Procurement pack

This page answers the questions that supplier forms and security questionnaires usually ask about a Breach Inc. organisation licence. Please use it to complete your own forms. Breach Inc. is a small business selling a fixed-price, self-service product, so we can't complete bespoke questionnaires or register on supplier portals. You can print this page, or save it as a PDF, for your records.

Last updated 19 October 2026.

Supplier

• Supplier: DVRMMR GAMING LTD, which publishes Breach Inc.
• Business type: private limited company, registered in England and Wales, company number 17527015.
• Registered office: see our Companies House record.
• Email: hello@breach-inc.com
• Website: breach-inc.com
• Reseller: the licence is sold through Onelink, Stripe's reseller, which takes the payment, charges any VAT or sales tax, and issues the receipt and invoice.
• VAT: charged by Onelink at checkout where it applies. Business buyers outside the UK can enter a VAT number.
• Subcontractors: none.
• Insurance: no professional indemnity or public liability insurance is held. The product is a download that runs on your own systems, with no services, visits or access to your systems.

The product

• What it is: an organisation licence for Breach Inc., an interactive data breach simulation for security, tech and business leaders.
• What's supplied: a SCORM 1.2 package for your learning management system, which also works as a website; a copy for your organisation, without the public version's donation and feedback links; and an editable session deck. Written instructions are included.
• How it's supplied: as downloads, once payment is received.
• Price: by organisation size: £95 for a registered charity or any part of the UK's National Health Service, of any size, perpetual; or, for one year, £195 for up to 250 staff, £795 for 250 to 5,000 staff, or £1,950 for over 5,000. Prices exclude VAT.
• Renewal: charity and NHS licences are perpetual and never need renewing. One-year licences don't renew automatically: to continue after the year, you place a new order. Organisation licences have no subscription or automatic charge.
• Training providers: a practitioner licence, for running sessions for clients, costs £1,000 a year for one named facilitator or £2,500 a year for up to five, and renews yearly until cancelled.
• Standards: how Breach Inc. maps to the NCSC Board Toolkit, the Cyber Governance Code of Practice, the CAF, the NHS DSPT, ISO/IEC 27001, UK GDPR and US and international board guidance, including what it doesn't cover.
• Terms: the licence agreement. It's the same for every organisation.
• Support: the product is self-service. There's no support contract, service level or account manager.

Paying

• How to order: online, from the licence page. Payment is taken at checkout by card, Apple Pay or Google Pay.
• Receipts and invoices: emailed by Onelink straight after payment, as PDFs. You can add a purchase order number at checkout.
• Pay-later invoices: not available. There's no option to pay later against an invoice or purchase order.

Information security

• Technology: static HTML, CSS and JavaScript. There's no server-side code, database, plug-in or installer.
• Hosting: you host it, on your learning platform or your own web servers. We don't host or have access to your copy, your systems or your data.
• Network connections: it loads nothing from other websites: no fonts, scripts, images, adverts or analytics. Its only outside links are ones the player chooses to click, which open in a new tab.
• Accounts and passwords: none. Players need no account.
• Cookies and tracking: none.
• Learning platform reporting: it uses the standard SCORM 1.2 interface to report "incomplete", "completed" and the session time to your own learning platform. It reports nothing else, not even the player's choices.
• Source code: the public game's code is published on GitHub, so your security team can review it. The licensed package adds a small settings file and the SCORM reporting script, both included as readable source.
• Business continuity: once downloaded, it runs entirely on your own systems, and keeps working whatever happens to Breach Inc. or breach-inc.com.

Data protection

• Personal data: the product collects no personal data. Players' progress is saved in their own browser's local storage, on their own device.
• Processor role: We don't process personal data on your behalf, so no data processing agreement is needed.
• Data location and transfers: not applicable. No data leaves your systems.
• Your order: payment details are handled by Stripe and Onelink, never by us. We keep the order details, such as names and email addresses, only to supply and account for the licence. See the privacy page.

Accessibility

The game is built with standard HTML, and it can be played with a keyboard alone. It announces each new scene to screen readers, works at phone widths, and turns off its main animations when the "reduce motion" setting is on. It hasn't had a formal accessibility audit. Its effects include text appearing gradually, the screen darkening and colour changes, and it includes descriptions of stress and burnout.

Policies

• Modern slavery: Breach Inc. is below the turnover threshold for a modern slavery statement. It has no supply chain beyond the creator's own work.
• Anti-bribery: Breach Inc. doesn't offer or accept bribes or inducements, and doesn't pay commissions for introductions.
• Conflicts of interest: none known. If you believe there is one, please say so before you order.