Terms of Use — Salus

Effective from November 4, 2026. Last updated: November 4, 2026.

The processing of personal data is described in the Salus Privacy Policy, which forms part of these Terms.

1. Who we are and acceptance of the terms

These Terms of Use govern the use of the Salus platform (“Salus” or the “Platform”), provided by INconnet (INconnet Serviços e Soluções em TI e Telecomunicações Ltda, CNPJ 16.575.266/0001-00, headquartered at Av. Nova Cantareira, 2014, 10º andar, cj. 103/104, Tucuruvi, São Paulo/SP, CEP 02330-003, Brazil) and by the other INconnet group companies, including INconnet Global LLC (USA) and INconnet in Paraguay, hereinafter “INconnet”, “we” or “us”.

By accessing or using Salus — whether the operations console or the client portal — you confirm that you have read and agree to these Terms and to the Privacy Policy. If you do not agree, do not use the Platform.

2. What Salus is

Salus is the device management and security platform (RMM) that INconnet uses to provide its IT services to clients. It is not a product sold or charged separately to users: it is the system that operates the contracted service.

• Operations console (salus.inconnet.com.br): used by INconnet’s technical team for inventory, remote access, updates and patching, hardening, antivirus/EDR, the password vault, quarantine, incidents and reports on managed devices.

• Client portal (customer-portal.inconnet.com.br): lets authorized contacts of the client company follow its device fleet — devices, security posture, compliance score, reports and support history — restricted to the company’s own data.

Salus connects to INconnet’s ticketing system and to other internal and third-party systems needed to provide the service (for example, EDR and cloud providers).

3. Who may use it and how access is granted

Salus is for the exclusive use of people authorized by INconnet:

• Operations console: INconnet employees and technicians, according to their role and assigned permissions.

• Client portal: employees of companies with a service contract in force with INconnet, nominated by their own company.

There is no open sign-up. Access is granted by INconnet and requires two-factor authentication (MFA). It can be done with a corporate Microsoft account or with a username and password provided by us. Users must be 18 or older.

Access ends automatically when the client company’s contract with INconnet ends, when the employee’s or technician’s relationship ends, or when the client company asks for the user to be removed.

4. Account, credentials and security

Credentials are personal and non-transferable. You are responsible for:

• keeping your username, password and second factor (MFA) protected and not sharing them;

• not sharing your account with other people;

• notifying INconnet immediately at [email protected] if you suspect misuse or a compromised account.

INconnet may block an account as a precaution if there are signs of unauthorized access. Every relevant action in Salus is recorded in an audit trail (section 13).

5. Permitted and prohibited use

Salus must be used only to manage, protect and support the devices and services within the scope of the contract. It is prohibited to:

• use the Platform for unlawful purposes or purposes unrelated to the service;

• access data of other companies, users or devices without authorization;

• use remote access or the password vault for any purpose other than support;

• copy, modify, decompile or reverse engineer the Platform;

• circumvent security, authentication, permission or audit mechanisms;

• use bots or automations not authorized by INconnet.

Breach may lead to suspension or cancellation of access, without prejudice to other applicable measures.

6. Remote access to devices and consent

Salus allows INconnet’s authorized team to access managed devices remotely (desktop, terminal and files) to provide support and maintenance.

• Remote access depends on consent configured in the contract and reflected in the Platform, and may require acceptance, notice to the device user or both, according to each client’s policy.

• Remote sessions are recorded in the audit trail (who accessed, when, which device and for which ticket).

• INconnet accesses devices only for the purpose of the service and does not use them for personal surveillance of users.

The client company is responsible for informing its employees about the remote management of their devices.

7. Password vault and privileged access

Salus includes a vault to store, in encrypted form, the credentials needed to operate the client’s devices and systems (for example, local administrator passwords and server access passwords).

• Access to credentials is restricted by permission and recorded in the audit trail.

• The Platform can authorize a user to use a credential without displaying it — filling it in automatically to open a session — with expiry, revocation and logging.

• Where applicable, Salus manages local administrator password rotation (LAPS) on managed devices.

The client company owns the credentials to its systems; INconnet stores and uses them only to provide the service, under the contract.

8. Relationship with the service contract

Salus is the means by which the contracted services are provided. Deadlines, SLAs, hours, fees and responsibilities for the services are governed by the contract between INconnet and the client company. In case of conflict, the contract prevails over these Terms.

9. Availability, updates and suspension

• INconnet strives to keep Salus available but does not guarantee uninterrupted operation. There may be maintenance downtime, connection failures or unavailability of third-party services, such as cloud, authentication and EDR providers.

