Terms of Service

Terms of Service

34 min read

Basic Information #

  • Established: 2025-12-24
  • Revised: 2026-02-19
  • Effective Date: 2026-02-19
  • Service Provider: BESTNET LLC (hereinafter “the Company”)
  • Address: 161-1 Kitanagane, Aza Onuki, Tajiri, Osaki City, Miyagi Prefecture
  • Contact:

Article 1 (Application) #

  1. These Terms set forth the conditions of use for all services provided by the Company, including virtual private servers (VPS), GPU-VPS, cloud/IaaS, hosting, and associated network/storage/backup/snapshot/ISO-related functions/API, etc. (hereinafter collectively referred to as “the Service”). Separate terms of use shall apply to domain name registration services and SSL certificate issuance services provided by the Company.
  2. These Terms include Standard Support Conditions (Annex A) and SLA/Service Credit Conditions for Outages (Annex B).
  3. The Service may have “Individual Conditions” that specify service-specific specifications (CPU/memory/storage/bandwidth, etc.), fees, scope of provision, and other specific terms. Where Individual Conditions conflict with these Terms (main text or annexes), the Individual Conditions shall take precedence.
  4. However, for Article 13 (Handling of IP Addresses, etc.), Article 14 (Modification, Suspension, or Termination of the Service), Article 15 (Amendment of Terms), and Article 16 (Disclaimer and Limitation of Liability), when Individual Conditions provide for handling different from these Terms, the Company shall expressly state in such Individual Conditions that they supersede these Terms.
  5. When a Customer applies for or uses the Service, the Customer shall be deemed to have agreed to these Terms and Individual Conditions.

Article 2 (Definitions) #

Terms in these Terms are defined as follows:

(1) “Customer”: An individual or corporation using the Service
(2) “Account”: An identifier issued by the Company for using the Service
(3) “Usage Environment”: The area used by the Customer on the Service (e.g., virtual machines, containers, hosting accounts, storage areas, etc.). Where “instance” is used in these Terms, it includes the Usage Environment.
(4) “Assigned IP”: IP address (including fixed/32, etc.) assigned by the Company to the Customer or Usage Environment
(5) “Fixed IP”: An operational form in which the Company normally continues to assign the same Assigned IP. However, even Fixed IPs may be changed or suspended pursuant to Article 13 and Article 14.
(6) “Upstream Provider”: Line carriers, ISPs, transit providers, IXs, data center operators, and other third-party providers used by the Company to provide the Service.
(7) “Communication”: All network communications related to the Usage Environment, including inbound/outbound
(8) “Abuse”: Acts that violate these Terms (including Article 5) or acts that the Company reasonably determines to be abuse
(9) “Tiered Operation (Trust Level)”: The operational categories (new/proven/corporate) defined in Article 10
(10) “Credit”: A monetary equivalent amount recorded in a Customer’s Account pursuant to separately established regulations by the Company, which can be applied to payments for the Service within the scope defined by the Company.
(11) “Service Credit”: Credits granted as compensation for SLA violations, etc., or at the Company’s discretion.
(12) “Standard Support”: The standard support defined in Annex A.
(13) “SLA”: The uptime guarantee and service credit conditions defined in Annex B.

Article 3 (Application, Account Management, and Verification Procedures) #

  1. For secure operation and abuse prevention, the Company may require identity verification/corporate verification/contact verification/confirmation of intended use, etc. (hereinafter “Verification Procedures”) at the time of application or during use.
  2. When requested by the Company to undergo Verification Procedures, the Customer shall submit truthful and accurate information within a reasonable period. In cases of falsehood, deficiency, or inconsistency, the Company may reject applications, suspend use, downgrade tiered operations, impose additional restrictions, etc.
  3. The Customer shall maintain registered contact information (email/telephone, etc.) with the Company in a state capable of receipt at all times. If inability to contact continues, the Company may impose restrictions pursuant to Article 7 (Communication Restrictions and Technical Measures) and Article 10 (Tiered Operation), or suspension pursuant to Article 14 (Modification, Suspension, or Termination of the Service) for secure operation.

Article 4 (Shared Responsibility and Security) #

  1. The Company shall endeavor to maintain the security of Company equipment, networks, and control infrastructure.
  2. The Customer shall be responsible for protection of OS/middleware/applications/authentication information/keys/configuration/data on the Usage Environment (for hosting, etc., the scope managed by the Company shall follow Individual Conditions).
  3. The Customer shall implement appropriate security measures including the following:
    (1) Continuous application of patches to OS, middleware, and applications (excluding areas managed by the Company)
    (2) Non-use of default authentication information, use of strong authentication (keys, strong passwords, MFA where possible, etc.)
    (3) Stopping unnecessary services, minimizing exposed ports
    (4) Implementation of access source restrictions for administrative access (e.g., SSH/RDP, etc.) (where possible)
    (5) Prompt blocking and recovery response and contact to the Company when compromise is suspected
  4. If abuse occurs due to Customer deficiencies (e.g., weak configuration, key leakage, misconfigured public settings, etc.), the Company may take necessary measures pursuant to Article 7 and Article 12.

Article 5 (Prohibited Acts: Acceptable Use Policy / AUP) #

Customers shall not engage in the following acts using the Service.

