← Back to Score110

Terms of Service

1. Acceptance of Terms

By creating an account, subscribing to a plan, or otherwise using Score110 (the "Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree, do not use the Service. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

2. Description of the Service

Score110 is a self-assessment tool that helps organizations evaluate their readiness against NIST SP 800-171 / CMMC Level 1–3 requirements. The Service provides:

• A guided self-assessment workflow across control families
• A readiness score and gap analysis
• Auto-generated draft documents, including gap reports (PDF), System Security Plans (SSP, DOCX), and policy templates (DOCX)

The Service is a self-assessment and drafting aid only. It is not:

• A CMMC certification, accreditation, or endorsement of any kind
• A substitute for review by your organization's ISSM, Authorizing Official, legal counsel, or a C3PAO (CMMC Third-Party Assessor Organization)
• A guarantee that your organization will pass a CMMC assessment, DIBCAC review, or any other government evaluation
• Legal, compliance, or cybersecurity consulting advice

All generated documents (SSPs, policy templates, gap reports) are drafts. You are solely responsible for reviewing, customizing, and obtaining appropriate internal and professional approval before relying on them for any assessment, certification, or contractual purpose.

3. Account Registration

You must provide accurate information when creating an account and are responsible for maintaining the confidentiality of your login credentials. You are responsible for all activity that occurs under your account.

4. Subscription Plans, Billing & Auto-Renewal

The Service is offered on a subscription basis (currently: Starter, Professional, and Expert plans), billed annually in advance. By subscribing, you authorize us to charge your payment method for the applicable subscription fee.

Subscriptions renew automatically at the end of each annual term at the then-current price, unless you cancel before the renewal date. You may cancel auto-renewal at any time through the account management portal; cancellation takes effect at the end of your current paid term.

5. Refund Policy

Once a subscription payment is processed, we do not provide refunds or credits for:

• Partial use of a subscription term
• Downgrades between plans
• Cancellation before the end of a paid term
• Dissatisfaction with the Service, its content, or its generated documents

By subscribing, you acknowledge and agree to this no-refund policy. This applies regardless of whether you cancel voluntarily, your account is terminated for a Terms violation, or you simply stop using the Service.

6. Cancellation & Termination

You may cancel your subscription at any time; cancellation stops future renewals but does not refund the current term (see Section 5). We may suspend or terminate your access to the Service if you violate these Terms, engage in fraudulent or abusive use, or fail to pay applicable fees.

7. Disclaimers

THE SERVICE, INCLUDING ALL SCORES, GAP REPORTS, SSPs, AND POLICY TEMPLATES, IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE'S SCORING, GUIDANCE, OR GENERATED DOCUMENTS ARE ACCURATE, COMPLETE, OR SUFFICIENT FOR ANY REGULATORY, CONTRACTUAL, OR CERTIFICATION PURPOSE. YOU ARE RESPONSIBLE FOR INDEPENDENTLY VERIFYING YOUR COMPLIANCE POSTURE WITH QUALIFIED PROFESSIONALS.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COMPANY SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, DATA, OR BUSINESS OPPORTUNITY, ARISING FROM YOUR USE OF THE SERVICE — INCLUDING, WITHOUT LIMITATION, ANY FAILED, DELAYED, OR UNSUCCESSFUL CMMC ASSESSMENT OR CERTIFICATION OUTCOME — AND REGARDLESS OF WHETHER SUCH DAMAGES ARISE FROM THE COMPANY'S OWN NEGLIGENCE, BREACH OF CONTRACT, BREACH OF WARRANTY, OR ANY OTHER LEGAL THEORY, EVEN IF THE COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE COMPANY'S TOTAL LIABILITY FOR ANY CLAIM ARISING FROM THESE TERMS OR THE SERVICE — INCLUDING ANY CLAIM BASED ON THE COMPANY'S OWN NEGLIGENCE — SHALL NOT EXCEED THE AMOUNT YOU PAID FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

Nothing in this Section 8 is intended to, and shall not, limit or exclude the Company's liability for gross negligence, willful misconduct, or fraud, or for any other liability that cannot be limited or excluded as a matter of applicable law.

9. Your Data & Content

You retain ownership of the assessment data, notes, and organizational information you enter into the Service ("Your Content"). You grant us a limited license to use Your Content solely to operate and provide the Service to you (e.g., generating your reports and documents).

Important — do not enter actual CUI or classified information into the Service. Score110 is a tool for describing and tracking your compliance posture (e.g., "MFA is enforced via Okta for all admin accounts"), not a system authorized to store Controlled Unclassified Information (CUI) itself. Do not paste real CUI, classified data, or other regulated content into notes fields, descriptions, or any other input.

We implement reasonable technical and administrative safeguards to protect Your Content, but you are responsible for ensuring nothing you enter into the Service violates your own data-handling obligations.

Data Breach Notification. If the Company discovers a breach of security resulting in unauthorized acquisition of unencrypted personal information within Your Content, the Company will notify affected customers without unreasonable delay and in accordance with applicable law, including the timelines and notice requirements of Indiana Code § 24-4.9 (Disclosure of Security Breach). Where the Company maintains such data on behalf of a customer that is the data owner, the Company will notify that customer promptly upon discovering that personal information was, or may reasonably be believed to have been, acquired by an unauthorized person, consistent with Ind. Code § 24-4.9-3-1. This Section does not expand the Company's obligations beyond those imposed by applicable law, and nothing in these Terms relieves you of your own breach-notification obligations as a data owner.

10. Intellectual Property

The Service, including its software, design, control library, and policy/SSP templates, is owned by the Company and protected by intellectual property laws. Subject to your compliance with these Terms, we grant you a limited, non-exclusive, non-transferable license to use the Service and the documents it generates for your own organization's internal compliance purposes.

11. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated via the Service or by email. Continued use of the Service after changes take effect constitutes acceptance of the revised Terms.

12. Governing Law

These Terms are governed by the laws of the State of Indiana, without regard to conflict-of-law principles, and any disputes shall be resolved in the state or federal courts located in Hancock County, Indiana.

13. Contact

Questions about these Terms or your subscription can be sent to S3C1969@outlook.com.