© Dehhani Ltd 2026
© Dehhani Ltd 2026
These Terms of Service ("Terms") govern your access to and use of the Device Setup Utility product suite and all related tools and services (collectively, the "Service"), operated by Dehhani Ltd, a company registered in England and Wales ("us," "we," or "our"). By accessing or using any part of the Service, you agree to be bound by these Terms. If you do not agree, you must not access or use the Service.
The Service comprises the following components:
References to the "Service" throughout these Terms include all of the above components unless otherwise specified.
The Service allows you to post, link, store, share, and otherwise make available certain information, text, graphics, images, or other material ("Content"). You are responsible for the Content that you post on or through the Service, including its legality, reliability, and appropriateness.
Users may purchase a profiling licence to access both DSU — Profiler and DSU — Erasure. Each licence permits a defined number of device submissions determined by the selected package. Licence consumption is recorded on a per-device basis; each device submission from either DSU — Profiler or DSU — Erasure decrements the available profiling allowance by one.
Erasure licences are purchased separately and are required in addition to a profiling licence to perform data erasure operations using the DSU — Erasure module. Each erasure operation (one or more drives on a single device) consumes the number of erasure licence credits corresponding to the number of drives erased. Erasure licence credits are non-transferable between accounts.
Licence keys are issued to a single account and must not be shared, redistributed, sublicensed, or used by any party other than the licensed account holder and their authorised sub-users. We reserve the right to revoke any licence key found to be in breach of this restriction without refund.
The Service requires an active internet connection to authenticate licence keys, verify erasure credits, and submit device reports. The application communicates with our servers on each use for licence verification and report submission. You acknowledge that the Service cannot operate without connectivity to our servers.
If your licence allowance or erasure credits are exhausted during a session, you will be unable to submit further reports or perform additional erasures until additional credits are purchased. Partially completed operations at the point of exhaustion may not be recorded. It is your responsibility to maintain adequate licence credits for your intended workload.
Profiling licence subscriptions may be cancelled by the user at any time. Cancelled licences remain active until the end of the current billing period. Erasure licence credits do not expire but are non-refundable once purchased. All licence purchases are non-refundable.
Users receive a referral code that may be shared with others. When a referral code is used during a licence purchase, both the referrer and the referee will receive 100 additional device credits on a valid profiling licence.
We reserve the right to increase or otherwise modify the prices of all services, licence packages, erasure credits, and add-on subscriptions at any time. Users will be notified of any price modifications by email at least 30 days prior to such changes taking effect. Continued use of the Service after the effective date of a price change constitutes acceptance of the revised pricing. One-time purchases (including erasure credit packs) are charged at the price displayed at the time of purchase.
The DSU — Erasure module generates erasure certificates that document the erasure method applied (e.g., NIST SP 800-88 Clear/Purge, DoD 5220.22-M, HMG IS5) and the verification outcome. Erasure certificates are a record of the process performed. They do not constitute a warranty, guarantee, or representation that data is irrecoverable under all circumstances, including advanced forensic recovery methods.
Due to the architecture of solid-state storage devices — including wear-levelling, over-provisioning, and controller-managed block allocation — software-based overwrite methods may not sanitise all addressable and non-addressable storage areas. For SSDs and NVMe drives, the NIST SP 800-88 Purge method (which issues ATA Secure Erase or NVMe Format commands to the drive firmware) is strongly recommended. The selection of the appropriate erasure method for the storage media in use is solely the responsibility of the user. We do not warrant that any software-based erasure method will render data irrecoverable from solid-state media.
To the maximum extent permitted by applicable law, Dehhani Ltd shall not be liable for any data breach, data exposure, regulatory penalty, claim, loss, or damage arising from or in connection with residual data on storage media that has been processed by the DSU — Erasure module, regardless of the erasure method selected. This limitation applies whether the claim arises in contract, tort (including negligence), strict liability, or any other legal theory.
