MedhyaShield Pricing

Enterprise security.
Startup pricing.

AI-native managed cybersecurity for startups and SMBs with 2 to 100 employees. One platform. One bill. Full SOC included.

Annual billing  Save 20%
Subscription plans

Two plans. Full platform. Zero compromise.

Every module included in both plans. Every plan includes 24×7 SOC managed services and dedicated security analyst support.

Platform Only
Shield Core
All 20 platform modules plus full 24×7 SOC managed services. Your existing endpoint and email security tools are integrated seamlessly into the platform via API.
$ 18 /emp/mo
≈ AED 66 per employee per month
Billed $216 / emp / yr · ≈ AED 793 / emp / yr
Designed for organisations that already hold active licences for endpoint detection and BEC email security solutions. MedhyaShield integrates with your existing security tools via API at no additional charge, bringing everything into one unified platform.
VAT: UAE Value Added Tax (5%) will be applied to all invoices in addition to the above price and remitted to the Federal Tax Authority. Your invoice will clearly show the pre-VAT amount and VAT amount separately.
All 20 platform modules
✓Dashboard — real-time security posture
✓Onboarding wizard
✓Company profile & employee details
✓Endpoint security — integration mode (your licence)
✓Email security — integration mode (your licence)
✓Self security assessment creation & reports
✓Domain security scan & scan reports
✓Compliance management & certifications
✓Software, subscriptions & insurance tracking
✓IT security audit & policy management
✓Training center
✓Incident & risk management
✓3rd-party integrations
✓Reports & analysis
✓AI threat intelligence
SOC managed services — included
✓24×7 proactive SOC monitoring & incident alerting
✓Onboarding, provisioning & configuration by analysts
✓Security analyst consulting during platform setup
✓Incident triage & response support
✓Quarterly security health review
Not included — customer provides
✕Endpoint detection and response (EDR) licence
✕BEC email security licence
SOC security analysts included
All prices in USD · Annual billing locks your rate for 12 months · Monthly billing available at full list price with no commitment · AI SaaS tenant customisations quoted separately after scope confirmation
Feature comparison

Every module. Side by side.

Module / Feature Shield Complete Shield Core
Core security
Dashboard — real-time security posture✓✓
Onboarding wizard✓✓
Company profile management✓✓
Employee details & device tracking✓✓
Endpoint security — EDR licence included✓✕ Customer licence
Email security — BEC licence included✓✕ Customer licence
API integration with existing EDR & email tools✓✓
Security assessment
Self security assessment creation✓✓
Assessment reports✓✓
Domain security scan✓✓
Scan reports✓✓
Compliance & certifications
Software & subscription tracking✓✓
Certifications management✓✓
Insurance policies tracking✓✓
Security operations
IT security audit✓✓
Policy management✓✓
Training center✓✓
Incident & risk management✓✓
Technology
3rd-party integrations✓✓
Reports & analysis✓✓
AI threat intelligence✓✓
SOC managed services
24×7 proactive SOC monitoring✓✓
Onboarding & provisioning by security analysts✓✓
Security analyst consulting during setup✓✓
Incident triage & response support✓✓
Quarterly security health review✓✓
Billing & platform
Annual or monthly billing✓✓
UAE VAT (5%) applied to all invoices✓✓
AI SaaS tenant customisationQuoted separatelyQuoted separately
Shield Pro Services

Professional security services. On demand.

21 services across 5 categories. Available to any subscriber or as standalone engagements. Click a category to explore all services inside it.

Custom Pricing for Every Engagement

Every professional service engagement at MedhyaShield is scoped and priced individually. We begin with a complimentary discovery session to understand your environment, objectives and constraints. Following that session, our team prepares a clear, fixed-price proposal with defined deliverables, timelines and outcomes — so you know exactly what you are getting before any work begins. No surprises. No hidden fees. Contact us to schedule your discovery session.