5.1 Legal Violations and Rights Infringement #

(1) Acts violating laws and regulations (including unauthorized access, fraud, threats, illegal drugs, child sexual exploitation, money laundering, etc.)
(2) Acts infringing on copyrights, trademark rights, privacy, trade secrets, or other third-party rights
(3) Use that violates sanctioned countries/regions or export regulations designated by the Company

5.2 Unauthorized Access, Malware, and Intrusion Acts #

(1) Unauthorized access, intrusion, vulnerability exploitation, privilege escalation to systems of the Company or third parties
(2) Creation/distribution/operation of malware (viruses, worms, ransomware, etc.), operation of C2 (Command & Control)
(3) Phishing, spoofing, theft of authentication information, operation of fraudulent sites
(4) Construction, operation, relay of, or participation in botnets

5.3 Spam and Nuisance Acts #

(1) Spam email transmission, email relay (open relay), unauthorized mass messaging
(2) Nuisance acts using SMS/IM/forms, etc., unauthorized advertising, harassment
(3) Acts causing nuisance or damage to third parties through mass account creation, etc.

5.4 Network Abuse and Interference #

(1) DDoS/DoS, port scanning, vulnerability scanning, brute force, and other attack activities
(2) Providing public proxy/VPN/stepping stone to third parties (except where expressly permitted by the Company)
(3) Source spoofing, header spoofing, IP spoofing, routing interference, etc.
(4) Excessive bandwidth, connections, or packet transmission causing disruption to the Company, upstream lines, or other users

5.5 Service/Control Circumvention #

(1) Circumventing or disabling communication restrictions, rate limits, monitoring, or blocking measures established by the Company
(2) Billing circumvention, authentication circumvention, improper resource exhaustion (mass creation, mass requests, etc.)
(3) Reselling, subleasing, or hosting to third parties without the Company’s permission (except where permitted by the Company in reseller plans, etc.)

5.6 Other #

(1) Acts damaging the reputation of the Company or third parties, acts concentrating complaints or reports
(2) Acts that the Company reasonably determines to constitute abuse

Article 6 (Handling of Security Testing) #

  1. When a Customer conducts security testing (diagnostics, penetration testing, scanning, etc.), the scope is limited to assets for which the Customer has administrative authority.
  2. For DDoS resilience testing, wide-range scanning, tests that may affect third parties, etc., the Customer shall apply in advance using the method prescribed by the Company and obtain approval.
  3. We may request cessation or modification of testing methods if we determine that it affects other users or upstream services.

Article 7 (Communication Restrictions and Technical Measures) #

  1. We may implement the following measures without prior notice to customers (in emergencies, notification may be provided after the fact) to maintain the security of the Service, prevent unauthorized use, and respond to upstream provider requests:
    (1) Blocking or restricting specific ports/protocols
    (2) Limiting bandwidth, number of connections, transmission rates, etc., and temporary blocking of communications (isolation/quarantine)
    (3) Temporary suspension of the usage environment, network disconnection, temporary suspension/change of assigned IPs (when necessary)
    (4) Acquisition and preservation of logs (including evidence preservation)
  2. The standard permitted scope of outbound (transmission) communications and handling of additional permissions are defined in Article 8.
  3. We may revise the content of Article 8 or temporarily modify the standard permitted scope (additional blocking/isolation, etc.) in response to detection status, upstream requests, legal compliance, etc. (notification will be provided in accordance with Article 15; however, in emergencies, notification may be provided after the fact).

Article 8 (Standard Permitted Scope and Additional Permissions for Outbound Communications) #

8.1 Purpose #

This Article defines the “standard permitted scope of outbound (transmission) communications” implemented by us at the network level to prevent abuse, maintain IP reputation, respond to upstream network requests, and ensure stable operation of our infrastructure.

8.2 Basic Policy (Whitelist) #

(1) Outbound communications from customer usage environments to the Internet shall be permitted only for communications explicitly allowed by us.
(2) Outbound communications not explicitly stated in this Article shall in principle be blocked.
(3) We may temporarily modify the permitted scope of this Article (additional blocking/isolation, etc.) without prior notice to customers based on detection status, upstream network requests, legal compliance, or security judgments (notification after the fact in emergencies).

8.3 Standard Permissions (Communications Permitted by Default: Common to All Trust Levels) #

The following are “standard permissions (default permissions)” common to all services and all trust levels.

8.3.1 DNS (Name Resolution: Outbound) #

  • UDP 53 (DNS)
  • TCP 53 (DNS: fallback/large responses, etc.)
    Note: We may restrict DNS destinations to only our designated resolvers as necessary.

8.3.2 NTP (Time Synchronization: Outbound) #

  • UDP 123 (NTP)
    Note: We may restrict NTP destinations to only our designated servers as necessary.

8.3.3 Web Access (General Software Updates, API Usage, etc.: Outbound) #

  • TCP 80 (HTTP)
  • TCP 443 (HTTPS)
  • UDP 443 (QUIC / HTTP/3)

8.3.4 ICMP (Connectivity and Routing Control: Inbound / Outbound) #

  • ICMP (IN/OUT) is permitted as standard.
    Note:
    ・We may restrict ICMP types (Type/Code) for attack countermeasures, anomaly detection, upstream requests, etc.
    ・Standard permissions are intended for connectivity/routing control purposes, and may be subject to restrictions if abuse is suspected.

※Outbound communications not explicitly stated above shall in principle be blocked.