You are solely responsible for: (a) selecting an erasure standard appropriate to the sensitivity classification of the data and the regulatory requirements applicable to your organisation; (b) verifying that the erasure method is compatible with the target storage media; (c) maintaining and archiving erasure certificates as required by your compliance obligations; and (d) physically destroying storage media where software-based erasure is insufficient for your security requirements.
Data erasure operations performed by the DSU — Erasure module — including, without limitation, NIST SP 800-88 Purge, NIST SP 800-88 Clear, DoD 5220.22-M, HMG IS5, and Gutmann overwrite methods — are permanent and irreversible. Once an erasure operation has been initiated and completed, the data on the target storage medium cannot be recovered by any means. You acknowledge that you have sole responsibility for ensuring that all data on the target device has been backed up or is no longer required prior to initiating any erasure operation. Dehhani Ltd shall bear no liability whatsoever for data loss resulting from erasure operations initiated by you or any authorised user of your account.
The operating system deployment functionality within DSU — Erasure installs an operating system image onto the target storage drive. This process partitions, formats, and overwrites the contents of the selected drive. All existing data on the target drive will be permanently destroyed as a consequence of operating system installation. It is your sole responsibility to ensure that the correct target drive is selected and that no data requiring preservation resides on that drive prior to initiating deployment.
DSU — Erasure performs automated hardware diagnostic tests by interfacing with device components through the Linux kernel and available device drivers within the live operating environment. You acknowledge that: (a) certain hardware components may not be detected or may not be fully testable where the requisite Linux kernel drivers are not available or are not compatible with the specific hardware revision; (b) test results are generated programmatically and reflect the software's interpretation of hardware responses at the time of testing; and (c) hardware test results do not constitute a warranty or guarantee of device functionality and should be independently verified where they are material to any commercial, contractual, or regulatory decision.
The DSU — Portal provides a remote command interface that permits authorised users to issue instructions to devices running DSU — Erasure over an authenticated WebSocket connection. Available remote commands include, without limitation: initiating data erasure, running hardware tests, deploying operating systems, submitting device reports, and powering off or rebooting the device. You are solely responsible for: (a) controlling which individuals have access to your DSU — Portal account and the ability to issue remote commands; (b) ensuring that sub-users granted access to the Portal are authorised to perform remote operations on connected devices; and (c) any and all consequences arising from remote commands issued from your account, whether authorised or resulting from a failure to secure your account credentials. Dehhani Ltd shall not be liable for any loss, damage, or data destruction resulting from remote commands issued by you, your sub-users, or any third party who obtains access to your account.
DSU — Erasure operates within a custom Linux live environment with root-level (superuser) privileges on the target device. This level of access is necessary to perform low-level hardware interrogation, direct storage media access for data erasure, drive partitioning for operating system deployment, and hardware diagnostic operations. You acknowledge and accept that granting the software root-level access is an inherent requirement of its functionality, and that Dehhani Ltd shall not be liable for any unintended consequence arising from the software's operation at this privilege level, provided the software is used in accordance with these Terms and the accompanying documentation.
DSU — Erasure may periodically retrieve and apply software updates from Dehhani Ltd's servers ("OTA Updates"). These updates may modify the live operating environment, application code, driver support, and erasure or testing capabilities. OTA Updates are delivered automatically when the device is connected to the internet and has verified its licence key. By using the Service, you consent to the automatic application of OTA Updates. Dehhani Ltd shall use reasonable efforts to ensure that updates do not adversely affect existing functionality; however, we do not warrant that any specific feature or behaviour will remain unchanged following an update.
Each DSU — Erasure installation authenticates against Dehhani Ltd's servers using a licence key and an associated verification code embedded in the bootable media. The verification code uniquely identifies the installation medium and is used to validate the licence, synchronise account settings, and authorise erasure credit consumption. You must not tamper with, extract, reverse-engineer, or redistribute verification codes. Dehhani Ltd reserves the right to revoke any verification code or licence key that is found to be compromised, shared without authorisation, or used in violation of these Terms.