⚔️
Offensive Security
Simulated attacks to find your weaknesses before real attackers do
5 services ▼
01 · Offensive Security
Red Team Exercise
Full adversary simulation — goal-based attack scenarios targeting people, processes and technology simultaneously. Replicates real-world threat actor behaviour to expose gaps that standard testing misses, including physical, social engineering and technical attack chains.
Deliverables: Full attack narrative report, kill chain replay, executive summary, prioritised remediation roadmap by business impact
02 · Offensive Security
VAPT / Penetration Testing
Black and grey box external and internal penetration test. Covers network perimeter, internal hosts, privilege escalation paths, lateral movement and data exfiltration vectors. CVSS-rated findings with proof-of-concept evidence for each vulnerability discovered.
Deliverables: CVSS-rated findings report, executive summary, technical evidence, remediation guidance, free retest within 30 days
03 · Offensive Security
Web Application Pen Test
Manual and automated security testing of web applications covering OWASP Top 10, business logic flaws, authentication bypass, authorisation vulnerabilities, injection attacks, XSS, IDOR, session management and API security endpoint exposure.
Deliverables: OWASP-mapped findings report, exploit evidence screenshots, developer remediation guide, retest certificate on fix confirmation
04 · Offensive Security
Mobile Application Pen Test
iOS and Android security testing using static and dynamic analysis. Covers binary reverse engineering, insecure data storage, traffic interception, certificate pinning bypass, insecure API communication and full OWASP Mobile Top 10 coverage.
Deliverables: OWASP Mobile-mapped findings, dynamic analysis evidence, developer remediation guide for both iOS and Android platforms
05 · Offensive Security
Vulnerability Assessment
Automated and manual scanning of internal and external infrastructure. Includes asset discovery, CVE mapping, CVSS scoring, false positive validation and risk prioritisation by exploitability and business impact. Optional retest engagement available.
Deliverables: Prioritised vulnerability register, risk heat map, remediation plan with effort estimates, optional retest report
💻
Application Security
Code, API and performance security for your software products
4 services ▼
06 · Application Security
Source Code Review (SAST)
Manual and automated static analysis of application source code. Covers security anti-patterns, hardcoded credentials and secrets, injection flaws, insecure dependencies (SCA), cryptographic misuse and authentication logic errors. Language-agnostic — covers Python, Node.js, Java, PHP, Go, .NET and more.
Deliverables: Line-by-line annotated findings, severity-ranked issues list, secure coding guidance, dependency vulnerability report
07 · Application Security
API Security Assessment
Comprehensive testing of REST, GraphQL and SOAP APIs against OWASP API Top 10. Covers broken object-level authorisation, excessive data exposure, lack of rate limiting, mass assignment vulnerabilities, security misconfiguration and injection through API endpoints.
Deliverables: OWASP API Top 10 findings report, request/response evidence, remediation guidance, retest on critical findings
08 · Application Security
Performance & Load Testing
Stress, load, spike and endurance testing for web and mobile applications. Identifies response time degradation, memory leaks, database bottlenecks and failure thresholds under high concurrent user load. Testing tooling includes k6, JMeter and Locust.
Deliverables: Full metrics report with charts, response time analysis by endpoint, bottleneck identification, optimisation recommendations
09 · Application Security
Application Load Testing
Simulates peak and burst traffic to validate infrastructure auto-scaling behaviour, CDN cache performance, load balancer handling and failover mechanisms under extreme load. Focused on infrastructure capacity limits rather than application-level performance metrics.
Deliverables: Infrastructure capacity report, auto-scaling validation results, CDN and failover test results, scaling architecture recommendations
🔧
Infrastructure & Network Security
Harden your servers, network and cloud environments
4 services ▼
10 · Infrastructure & Network
Network Security Audit
Comprehensive review of firewall rules, network segmentation, VPN configuration, access control lists, routing policies, switch security and wireless network security. Identifies overly permissive rules, missing segmentation, unpatched devices and lateral movement paths within the network.
Deliverables: Firewall rule analysis report, network topology review, risk-rated findings, per-device hardening recommendations
11 · Infrastructure & Network
Infrastructure Security Audit
On-premise and cloud infrastructure review covering server OS hardening status, patch compliance, IAM configuration, storage access controls, logging and monitoring coverage. Benchmarked against CIS Controls and delivers a scored compliance report for each audited system.
Deliverables: CIS benchmark scorecard, server-by-server findings register, IAM review, patching gap report, remediation roadmap
12 · Infrastructure & Network
Cloud Security Review
