Who we are and these terms

Mito is a service of Virtual Petals IT Solutions & Consultancy - Sole Proprietorship L.L.C., Abu Dhabi, United Arab Emirates (Abu Dhabi Economic Licence CN-4495176), "Virtual Petals", "we" or "us". You can reach us at mito@virtualpetals.com.

These terms apply when an organisation ("you" or "the customer") starts a free trial of Mito, subscribes to it or uses it in any other way. By starting a trial or subscribing, you accept these terms on behalf of your organisation. Our privacy policy explains how we handle personal data.

The service

Mito assesses the security configuration of your Microsoft 365 tenant every day. It connects through an app that you create and control in your own tenant, with read-only permissions. Mito reads configuration; it changes nothing in your tenant.

Results are shown in the Mito customer portal, with severity, guidance on how to fix each failed check, your history and what changed since the previous run. If your organisation chooses, people in it can also connect AI assistants to Mito to ask about the results.

Accounts and access

The person who signs up is the account owner. They confirm that they have the authority to accept these terms for the organisation and to authorise read-only access to its Microsoft 365 tenant.

You decide who in your organisation can use the portal. Keep the app's credentials, portal sign-ins and any Mito access keys safe, and tell us straight away if you think they have been misused.

Free trial

New customers can try Mito free for 30 days. No payment card is needed to start: you sign up with your Microsoft work account. To keep using Mito after the trial, the account owner adds a payment card before the trial ends; billing then starts when the trial ends. If no card is added, the trial ends and you are not charged. Each Microsoft 365 organisation (tenant) can have one free trial.

Plans, prices and billing

Mito is priced per Microsoft 365 tenant, by the size band of your organisation, as shown on our pricing page. Bands are a guide to your organisation's size, and we review them with you once a year.

You can pay monthly or annually; an annual subscription costs the same as 10 monthly payments (2 months free). Prices are in US dollars or UAE dirhams and exclude VAT, which is added where applicable.

Subscriptions are billed in advance through our payment provider, Stripe, and renew automatically at the end of each period until cancelled. We may change prices by telling you at least 30 days before your next renewal; the new price applies from that renewal.

Cancellation and refunds

You can cancel at any time from the billing portal or by emailing mito@virtualpetals.com. Cancellation takes effect at the end of the period you have already paid for, and you keep access until then. We do not refund partial periods, except where the law requires it.

Customer responsibilities

To keep the assessments running, keep the app's credentials valid and the required read-only permissions granted in your tenant. If they lapse, assessments stop until they are restored.

Use Mito lawfully and only for tenants you are authorised to assess. Do not try to access other customers' data, reverse engineer the service, overload or disrupt it, or resell it without our written agreement.

Our responsibilities

We protect the service with reasonable security measures: read-only access, an isolated environment for each customer, and assessments and results hosted in Microsoft Azure UAE North, as described on our Security and data residency page and in our privacy policy.

Your data

Your organisation owns its data, including its assessment results. We use it only to provide the service to you, and to support and secure it.

When your subscription ends, we delete your app credentials and isolated environment straight away, and your assessments and results 30 days later, as set out in our privacy policy.

AI assistants

Connecting AI assistants is optional. It is on from the start for organisations that sign up themselves, and their owner in Mito can turn it off at any time; for other organisations it is off until they ask us to turn it on. Once results are sent to an assistant at the request of someone in your organisation, the assistant's provider handles them under its own terms and your agreement with it.

Findings are guidance

Each assessment reflects your tenant's configuration at the time of each check. Mito's findings and guidance help you find and fix weaknesses, but they do not guarantee that your tenant is secure or free of risk, and you decide which changes to make.

Framework mapping provides evidence for technical controls of frameworks such as CIS, ISO/IEC 27001 and the UAE IA Regulation. It never means that your organisation is compliant with a framework or certified against it: frameworks also need non-technical controls such as policies, processes and training.

Availability and changes to the service

We make reasonable efforts to keep Mito available, but it may sometimes be interrupted, for example for maintenance or because of an outage at a provider we rely on. We may improve or change the service and its checks over time, including adding, updating or retiring checks.

Suspension and termination

If a payment is still unpaid after a grace period, or if you seriously breach these terms, we may suspend or end your access. Where we reasonably can, we will tell you first and give you time to put things right.

Either party may end the subscription. You can cancel as described above; we can end it by giving you notice, effective at the end of your current paid period, or straight away for a serious breach.

Liability

Neither party is liable for indirect or consequential loss, such as loss of profit, revenue or business opportunity. Our total liability under these terms is limited to the fees you paid for Mito in the 12 months before the claim.

Nothing in these terms limits liability that the law does not allow to be limited.

Changes to these terms

We may update these terms. We will publish the new version here with a new date, and tell customers about material changes before they take effect. If you do not agree with a change, you can cancel before it applies.

Governing law and disputes

These terms are governed by the laws of the Emirate of Abu Dhabi and the federal laws of the United Arab Emirates as they apply there. If a dispute arises, both parties will first try to resolve it by good-faith negotiation for 30 days. If it is not resolved, it goes to the courts of Abu Dhabi.

Contact

For questions about these terms, email mito@virtualpetals.com.

Terms of Service.