In the course of its operation, DSU — Erasure collects and transmits the following categories of data to Dehhani Ltd's servers: (a) device hardware specifications, including serial numbers, manufacturer and model identifiers, processor, memory, storage, battery, and network adapter details; (b) hardware diagnostic test results and erasure verification outcomes; (c) erasure certificates and associated metadata; (d) device photographs captured during processing (where the Device Photo Capture feature is enabled); (e) Wi-Fi network credentials entered by the user for the purpose of establishing internet connectivity, which are encrypted in transit and at rest; (f) session metadata, including session duration, technician identifiers, and timestamps; and (g) application telemetry necessary for licence verification and service operation. This data is collected solely for the purposes set out in Section 6 (Data Collection & Privacy) and is processed in accordance with applicable data protection legislation.
DSU — Profiler and DSU — Erasure (collectively, the "Profiling Tools") retrieve hardware specification data, diagnostic telemetry, and test results by interrogating system firmware interfaces (including, without limitation, SMBIOS/DMI tables, ACPI data, WMI providers, PCI/USB descriptor fields, and manufacturer-specific APIs). The completeness, accuracy, and availability of such data are determined entirely by the device manufacturer, the firmware revision installed, and the operating environment in which the Profiling Tools execute. Dehhani Ltd does not control, author, or validate the data exposed by these hardware interfaces and makes no representation or warranty — express, implied, or statutory — as to the accuracy, completeness, reliability, or fitness for any particular purpose of any hardware specification data retrieved by the Profiling Tools.
You acknowledge and accept that the Profiling Tools may, under certain circumstances: (a) be unable to retrieve one or more hardware specifications where the device firmware does not expose the relevant data fields, or where the requisite kernel drivers or hardware abstraction layers are unavailable in the execution environment; (b) return data that is inaccurate, incomplete, truncated, or inconsistent with the physical hardware installed, due to firmware misreporting, OEM customisation, missing or outdated driver support, or hardware abstraction limitations; or (c) report nominal or default values where the underlying interface returns null, zero, or placeholder responses. These limitations are inherent to software-based hardware interrogation and are not defects in the Service.
You are solely and exclusively responsible for: (a) reviewing all hardware specification data, diagnostic results, and device reports generated by the Profiling Tools before relying upon, publishing, or distributing such data; (b) exercising reasonable due diligence to identify and correct any errors, omissions, or anomalies in the reported data; (c) independently verifying any data point that is material to a commercial transaction, regulatory obligation, warranty claim, or compliance requirement; and (d) ensuring that any data exported, shared, or used in downstream systems (including, without limitation, marketplace listings, invoices, certificates, and inventory records) has been validated for accuracy. Failure to exercise such due diligence shall not give rise to any claim against Dehhani Ltd.
To the maximum extent permitted by applicable law, Dehhani Ltd shall not be liable for any loss, damage, cost, expense, claim, or liability (whether direct, indirect, incidental, consequential, special, or exemplary) arising from or in connection with: (a) inaccurate, incomplete, or missing hardware specification data reported by the Profiling Tools; (b) any decision, transaction, or action taken in reliance upon data generated by the Profiling Tools without independent verification; or (c) any regulatory penalty, contractual dispute, customer complaint, or reputational harm resulting from the publication or distribution of unverified device data. This exclusion applies whether the claim arises in contract, tort (including negligence), strict liability, misrepresentation, or any other legal or equitable theory.
We offer add-on packages that provide additional features. These add-ons are available on a subscription basis (yearly or monthly).
Add-ons may be cancelled at any time. Access will expire at the end of the current payment cycle.
Add-ons may rely on third-party APIs. Customer data may be shared with third parties solely to the extent necessary to provide the functionality of the relevant add-on. For details on specific marketplace integrations, see Section 12.
