Terms of Service
Effective Date: August 24, 2026
Last Updated: August 28, 2026
Acceptance of Terms
These Terms of Service ("Terms") govern your access to and use of the CyberSafe.Now security compliance platform (the "Service"). By subscribing to or using the Service, you agree to be bound by these Terms.
For pre-release inquiries, contact us at agent@cybersafe.now.
Description of Service
CyberSafe.Now provides a security compliance platform for small to medium-sized businesses (typically under 40 people) using Google Workspace, Microsoft 365, Amazon Web Services (AWS), and Dropbox. The Service includes:
- A dedicated security dashboard hosted in an isolated virtual machine environment.
- Automated security checks of your identity administration, sharing configurations, device posture, and email routing.
- A customized remediation plan based on your environment, compliance goals, and selected service tier (Essentials Plan, Monitor Plan, or Assure Plan).
- Guided walkthroughs for completing security tasks.
- Exposure scanning of your public domains (when authorized).
- Email notifications for security findings, plan items, and compliance tasks.
- Shareable compliance reports in PDF format.
- Optional compliance evidence archive with 3-year retention (included on Assure Plan; available as add-on on Essentials and Monitor plans).
Eligibility and Account
You must be authorized to bind your organization to these Terms. You are responsible for maintaining the confidentiality of your dashboard credentials and for all activity that occurs under your account.
Subscription and Billing
Subscription Plans
CyberSafe.Now offers three subscription plans with different feature sets and pricing:
- Essentials Plan: $149/month base + $5/month per team member (6-month records retention by default)
- Monitor Plan: $249/month base + $9/month per team member (6-month records retention by default)
- Assure Plan: $399/month base + $13/month per team member (includes 3-year records retention and compliance evidence archive at no extra charge)
Full plan details are available on our Pricing page.
Billing
- Your first monthly charge is 60 days after signup, then monthly on that date.
- Pricing is calculated as a base fee plus a per-team-member fee based on your team size.
- You authorize CyberSafe.Now to charge your designated payment method on a recurring monthly basis.
- All fees are in U.S. dollars and are non-refundable except as required by law.
Optional Add-Ons (Essentials and Monitor Plans)
- Compliance Evidence Archive: $49/month (included on Assure Plan at no extra charge)
- 3-Year Records Retention: $10/month (included on Assure Plan at no extra charge)
Cancellation
- You may cancel your subscription at any time through your dashboard Billing settings.
- Cancellation takes effect at the end of your current billing period.
- Upon cancellation, your dedicated security dashboard and all associated data will be de-provisioned.
- Evidence archives (if purchased) remain available for download during your subscription and for a brief grace period after cancellation.
Platform Connectors and Permissions
Read-Only Access
The Service uses read-only connectors to access your Google Workspace, Microsoft 365, AWS, and Dropbox environments. We never modify your settings, create users, delete files, or make configuration changes on your behalf.
OAuth and Access Keys
- Google Workspace, Microsoft 365, and Dropbox: Use OAuth authorization flows. You may revoke our access at any time through your platform's admin console.
- AWS: Uses IAM access keys that you provide. You are responsible for creating read-only IAM credentials and may revoke or rotate them at any time.
Endpoint Agent
- The endpoint agent is included with every subscription to verify device posture (encryption, firewall, OS patch level).
- The agent runs on Windows and macOS with minimal privileges and does not monitor user activity, file contents, or browsing history.
- You enroll devices using a unique enrollment token generated for your customer account.
Your Responsibilities
You agree to:
- Provide accurate information during onboarding and maintain accurate account and environment profile information.
- Designate a program owner (Qualified Individual, Security Official, or equivalent) responsible for your security program.
- Authorize external scanning only for domains you own and have the right to scan.
- Comply with applicable laws and regulations when using the Service.
- Not attempt to reverse engineer, decompile, or access the Service in unauthorized ways.
- Not use the Service to store, transmit, or process data that you do not have the right to use or share.