AWS, Azure and GCP configuration audit against CIS cloud benchmarks and cloud provider security best practices. Covers IAM and identity configuration, network security groups, storage access and encryption settings, logging coverage, and publicly exposed or misconfigured cloud services.
Deliverables: Cloud security scorecard per account, misconfiguration findings, IAM risk analysis, logging gaps report, remediation priority list
13 · Infrastructure & Network
Zero-Trust Architecture Consulting
Strategy and implementation roadmap for zero-trust network access. Covers identity-based access control design, device trust verification frameworks, micro-segmentation planning, ZTNA implementation guidance and least-privilege access model design for your specific environment.
Deliverables: Zero-trust maturity assessment, architecture design document, phased implementation roadmap, technology vendor shortlist
📋
Compliance & Audit
Achieve certifications your customers and regulators require
4 services ▼
14 · Compliance & Audit
ISO 27001 Audit & Readiness
Full gap analysis against ISO/IEC 27001:2022 Annex A controls. Covers ISMS scoping, risk assessment methodology, statement of applicability (SoA) drafting, control implementation review and pre-certification audit preparation. Our analysts guide you from initial gap to fully audit-ready status.
Deliverables: Gap analysis report, risk register template, SoA document, control implementation tracker, pre-certification readiness report
15 · Compliance & Audit
PCI DSS Audit & Readiness
Gap assessment against PCI DSS v4.0 for merchants and service providers handling cardholder data. Covers cardholder data environment (CDE) scoping and boundary definition, all 12 requirement areas review, compensating control identification and SAQ or ROC preparation support based on your merchant level.
Deliverables: CDE scope document, 12-requirement gap report, SAQ completion guidance, ROC preparation support, remediation plan with priorities
16 · Compliance & Audit
UAE NESA / NCA ECC Compliance
Gap analysis and remediation roadmap for UAE-specific regulatory obligations — the National Electronic Security Authority (NESA) Information Assurance Standards and the National Cybersecurity Authority (NCA) Essential Cybersecurity Controls (ECC-1:2018). Designed specifically for businesses operating within the UAE that must demonstrate local regulatory compliance.
Deliverables: NESA/NCA gap report, control mapping document, remediation roadmap, evidence collection template, compliance tracking dashboard
17 · Compliance & Audit
Cybersecurity Gap Assessment
Framework-agnostic comprehensive review of your current security posture across people, process and technology. Maps all findings to the NIST Cybersecurity Framework or ISO 27001 standard, and produces a prioritised remediation roadmap ordered by risk severity and implementation effort.
Deliverables: Gap analysis report mapped to NIST CSF or ISO 27001, executive summary, risk-prioritised roadmap, quick wins list for immediate action
🛡️
Advisory & Managed
Ongoing expert guidance, incident response and human-layer security
4 services ▼
18 · Advisory & Managed
Incident Response & Digital Forensics
Reactive incident response support when a security event occurs: rapid containment to limit damage, eradication of the threat, evidence preservation for legal or insurance purposes and root cause analysis. Includes a comprehensive post-incident report with timeline, findings and prevention recommendations. Monthly retainer option available for priority SLA.
Deliverables: Incident timeline report, root cause analysis, containment and eradication evidence, lessons learned report, prevention recommendations
19 · Advisory & Managed
Security Awareness & Phishing Drills
Live security awareness training sessions for employees combined with simulated phishing campaigns. Training covers social engineering recognition, safe browsing habits, password hygiene, data handling and incident reporting procedures. Phishing simulations track click rates, credential submission and correct reporting behaviour across your team.
Deliverables: Pre and post training metrics, phishing campaign results by department, employee risk ranking report, security awareness improvement recommendations
20 · Advisory & Managed
vCISO / Security Advisory Retainer
Fractional Chief Information Security Officer engagement providing ongoing strategic security guidance without the cost of a full-time hire. Covers board-level security reporting, security programme development, vendor evaluation, policy ownership, regulatory liaison and security strategy management. Ideal for startups and SMBs that need CISO-level thinking without a full-time headcount.
Deliverables: Monthly security strategy report, board-ready security updates, policy documents, vendor assessment reports, security programme roadmap
21 · Advisory & Managed
AI SaaS Tenant Customisation
Customer-specific modifications to your MedhyaShield tenant. Covers custom security workflows, bespoke reporting templates, custom API integrations with your internal tools, custom dashboard views and tenant-specific automation rules. All customisations are fully scoped and estimated before work begins — you approve the deliverables, timeline and cost first.
Deliverables: Signed scope of work, development with review checkpoints, UAT sign-off session, production deployment, full technical documentation
Legal

