GOpenCDR enterprise terms

This agreement

These terms are between Gelhaus Solutions and an organisation that orders GOpenCDR's enterprise services. The order names the services, the fees and the term, and these terms apply to every order, together with the GOpenCDR terms and the acceptable use policy. Personal data the organisation has us process on its behalf is covered by the data processing agreement and its GOpenCDR annex.

Enterprise services are for businesses within the meaning of Section 14 BGB. They are not offered to consumers.

The services

An order may include:

• Private mirrors: resolvers dedicated to the organisation, serving GOpenCDR and the organisation's private names to its own networks.
• Private namespaces: names under the organisation's own domains, answered only on its private mirrors, and private TLDs reserved for the organisation and checked against every collision source.
• Organisation management: members and roles, service accounts with short-lived credentials, single sign-on over SAML or OIDC for verified domains, provisioning over SCIM, and streaming of audit events to the organisation's own systems.

A brand TLD in the public root is operated under a TLD operator agreement, not under these terms.

No service level

No service level is offered. No availability, uptime, response time or restoration time is owed or implied, whatever an order, the status page, the transparency log or anybody says. Resolution through mirrors may continue while the control plane is unavailable, and neither is a commitment.

A service level exists only as a separate schedule, signed by both sides, that names the service boundaries, maintenance windows, exclusions, credits, support severities and response targets, recovery point and recovery time objectives, and the dependency on the control plane's availability. Nothing short of such a schedule is a service level.

Support

By email to egelhaus@ennogelhaus.de, on German business days, handled in order of severity. No response time is owed.

What the organisation is responsible for

• Who it admits, the roles it gives them, and its single sign-on configuration. It keeps administrative access protected by passkeys and keeps a local administrator account for recovery, because single sign-on alone is not a way back in when the identity provider fails.
• The lawfulness of what its members do, of the names it creates and of the data it puts into zones and policies. The acceptable use policy binds the organisation and every member.
• Keeping its own copies of its configuration and zones, as the general terms require for all data.

The organisation's data

• It is kept apart from every other customer's data in data stores, caches, logs, backups and support tooling, and it is stored and processed in Germany.
• The organisation can export its configuration, zones and audit events at any time. When an order ends, the data processing agreement governs return and deletion.

Fees and payment

• As stated in the order, invoiced in advance for the billing period it names and payable within 14 days of the invoice. Whether VAT is charged is shown on the invoice.
• A change of price is announced at least six weeks before the billing period it applies to, and the organisation may end the affected order at the end of the current period.

Term and ending

• An order runs for the minimum term it states and renews for the same period unless either side ends it with 30 days' notice before the term ends.
• Either side may end an order for cause, in particular for a material breach not remedied within 30 days of notice.
• We may suspend a service at once where its use is unlawful or harms the service or others.
• When an order ends, its services stop and the organisation's private names stop resolving on its private mirrors.

Confidentiality

Each side keeps confidential what the other discloses as confidential, or what is evidently confidential, for the term and for three years after, and uses it only for the order. This does not apply to what is public without breach, was already known, is independently developed, or must be disclosed by law.

Everything else

Warranty and liability, including the cap for businesses and the shortened limitation period, are as set out in the general terms of service. German law applies, and the courts at Gelhaus Solutions' registered seat have jurisdiction. A material change to these terms is announced at least six weeks ahead, and the organisation may object and end the affected order at the date the change would take effect.