Argus is operated by ARGUS HOLDINGS — KLL1 LTD, trading as KL Leung Holdings, a private company limited by shares registered in England & Wales (company no. 17087998). This page is the entry point to the legal documents that govern arguswatch.org and the Argus platform.

01Company information

Registered name: ARGUS HOLDINGS — KLL1 LTD
Trading as: KL Leung Holdings
Brand: ARGUS
Jurisdiction: England & Wales
Companies House no.: 17087998
Registered office: 3rd Floor, 86-90 Paul Street, London, England, United Kingdom, EC2A 4NE
Supplier status: UK Ministry of Defence (MoD) JAGGAER One Registered Supplier.

02Contact

General correspondence, legal notices, and access requests: info@arguswatch.org.

We accept service of legal process by email at the address above. Please mark the subject line LEGAL · ARGUS / KLL1 LTD and we will acknowledge receipt within five business days.

03Governing documents

The following documents apply to your use of arguswatch.org and the Argus platform:

Doc 01 Terms of Service B2B subscription terms, intellectual property, acceptable use, liability, and governing law. Doc 02 Privacy Policy Data controller status, lawful bases under UK GDPR, sub-processors, retention, and your rights. Doc 03 Acceptable Use Section 6 of the Terms — prohibited conduct on the Platform, including scraping and reverse engineering. Doc 04 Vulnerability Disclosure How to report a security issue affecting Argus or arguswatch.org. Coordinated disclosure terms.

04Vulnerability disclosure

We welcome reports from researchers acting in good faith. To report a security issue affecting Argus, the public site at arguswatch.org, or any associated infrastructure, email security@arguswatch.org with subject line SECURITY · Argus vulnerability report. The same contact is published in our security.txt (RFC 9116) and on the Security page.

What to include

A clear description of the issue, the impact, and the steps required to reproduce it.
The affected URL, endpoint, or component, and the date/time you observed the behaviour.
Proof-of-concept artefacts where they help — screenshots, request/response captures, minimal scripts.
Your preferred name (or pseudonym) and a contact channel if you'd like acknowledgement.

Our commitments

We will acknowledge receipt within five business days.
We will provide a triage assessment within ten business days and keep you informed of remediation progress.
We will not pursue legal action against researchers who follow this policy in good faith, avoid privacy violations or service disruption, and give us reasonable time to remediate before any public disclosure.

Out of scope

Denial-of-service or volumetric testing against production infrastructure.
Social engineering of staff, customers, or supply-chain partners.
Physical attacks against premises or hardware.
Findings reachable only via accounts, credentials, or data you obtained without authorisation.

We do not currently operate a paid bug bounty. We may, at our discretion, recognise material contributions in a security acknowledgements page or in a defence supply-chain reference letter.

05Copyright & trademarks

"Argus", the Argus eye-mark, and "ARGUS HOLDINGS" are trademarks of ARGUS HOLDINGS — KLL1 LTD. The Inter-Parliamentary Alliance on China (IPAC) name and logo are referenced for descriptive purposes only and remain the property of their respective owners. All third-party parliamentary, governmental, and regulatory sources cited within Argus retain copyright and database rights with their original publishers; Argus aggregates and analyses these sources under the applicable open-data and fair-dealing regimes.

06Changes to these notices

We may update these notices to reflect changes in the law, our corporate structure, or our security practices. The "Last updated" date above will always reflect the most recent revision. For material changes affecting an active subscription, we will provide written notice in line with the Terms of Service.