Policies & Legal Documents

All policies are governed by the laws of the United Arab Emirates and comply with applicable UAE federal legislation.

Privacy Policy

Medhyacom Technology LLC · Last updated: June 2026 · Effective date: June 2026 · Governed by UAE Federal Law

1. Introduction and Identity of the Data Controller

This Privacy Policy applies to MedhyaShield, an AI-native managed cybersecurity platform operated by Medhyacom Technology LLC, a company incorporated and registered in the United Arab Emirates ("we", "our", "us"). We are committed to protecting the personal data of our customers, platform users, website visitors and business contacts in accordance with applicable UAE data protection legislation, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL) and its implementing regulations.

By accessing or using the MedhyaShield platform or website at medhyashield.com, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree, please do not use our platform or services.

2. Personal Data We Collect

We collect the following categories of personal data when you interact with our platform and services:

  • Account and identity data: Full name, email address, job title, company name, telephone number and business address provided during registration or account management.
  • Platform usage data: Log data, IP addresses, browser type, device identifiers, session duration, pages visited, features accessed and actions taken within the MedhyaShield platform.
  • Security and monitoring data: Endpoint telemetry, email security events, domain scan results, incident records, risk registers and compliance assessment data generated as part of the managed cybersecurity service.
  • Billing and financial data: Name, billing address and payment information processed through our secure payment provider. We do not store full card numbers on our systems.
  • Communications data: Emails, support tickets and messages exchanged between you and MedhyaShield personnel.
  • Employee data: If you provide employee information for the purpose of configuring user accounts, training or endpoint management, we process this data solely as a data processor acting on your instructions.

3. Legal Basis and Purpose of Processing

We process personal data under the following legal bases as recognised under UAE PDPL:

  • Performance of contract: To provision, deliver and manage the MedhyaShield subscription services you have subscribed to.
  • Legitimate interests: To monitor platform security, prevent fraud, improve our services and communicate service-related updates.
  • Consent: For marketing communications, where we will always obtain your explicit consent and provide an easy mechanism to withdraw it.
  • Legal obligation: Where processing is required to comply with applicable UAE laws, judicial orders or regulatory requirements.

4. How We Share Your Personal Data

We do not sell, rent or trade your personal data to third parties. We share data only as follows:

  • Service providers: Trusted third-party vendors who provide cloud infrastructure, payment processing, email delivery and customer support tooling — all bound by contractual data processing agreements.
  • Security intelligence providers: Anonymised or aggregated threat data may be shared with threat intelligence partners to enhance detection capabilities.
  • Legal and regulatory authorities: Where required by UAE law, court order or regulatory authority, we may disclose data to competent authorities.
  • Business transfers: In the event of a merger, acquisition or sale of business assets, personal data may be transferred to the successor entity, subject to equivalent protections.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable UAE laws and regulations. Account data is retained for the duration of your subscription and for a period of five (5) years thereafter for legal and audit purposes. Security event and incident data may be retained for up to seven (7) years in accordance with UAE cybersecurity regulatory guidance. You may request deletion of personal data subject to legal retention obligations.

