Terms of Service

The Service helps your organization prepare draftNIST SP 800-171 / CMMC Level 2 self-assessment documentation. Based on your questionnaire answers, it generates a draft System Security Plan (SSP), a draft Plan of Action & Milestones (POA&M), an SPRS self-assessment score calculated with the published DoD Assessment Methodology, and a prioritized gap checklist.

The Service is a drafting tool only. We are not an auditor, an assessor, a C3PAO, a Registered Provider Organization, or a law firm, and nothing the Service produces is legal, compliance, or professional advice. Every generated document is a draft that your organization must review — and, where required, have reviewed by a qualified professional — before relying on it or submitting it to anyone.

We do not certify compliance and we do not guarantee any assessment outcome. Using the Service does not mean your organization is, or will become, compliant with NIST SP 800-171, CMMC, or any contract requirement. Scores and documents are computed from your answers; if your answers are inaccurate or incomplete, the outputs will be too. You are solely responsible for the accuracy of anything you submit to a government system (including SPRS), a prime contractor, or an assessor.

The Service is deliberately built to hold information about your environment, never what is in it. You must not enter, upload, or otherwise submit:

• Controlled Unclassified Information (CUI) of any kind;
• contract documents, statements of work, or technical data;
• drawings, specifications, source code, or other work product;
• classified information, export-controlled data, or personal data of third parties.

The only file the Service accepts is an optional company logo image for document cover pages. There is no other upload capability, and free-text fields are for descriptions of your security practices only. If we discover prohibited content, we may delete it and may suspend the account. You are responsible for ensuring your users follow this rule.

You must provide accurate account information and keep your credentials secure; you are responsible for activity under your account. You may not share accounts beyond the seats your plan includes, probe or interfere with the Service's security, attempt to access another organization's data, scrape the Service, resell it, or use it to build a competing dataset. We may rate-limit or suspend usage that threatens the Service's integrity or our costs (for example, automated generation abuse).

Paid plans are billed through Stripe on a monthly or annual cycle, with a free trial period as described at checkout. Unless you cancel, subscriptions renew automatically at the then-current price. You can cancel any time through the billing portal; cancellation takes effect at the end of the current billing period, and we do not prorate or refund partial periods except where required by law. We may change prices with at least 30 days' notice, effective at your next renewal. The free Level 1 checker and score estimator are provided free of charge and may be changed or withdrawn at any time.

You own your questionnaire answers, company profile, and the documents the Service generates for you. You grant us a limited license to host and process that content solely to operate and improve the Service, consistent with our Privacy Policy. Generated documents are produced in part by a third-party AI model from your answers; we make no representation that they are free of errors or omissions, which is why every document carries a draft disclaimer. We own the Service itself, including its question bank, mappings, and software.

THE SERVICE AND ALL OUTPUTS ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, AND ACCURACY. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED OR ERROR-FREE, OR THAT GENERATED DOCUMENTS OR SCORES WILL MEET ANY ASSESSOR'S, PRIME CONTRACTOR'S, OR AGENCY'S REQUIREMENTS.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST CONTRACTS, OR FAILED ASSESSMENTS, ARISING FROM OR RELATED TO THE SERVICE. OUR TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS WILL NOT EXCEED THE AMOUNTS YOU PAID US IN THE TWELVE MONTHS BEFORE THE CLAIM AROSE (OR $100 IF YOU HAVE PAID NOTHING). Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you.

You may stop using the Service and delete your account at any time. We may suspend or terminate accounts that violate these Terms — including the prohibited-content rule in Section 3 — or that create security or legal risk. Sections 2 and 6–10 survive termination.

We may update these Terms; if a change is material, we will notify account holders by email or in-app notice before it takes effect, and continued use after that constitutes acceptance. These Terms are governed by the laws of the State of Alaska, USA, without regard to conflict-of-law rules. Questions about these Terms: support@clearpath171.com.