8.4 Additional Outbound Permissions (Application-Based: Common to All Trust Levels) #

(1) If customers require outbound communications (ports/protocols) other than those permitted as standard, they shall apply through our designated method and obtain our approval.
(2) We shall comprehensively review the legitimacy of the purpose of use, ability to identify destinations, expected traffic volume, risk of unauthorized use, customer trust level, etc., and determine approval/denial/conditional approval.
(3) Examples of conditional approval (at our discretion):

  • Restrictions on destination IP/network/country/provider, etc.
  • Limits on transmission rates and concurrent connections
  • Time-limited permissions (for verification purposes, etc.)
  • Automatic isolation upon anomaly detection (degradation to standard permissions only)

(4) Even after approval is granted, we may modify conditions or re-block if there are reports, anomaly detections, upstream requests, etc.

8.5 Application Template #

When applying, please submit the following (if incomplete, the review may be suspended/denied):

  • Port/protocol to be applied for (e.g., TCP 22 / TCP 587, etc.)
  • Destination (to the extent possible): destination IP/range, service name, country/provider, etc.
  • Purpose of use: why it is necessary (specifically)
  • Usage period: permanent/temporary (period)/verification
  • Expected transmission volume: estimated per hour/per day
  • Security measures: authentication method, access control, log acquisition, shutdown procedure
  • Contact information: technical contact and abuse response contact (mandatory for corporations)

8.6 Handling of High-Risk Uses (Email Transmission, etc.) #

We conduct particularly strict reviews for high-risk uses such as email transmission to prevent spam transmission and IP reputation damage.
We recommend the use of external authenticated email relays (SMTP Relay/Submission), etc., and may impose conditions such as destination and rate restrictions as necessary.
We may not grant additional permissions for ports required for such uses if we determine the risk to be high.

Article 9 (Monitoring and Logs) #

  1. We may acquire and preserve communication logs, connection information, operation history, etc. for the purposes of preventing unauthorized use, responding to failures, maintaining quality, responding to upstream requests, etc.
  2. We may provide necessary information to relevant authorities, upstream providers, or related parties within the scope of applicable laws when required by law, requested by upstream providers, or when necessary to respond to unauthorized use.

Article 10 (Staged Operations: New/Established/Business) #

10.1 Purpose #

To suppress abuse that tends to occur in low-price services, maintain IP reputation, and ensure infrastructure stability, we apply staged operations (trust levels) on an account or service basis.

10.2 Categories #

(A) New (New / Trial)
(B) Established (Established)
(C) Business (Business / Corporate)

10.3 Common Matters (Important) #

(1) Standard permitted (default permitted) outbound communications are common to all trust levels (Article 8).
(2) Differences by trust level primarily appear in the review criteria and strictness of conditions for “additional outbound permissions (application-based).”
(3) If there are signs of unauthorized use, reports, upstream requests, etc., we may implement measures such as additional blocking/isolation/suspension regardless of trust level (Article 7).

10.4 Treatment of Each Category (Review Policy for Additional Outbound Permissions) #

10.4.1 New (New / Trial) #

  • Additional outbound permissions: in principle, cautious review
  • Form of permission: conditional permissions (destination restrictions, rate limits, time limits, etc.) may be granted only when necessity is high
  • Purpose: to suppress concentration of abuse immediately after launch

10.4.2 Established (Established) #

  • Additional outbound permissions: may be granted upon application (expanded approval scope compared to new accounts)
  • Form of permission: conditional permissions (destination restrictions, rate limits, enhanced monitoring, etc.) may be imposed
  • Purpose: to balance convenience of normal use with risk management

10.4.3 Business (Business / Corporate) #

  • Additional outbound permissions: broad consideration upon application, assuming clear business content, responsibility structure, and abuse response contact
  • Form of permission: conditional permissions (rate limits, monitoring/log provision, destination restrictions, time limits, etc.) may be imposed
  • Purpose: to provide communications necessary for business purposes through individual review while maintaining overall infrastructure security

10.5 Upgrade/Downgrade #

(1) Upgrades are granted at our discretion or upon application. We may require verification procedures (identity/corporate verification, contact verification, usage purpose confirmation, etc.).
(2) We may downgrade, restrict, or suspend without notice in the following cases:

  • AUP violations or suspicion thereof, frequent reports, warnings from upstream providers
  • Inability to contact, non-cooperation with verification procedures, false declarations
  • Serious security incidents, continued state of unresolved compromise
  • Material contractual non-compliance (such as non-payment)

10.6 Application and Review (Common) #

(1) Applications for additional outbound permissions shall be submitted via support ticket or other methods designated by us.
(2) We may request submission of additional materials, or suspend/reject the review if the submitted content is insufficient.
(3) Even after granting permission, we may change conditions or re-block if there are signs of abuse or upstream requests.

Article 11 (Reports and Incident Response) #

  1. When we detect suspected abuse or receive a report from a third party/upstream provider, we may take the following actions:
    (1) Request additional information (usage purpose, configuration status, relevant logs, etc.)
    (2) Provisional measures such as traffic restrictions, isolation, suspension of usage environment
    (3) Request corrective measures (configuration changes, compromise response, reconstruction, etc.)
  2. Customers shall respond to our inquiries within a reasonable period and perform necessary corrections.
  3. In cases of serious abuse, we may cooperate with relevant authorities, upstream providers, security organizations, etc., and provide necessary information within the scope of applicable laws.

