Terms and Conditions

1. Business use and eligibility

The Service is for business use only. By using it, you confirm that you are acting on behalf of a business or organization and not as a consumer, that you are at least 18 years old, and that you have authority to bind that organization to these Terms. "You" means that organization and its users.

2. What the Service is and is not

CMMC2Ready is a preparation tool that provides guidance, suggested policies, procedures and evidence descriptions, generated documents, an SSP, a POA&M, and score estimates for CMMC Level 2 / NIST SP 800-171 Rev. 2.

The Service:

• is not a Certified Third-Party Assessor Organization (C3PAO) and does not conduct, perform, or replace any assessment or certification.
• does not submit scores or documents to SPRS or to any government system or agency.
• does not provide legal, regulatory, or professional advice, and no advisory relationship is created by your use of it.
• does not guarantee any score, assessment result, certification, or contract award.

All suggested and generated content, including AI-generated content, is a starting point. You are solely responsible for reviewing it, confirming that it accurately reflects your environment and practices, deciding whether any objective or requirement is Met, and any statements or scores you submit to others. Requirements and regulations change, and you should confirm current requirements with your assessor or advisor.

3. Accounts and security

Each subscription includes one account. You are responsible for all activity under your account and for everyone you allow to use it. Provide accurate information, keep your credentials secure, and complete multi-factor authentication, which is required. Notify us promptly at the contact address below if you suspect unauthorized access. We may suspend access where needed to protect the Service or other users.

4. Your Content

You retain ownership of the information you enter or upload ("Your Content"). You grant us a limited, non-exclusive license to host, store, process, and display Your Content, including through our service providers and AI processing, solely to provide and support the Service to you. You are responsible for Your Content and for having the right to use it.

Prohibited content. Do not upload Controlled Unclassified Information (CUI), export-controlled data (such as ITAR-controlled technical data), classified information, or any content that you are not permitted to store with us. The Service is not designed for this data, and our servers are located in the Netherlands. You must redact such data from evidence files. You are responsible for any consequences of uploading it.

5. Acceptable use

You agree not to:

• violate any law or the rights of others.
• attempt to gain unauthorized access to the Service, other accounts, or our systems.
• interfere with or disrupt the Service, or introduce malicious code.
• scrape, copy, reverse engineer, or extract the Service's content or software, except as permitted by law.
• resell, sublicense, or provide the Service to third parties as a service of your own, or use it to build a competing product.
• use the Service to provide compliance services to other organizations without our written agreement.

6. Free trial, subscription, and billing

Free trial. New accounts receive a 14-day free trial. No credit card is required. During the trial you have full access to the Service.

After the trial. To keep using the Service's features after the trial, you must subscribe. If you do not, your account remains accessible and your data is retained (subject to section 8 of the Privacy Policy), but you will be unable to use the Service's features, including adding or editing content, generating documents, and exporting. Subscribing restores access.

Subscription and price. The subscription is $199 per month, plus applicable taxes. It is billed monthly in advance through Stripe and renews automatically each month until you cancel. By subscribing you authorize us and Stripe to charge your payment method each billing period. If a payment fails, we may suspend access to features until it is resolved.

Price changes. We may change the price on at least 30 days' notice, effective from your next billing period. If you do not agree, you may cancel before it takes effect.

Cancellation. You may cancel at any time. Cancelling turns off automatic renewal, so you will not be billed again. Your access continues until the end of the billing period you have already paid for. Cancellation does not entitle you to a refund of the current period or any remaining days. See our Refund Policy.

Billing questions. If you believe you have been charged incorrectly, contact us as described in the Refund Policy.

Export your data. Please export the documents you need before your subscription ends, because exporting is not available afterward unless you resubscribe.

7. Third-party services and listings

The Service relies on third-party providers (such as hosting, payments, and AI), and we are not responsible for their acts or omissions beyond what the law requires. We may list third-party auditors or service providers within the Service. Listings are for convenience only. We do not endorse, vouch for, or guarantee them, any agreement is solely between you and them, and we may receive referral compensation. We do not share your information with them.

8. Free tools

The SPRS Score Calculator and POA&M Template are provided for planning purposes only. Results are estimates and are provided "as is." A score you record in SPRS must reflect your actual implementation status.

9. Intellectual property

We and our licensors own the Service, including its software, design, templates, and suggested content, and all related rights. We grant you a limited, non-exclusive, non-transferable right to use the Service during your subscription or trial. You may edit and use the suggested content and the documents you generate for your organization's internal compliance purposes. Except as stated, no rights are granted to you. If you give us feedback, we may use it without obligation to you.

10. Disclaimer of warranties

To the fullest extent permitted by law, the Service is provided "as is" and "as available," without warranties of any kind, express or implied, including warranties of merchantability, fitness for a particular purpose, accuracy, non-infringement, and uninterrupted or error-free operation. We do not warrant that content will be accurate, complete, or sufficient to satisfy any assessor, regulator, or contracting authority.

11. Limitation of liability

To the fullest extent permitted by law, Phebsoft and its owners, officers, employees, and affiliates will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, contracts, data, or business, or for any failed or delayed assessment or certification, even if advised of the possibility. Our total aggregate liability for all claims arising out of or relating to the Service or these Terms will not exceed the amount you paid us in the three (3) months preceding the event giving rise to the claim. These limits apply regardless of the legal theory and do not exclude liability that cannot be excluded by law.

12. Indemnification

You will defend and indemnify Phebsoft and its owners, officers, and employees against claims, damages, and expenses (including reasonable attorneys' fees) arising from Your Content, your violation of these Terms or the law, or your use of the Service in a way not permitted by these Terms.

13. Suspension and termination

You may stop using the Service at any time. We may suspend or terminate your access if you breach these Terms, if you fail to pay, if required by law, or to protect the Service or others. Sections that by their nature should survive termination will survive, including sections 4, 9, 10, 11, 12, and 14.

14. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-law rules. You and we agree to the exclusive jurisdiction of the state and federal courts located in Delaware for any dispute arising from these Terms or the Service.

15. General

These Terms, together with the policies referenced above, are the entire agreement between us regarding the Service. If any provision is unenforceable, the rest remains in effect. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our consent; we may assign them in connection with a merger, acquisition, or sale of assets. Neither party is liable for delay caused by events beyond its reasonable control. We may send notices to the email address on your account.

16. Changes to these Terms

We may update these Terms from time to time. We will post the updated version with a new effective date and, for material changes, notify you by email or in the Service. Continued use after the effective date means you accept the changes.

17. Contact

Phebsoft LLC, 8 The Green, Dover, DE 19901, USA
Email: [email protected]