Billing takes place for each working day commenced. If you instruct us at 3:30 CET p.m., a full working day will be charged. Ransomware incidents that we have to support immediately require significantly more effort, especially at the beginning, and we have to provide staff immediately.
The minimum acceptance is always three days anyway, as experience shows that this is the absolute minimum of time that we need to get your systems operational again.
We generally maintain a “fair use” policy. For example, if we have to wait a few days because the ransom extortionists cannot be reached for ransom negotiations, we do not charge any working days. We therefore only calculate days on which there was really operational work.