In the course of providing the Service, we collect and process the following categories of data:
All data is transmitted to and stored on servers operated by or on behalf of Dehhani Ltd via the devicesetup.app portal.
Users may upload images of devices to the Portal for record-keeping and inventory management purposes. Such images are stored on our servers and associated with the relevant device record.
The Service includes an optional "Device Photo Capture" feature, which is disabled by default and may be enabled or disabled at any time by the account administrator via the settings menu on the DSU — Portal. When enabled, this feature instructs DSU — Profiler and DSU — Erasure to capture photographs using the device's built-in webcam during the diagnostic or erasure process. Captured images are automatically uploaded to and stored on our servers alongside the corresponding device report.
The purpose of Device Photo Capture is to provide users with a visual record of webcam functionality and an opportunity to assess the physical condition of the device at the time of processing. You acknowledge that images captured by this feature may incidentally contain identifiable individuals or surroundings within the webcam's field of view. It is your responsibility to ensure that the use of this feature complies with all applicable privacy and data protection laws in your jurisdiction, including obtaining any necessary consents from individuals who may be captured in such images.
Images captured via Device Photo Capture are not exposed to non-authenticated users at any point. They are excluded from publicly accessible certificate verification pages, broadcast communications, shared batches, and all other externally visible features of the Service. Captured images are accessible only to authenticated users on the Account Holder's account, solely within the corresponding device report on the DSU — Portal.
Data is collected for the purposes of: licence verification, device report generation, erasure certification, audit trail maintenance, device image storage, and the general operation of the Service.
Where the Service processes personal data of individuals located in the European Economic Area or the United Kingdom, such processing is subject to applicable data protection legislation, including the UK General Data Protection Regulation and the Data Protection Act 2018. Details of our data processing practices, lawful bases, data subject rights, and contact information for our data protection enquiries are set out in our Privacy & GDPR Policy.
Device reports, erasure certificates, and associated data are retained for as long as your account remains active, and for a reasonable period thereafter to comply with legal and regulatory obligations. You may request deletion of your data in accordance with our Privacy Policy.
The Service is provided on an "as available" basis. While we use commercially reasonable efforts to maintain availability, we do not guarantee uninterrupted or error-free access to the Service. The Service may be temporarily unavailable due to maintenance, updates, or circumstances beyond our reasonable control.
The Service requires an active internet connection for licence authentication, erasure credit verification, and report submission. If our servers are unreachable, you will be unable to authenticate, perform licensed operations, or submit reports until connectivity is restored. We shall not be liable for any loss or inconvenience arising from service unavailability.
Certain components of the Service may queue reports locally when connectivity is temporarily interrupted. Queued reports will be submitted automatically when connectivity is restored. We do not guarantee the integrity or delivery of locally queued data and accept no liability for reports that fail to submit due to local storage failure, device shutdown, or other causes.
The DSU — Erasure module and associated tools may facilitate the deployment of operating system images (including Microsoft Windows) to target devices. You are solely responsible for ensuring that you hold valid licences for any operating system deployed using the Service. Dehhani Ltd does not provide, supply, or sublicence any Microsoft Windows licences or any other third-party operating system licences. Use of operating system deployment features constitutes your representation that you are appropriately licensed for such deployment.
The Service, including but not limited to the Portal, DSU — Profiler, the DSU — Erasure live environment, the user interface, all source code, object code, documentation, graphics, and design elements, is and remains the exclusive property of Dehhani Ltd. All rights not expressly granted herein are reserved.
Subject to your compliance with these Terms and payment of applicable fees, we grant you a limited, non-exclusive, non-transferable, revocable licence to use the Service for your internal business purposes. You may not copy, modify, distribute, reverse-engineer, decompile, disassemble, or create derivative works from any part of the Service.
Any suggestions, ideas, or feedback you provide regarding the Service may be used by us without obligation or compensation to you.
