Service Agreement
Effective Date: 18 February 2026
This Service Agreement ("Agreement") is entered into by and between:
Client¶
| Name | SILVER FROG |
| Legal Form | Maltese company limited by shares |
| Registration Number | C 105549 |
| Registered Address | Level 0D, Centris Business Gateway II, Triq is-Salib tal-Imriehel, Zone 3 Central Business District, Birkirkara CBD 3020, Malta |
Provider¶
| Name | Minnova OÜ |
| Registry Code | 16513523 |
| Address | Kangru tee 19/2-1, Lubja, 74010 Harju maakond, Estonia |
| Represented by | Paulo Henrique de Oliveira Curado and Leonnardo Enes de Campos |
| Title | Co-owners & Managing Directors |
Client and Provider may be referred to individually as a "Party" and collectively as the "Parties."
1. Terms and Definitions¶
Business Day - A working day in the country of the Client.
Confidential Information - Non-public information obtained in connection with this Agreement, including business, technical, operational, and financial information, whether written, electronic, or verbal.
Fee - Payment for the Services rendered by the Provider.
Instructions - Requests or tasks issued by the Client describing the Services to be performed.
Personal Data - Personal information required to enter into or execute this Agreement.
2. Scope of Services¶
2.1. Scope of Work¶
The Provider shall deliver infrastructure and platform engineering services for the Client's platform ("flush.io"), covering the design, implementation, documentation, and handover of a cloud-based development environment. The scope includes:
- Cloud Infrastructure (OpenTofu/Terraform): AWS VPC with public and private subnets, NAT gateway, security groups, EC2 instance in private subnet with IAM roles (SSM, ECR), S3 Terraform state backend
- Edge & Access Control (Cloudflare): Cloudflare Tunnel for zero-inbound-port connectivity, DNS configuration, Zero Trust authentication with email OTP, WARP VPN for private network access
- Container Runtime: Docker Swarm configuration, Traefik reverse proxy, containerized PostgreSQL database, zero-downtime rolling update strategy
- CI/CD Pipeline: GitHub Actions CI workflow (formatting, linting, compilation), CD workflow with self-hosted runner on EC2, automated build and deploy via Docker Swarm
- Secrets Management: SOPS + Age encryption for secrets at rest in Git, per-environment and per-developer key distribution, automated decryption at deploy time
- Monitoring: Gatus uptime/status page, Dozzle real-time log viewer
- Server Bootstrap: Cloud-init provisioning script (Docker, cloudflared, SOPS, GitHub Actions runner, SSH keys)
- Monorepo Structure: Project monorepo setup and organization for the Client's codebase
- Container Management: Web-based administration interface for Docker container management and monitoring (e.g., Portainer or equivalent)
- Currency Conversion Package: Elixir library for currency conversion with database persistence
- Documentation: Architecture overview, infrastructure proposal, and operational documentation delivered in the Client's repository
- Support & Adjustments: Bug fixes, configuration adjustments, and technical support related to the delivered work
2.2. Engagement Model¶
The Provider performs all Services remotely as a fixed-scope, fixed-price engagement.
- All Services described in Section 2.1 shall be delivered for the agreed Fee in Section 3.
- Work beyond the scope described in Section 2.1 requires a separate written agreement between the Parties.
- No 24/7 on-call or after-hours support is included.
2.3. Out of Scope¶
Any work not described in Section 2.1 is outside the scope of this Agreement, including but not limited to: Kubernetes/EKS migration, managed database (RDS) setup, identity provider (Keycloak) deployment, and production-grade observability stacks. Such work may be agreed as a separate engagement.
3. Fee and Payment Procedures¶
- The total Fee for this engagement is 6,000 EUR.
- Fees include all Provider taxes and expenses, unless otherwise agreed.
- The Provider shall issue a single invoice for the total Fee upon completion of all Services described in Section 2.1.
- Payment term: 30 calendar days from invoice receipt.
- Payments shall be made to the Provider's designated bank account.
- Client is responsible for its own bank fees; Provider covers its own.