6. Data Security

We implement technical and organisational security measures commensurate with the sensitivity of the data we process. These include encryption in transit and at rest, role-based access controls, multi-factor authentication, regular penetration testing, security monitoring and incident response procedures. Notwithstanding these measures, no system is entirely immune from risk, and we cannot guarantee absolute security.

7. Your Rights Under UAE PDPL

Subject to applicable law and certain exceptions, you have the following rights in relation to your personal data:

  • The right to access and obtain a copy of your personal data held by us.
  • The right to rectify inaccurate or incomplete personal data.
  • The right to request erasure of personal data where there is no lawful reason for continued processing.
  • The right to object to processing carried out on the basis of legitimate interests.
  • The right to withdraw consent where processing is based on consent.
  • The right to lodge a complaint with the UAE Data Office or relevant supervisory authority.

To exercise any of these rights, please contact us at the address below. We will respond within thirty (30) days of receipt of your request.

8. International Data Transfers

Where personal data is transferred outside the UAE, we ensure that appropriate safeguards are in place in accordance with UAE PDPL requirements, including standard contractual clauses or transfers to jurisdictions recognised as providing adequate protection. Data residency options may be available upon request for certain subscription tiers.

9. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to ensure functionality, analyse usage patterns and improve user experience. You may control cookie settings through your browser. Disabling certain cookies may affect the functionality of the website. We do not use cookies for cross-site advertising or sell cookie data to third parties.

10. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, applicable laws or regulatory guidance. We will notify registered users of material changes by email or platform notification at least fourteen (14) days before they take effect. Continued use of the platform after the effective date constitutes acceptance of the updated policy.

Data Controller Contact: Medhyacom Technology LLC · privacy@medhyacomtechnology.com · United Arab Emirates

Terms of Service

Medhyacom Technology LLC · Last updated: June 2026 · Effective date: June 2026 · Governed by the laws of the United Arab Emirates

1. Acceptance of Terms

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you") and Medhyacom Technology LLC, operating the MedhyaShield platform ("MedhyaShield", "we", "us"). By registering for, accessing or using the MedhyaShield platform or any associated services, you confirm that you have read, understood and agree to be bound by these Terms and all policies incorporated by reference, including our Privacy Policy and No Refund Policy.

If you are entering into this agreement on behalf of an organisation, you represent that you have the authority to bind that organisation to these Terms. If you do not have such authority or do not agree to these Terms, you must not use the platform.

2. Description of Services

MedhyaShield is an AI-native managed cybersecurity Software-as-a-Service (SaaS) platform designed for startups and small-to-medium businesses with 2 to 100 employees, operated from the United Arab Emirates. The platform provides subscription-based access to cybersecurity modules including but not limited to endpoint security, email security, security assessment, compliance management, IT security audit, incident management, AI threat intelligence and 24×7 Security Operations Centre (SOC) managed services.

Professional services including penetration testing, compliance audits and advisory engagements are governed by separate statements of work agreed between the parties and are subject to these Terms unless expressly stated otherwise.

3. Subscription, Billing and Payment

Access to the MedhyaShield platform is provided on a subscription basis, billed per employee per month. Two subscription plans are available: Shield Complete and Shield Core, as described on the Pricing page. Subscription fees are payable in United States Dollars (USD). UAE Value Added Tax (VAT) at the current statutory rate of five percent (5%) will be added to all invoices and remitted to the UAE Federal Tax Authority in compliance with Federal Decree-Law No. 8 of 2017 on Value Added Tax.

