Terms of Engagement

Version 2.0 · In force from 29 September 2026 · Replaces version 1.0

These terms apply to every service ordered from 402Scope Compliance. Please read them before paying. In short: we deliver a fixed-scope regulatory review within the stated time; it is an analysis, not legal advice or a certificate; our liability is limited to the fees you paid; and you may not present our review as an approval. Questions: hello@402scope.org.

1. Who we are and who you are

402Scope Compliance is the trade name of Arturo Ferrándiz Fernández, self-employed regulatory compliance consultant, Spanish tax number (NIF) 49230325K, Avenida Blasco Ibáñez 134, Valencia, Spain ("we", "us"). "You" means the company, project or person ordering a service ("Client").

The services are designed for businesses. If you order as a consumer, the mandatory rights that consumer law gives you still apply, including those in section 15.

2. Definitions

MaterialsThe website pages, white paper, terms, privacy notice, social media posts and any other documents you send or identify for review.
ReportThe written deliverable of a service, including suggested wording, checklists and annexes.
OrderYour acceptance of a service through the order form, a written quote or payment.
Working hours / daysMonday to Friday, 09:00 to 19:00 Central European Time, excluding public holidays in Valencia (Spain).
Start timeThe later of (a) receipt of full payment and (b) receipt of complete Materials and answers to the order form.

3. How an engagement is formed

  1. You submit the order form, accept these terms and pay, or accept a written quote.
  2. We confirm the engagement, the delivery date and the scope by email within one working day. We may ask for identification documents (section 13) before starting.
  3. If we decline the engagement, we refund any amount paid in full within five working days.

Where a written quote differs from these terms, the quote prevails for that engagement.

4. Services and scope

ServiceWhat you receiveIncluded scope
MiCA Readiness ReviewReport with classification analysis, findings ranked by level with the rule behind each one, suggested wording for every Critical and High finding, area checklists and a remediation plan; plus one video call of up to 20 minutes.Website up to 15 pages, white paper up to 40 pages, terms and privacy notice, up to 20 social posts.
Express deliveryThe same Review delivered in 24 working hours, when offered and accepted in writing.As above.
MonitoringMonthly review of new marketing content and regulatory updates relevant to your project, when offered as a subscription.As stated in the quote.
Launch Pack and other workDrafting of documents (for example white paper sections, risk warnings, terms, privacy notice) and other agreed work.As stated in the written quote.

Materials beyond the included scope, additional jurisdictions, new versions of your Materials after the Start time and re-reviews of corrected Materials are quoted before any extra work starts.

5. Nature and limits of the service

6. Your obligations and assurances

You will provide complete, accurate and current Materials, tell us promptly about any change during the engagement, and reply to our questions. The Report is based only on the Materials and on information publicly available when they were captured; we are not responsible for issues missed because Materials were incomplete, inaccurate or changed afterwards.

You confirm that you are authorised to order the service for the Client, that you have the right to share the Materials with us, and that neither the Client nor its owners, directors or the project are subject to EU, UN, UK or US sanctions or located in a sanctioned jurisdiction.

7. Delivery, clarifications and acceptance

We deliver the Review within 72 working hours of the Start time, or within the time stated in the quote. The clock stops while we wait for information from you. If we expect a delay on our side, we will tell you as soon as possible.

After delivery you may send written questions or point out factual errors within 14 days. We answer them and correct factual errors in the Report free of charge. Reviewing new or corrected Materials is a new service. If you do not raise any issue within 14 days, the Report is deemed accepted.

8. Fees, payment and invoices

9. Changes, cancellation and refunds

You may cancel with a full refund before the Start time. After the Start time the fee is not refundable, except where we fail to deliver for reasons attributable to us, in which case you may choose a new delivery date or a full refund. For Monitoring, either party may end the subscription at the end of any monthly period with notice by email.

10. Confidentiality

Each party keeps the other's non-public information confidential and uses it only for the engagement, during the engagement and for three years after it ends, and for trade secrets for as long as they remain secret. This does not apply to information that is or becomes public without breach, that the receiving party already had lawfully, or that must be disclosed by law or by order of an authority, in which case the other party is informed where lawful.

11. Use of the Report and of our name

Once paid, you may use the Report and the suggested wording without limit for your own project, and share the Report with your advisers, investors, auditors, trading venues and partners for information. No third party may rely on it, and we owe no duty to anyone other than the Client.

You must not describe the project as "approved", "certified", "audited" or "MiCA compliant" by 402Scope Compliance, or use our name or logo in marketing, without our prior written consent. With consent, you may state: "Regulatory review by 402Scope Compliance, [date]". Our checklists, methodology, templates and know-how remain ours and may be reused in other engagements without any of your confidential information.

