.

19.2.In the event of a dispute regarding the interpretation or execution of these, the Parties agree to seek an amicable solution.

19.3.In the absence of an amicable agreement within 30 days from the notification of the dispute by registered letter with acknowledgment of receipt, the dispute will be brought before the competent courts of the jurisdiction of the Provider's registered office (France), notwithstanding the plurality of defendants or third-party claims.

19.4.Consumer mediation (for consumer clients only): In accordance with Article L. 612-1 of the Consumer Code, the consumer Client has the option to resort to a consumer mediator free of charge for the amicable resolution of a dispute with the Provider.

The Client can only refer to the mediator after having attempted to resolve their dispute directly with the Provider through a written complaint.

Date of update of the General Terms and Conditions: November 2025

Coup International Security Consulting

SIREN: 990691727

Email: scoupellier@gmail.com

Website: www.cisc-fr.com