  • Annual subscriptions are billed upfront for a twelve-month period and are non-refundable except as required by applicable UAE law.
  • Monthly subscriptions are billed at the start of each calendar month and may be cancelled with thirty (30) days' written notice.
  • All invoices are due upon issuance. Overdue amounts will accrue late payment interest at the rate permitted under UAE commercial law.
  • Prices are subject to change upon thirty (30) days' written notice. Changes to pricing will not affect the current subscription term for annual subscribers.

4. Acceptable Use

You agree to use the MedhyaShield platform solely for lawful business cybersecurity purposes and in accordance with these Terms. You must not:

  • Use the platform to perform offensive security activities against systems or networks you do not own or have explicit written authorisation to test.
  • Attempt to circumvent, disable or interfere with any security features of the platform.
  • Share account credentials with unauthorised parties or allow access to the platform beyond the licensed number of employees.
  • Upload, transmit or store any content that is unlawful, harmful, defamatory or infringes the intellectual property rights of any third party.
  • Reverse engineer, decompile or attempt to extract the source code of the MedhyaShield platform.
  • Resell, sublicense or commercially exploit access to the platform without our prior written consent.

5. Intellectual Property

All intellectual property rights in the MedhyaShield platform, including software, AI models, algorithms, user interface design, documentation and brand assets, are owned by or licensed to Medhyacom Technology LLC. Nothing in these Terms transfers any intellectual property right to you. You are granted a limited, non-exclusive, non-transferable licence to access and use the platform during the subscription term solely for your internal business purposes.

6. Data Ownership and Processing

You retain full ownership of all data you upload to or generate within the MedhyaShield platform ("Customer Data"). We process Customer Data solely to provide the contracted services and in accordance with our Privacy Policy. We will not use your Customer Data for any purpose other than service delivery, platform improvement (in anonymised or aggregated form only) and legal compliance. Upon termination, we will make your Customer Data available for export for thirty (30) days before it is deleted from our systems.

7. Service Availability and SLA

We target a platform availability of ninety-nine point five percent (99.5%) measured monthly, excluding scheduled maintenance windows. Scheduled maintenance will be communicated at least forty-eight (48) hours in advance. In the event of unplanned downtime exceeding the target, we will provide service credits as detailed in the applicable Service Level Agreement. The SOC monitoring service operates continuously on a 24×7 basis.

8. Limitation of Liability

To the maximum extent permitted by applicable UAE law, MedhyaShield's total liability to you for any claims arising under or in connection with these Terms shall not exceed the total subscription fees paid by you in the twelve (12) months preceding the claim. We shall not be liable for any indirect, incidental, special, consequential or punitive damages, including loss of profits, loss of data or business interruption, even if advised of the possibility of such damages.

MedhyaShield provides cybersecurity tools, monitoring and advisory services. We do not guarantee that the platform will prevent all cyberattacks, data breaches or security incidents. Cybersecurity is a shared responsibility and the effectiveness of protection depends on correct configuration, timely response and your organisation's internal security practices.

9. Termination

Either party may terminate the subscription by providing thirty (30) days' written notice at the end of any subscription term. We may suspend or terminate your access immediately and without notice if you breach these Terms, fail to make payment, or engage in any activity that we reasonably determine to be harmful, fraudulent or unlawful. Upon termination, your right to access the platform ceases immediately and all outstanding amounts become due.

10. Governing Law and Dispute Resolution

These Terms are governed by and construed in accordance with the laws of the United Arab Emirates. Any dispute arising out of or in connection with these Terms shall first be referred to good faith negotiation between the parties for a period of thirty (30) days. If unresolved, disputes shall be submitted to the exclusive jurisdiction of the competent courts of the United Arab Emirates.

11. Amendments

We reserve the right to modify these Terms at any time. We will provide at least thirty (30) days' notice of material changes via email or platform notification. Your continued use of the platform after the effective date of changes constitutes your acceptance of the revised Terms.