Article 12 (Measures for Violations) #

  1. If a customer violates this Agreement or there is a reasonable degree of suspicion thereof, we may implement the following measures progressively or immediately:
    (1) Warning, request for correction
    (2) Traffic restrictions, port blocking, isolation, rate limiting
    (3) Suspension of usage environment, account suspension, contract termination
    (4) Billing for reasonable costs incurred in investigation and response (when necessary)
  2. We may suspend release/restoration until suspicion of abuse is resolved.

Article 13 (Handling of IP Addresses, etc.) #

  1. Assigned IPs are number resources designated and managed by us, and customers do not acquire ownership, permanent guarantee of usage rights, transferable rights, or other similar rights to assigned IPs.
  2. We may change assigned IPs (including fixed IPs) or suspend their use when necessary for providing this service, including but not limited to the following reasons:
    (1) Prevention of abuse, security needs (including Articles 7, 11, and 12)
    (2) Requests from upstream providers, changes in provision conditions, changes in lines/equipment/locations
    (3) Requests for return of number resources, reorganization of number resources, technical or operational needs (including planned renewals)
    (4) Cases where we or upstream providers deem it necessary due to IP reputation damage, blacklist registration, frequent complaints/reports, etc.
  3. When we change assigned IPs, we will give advance notice whenever possible if we can anticipate it. However, in emergency situations or due to upstream provider circumstances where advance notice is difficult, notification may be given after the fact.
  4. Customers shall manage configurations dependent on assigned IPs (e.g., whitelists, VPN peers, ACLs, external integrations, SPF/DKIM/DMARC, reverse DNS, etc.) themselves, and prepare for assigned IP changes by using DNS names, implementing redundancy, establishing migration procedures, etc.
  5. When we provide configurations associated with assigned IPs such as reverse DNS (PTR), the scope, conditions, and ability to change such configurations shall be subject to individual conditions. We do not guarantee the provision or maintenance of such configurations due to upstream provider constraints, technical constraints, etc.
  6. Upon contract termination or notification from us to suspend use of an assigned IP, customers shall promptly cease use of that assigned IP (including advertising, configuration, service provision, display to third parties, etc.).

Article 14 (Changes, Interruptions, and Discontinuation of This Service) #

  1. We may change the content (including changes to specifications, functions, provision conditions, restrictions, and pricing structure), interrupt provision, or discontinue all or part of this service based on our reasonable judgment, including but not limited to the following reasons:
    (1) Changes in upstream provider provision conditions, termination of provision, equipment removal, location closure, line suspension, etc.
    (2) Response to laws, regulations, administrative guidance, etc.
    (3) Security needs, response to serious incidents
    (4) Equipment renewal, maintenance, fault response, disasters, or other force majeure
    (5) Other cases where we determine that stable provision of this service is difficult
  2. When we change, interrupt, or discontinue this service based on the preceding paragraph, we will give advance notice whenever possible if we can anticipate it. However, in emergency situations or due to upstream provider circumstances where advance notice is difficult, notification may be given after the fact.
  3. We will endeavor to provide information regarding the scope of impact, migration policy, recommended procedures, etc., associated with changes, interruptions, or discontinuation, to the extent reasonably possible. However, configuration changes in customer environments, migration work, changes on external service sides, etc., shall in principle be the customer’s responsibility (except when we separately undertake such work through paid support, etc.).
  4. In preparation for service interruptions, discontinuation, etc., customers shall implement backups of important data, redundancy, establishment of migration plans, etc., on their own. Customer data may be lost or become unavailable due to interruptions or discontinuation.
  5. The handling of settlement and refunds when we discontinue this service shall be subject to individual conditions and provisions separately established by us regarding credits (account credits). If not specified in individual conditions, we will respond by granting credits equivalent to the unused period or by other methods we deem reasonable (however, we may deduct transaction fees, etc.).

Article 15 (Amendment of Agreement) #

  1. We may amend this Agreement as necessary.
  2. When amending this Agreement, we will announce the amended content and effective date by posting on our website, notification in the client portal, email, or other methods we deem appropriate.
  3. For significant changes, we will in principle announce them at least 30 days before the effective date. However, this does not apply in cases of legal amendments, emergency security responses, abuse prevention, system fault response, or other urgent and unavoidable situations, or in the case of minor changes that benefit customers, and such amendments may be applied through post-facto announcement or short-term announcement.
  4. The amended Agreement shall apply from the effective date announced by us. If a customer uses this service after the effective date, the customer shall be deemed to have agreed to the amended Agreement (subject to limitations under applicable laws).
  5. If a customer does not agree to the amended Agreement, the customer shall complete cancellation or other procedures by the method designated by us before the effective date (cancellation conditions shall be subject to individual conditions).

Article 16 (Disclaimer and Limitation of Liability) #

  1. We shall not be liable for damages incurred by customers due to blocking, restrictions, suspensions, etc., implemented to prevent abuse, and measures based on Article 13 (Handling of IP Addresses, etc.) and Article 14 (Changes, Interruptions, and Discontinuation of This Service), unless caused by our willful misconduct or gross negligence (subject to limitations under applicable laws).
  2. Due to the nature of this service, communication quality and reachability may fluctuate due to internet conditions, upstream line factors, third-party factors, etc. We do not guarantee specific communication quality, reachability, latency, loss rates, or specific routes.
  3. Even if we bear liability for damages (except in cases of our willful misconduct or gross negligence), the scope of our liability for compensation shall be limited to direct and ordinary damages, and we shall not be liable for lost profits, loss of business opportunities, data loss, indirect damages, special damages, or consequential damages.
  4. Notwithstanding the preceding paragraph, if our liability for compensation is recognized (except in cases of our willful misconduct or gross negligence), the upper limit of our liability for compensation shall be the amount equivalent to the usage fees paid by the customer to us in the month preceding the month in which the damage occurred for the service that caused the damage (or if there is no payment record for the preceding month, the amount equivalent to the usage fees payable in the month the damage occurred) (subject to limitations under applicable laws).

