Terms of Service

Last updated: pending board-supplied text.

1. Acceptance

By creating an account or using the Compliance Engine service ("Service"), you ("Customer") agree to these Terms of Service ("Terms"). If you do not agree, do not use the Service.

2. Service description

The Service helps Customer perform a self-assessment against CMMC Level 2 / NIST SP 800-171 Rev 2 and produces related artifacts including an SPRS score, System Security Plan (SSP), and Plan of Action & Milestones (POA&M).

3. Not legal or regulatory advice

The Service is a self-assessment tool. It is not a substitute for advice from a CMMC Third-Party Assessment Organization (C3PAO), legal counsel, or qualified compliance professional. Customer is solely responsible for the accuracy and completeness of submissions to the U.S. Department of Defense or any other party.

4. Account; eligibility

Customer must provide accurate registration information and is responsible for all activity under its account.

5. Subscription, trial, and billing

The Service is offered on a monthly subscription at the price listed on the pricing page, currently $499 USD per month. A 14-day free trial is provided. Customer authorizes recurring charges via Stripe upon trial conversion or first SSP export, whichever occurs earlier. Customer may cancel at any time via the Stripe customer portal; cancellation takes effect at the end of the current billing period.

6. Customer data; confidentiality

Customer retains all rights to data it uploads. Provider stores Customer data on tenant-isolated infrastructure and will not access it except as needed to operate the Service or as required by law.

7. Acceptable use

Customer will not reverse engineer the Service, attempt to access another tenant's data, or use the Service to violate law or any third party's rights.

8. Warranty disclaimer

THE SERVICE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. PROVIDER DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

9. Limitation of liability

PROVIDER'S TOTAL LIABILITY UNDER THESE TERMS WILL NOT EXCEED THE AMOUNTS PAID BY CUSTOMER IN THE 12 MONTHS PRECEDING THE CLAIM. PROVIDER WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES.

10. Termination

Either party may terminate at any time. Upon termination, Customer's right to use the Service ends; Customer data will be available for export for 30 days, after which it may be deleted.

11. Governing law

To be set by board-supplied final text.

12. Contact

Send notices to: support@compliance-engine.example (placeholder).