Legal enquiries: Medhyacom Technology LLC · legal@medhyacomtechnology.com · United Arab Emirates

No Refund Policy

Medhyacom Technology LLC · Last updated: June 2026 · Effective date: June 2026 · Governed by the laws of the United Arab Emirates

1. General Refund Position

MedhyaShield subscription fees, once paid, are generally non-refundable. This policy applies to all subscription plans (Shield Complete and Shield Core), whether billed monthly or annually, and to all professional services engagements. By subscribing to or purchasing any MedhyaShield product or service, you acknowledge and accept this No Refund Policy.

This position reflects the nature of software-as-a-service subscription products where infrastructure, SOC resources, security analyst time and AI processing capacity are committed upon subscription activation, regardless of the extent to which the customer actively uses the platform.

2. Annual Subscriptions

Annual subscription fees are paid upfront for a twelve-month period and are non-refundable in whole or in part, except in the limited circumstances described in Section 5 of this policy. If you cancel an annual subscription before the end of the subscription term, your access will continue until the end of the paid period and no refund will be issued for the remaining months.

Important: We strongly recommend evaluating MedhyaShield thoroughly during the free trial period before committing to an annual subscription. Our sales team is available to assist with evaluation, demonstrations and any technical questions prior to purchase.

3. Monthly Subscriptions

Monthly subscription fees are billed at the start of each billing cycle and are non-refundable for the current billing period. If you cancel a monthly subscription, your access will continue until the end of the current billing month and no partial refund will be issued for unused days within that period. Cancellation takes effect at the start of the next billing cycle.

4. Professional Services

Professional services fees are governed by the individual statement of work agreed between the parties. As a general principle:

  • Any upfront or deposit payment made for a professional services engagement is non-refundable once work has commenced.
  • If MedhyaShield cancels an engagement before commencement due to circumstances within our control, any advance payment will be refunded in full.
  • Milestone-based payments become non-refundable upon delivery and acceptance of the corresponding milestone deliverable.
  • Disputes regarding deliverable quality or scope must be raised in writing within fourteen (14) calendar days of delivery. Failure to raise a dispute within this period constitutes acceptance of the deliverable.

5. Exceptional Circumstances — Refund Eligibility

Notwithstanding the general no-refund position, we will consider refund requests in the following limited circumstances, in accordance with applicable UAE consumer protection legislation under Federal Law No. 15 of 2020 on Consumer Protection:

  • Service non-delivery: Where MedhyaShield has failed to activate or deliver the subscribed service within fourteen (14) days of payment confirmation with no reasonable alternative offered.
  • Material platform defect: Where a critical platform defect renders the service substantially unusable and we have been unable to resolve it within thirty (30) days of your written notice to us.
  • Duplicate payment: Where a billing error has resulted in a duplicate charge, the duplicate amount will be refunded promptly upon verification.
  • Regulatory prohibition: Where a refund is required pursuant to an order of a competent UAE court or regulatory authority.

Refund requests under this section must be submitted in writing to billing@medhyacomtechnology.com with full details of the grounds for the request. We will acknowledge receipt within two (2) business days and provide a decision within fifteen (15) business days.

6. Free Trial Period

MedhyaShield offers a free trial period to allow you to evaluate the platform before subscribing. No payment is required during the free trial. We encourage all prospective customers to fully evaluate the platform during the trial period. The existence of a free trial period reinforces our no-refund position on paid subscriptions, as customers have a meaningful opportunity to assess suitability before committing to payment.

7. Chargebacks and Payment Disputes

If you believe you have been incorrectly charged, please contact us at billing@medhyacomtechnology.com before initiating a chargeback with your payment provider. Initiating a chargeback without first contacting us may result in the immediate suspension of your account and may be treated as a breach of these Terms. We are committed to resolving all billing disputes promptly and fairly.

8. Amendments to This Policy

We reserve the right to amend this No Refund Policy at any time. Changes will be communicated to active subscribers via email at least thirty (30) days before they take effect. Your continued use of the MedhyaShield platform after the effective date of any changes constitutes your acceptance of the revised policy.

Billing enquiries: Medhyacom Technology LLC · billing@medhyacomtechnology.com · United Arab Emirates