Source Secure terms of service
Version 1 · Last updated: 2026-11-08
These terms apply when you order Source Secure from Rotomal. They sit alongside our general terms, privacy policy and refund policy; where they differ, these product terms apply to Source Secure.
Who provides the service
Source Secure is provided by Rotomal, Israel ("we"). Contact: hello@rotomal.com.
The service
Source Secure is a one-time document preparation and audit-readiness service for a UK Known Consignor application. We assess your site against the CAA's published guide (CAP 1810), draft your security programme, procedures and record kits, and run a remote mock audit before you apply to the CAA.
What is included
- Readiness check: a 45-minute call with your site lead, a written gap list against CAP 1810 within 2 business days, staff roles mapped to training needs and a rough timeline
- A security programme drafted on the CAA Known Consignor template for your site, ready for signature
- A recruitment and training record kit and site security and handover procedures
- A remote mock audit with a written fix list and one follow-up check (two mock audits per site on Multi-site)
- Email help until the validation visit
- On Multi-site: up to three sites, review of a previous CAA audit report and a revalidation checklist for year two
- First draft of the application file within 10 business days of your questionnaire and call
Plans and prices
| Plan | Price | Covers |
|---|---|---|
| Readiness check | £79 one-time | Find out what stands between you and approval |
| Application file | £495 one-time | One site, prepared for the CAA visit |
| Multi-site | £895 one-time | Up to three sites, or a failed audit to fix |
One-time prices in GBP, paid after we confirm scope. CAA fees (£852 application, £852 yearly renewal per site, from the April 2026 Scheme of Charges), staff training and criminal record certificates are paid by you to those bodies and are not included. We do not train, background-check or vet your staff, and we do not attend the CAA audit. Founding customer pricing applies to early-access orders.
Prices are founding-customer prices for early-access orders. Taxes are added where the law requires.
Limits and extra use
Readiness check (£79): one call and one gap list for one site, credited against the Application file within 30 days. Application file (£495): one site, one mock audit and one follow-up check. Multi-site (£895): up to three sites, each with its own programme and two mock audits. Work beyond the cap of your plan is quoted by email before we start and is never charged without your written OK.
How an order starts
Submitting a request does not create a contract or a charge. A contract starts only when we confirm your order by email and payment has been agreed. We start within 10 business days of that confirmation.
Billing, cancellation and refunds
This is a one-time service, paid once after we confirm the scope by email. There is no subscription and nothing renews. If we cannot deliver what was agreed, you are refunded in full.
Refunds and cancellations also follow our refund policy. rotomal.com/refund-policy/
What is not included
- CAA application and renewal fees, staff training and criminal record certificates are paid by you to those bodies and are not included
- We do not train, background-check or vet your staff
- We do not attend the CAA audit or validation visit
- We do not submit the application to the CAA for you
- We cannot promise approval; it is decided by the Department for Transport on the CAA's recommendation
Your responsibilities
- Check every document we draft before you sign it, submit it or rely on it at your site
- Give us accurate and complete information about your site, staff, packing area and air shipments
- Have the right to share the site plans, procedures and staff information you send us
- Arrange staff training with a CAA-registered provider and carry out and keep the recruitment and background checks
- Sign the security programme through a legal representative or the person responsible for security, and submit the application yourself
- Put the procedures into practice at your site and keep them up to date, including the yearly revalidation
- You use the service only for lawful purposes and keep your account details safe.
Regulatory status
Source Secure prepares documents and audit readiness for the UK Known Consignor scheme. We are not the CAA or the Department for Transport, not a CAA-registered training provider or certificated instructor, not a vetting or background-check provider, and not a law firm; nothing we provide is legal advice. Your company reviews, signs and submits the application and security programme, and stays responsible toward the CAA for compliance at your site. Approval, audit outcomes and any suspension are decided by the CAA and the Department for Transport; their decisions are final and outside our control.
Outside services
- The CAA and the Department for Transport: application processing, visit dates, fees and the published guidance (CAP 1810, the security programme template) are set by them and may change
- CAA-registered training providers and certificated instructors you choose: training delays or quality are outside our control and can delay your readiness
- Shared Google Drive or SharePoint folder, if used: access problems there may delay document exchange
The service relies on systems run by others. We are not responsible for their availability, changes or decisions; when one of them changes, we adapt the service as soon as we reasonably can.
Your data
Data and files you send stay yours. We process them only to provide Source Secure, as described in our privacy policy, keep them no longer than the service needs, and delete them on request when the service ends.
Early access and errors
Source Secure is an early-access service, provided as is and as available. We work carefully, but output can contain errors. If you show us an error in our output, we correct it and redo the affected work at no charge; this is your main remedy for errors.
No professional advice
Source Secure is a software and data service. It is not legal, tax, customs, accounting, insurance or other professional advice. Confirm decisions that depend on such advice with a qualified professional.
Liability
- Our total liability for all claims about Source Secure is limited to the fees you paid us for Source Secure in the 12 months before the claim.
- We are not liable for indirect or consequential loss, lost profit or revenue, or for fines, penalties, duties, taxes, surcharges, interest or chargebacks imposed on you by an authority, carrier, marketplace, bank or other third party, even where our output was used.
- Nothing in these terms limits liability that the law does not allow to be limited, including for fraud, intent or gross negligence, death or personal injury, or the mandatory rights of consumers.
Suspension and ending the service
We may suspend the service if it is used unlawfully or against these terms. We may also stop offering Source Secure; if we do, we give paying customers at least 30 days' notice by email and refund any prepaid period not used.
Changes to these terms
We may update these terms. For existing customers, changes take effect 30 days after we email them and never change a price we have already confirmed to you. The date at the top shows the current version.
Law and disputes
These terms are governed by the laws of the State of Israel, and disputes go to the competent courts in Israel. If you are a consumer, you keep the protection of the mandatory laws of the country where you live and may also bring a claim there.
Contact
Questions about these terms: hello@rotomal.com.