Legal Notice
Disclosure pursuant to § 5 ECG (Austrian E-Commerce Act) · Last updated: July 2026
We publish under our own name, at a real street address, because coordinated disclosure only works if the institute doing it can be found, verified, and held to account — the same standard we hold everyone we audit to. Most of what follows on this page exists because the law requires it. A few lines exist because we think a legal notice page shouldn't feel like the one part of a website that nobody proofread.
Operator
Research Focus Institute — Interdisciplinary Research Facility for Open Sciences
Short name: RFI-IRFOS
Elisabethinergasse 25/10, 8020 Graz, Austria
E-Mail: rfi.irfos@gmail.com
Website: rfi-irfos.com
What We Actually Do
In case a legal notice page is the first page you ever land on: RFI-IRFOS is a regulated not-for-profit research institute working in security research, GDPR-focused root level code analysis of Android applications, and open-source AI/ternary-computing research. We are not a marketing agency, not a law firm, and not a bug-bounty platform, whatever a stray search result might have implied.
Register & Trade Data
Legal form: Registered association (regulated not-for-profit)
ZVR number (Austrian Central Register of Associations): 1015608684
GISA number (Trade Register): 39261441
GLN: 9110038490191
VAT ID (UID): ATU83405245
Tax number: 68 696/8736
Trade description: Services in automatic data processing and information technology
Governing trade law: Austrian Trade Regulation Act (Gewerbeordnung, GewO) · WKO member (Austrian Federal Economic Chamber)
Competent authority pursuant to § 5(1)(5) ECG: Magistrate of the City of Graz
Trade registered: 19 March 2026
All figures above are checkable against the public register, not just asserted here. That is deliberate: a legal notice that can't survive being cross-referenced against its own registry is not much of a legal notice.
Trade-Law Management
Simeon-Andreas Johann Manfred Kepp, responsible under Austrian trade law (GewO) for the licensed activity listed above.
Notice Pursuant to EU Regulation 524/2013 (ODR)
The European Commission provides a platform for online dispute resolution: ec.europa.eu/consumers/odr.
We are neither obligated nor willing to participate in dispute resolution proceedings before a consumer arbitration board, as we contract exclusively with businesses. This is not us dodging accountability, it is the accurate legal consequence of running a B2B-only operation (see our Terms).
Disclaimer
The content of this website has been prepared with the greatest care. No liability is assumed for its accuracy, completeness, or currency. Where we link externally, for example to a regulator, a standard, or a piece of coverage about one of our disclosures, we do not control and are not responsible for that external content once you leave rfi-irfos.com.
Third-Party Names & Trademarks
Company names, product names, app names, and trademarks referenced anywhere on this site, in our security research, or in our public disclosure ledger belong to their respective owners. Their appearance here documents that we examined their software; it does not imply endorsement, partnership, or affiliation in either direction.
Copyright
All content created by RFI-IRFOS is subject to Austrian copyright law. Reproduction or use beyond the limits of copyright law requires written consent. Quoting our disclosure findings with attribution, in the ordinary course of reporting on them, is fine, that is rather the point of publishing them.
Governing Law
The law of the Republic of Austria and the law of the European Union apply.
External Profiles
We publish our research and code openly. You can find us at:
- OSF: osf.io/rzvyg — all research publications and preprints.
- GitHub: github.com/rfi-irfos — open-source tools, models, and audit repositories.
- LinkedIn: RFI-IRFOS — institute presence and announcements.
