Terms of Service

1. Definitions

• "Platform" means the cmpli web application located at cmpli.app, including all associated APIs, tools, documentation, and services.
• "You" or "User" means any individual or entity that accesses or uses the Platform, including organization owners, members, and invited advisors.
• "Organization" means the business entity registered on the Platform, including its associated workspace, members, and data.
• "Content" means any data, text, assessments, reports, or other materials submitted to, generated by, or displayed on the Platform.
• "Guidance" means the security recommendations, assessments, risk scores, and informational content provided through the Platform.
• "Services" means all features and functionality provided through the Platform, including security assessments, threat intelligence feeds, AI-assisted analysis, and reporting.

2. Acceptance of Terms

By creating an account, accessing, or using the Platform, you represent that you are at least 18 years old, have the legal authority to bind your Organization to these Terms, and agree to comply with all applicable laws and regulations.

We reserve the right to modify these Terms at any time. Material changes will be communicated via email to the address associated with your account or through an in-app notification. Your continued use of the Platform after such notice constitutes acceptance of the modified Terms.

3. Account Registration and Security

To use the Platform, you must create an account by providing accurate and complete information, including your email address and a password, or by authenticating through an approved third-party identity provider (Google, Microsoft, or Apple).

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. You agree to:

• Notify us immediately of any unauthorized access to your account
• Not share your account credentials with any third party
• Enable multi-factor authentication when available (WebAuthn or TOTP)
• Keep all information provided during registration accurate and current

4. Description of Services

cmpli provides a cloud-based platform offering security guidance tailored for small and medium-sized businesses. Services include, but are not limited to:

• Security posture assessments and risk scoring
• Curated threat intelligence feeds and security news
• AI-assisted security analysis and recommendations
• Vendor and critical systems tracking
• Backup configuration monitoring
• Partner and advisor collaboration tools
• Exportable reports and assessment artifacts (PDF, DOCX, JSON)

We may modify, suspend, or discontinue any aspect of the Services at any time with reasonable notice.

5. Service Plans and Billing

The Platform offers Community (free) and Premium (paid) tiers. Features, usage limits, and AI processing allowances vary by plan. Premium subscriptions are billed through our payment processor, Stripe. By subscribing to a paid plan, you authorize recurring charges to your designated payment method.

You may cancel your subscription at any time. Cancellation takes effect at the end of the current billing period. No refunds are provided for partial billing periods unless required by applicable law.

6. Guidance Disclaimer

You should not rely solely on the Guidance provided by the Platform to make business, security, or compliance decisions. Always consult with qualified professionals for advice specific to your situation. Following the Guidance does not guarantee protection against security incidents, data breaches, regulatory penalties, or any other adverse outcomes.

7. User Responsibilities

You agree to use the Platform only for lawful purposes and in accordance with these Terms. You shall not:

• Use the Platform for any purpose that violates applicable law or regulation
• Attempt to gain unauthorized access to any portion of the Platform or its underlying infrastructure
• Reverse engineer, decompile, or disassemble any portion of the Platform
• Use automated tools (bots, scrapers, crawlers) to access the Platform without prior written authorization
• Upload malicious code, malware, or any content designed to disrupt the Platform
• Misrepresent your identity or affiliation with any person or entity
• Use the Platform to store or process data in violation of data protection laws applicable to you

8. Intellectual Property

8.1 Platform Ownership

The Platform, including all software, algorithms, user interface designs, documentation, threat intelligence curation methods, assessment frameworks, and content created by cmpli, is the exclusive property of cmpli LLC and is protected by copyright, trademark, trade secret, and other intellectual property laws.

8.2 Your Content

You retain ownership of all data and content you submit to the Platform. By submitting content, you grant cmpli a limited, non-exclusive license to process, store, and display your content solely for the purpose of providing the Services to you. This license terminates when you delete your content or close your account.

8.3 Feedback

Any feedback, suggestions, or ideas you voluntarily provide regarding the Platform may be used by cmpli without restriction or obligation to you.

9. Data and Privacy

Your use of the Platform is also governed by our Privacy Policy, which describes how we collect, use, store, and protect your data. The Privacy Policy is incorporated into these Terms by reference.

You are responsible for making sure that any data you submit to the Platform is collected and shared in compliance with applicable data protection laws, including obtaining any necessary consents from individuals whose data you may enter into the Platform (such as security contacts).

10. AI-Powered Features

Certain features of the Platform use artificial intelligence to analyze data, classify threats, and generate recommendations. AI-generated content is provided as a supplement to, not a replacement for, human judgment. You acknowledge that:

• AI outputs may contain inaccuracies or be incomplete
• AI processing is subject to daily usage limits based on your plan tier
• Your data may be transmitted to third-party AI providers for processing, subject to our Privacy Policy
• You should review and verify all AI-generated recommendations before acting on them

11. Third-Party Services and Integrations

The Platform integrates with third-party services including, but not limited to, identity providers (Google, Microsoft, Apple), payment processing (Stripe), error monitoring, and external security intelligence sources. Your use of these third-party services is subject to their respective terms and privacy policies. cmpli is not responsible for the availability, accuracy, or practices of third-party services.

12. Limitation of Liability

In no event shall our total liability to you exceed the greater of (a) the amounts you have paid to cmpli in the twelve (12) months preceding the claim, or (b) one hundred dollars ($100.00).

13. Disclaimer of Warranties

The Platform and all Services are provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory, including but not limited to warranties of merchantability, fitness for a particular purpose, title, and non-infringement. cmpli does not warrant that the Platform will be uninterrupted, error-free, secure, or free of viruses or other harmful components.

14. Indemnification

You agree to indemnify, defend, and hold harmless cmpli LLC and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) your use of the Platform; (b) your violation of these Terms; (c) your violation of any applicable law or regulation; or (d) any content you submit to the Platform.

15. Termination

Either party may terminate this agreement at any time. You may close your account through the Platform settings or by contacting us. We may suspend or terminate your access if you violate these Terms, engage in fraudulent activity, or if required by law.

Upon termination, your right to access the Platform ceases immediately. We will retain your data for a reasonable period to allow you to export it, after which it will be deleted in accordance with our Privacy Policy and data retention practices.

16. Dispute Resolution

Any dispute arising out of or relating to these Terms shall first be attempted to be resolved through good-faith negotiation between the parties for a period of thirty (30) days. If the dispute cannot be resolved through negotiation, it shall be resolved through binding arbitration administered under the rules of the American Arbitration Association, conducted in the state in which cmpli LLC is organized.

You agree that any dispute resolution proceeding will be conducted on an individual basis and not as part of a class, consolidated, or representative action.

17. Governing Law

These Terms shall be governed by and construed in accordance with the laws of the state in which cmpli LLC is organized, without regard to its conflict of law provisions.

18. Miscellaneous

• Severability: If any provision of these Terms is found to be unenforceable, the remaining provisions shall continue in full force and effect.
• Entire Agreement: These Terms, together with the Privacy Policy, constitute the entire agreement between you and cmpli regarding the Platform.
• Waiver: No failure or delay by cmpli in exercising any right shall constitute a waiver of that right.
• Assignment: You may not assign your rights under these Terms without our prior written consent. cmpli may assign its rights without restriction.
• Force Majeure: cmpli shall not be liable for any failure to perform due to causes beyond its reasonable control, including natural disasters, war, terrorism, cyberattacks on infrastructure providers, pandemics, or government actions.

19. Contact Information

For questions about these Terms, please contact:

cmpli LLC

Email: legal@cmpli.com

Website: https://cmpli.com