Terms of Service
Plain-English summary first, the details below.
The short version: you may only submit infrastructure you own or are authorized to manage; we scan it non-destructively and give you expert advice; we're advisors, not your corporate officers; monthly plans cancel anytime; and each side's liability is capped at what you paid us in the last 12 months.
1. The service
InstantCISO and InstantCIO provide subscription-based technology and security advisory services: automated non-destructive assessment of infrastructure you register and verify, review and recommendations by qualified professionals, and optional incident notification and response services.
2. Your authorization to us
By registering an asset you represent that you own it or are authorized by its owner to submit it for assessment, and you grant us authorization to perform non-destructive scanning of it as described in our scanning authorization policy. You must remove assets you cease to control.
3. Advisory nature; no officer relationship
Our experts provide professional advice and recommendations. Unless separately agreed in writing, they are not officers, directors, employees, or fiduciaries of your company, and final decisions about your infrastructure remain yours. Descriptions such as "your CISO" or "your CIO" describe the service role, not a corporate appointment.
4. No guarantee of security
No assessment can find every weakness and no monitoring can prevent every incident. We commit to the diligence, frequency, and response times of your plan — not to the impossibility of a breach.
5. Subscriptions, billing, cancellation
Plans bill monthly or annually in advance (USD on .com properties, CAD on .ca properties, plus applicable taxes). Monthly plans cancel anytime, effective at the end of the billing period. Cross-brand bundle discounts apply while both subscriptions remain active. Bundled DigitalRiskWatch subscriptions lapse with the plan that includes them. Incident-response engagements are billed per the rate card in effect when a case is opened; the subscriber discount is determined by subscription status at case-open time.
6. Fair use
"Unlimited" advisory tiers are subject to fair professional use: they cover your organization's ordinary needs, not resale, not serving your own clients, and not staff augmentation.
7. Confidentiality & data
Findings about your infrastructure are yours and are treated as confidential. Our handling of personal information is described in the privacy policy.
8. Liability
Each party's aggregate liability under these terms is capped at the amounts you paid us in the twelve months preceding the claim. Neither party is liable for indirect or consequential damages. Nothing in these terms excludes liability that cannot lawfully be excluded.
9. Governing law
Contracts on .ca properties are governed by the laws of Ontario and the federal laws of Canada; contracts on .com properties are governed by the laws of the State of Delaware, USA — in each case without regard to conflict-of-law rules.
10. Changes
We may update these terms with 30 days' notice for material changes; continued use after the effective date constitutes acceptance.