Terms
Last updated 26 October 2026. Distro is operated by Tural Salahov, trading as flowrish, Münsingerstraße 4, 13597 Berlin, Germany. Using this site means these terms apply to you.
What an audit is
An audit is one person using a product hands-on and writing down what they found: what they tested, what held up, and what didn't. Every published listing carries that person's findings, the date they tested, and their name. It is a dated record of one practitioner's experience and their honest opinion of it.
What an audit is not
It is not a security certification. We are not an accredited auditor. SOC 2, ISO 27001, GDPR and similar labels shown on a listing are the vendor's own claims. Where an audit examined the evidence behind one, the findings say so and say what was seen; where it did not, the label stands as an unverified claim by the vendor.
It is not a guarantee, a warranty, or a recommendation. A product working for one tester on one date is not a promise it will work for you. Nothing here is advice about whether to buy.
It is not a statement about the company. Findings describe software as tested, not the character, solvency, or conduct of the people who made it.
It goes out of date. Software changes weekly. An audit describes the product on the date shown and nothing after it.
For builders
The fee pays for the work, not the outcome. You pay once for an audit — €39 while we're small, €199 later. That buys a person's time testing your product and writing what they found. It does not buy placement, ranking, a favourable result, or the right to edit the findings. There is no refund for a result you dislike; the work was still done.
Findings are published as written, including the unflattering parts. That is the entire product. You may correct a factual error — a wrong region, a feature that does exist — and we will fix it and say we did. You may not have an opinion removed because it is inconvenient.
We may decline to list you. If a product does not hold up, we say so and it does not go in the catalog. If we decline before doing the work, you are not charged.
You can leave. Ask and we will delist you. Findings already published are removed from the catalog; we do not keep a public record of a product that has left.
You confirm you may list it. By submitting a product you confirm you own it or are authorised to represent it.
For buyers
We are not a party to what you buy. If you purchase software from a builder listed here, that contract is between you and them. We do not sell it, do not take your payment for it, and do not warrant it.
The decision stays yours. Read the findings, including what they say is weak, and do your own evaluation. An audit is a head start on diligence, not a substitute for it.
Independent advice and implementation are different services. A neutral practitioner is paid for advice regardless of your purchase decision. A builder or engineer proposing paid work has a commercial interest in that work. Distro also earns a disclosed fee when agreed implementation work is funded. An implementer cannot serve as your independent adviser for the same decision.
Custom work: pilot offer and cancellation
Submitting a request creates no charge or project commitment. We assess the problem and confirm a willing, suitable builder or engineer first. A separate written quote and both parties' agreement are required before paid work starts. Distro then provides a Stripe payment page for its own service fee. The provider invoices its agreed share directly; Distro does not hold or pay out the provider's money.
The pilot introduction costs €49 for an assessed business brief and a qualified introduction meeting. It is credited against Distro's 10% fee on the first agreed implementation scope, capped at €1,000. The percentage applies to implementation labour, excluding tax, hardware and pass-through subscriptions. Standard pilot implementation scopes cover €500–€10,000 in labour. Smaller requests can be assessed for a simpler alternative; larger projects require a separate assessment and quote before any fee commitment.
The fee is included in the implementation quote, not added on top. For €2,000.00 of implementation labour, Distro receives €200.00 and the provider receives €1,800.00. The buyer pays €49.00 for the introduction and €1,951.00 toward implementation. Taxes and any agreed pass-through costs are itemized before payment. Distro absorbs standard payment processing on its fee. The provider's invoice and any payment costs must be included in the agreed quote.
- If the assessed brief and introduction meeting are not both delivered, the €49 is refunded. Cancellation before that meeting has no Distro cancellation penalty.
- Once both are delivered, the €49 is earned even if you decide against implementation. It remains a credit against the first scope's earned project fee; unused credit is not a separate cash refund.
- Implementation uses separately agreed, funded milestones and acceptance criteria. Unstarted work is refundable. Completed work and unavoidable third-party costs are payable only as agreed in writing. A scope change needs a new agreement.
- Distro returns its project-fee share on refunded implementation work, retaining the €49 for a delivered brief and introduction. If no implementation is retained from the €2,000.00 example, the buyer receives €1,951.00 back and the earned €49 remains with Distro. If no introduction was delivered either, the full amount is refundable. Distro refunds its fee through Stripe; the provider refunds its separately invoiced portion.
- The provider's net for accepted work is preserved. Where a cancelled project earns less than €49 in project fees, the unused introduction credit remains earned, so the total retained cost can exceed accepted labour by that unused credit. The written quote must show this before payment.
- Provider cancellation before delivery means a refund of undelivered work. For disputed work, review the agreed acceptance criteria with both parties before deciding any refund. No automatic payout or dispute protection is promised.
This is a one-off, scope-specific service, with no exclusivity or ongoing commission on unrelated future work. A provider can decline a request. The provider is responsible for agreed implementation; Distro is responsible for its assessment and introduction. Mandatory statutory rights remain unaffected.
Liability
The site and its findings are provided as they are, without warranty of any kind. To the fullest extent the law allows, Tural Salahov, trading as flowrish, is not liable for indirect or consequential loss — lost profit, lost data, business interruption — arising from your use of this site or a decision you made after reading it. Where liability cannot be excluded, it is limited to the amount you paid us in the twelve months before the claim. Nothing here excludes liability for fraud, for death or personal injury caused by negligence, or for anything else that cannot lawfully be excluded.
Corrections
If something published here is factually wrong, write to founder@distro.market and say what is wrong and what is correct. We will check it, fix what needs fixing, and note that the listing was corrected. This applies whether you are the builder, a buyer, or a stranger who spotted it.
Acceptable use
The catalog is readable by people and by AI agents, deliberately — see /llms.txt. Read it, cite it, link to it. Don't scrape it to republish it as your own directory, and don't misrepresent a listing's findings when you quote them.
Changes and governing law
These terms may change; the date at the top says when they last did. Distro is a business-to-business service and is not intended for consumers; where mandatory local law gives you rights that these terms cannot override, those rights still apply.
See also the legal notice and privacy page.