The account administrator ("Account Holder") may create sub-user accounts and assign roles (including but not limited to Admin, Technician, Salesman, Storeman, and General) via the DSU — Portal. Each sub-user is authenticated by their own credentials and, where applicable, a unique five-digit PIN for DSU — Erasure operations.
The Account Holder is solely responsible for: (a) the creation, management, and supervision of all sub-user accounts under their organisation; (b) ensuring that sub-users are appropriately trained and authorised to perform the operations permitted by their assigned roles; and (c) all actions taken by sub-users under the Account Holder's account, including but not limited to device submissions, data erasure operations, and the generation of reports and certificates. Dehhani Ltd shall not be liable for any loss, damage, or regulatory consequence arising from the actions or omissions of sub-users.
Where PINs are used to authenticate sub-users for erasure operations, the Account Holder is responsible for ensuring that PINs are kept confidential, assigned uniquely to individual sub-users, and changed promptly if compromised. Dehhani Ltd shall not be liable for any unauthorised erasure operations performed using valid PIN credentials.
Device reports and erasure certificates generated by the Service are assigned a unique identifier (UID). Certificate data — including device specifications, test results, grading assessments, and erasure outcomes — may be publicly queried by any party in possession of the UID via the certificate verification portal at devicesetup.app/cert/search. This public verification functionality is a core feature of the Service designed to enable third-party verification of device history and certification status.
You acknowledge that any party to whom you disclose a device UID (whether directly, via printed labels, QR codes, or otherwise) will be able to access the associated certificate data. It is your responsibility to control the distribution of UIDs in accordance with your confidentiality requirements. Dehhani Ltd shall not be liable for any disclosure of device information resulting from the sharing of UIDs by you or your sub-users.
The Service offers integration with third-party marketplace platforms, including but not limited to eBay, Shopify, and WooCommerce (collectively, "Marketplace Integrations"). Marketplace Integrations enable the synchronisation of device data, images, pricing, and inventory information between the DSU — Portal and the connected third-party platform.
When you enable a Marketplace Integration, you authorise the transfer of relevant device data and images to the connected third-party platform. Once data has been transmitted to a third-party platform, it is governed by that platform's own terms of service and privacy policy. Dehhani Ltd has no control over and accepts no responsibility for the handling, storage, or processing of data by third-party platforms.
Marketplace Integrations depend on the availability and continued operation of third-party APIs. We do not warrant the availability, reliability, or performance of any third-party platform or API. Changes to third-party APIs may affect the functionality of Marketplace Integrations without prior notice.
The Service maintains a comprehensive audit trail that records significant account and device events, including but not limited to: device submissions, modifications, and deletions; erasure operations; user account changes; and sub-user actions. Audit trail records are maintained for the duration of your account and may be retained thereafter as required by law. Audit trail data is immutable and may be relied upon by Dehhani Ltd in the investigation and resolution of disputes, compliance enquiries, or suspected violations of these Terms.
The Service may assign or record cosmetic and functional grades to devices (including display, casing, keyboard, and final grading assessments). Grading is based on criteria applied by the user, automated diagnostic results, or a combination thereof. Device grades do not constitute a professional valuation, warranty of condition, or guarantee of fitness for any particular purpose. Grading is provided as a record-keeping and classification tool only. Dehhani Ltd shall not be liable for any loss arising from reliance on device grades by you or any third party.
By using the Service, you consent to receiving transactional and operational emails, including but not limited to: account notifications, sub-user credential communications, licence and billing alerts, service announcements, and system notifications. These communications are integral to the operation of the Service and cannot be opted out of while your account remains active.
The Service enables Account Holders to send broadcast communications to their clients. You are solely responsible for the content of any broadcast communications you send via the Service and for ensuring compliance with all applicable email marketing and privacy regulations (including the Privacy and Electronic Communications Regulations 2003 and, where applicable, the EU ePrivacy Directive).
