The deal,
without the fog.

1. These terms

These terms govern your use of the Complyology software and this website. Where you have signed a separate written agreement or order form with us, that agreement governs and these terms fill the gaps.

2. License

Complyology is proprietary software. Subject to payment and to these terms, we grant you a non-exclusive, non-transferable, revocable license to install and run the software for your own attestation work, or — on a firm tier — for attestation work you perform for your clients, for the term you have paid for.

You may not sublicense, resell, or offer the software to third parties as a hosted service; redistribute the release tarball outside your organization; or reverse-engineer it except where law says you may regardless of contract.

3. Your instance, your responsibility

The software runs on infrastructure you control, which means the operational duties are yours: securing the host, applying operating-system patches, backing up the database, renewing TLS certificates, and controlling who has accounts. We have no access to your instance and therefore cannot perform, monitor, or restore any of it.

You are responsible for the accuracy of what you enter. The software scores what you tell it and exports what you scored.

4. Your data

Everything in your instance belongs to you. We claim no license over your assessments, evidence, policies or exports, and we cannot access them. If your license lapses, your database and your exported files remain where they have always been — on your disk.

5. The audit-ready guarantee

We guarantee the exported attestation package on four specific grounds, stated in full on the pricing page: content fidelity to the DoD-CIO CMMC L2 Assessment Guide v2.13 and NIST SP 800-171 Rev 2; the C3PAO-standard workbook format; SPRS calculation matching the DoD Assessment Methodology v1.2.1; and submit-lock immutability of the audit trail.

If a C3PAO rejects your package on one of those grounds, we will re-run the attestation at no charge or refund your year in full, at your election. To claim, write to support@complyology.io with the C3PAO's written finding.

What the guarantee is not. It is not a guarantee that you will pass an assessment. Certification depends on the controls you have actually implemented, the evidence you can actually produce, and the judgment of an accredited C3PAO. Complyology is not a C3PAO, cannot certify anyone, and does not represent that using it makes an organization compliant.

6. Support

Support is provided by email during business hours, at the level attached to your tier. Because we cannot see your instance, support depends on the detail you can give us — with CUI redacted, as set out in the privacy policy.

7. Warranties

We warrant that the software will perform materially as described in our documentation. Beyond that, and to the fullest extent the law allows, the software is provided as is, without warranties of merchantability, fitness for a particular purpose, or non-infringement.

8. Liability

Neither party excludes liability for anything that cannot lawfully be excluded. Subject to that, we are not liable for indirect or consequential loss, lost profits, lost contracts, or lost data, and our total liability arising out of these terms is limited to the fees you paid us in the twelve months before the claim arose.

9. Term and termination

The license runs for the term you paid for and renews only by agreement. Either party may terminate for material breach that is not cured within 30 days of written notice. On termination your right to run the software ends; your data, being on your hardware, does not go anywhere.

10. Governing law

These terms are governed by the laws of [JURISDICTION — to be completed before publication], and the courts of [VENUE — to be completed before publication] have exclusive jurisdiction.

11. Changes

We may update these terms for future license periods. Changes do not apply retroactively to a term you have already paid for.