• We may release updates, change or remove features and require the latest version to continue using the Platform.

• In an emergency, INconnet’s traditional support channels remain available.

10. Intellectual property

Salus, the Salus brand, the INconnet brand, the code, the layout and the other elements belong to INconnet or its licensors. Using the Platform grants only a personal, limited, non-exclusive, non-transferable and revocable license, restricted to the purpose described in these Terms. Any third-party and open-source components used are subject to their own licenses.

11. Limitation of liability

To the maximum extent permitted by law, INconnet is not liable for damages caused by:

• use of the Platform in breach of these Terms;

• failures of the network, third-party services or the client’s own systems;

• improper access resulting from credentials shared or poorly protected by the user;

• incorrect information or settings entered by the user.

Responsibilities for the IT services themselves follow the service contract (section 8). Nothing in these Terms limits rights that the law guarantees on a mandatory basis.

12. Roles of the parties: controller and processor

INconnet’s client is the company that signed the service contract. Portal users act on behalf of that company, which:

• nominates and keeps up to date the list of authorized people and asks for the removal of anyone who leaves;

• informs its employees about INconnet’s management and security monitoring of their devices through Salus;

• warrants that it has a legal basis for INconnet to process the data of its employees and devices;

• is the controller of that data; INconnet acts as operator (LGPD) or processor (GDPR), under the data processing agreement in the contract.

Manager profiles. Users with a manager profile in the portal see data for the whole company and its branches. The company is responsible for assigning this profile only to those who need access. Details of the data processing are in the Privacy Policy.

13. Logs, audit and evidentiary value

Salus keeps an audit trail of relevant actions: sign-ins, remote access, use of vault credentials, policy changes, device promotion/quarantine and report generation.

• These records are kept intact and may be used as evidence by the parties, including for contractual, billing and security purposes.

• Reports generated by Salus reflect the data collected in the period and form part of the documentation of the service provided to the client company.

14. Global coverage and applicable laws by region

Salus may be used in any country where INconnet provides services. INconnet observes the law of the user’s country whenever it applies and is more protective, in addition to the LGPD, which always applies as the law of the headquarters. Where the law requires data to be stored in the country, INconnet only operates after a prior compliance assessment and may limit features. If the law of the user’s country guarantees a right that these Terms do not provide, that right prevails.

15. Compliance: sanctions, export and anti-corruption

Sanctions and export control. Salus uses encryption and may be subject to US export laws (Export Administration Regulations) and those of other countries. It may not be used in countries under comprehensive embargo, or by people or companies on the sanctions lists of the UN, the United States (OFAC), the European Union, the United Kingdom or Brazil. INconnet may block access to comply with these rules.

Anti-corruption. Users, technicians and partners must comply with the Brazilian Anti-Corruption Law (Law 12,846/2013), the US FCPA, the UK Bribery Act and equivalent local laws.

16. Privacy and data protection

The processing of personal data in Salus is described in the Salus Privacy Policy, which forms part of these Terms. It details the data processed, the purposes, the legal bases, sharing, international transfers, retention periods, data subject rights and the Data Protection Officer (DPO) contact.

17. General provisions

• Language: these Terms are published in Portuguese, English and Spanish. In case of divergence, the Portuguese version prevails, unless local law requires the version in the user’s language.

• Severability: if any clause is invalid in any country, the others remain valid, and the invalid clause is replaced by the closest one permitted by local law.

• Force majeure: INconnet is not liable for delays or failures caused by events beyond its reasonable control, such as natural disasters, widespread power or internet outages, acts of government, strikes or pandemics.

• Assignment: INconnet may transfer these Terms to its group companies or to a successor, keeping the same protections for users. Users may not assign their account.

• No waiver: INconnet’s failure to enforce a clause at a given time does not mean a waiver of it.

18. Changes, governing law, venue and contact

Changes. We may update these Terms. The current version is published on the INconnet websites, with the date of the last update. Relevant changes will be announced in Salus or by email at least 30 days in advance, unless the change results from law or security. Continuing to use the Platform after that means you agree to the new version.

Governing law and venue. These Terms are governed by Brazilian law, without prejudice to the consumer protection and data protection rules applicable in the user’s country. The courts of São Paulo/SP, Brazil, are chosen, unless the law provides otherwise.

Contact. Questions about these Terms: [email protected] — INconnet, Av. Nova Cantareira, 2014, 10º andar, cj. 103/104, Tucuruvi, São Paulo/SP, CEP 02330-003, Brazil.