Scope of Compliance Support
The Service is a tool to help you implement and document a security program. It is not a guarantee of compliance or security.
- Our automated checks identify common misconfigurations and risks based on generally accepted practices. They do not cover every possible security control or compliance requirement.
- Compliance reports are based on the checks we perform and the information you provide. You are responsible for reviewing reports for accuracy and completeness before sharing them with third parties.
- Controls marked as "guided" require manual implementation. We provide instructions but do not perform the work on your behalf.
- API-connected controls are verified by our connectors, but you remain responsible for maintaining those settings and promptly addressing findings.
- The Service does not replace professional legal, accounting, or cybersecurity advisory services. For specific compliance questions, consult your broker, auditor, legal counsel, or a qualified cybersecurity professional.
Limitations on Monitoring and Detection
The Service performs checks at scheduled intervals (typically daily for connector syncs, monthly for reports). We do not provide:
- Real-time threat detection or incident response.
- Endpoint detection and response (EDR) capabilities (though the Service accommodates EDR you already use).
- Monitoring of user activity, file contents, email content, or network traffic.
- Phishing detection or email security filtering (controls address routing and alert configuration, not content inspection).
- Full coverage of AWS or Dropbox security APIs (AWS and Dropbox coverage focuses on identity, admin, and sharing checks; not all platform features are monitored).
Intellectual Property
- CyberSafe.Now retains all rights to the Service, including our software, dashboard interface, control catalog, policy templates, guidance content, and report designs.
- You retain all rights to your data (company information, environment profile, security findings, reports).
- You may download and share compliance reports and evidence archives generated by the Service.
- Policy templates and guidance content provided by the Service may be adapted and used within your organization.
Data Privacy and Security
Our handling of your information is governed by our Privacy Policy. By using the Service, you consent to the data practices described there.
Warranties and Disclaimers
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED.
We do not warrant that:
- The Service will be uninterrupted, error-free, or completely secure.
- Our checks will detect all security risks or compliance gaps.
- Compliance reports will satisfy every third-party requirement.
- Guidance content or policy templates are suitable for your specific legal or regulatory obligations.
Limitation of Liability
TO THE FULLEST EXTENT PERMITTED BY LAW, CYBERSAFE.NOW SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING FROM OR RELATED TO YOUR USE OF THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
IN NO EVENT SHALL OUR TOTAL LIABILITY TO YOU EXCEED THE AMOUNT YOU PAID US IN THE 12 MONTHS PRECEDING THE CLAIM.
Indemnification
You agree to indemnify and hold harmless CyberSafe.Now from any claims, damages, or expenses (including reasonable attorneys' fees) arising from your use of the Service, your violation of these Terms, or your violation of any rights of a third party.
Termination
We may suspend or terminate your access to the Service if:
- You breach these Terms.
- Your payment method is declined or your account is past due.
- We determine that continued provision of the Service poses a security or legal risk.
Upon termination:
- Your subscription will be canceled.
- Your dedicated security dashboard and all associated data will be de-provisioned.
- You will no longer have access to reports, evidence archives, or security findings.
- Sections of these Terms that by their nature should survive termination (Intellectual Property, Warranties and Disclaimers, Limitation of Liability, Indemnification, Governing Law) will remain in effect.
Changes to Terms
We may update these Terms from time to time. When we make material changes, we will update the "Last Updated" date and provide notice through your dashboard or via email to your program owner. Your continued use of the Service after changes take effect constitutes acceptance of the updated Terms.
Governing Law and Disputes
These Terms are governed by the laws of the United States and the state in which CyberSafe.Now operates, without regard to conflict of law principles. Any disputes arising from these Terms or the Service will be resolved through binding arbitration or in the courts of that jurisdiction, as applicable.
Entire Agreement
These Terms, together with our Privacy Policy and any subscription-specific terms on your Billing page, constitute the entire agreement between you and CyberSafe.Now regarding the Service.
Contact Us
If you have questions about these Terms, contact us at:
CyberSafe.Now
Pre-Release Contact:
agent@cybersafe.now