Article 17 (Governing Law and Jurisdiction) #

  1. This Agreement shall be governed by the laws of Japan.
  2. All disputes arising between us and you in connection with these Terms or the Service shall be subject to the exclusive jurisdiction of the Furukawa Branch of the Sendai District Court as the court of first instance.

Annex A: Standard Support Terms #

Last Updated: February 19, 2026
Effective Date: February 19, 2026
Business Operator: BESTNET LLC Representative Member: Hideyuki Chinda

Article 1 (Purpose and Scope of Application) #

  1. This Annex sets forth the scope of provision, procedures, and responsibility boundaries for standard support (hereinafter “Support”) related to the Service provided by BESTNET LLC (hereinafter “we”), and aims to appropriately manage the burden and risk between us and customers (hereinafter “you”).
  2. Support supplements the terms of use of the Service (the main body of these Terms, individual conditions, and other regulations and policies separately established by us). Matters relating to the use of the Service itself shall be governed by the main body of these Terms and individual conditions.
  3. In the event of conflict between this Annex and the main body of these Terms or individual conditions, this Annex shall take precedence only “to the extent relating to Support.” However, paid support plans such as fully managed services, maintenance contracts, and individual conditions are outside the scope of this Annex, and such individual agreements (as defined in the following Article) shall take precedence. Additionally, matters relating to SLA (uptime guarantee and service credits) shall be governed by Annex B.

Article 2 (Definitions) #

The terms used in this Annex are defined as follows:

  1. Incident: Malfunction events such as operational failures, performance degradation, or errors in the Service.
  2. Request: Inquiries such as how-to/usage questions, configuration changes, information requests, or improvement suggestions.
  3. Support Hours: In principle, 24 hours a day, 365 days a year (JST). However, Support is best effort, and initial response, investigation, or work commencement or progress may be delayed due to staffing arrangements, incident scale, other case handling, maintenance, force majeure, or other circumstances.
  4. Responsibility Boundary: The boundary where work, management, and responsibility are divided between us and you.
  5. Individual Agreement: Written agreement for paid support contracts/support package products concluded based on your individual requirements.
  6. Support Ticket System: A mechanism for creating and managing tickets on our designated client portal.
  7. Valid Ticket: A ticket submitted with all required fields on our portal completed, which we can reasonably determine to be an incident within the scope of Support.
  8. Layer Definitions (Core of this Annex)
    1. Infrastructure Layer: Physical/virtual infrastructure managed by us (hypervisor, etc.), host network, storage, power, control panel/user API.
    2. OS Layer: OS, users/permissions, package management, firewall/SELinux/registry, etc. within your instance.
    3. Middleware Layer: Web/DB/mail/cache/application servers, JDK/JRE, certificate stores, ACME clients, etc.
    4. Application Layer: Your applications, code, configurations, data.
    5. Domain/DNS/Certificates: Registrar/registry procedures, DNS operations, CSR/key generation, server deployment, certificate renewal operations, etc.
  9. Initial Response: The first reply on the ticket (excluding cases where only automated replies or receipt notifications are provided) made by us after receiving a valid ticket.
  10. Best Effort: Means we will make reasonable efforts to respond, and does not include guarantees of response time, resolution time, recovery time, or other specific results or deadlines.

Article 3 (Support Plans) #

  1. This Annex provides only standard support.
  2. Operational outsourcing, monitoring, design changes, RCA report obligations, primary contact for other vendors, etc. are provided based on individual agreements and are outside the scope of this Annex.

Standard Support (Subject of this Annex) #

  • Eligible Parties: Customers using our service
  • Scope: Limited to infrastructure layer (see Article 4 and Appendix B)
  • Support Hours: During support hours (Article 2, Item 3)
  • Service Policy: Best effort (Article 2, Item 10)
  • Exclusions: OS layer/middleware layer/application layer/domain/DNS/certificate deployment, configuration, operations (see Article 9)

Article 4 (Detailed Scope of Provision: Infrastructure Layer Only) #

  1. Infrastructure Issue Isolation and Workaround Suggestions
    Examples: Virtual machine start/stop/restart failures, console connection issues, volume/snapshot anomalies, control panel/user API failures, host-side network reachability issues.
  2. Information Provision: Our status, known issues, compatibility information (within public scope).
  3. Handling of Out-of-Scope Items (Representative Examples): OS internal configurations, middleware, applications, SSL deployment, DNS design, email deliverability adjustments (SPF/DKIM/DMARC), CSR/key generation, certificate chain configuration, domain operations (zone design/migration/record propagation) are outside standard scope. May be quoted for individual agreement as needed.
  4. Vendor Coordination: Coordination with CAs/registrars/external DNS/other cloud providers will only be provided as primary contact when an individual agreement exists.