- The Provider shall correct any material defects identified by the Client within reasonable time.
4. Rights and Obligations¶
4.1. Provider Rights¶
- Request written Instructions
- Determine working hours and workflow
- Receive timely payment
- Engage third parties when necessary, unless explicitly restricted
- Decline tasks outside Provider's domain of expertise
4.2. Client Rights¶
- Provide written Instructions
- Receive updates on service progress
- Request corrections to materially defective work
- Reject deliverables that do not meet agreed terms
4.3. Provider Obligations¶
- Perform Services with professional skill and diligence
- Notify Client of risks, delays, or blockers
- Maintain confidentiality
- Securely handle Client data and materials
4.4. Client Obligations¶
- Pay invoices on time
- Provide necessary access, information, and context for performance of the Services
5. Liability¶
- Provider is liable only for damages caused by gross negligence or willful misconduct.
- Provider's total liability is limited to the total Fee paid under this Agreement.
- Provider is not liable for indirect, incidental, or consequential damages.
- Late payments shall incur interest at 1.5% per month or the maximum rate permitted by law, whichever is lower.
6. Confidentiality¶
Both Parties agree to maintain confidentiality of all Confidential Information.
Provider shall not use or disclose Client's information except as required to perform the Services or as required by law or court order. If legally compelled to disclose, the disclosing Party shall provide reasonable advance notice to the other Party where permitted.
Confidentiality obligations survive termination indefinitely.
7. Intellectual Property¶
- Work products created specifically for the Client become the Client's property upon full payment.
- Provider retains ownership of:
- pre-existing intellectual property
- reusable components, know-how, frameworks, and tools
- If such reusable elements are included in deliverables, the Client receives a non-exclusive license to use them internally.
8. Notices¶
All notices shall be sent via email to:
- Client Email: ________
- Provider Email: hello@minnova.io
Notices are considered received when sent from the official email of one Party to the other.
9. Applicable Law and Dispute Resolution¶
- This Agreement is governed by the laws of Malta.
- Parties shall attempt good-faith negotiation to resolve disputes.
- If unresolved, disputes shall be submitted to the courts of Malta.
10. Term and Termination¶
- This Agreement begins on the Effective Date and terminates automatically upon delivery of all Services described in Section 2.1, or on 13 March 2026, whichever occurs first.
- Either Party may terminate early with 30 Business Days written notice.
- Upon termination:
- Client shall pay for all Services delivered up to the termination date
- Provider shall return or delete Client materials if requested
- Confidentiality obligations remain in effect indefinitely.
- Provider may not assign rights without Client consent; Client may assign within its corporate group.
11. General Provisions¶
11.1. Force Majeure¶
Neither Party shall be liable for delays or failures in performance due to circumstances beyond reasonable control, including natural disasters, war, terrorism, pandemic, government action, or interruption of essential utilities. The affected Party shall notify the other promptly and use reasonable efforts to mitigate the impact.
11.2. Severability¶
If any provision of this Agreement is found invalid or unenforceable, the remaining provisions shall continue in full force and effect.
11.3. Entire Agreement¶
This Agreement constitutes the entire agreement between the Parties and supersedes all prior negotiations, representations, or agreements relating to this subject matter.
11.4. Amendments¶
This Agreement may only be amended by written instrument signed by both Parties.
11.5. Counterparts¶
This Agreement may be executed in counterparts, including electronic signatures, each of which shall be deemed an original and together shall constitute one agreement.
11.6. Non-Solicitation¶
During the term of this Agreement and for twelve (12) months thereafter, neither Party shall directly solicit for employment any employee or contractor of the other Party who was involved in the performance of Services, without prior written consent.
11.7. Data Protection¶
Both Parties shall comply with applicable data protection laws, including GDPR where applicable. Provider shall process Personal Data only as necessary to perform the Services and shall implement appropriate technical and organizational security measures.
12. Signatures
For the Client
Name: ____________________
Title: ____________________
Signature Date
For the Provider
Minnova OÜCo-owner & Managing Director
Signature Date
Co-owner & Managing Director
Signature Date