The modification, falsification, forgery, or misrepresentation of any certificate, report, or document generated by the Service — including but not limited to erasure certificates, device reports, grading assessments, and PAT test records — is strictly prohibited. Any such activity may result in the immediate and permanent termination of your account without refund, and Dehhani Ltd reserves the right to pursue all available legal remedies, including reporting such conduct to relevant regulatory and law enforcement authorities.
All purchases are processed through the payment provider Stripe. No customer credit or debit card data is stored on our servers.
Payments are processed securely through Stripe in compliance with PCI-DSS standards.
The Service may contain links to third-party websites or services not owned or controlled by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. You acknowledge and agree that we are not responsible or liable for any damage or loss caused or alleged to be caused by the use of or reliance on any content, goods, or services available on or through such websites or services.
Nothing in these Terms excludes or limits our liability for: (a) death or personal injury caused by our negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot be excluded or limited by applicable law.
Subject to the foregoing, to the maximum extent permitted by applicable law, Dehhani Ltd, its directors, employees, and agents shall not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, revenue, data, or business opportunity, arising out of or in connection with your use of the Service, whether based on contract, tort, negligence, strict liability, or any other legal theory, even if we have been advised of the possibility of such damages.
Our total aggregate liability to you for all claims arising out of or relating to the Service shall not exceed the total amount paid by you to us in the twelve (12) months immediately preceding the event giving rise to the claim.
You agree to indemnify, defend, and hold harmless Dehhani Ltd and its directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with: (a) your use of the Service; (b) your breach of these Terms; (c) your selection of erasure methods and reliance on erasure certificates; (d) actions taken by your sub-users; (e) broadcast communications sent via the Service; or (f) your violation of any applicable law or regulation.
We reserve the right to modify or replace these Terms at our sole discretion. If a revision is material, we will provide at least 30 days' notice prior to any new terms taking effect. Continued use of the Service after such notice constitutes acceptance of the revised Terms.
We reserve the right, at our sole discretion, to suspend or terminate any licence, or to suspend, terminate, or revoke your user account and access to the Service, with or without prior notice, if we suspect abuse, misuse, fraudulent activity, tampering, certificate falsification, or any violation of these Terms. Upon suspension or termination, all rights granted to you under these Terms will immediately cease. No refunds or credits will be provided for any unused portion of a licence or erasure credits.
These Terms shall be governed by and construed in accordance with the laws of England and Wales. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of England and Wales.
If any provision of these Terms is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall remain in full force and effect.
Dehhani Ltd shall not be liable for any failure or delay in performing its obligations under these Terms where such failure or delay results from circumstances beyond our reasonable control, including but not limited to: acts of God, natural disasters, epidemics or pandemics, fire, flood, war, terrorism, civil unrest, government actions or sanctions, power outages, internet service provider failures, cyberattacks (including distributed denial-of-service attacks), failure of third-party infrastructure or hosting providers, and industrial disputes. During any period of force majeure, our obligations under these Terms shall be suspended to the extent affected, and the time for performance shall be extended accordingly.
No failure or delay by Dehhani Ltd in exercising any right, power, or remedy under these Terms shall operate as a waiver of that right, power, or remedy. No single or partial exercise of any right, power, or remedy shall preclude any other or further exercise thereof or the exercise of any other right, power, or remedy. The rights and remedies provided in these Terms are cumulative and not exclusive of any rights or remedies provided by law.
These Terms, together with our Privacy & GDPR Policy and any other policies referenced herein, constitute the entire agreement between you and Dehhani Ltd with respect to the Service and supersede all prior or contemporaneous communications, proposals, and agreements, whether oral or written, between you and Dehhani Ltd relating to the Service.
You must be at least 18 years of age to create an account and use the Service. By creating an account, you represent and warrant that you are at least 18 years old. If we become aware that an account has been created by a person under the age of 18, we reserve the right to terminate that account immediately without notice.
If you have any questions about these Terms, please contact us at support@dehhani.uk.
Last Updated: March 29th, 2026