Article 5 (Support Channels and Submission Methods) #

  1. Support Channels: Support tickets on the client portal only. Telephone, verbal communication, personal emails, SNS, and DM are not accepted.
  2. Submission Method: Please fill in all required fields on the portal and submit (submission is not possible if information is incomplete).
  3. Response Start Criteria: We will begin response when we receive a valid ticket (Article 2, Item 7) and can reasonably determine it to be an infrastructure layer incident. We will suspend response for out-of-scope layers or insufficient information (Articles 6 and 27).

Article 6 (Prerequisites and Minimum Self-Resolution Efforts) #

  1. Before submitting an inquiry, please verify the latest manuals/FAQ/known issues, minimize reproduction, and perform initial isolation (browser change, cache clearing, network verification, etc.).
  2. Verification of OS/middleware/application layers is your responsibility.
  3. If the above has not been performed, we may lower the priority or suspend response.

Article 7 (Responsibility Boundaries: By Layer) #

  1. We are responsible for the availability, integrity, and provision of management tools (control panel/user API) of the infrastructure layer.
  2. OS layer/middleware layer/application layer/domain/DNS/certificates are your responsibility.
  3. Cloud/VPS OS images/templates are provided AS IS, and configuration, updates, maintenance, and security measures after deployment are your responsibility.
  4. For SSL/certificates, with the exception of issuance/reissuance/revocation administrative procedures (limited to those sold by us), CSR/key generation, server deployment, renewal operations, and chain configuration are out of scope.
  5. For domains, we cover only registration/renewal/transfer administrative procedures (limited to domains sold by us), and exclude DNS zone design, record operations, propagation verification, and email deliverability adjustments.
  6. Response will be suspended during periods awaiting customer replies or when testing environments are not provided.

Article 8 (Customer Cooperation Requirements) #

  • Provision of appropriate administrator privileges or test accounts
  • Sharing of facts regarding changes or failures (when, who, what)
  • Provision of quantitative information on number of affected users and business impact
  • Advance disclosure of security and compliance requirements

Article 9 (Out-of-Scope Support: Specific Enumeration) #

  1. OS Layer: Installation/reinstallation, user and permission design, package installation and updates, FW/SELinux/iptables/nftables, Windows configuration, AD/domain joining, time synchronization, backup design, partition/filesystem operations.
  2. Middleware Layer: Installation, configuration, optimization, and monitoring design of web/database/mail/cache/application servers, JDK/JRE, keystore/truststore, ACME clients.
  3. Application Layer: Code/configuration/data, CI/CD, testing, performance tuning, security implementation.
  4. SSL/Certificates: CSR/key generation, installation and renewal on servers/load balancers/proxies/CDNs, chain configuration, HSTS/redirect configuration.
  5. Domain/DNS: Zone design, record registration, changes, and migration, reverse DNS, propagation/TTL design, SPF/DKIM/DMARC, email deliverability improvement.
  6. Other: Primary responsibility for third-party product failures, data recovery, forensic investigation, design proxy services, performance tuning, BCP development and drills.

*The above are examples; similar work is also out-of-scope. Can be addressed through separate contracts as needed.

Article 10 (Fair Use / Harassment Prevention) #

  1. Large-volume or repetitive inquiries of similar content, demands for immediate or priority response disproportionate to urgency, and unreasonable escalations may be subject to limitation or fee-based conversion.
  2. In cases of harassment including threats, verbal abuse, discriminatory language, or personal attacks, we may temporarily suspend response, change contact points, or terminate the contract (channels limited to portal/email for record-keeping purposes).

Article 11 (Escalation) #

Escalation proceeds in order: primary contact → lead engineer → support manager → development lead/executive management as needed. Additional obligations and timelines for RCA, etc., follow the provisions of individual contracts.

Article 12 (Fees and Billing) #

  1. Standard support is provided free of charge within the scope included in the subscribed product.
  2. Priority dispatch (including dedicated/priority response), on-site support, third-party vendor coordination, and operational proxy services are separately billable.
  3. Paid support plans are presented on sales pages or in individual quotes, and follow individual contracts.

Article 13 (Data Protection and Confidentiality) #

Both parties shall not use the other party’s confidential information for purposes outside the scope of this agreement and shall exercise duty of care. Personal information shall be handled in accordance with our Privacy Policy and related policies.

Article 14 (Third-Party Services and Force Majeure) #

We bear no responsibility for failures or delays caused by third-party cloud services, telecommunications, electricity, or other third-party factors, legal changes, or natural disasters. We will share information and provide workarounds to the extent possible.

Article 15 (Intellectual Property) #

Copyright for procedures, scripts, templates, etc., created by us belongs to us (usable within the scope of license granted). Ownership of deliverables is governed by individual contracts, which take precedence.

Article 16 (Term, Renewal, and Termination) #

  1. The contract term is based on the description on the landing page or individual contract for the subscribed product or ordered service.
  2. Cancellation can be performed through the client portal. Other procedures follow the provisions of individual contracts.
  3. In cases of serious violations such as breach of obligations, affiliation with antisocial forces, or harassment, we may terminate without notice.