12. Tools, subcontractors and working methods

We use professional software, cloud storage and AI-assisted research and drafting tools to prepare our work. Every Report is reviewed, completed and approved by Arturo Ferrándiz Fernández before delivery. Providers act under confidentiality and data processing terms. We do not use your confidential Materials to train AI models and choose providers whose terms exclude such use. If you require that no AI-assisted tools are used, tell us before the Start time and we will confirm whether we can accept the engagement on that basis and at what price.

13. Know your client, sanctions and refusal

We may ask for information to identify you, your beneficial owners and your project, and we screen clients against sanctions lists. We may decline an engagement, or end it and refund the unused part of the fee, if you do not provide that information or if we have reasonable grounds to believe the project involves fraud, sanctioned persons or countries, money laundering, terrorist financing or misleading investors.

14. Independence from the 402Scope observatory

The 402Scope observatory at 402scope.org is operated by the same person and measures x402 providers free of charge. If you are a measured provider, the engagement is disclosed on your observatory page and has no effect on your measurements or on how they are published. Buying a service never buys a result, a rating or a publication.

15. Consumers

If you are a consumer in the EU, you may withdraw from the contract within 14 days of the Order without giving reasons, by writing to hello@402scope.org. If you ask us to start within that period, you expressly request immediate performance and acknowledge that you lose the right of withdrawal once the service has been fully performed; if you withdraw after we have started but before delivery, you pay a proportionate amount for the work done. Nothing in these terms limits the mandatory rights of consumers, including the right to sue in the courts of their country of residence.

16. Liability

Our total liability arising from or in connection with an engagement, whether in contract, tort or otherwise, is limited to the fees you paid for that engagement. We are not liable for indirect or consequential loss, including loss of profits, revenue, opportunity, data or goodwill, fines or penalties imposed on you, or third-party claims. These limits do not apply to liability that cannot be limited under applicable law, including for wilful misconduct or gross negligence, or to mandatory consumer rights. Any claim must be notified in writing within one year from delivery of the Report.

17. Personal data

We process your contact and billing data as controller, as described in our privacy policy at compliance.402scope.org/privacy.html. Where your Materials contain personal data of third parties, send only what the review needs; for that data we act as your processor under the data processing terms in Annex 1, which form part of these terms.

18. Force majeure

Neither party is liable for delay or failure caused by events beyond its reasonable control, such as illness, outages of essential providers, or acts of authorities. The affected party will inform the other promptly, and delivery dates move accordingly; if the delay exceeds 15 working days, either party may end the engagement and any unused fees are refunded.

19. Complaints and notices

Complaints and notices are sent by email to hello@402scope.org and to the email address you gave in the Order. We acknowledge complaints within two working days and answer within ten working days.

20. General

These terms, the order form and any quote are the entire agreement for an engagement. If a clause is invalid, the rest remains in force. You may not assign the engagement without our consent. These terms are written in English; a Spanish translation is available on request, and in case of doubt the English version prevails, except for consumers resident in Spain, for whom the Spanish version prevails. We may update these terms; the version in force when you place your Order applies to that Order.

21. Governing law and courts

These terms and any engagement are governed by Spanish law. Disputes are submitted to the courts of the city of Valencia, Spain, except where mandatory rules give a consumer the right to sue or be sued in their own country.

Annex 1. Data processing terms (GDPR Art. 28)

Subject and durationProcessing of personal data contained in the Materials, only to perform the engagement, for its duration plus the retention period below.
Data and data subjectsNames, contact details, wallet addresses and other identifiers of your team, users or third parties that appear in the Materials.
InstructionsWe process the data only on your documented instructions, which are these terms and the Order, unless required by law.
Confidentiality and securityAccess restricted to Arturo Ferrándiz Fernández; encrypted cloud storage; two-factor authentication on all accounts.
Sub-processorsCloud storage, email and AI-assisted tools under data processing agreements. A current list is available on request; you may object to a new sub-processor, in which case either party may end the engagement.
International transfersOnly with safeguards under GDPR Chapter V, such as the EU-US Data Privacy Framework or standard contractual clauses.
AssistanceWe help you, as far as reasonably possible, with data subject requests and personal data breaches, and notify you of any breach affecting your data without undue delay.
Retention and deletionMaterials are deleted or returned within 90 days of delivery, except the Report and the evidence log, which we keep for six years for the defence of claims, and data we must keep by law.
AuditsWe make available the information needed to demonstrate compliance with these terms.

402Scope Compliance · Arturo Ferrándiz Fernández · NIF 49230325K · Avenida Blasco Ibáñez 134, Valencia, Spain · hello@402scope.org