Article 17 (Disclaimer and Limitation of Liability) #

  1. Disclaimers and limitations of liability related to this support service shall follow Article 16 (Disclaimer and Limitation of Liability) of the main text of these Terms.
  2. We make no promises regarding response time, resolution time, recovery time, or other service levels (including but not limited to SLO/SLA). This support is provided on a best-effort basis, and even during support hours, we do not guarantee the timing or results of initial response, investigation initiation, interim measures, permanent measures, recovery assistance, or escalation.
  3. Procedures, advice, workarounds, configuration examples, etc., provided by us in the course of this support are general information or proposals based on our reasonable judgment, and do not guarantee completeness, suitability, zero-downtime, or no-impact in specific environments. Customers shall implement them at their own risk and take necessary measures such as obtaining backups and conducting verification before implementation.
  4. We do not provide monetary compensation such as refunds, discounts, or penalties related to this support (except as required by mandatory legal provisions). However, this does not apply when service credits are granted as specified in Appendix B for SLA-covered services.

Article 18 (Exclusion of Antisocial Forces) #

If it is determined that the customer or related parties are affiliated with antisocial forces, we may terminate immediately.

Article 19 (Governing Law and Jurisdiction) #

Governing Law: Japanese law.
Exclusive agreed jurisdiction: As provided in Article 17 (Governing Law and Jurisdiction) of the main text of these Terms.

Article 20 (Changes to Appendices) #

We may modify this Appendix, and the content of changes and their effective date shall be announced by the method specified in Article 15 (Amendment of Terms) of the main text of these Terms.

Article 21 (Compliance with Support Channels) #

  1. Support inquiries are accepted only through the support ticket system. We do not provide telephone support.
  2. Communications in violation of this article will only receive guidance to create a ticket; individual response will not commence.

Article 22 (Nullification of Coercion and Unreasonable Demands) #

We do not recognize acts that use threats of cancellation, negative publicity, or excessive escalation to coerce out-of-scope work, priority changes, or free response. The presence or absence of coercion has no effect whatsoever on scope of response, priority, or costs.
We will provide paid quotes, alternative proposals, or cancellation procedure guidance as necessary, but will not make exceptions based on coercion.

Article 23 (Measures for Violations) #

Graduated measures will be applied according to the severity of violations.

  • L1 (Minor): Warning/channel re-guidance/notice of individual response suspension
  • L2 (Repeated): Channel restriction (tickets only)/priority downgrade
  • L3 (Serious): Temporary support suspension (up to 10 business days)/specification or change of contact point
  • L4 (Malicious/Ongoing): Contract termination or refusal to renew. Record retention and consideration of legal action as necessary

Article 24 (Client Portal Contact Information and Identity Verification) #

  1. Customers may register contact persons (name, telephone number, email) in the client portal (hereinafter “registered contact”). Inquiries from contacts other than registered contacts will not be accepted.
  2. Identity verification is performed through portal authentication or by sending from the email address of the registered contact. In case of mismatch, only guidance will be provided.

Article 25 (Handling of Out-of-Scope Work) #

  1. Out-of-scope work requires a separate contract (quote/SOW). Verbal requests or agreements are invalid; work will commence only after written agreement.
  2. Emergency work, priority response, on-site work, etc. may be subject to additional multipliers.

Article 26 (Employee Safety and Healthy Communication) #

If threats, insults, discrimination, persistent contact, etc. are observed, we will immediately suspend response and apply Article 23 (Measures for Violations) Level 2 or higher.
For quality improvement and dispute prevention, we may record chat, email, and other communications (within the scope of applicable laws and our Privacy Policy).

Article 27 (Grounds for Hold or Closure of Response) #

We will hold or close individual responses in the following cases:

  1. Ticket not submitted or required information missing (Article 5)
  2. Contact information does not match registration or identity cannot be verified (Article 24)
  3. Request for work on out-of-scope layers (Article 9)
  4. Duplicate tickets with the same subject (subsequent tickets will be merged or closed with a link)
  5. Contact point change or de-escalation response during harassment incident
  6. Priority given to mass notifications during large-scale incidents (Article 28)
  7. If there is no reply from the customer for 120 hours, the ticket will be automatically closed (please submit a new ticket to reopen).

Article 28 (Operations During Large-Scale Incidents: Mass Notifications and Duplicate Consolidation) #

  1. When an incident occurs from a single cause affecting a large number of users, we will take the following actions in priority over individual responses:
    1. Status Posting: Post and update initial report, progress, and outlook on portal announcements and status pages.
    2. Mass Notification: Send standard announcements via email/portal notifications.
    3. Duplicate Consolidation: Consolidate tickets with the same subject into a representative ticket; subsequent tickets will be closed with a link.
    4. Hold on Individual Requests: Individual requests unrelated to the incident will be held and resumed after recovery.
  2. These measures are intended to ensure rapid recovery and consistent information.

Appendix B: Layer-Specific Responsibility Demarcation Table (Cloud/VPS / Domain / SSL) #

Item We (Standard) Customer Notes
Control Panel / User API availability Infrastructure incident isolation
Hypervisor / Host NW / Power / Storage Platform-side defect correction
VM start / stop / restart (infrastructure-side events) OS-internal causes are out of scope
Console access (management tool) Tool failures: we; OS login failures: customer
Guest OS configuration, updates, security OS images provided AS IS
Middleware installation / configuration / monitoring Available under separate contract
Application configuration / operations / tuning
SSL issuance procedures (administrative work for our sales) CA review is outside our control
CSR / key generation, server installation / renewal Available under separate contract
Domain registration / renewal / transfer (administrative work) Registry processing is outside our control
DNS zone design / record operations Available under separate contract
Email deliverability (SPF/DKIM/DMARC) Available under separate contract

Note: ○ = Responsibility/work owner in that column (standard demarcation). Blank = Not the responsibility/work owner in that column (we may provide support under separate contract as needed).

End of Document

Appendix B: SLA (99.9% / Service Credits for Incidents) #

Last Updated: 2026-02-17

1. Scope of Application #

This Appendix applies to the BESTNET CLOUD/VPS Service (hereinafter “SLA-Covered Services”) provided by us. SLA-Covered Services are limited to those for which we have clearly stated SLA coverage on our sales pages or elsewhere.
When using SLA-Covered Services, the contents of this Appendix apply as specific terms under the main Terms of Service.
In the event of a conflict between the main Terms and this Appendix, this Appendix takes precedence only for matters related to “uptime guarantees and service credits.”

2. SLA Overview #

We guarantee a monthly uptime of 99.9% (hereinafter “SLA Value”) for this service.
If uptime falls below the SLA Value, we will grant account credits (service credits) via our client portal to eligible customers.

3. Definitions #

3.1 Availability #

Availability is calculated for each calendar month (Japan Standard Time, JST) using the following formula:

  • Availability (%) = 100 × (Total Provided Time − Downtime) ÷ Total Provided Time
  • Total Provided Time: Total minutes in the month (e.g., 30 days = 43,200 minutes)
  • Downtime: Time (in minutes) that qualifies as “Outage” as defined by us and does not fall under “SLA Exclusions”

3.2 Outage #

“Outage” means a condition in which the service is continuously unavailable as determined by our monitoring systems.
Intermittent events under 5 minutes may not be counted toward downtime (to ensure measurement stability).

3.3 Downtime #

Downtime is calculated by us based on records from our monitoring systems.
If there is a discrepancy with the customer’s measurements, our calculation takes precedence.

4. SLA Exclusions (Events Not Counted Toward Downtime) #

Downtime does not include (and SLA compensation does not apply to) the following cases:

  • Incidents caused by customer OS configuration, middleware, applications, databases, etc.
  • Incidents caused by customer actions (including configuration changes, deletions, resource exhaustion)
  • Scheduled maintenance announced by us in advance (including equipment upgrades, network switches, data center relocations, assigned IP changes/renewals)
  • Emergency maintenance (e.g., security responses) for which we provide necessary post-event notification
  • External factors (upstream carrier incidents, upstream provider terms changes/termination, number resource reclamation requests, Internet-wide incidents, DDoS, third-party attacks, natural disasters, etc.)
  • Events arising from or related to measures based on our common Terms of Service (main text of these Terms), such as communication restrictions, isolation, suspension, changes/suspension of assigned IPs for fraud prevention, upstream provider requests, legal compliance, etc.
  • Free components or services otherwise designated by us as excluded

5. Service Credit (Compensation) Details #

5.1 Form of Compensation #

Compensation is provided as account credit in our client portal.
We do not provide cash refunds, card refunds, bank transfers, etc.
The handling of service credits (nature, expiration, final settlement, etc.) is subject to our separately defined credit regulations.

5.2 Eligible Fees for Compensation #

Compensation applies to the base monthly fee for this service for the applicable month.
(Usage-based charges, late fees, administrative fees, etc. may be excluded)

5.3 Credit Calculation Method #

Let M (minutes) be the total minutes in the applicable month and D (minutes) be the downtime.

  • SLA Violation Determination:
    • If D > ⌈M × 0.001⌉, it is determined that the SLA value (99.9%) has been violated
    • ⌈ ⌉ represents rounding up (in minutes)
  • Allowed Downtime:
    • T = ⌈M × 0.001⌉
  • Excess Downtime:
    • E = D − T (if E is 0 or less, then 0)
  • Credit Rate (%):
    • Credit Rate = min(100, ⌈E ÷ 30⌉ × 5)
  • Credit Amount Granted:
    • Credit Amount = Base Monthly Fee × Credit Rate

Example (30-day month: M=43,200 minutes → T=44 minutes) #

  • 44 minutes downtime: Within SLA → 0%
  • 50 minutes downtime: 6 minutes excess → ⌈6/30⌉=1 → 5%
  • 80 minutes downtime: 36 minutes excess → ⌈36/30⌉=2 → 10%
  • 200 minutes downtime: 156 minutes excess → ⌈156/30⌉=6 → 30%

5.4 Cap #

The service credit cap is 100% of the base monthly fee for the applicable month.

6. Application (Claim) Process #

To receive a service credit, the following conditions must be met:

  • Submit an application to the support desk (ticket) within 30 days of the incident occurrence (or our announcement)
  • Clearly specify the applicable service (contract ID, etc.), occurrence time, and impact details
  • Your customer account must be in a valid contract status without payment delays, etc.

※If no application is submitted, automatic credit may not be granted.

7. Credit Grant Timing #

After we review the application and approve its eligibility, we will grant the account credit within a reasonable period as a general rule.
(Completion notification will be provided via ticket)

8. Disclaimers and Other Matters #

  • The service credits specified on this page constitute the sole and exclusive remedy for SLA violations.
  • Disclaimers, limitation of liability, and other matters related to this service are subject to our common Terms of Service (main text of these Terms).
  • We may modify the contents of this page. Modified contents will be announced on our website with the effective date, and will apply from the effective date onward (subject to restrictions under applicable law).
Updated on 2026年6月9日

What are your feelings

  • Happy
  • Normal
  • Sad
目次