Terms of Service

1. What CMCGuardian Is — and Is Not

CMCGuardian is a documentation-preparation tool. It helps organizations prepare self-assessment documentation aligned to NIST SP 800-171 Rev. 2 and CMMC Level 2, including System Security Plans (SSPs), Plans of Action and Milestones (POA&Ms), and gap reports, and it calculates an SPRS score based on the information you provide.

CMCGuardian does not certify compliance. We are not a Certified Third-Party Assessment Organization (C3PAO), a registered practitioner, or an assessor. The documents and scores generated by the Service are drafts based entirely on the information you supply. They do not guarantee that you will pass any assessment, achieve any certification, or meet any regulatory or contractual obligation. You are solely responsible for reviewing, verifying, correcting, and validating all output before relying on it or submitting it to any party, including the Department of Defense or the Supplier Performance Risk System (SPRS).

2. No Controlled Unclassified Information (CUI)

The Service runs on commercial cloud infrastructure and is not authorized for the storage, processing, or transmission of Controlled Unclassified Information (CUI), Federal Contract Information (FCI), classified information, ITAR/EAR export-controlled technical data, or any similarly protected material.

You agree that you will not enter CUI or any other controlled or sensitive data into the Service. When answering questionnaires, you must describe your security practices, tools, and configurations — not the protected data itself. You are solely responsible for ensuring that the information you enter does not contain CUI or other restricted content. SharpAudit is not liable for any consequences arising from your submission of such material in violation of these Terms.

3. Eligibility and Accounts

You must be at least 18 years old and authorized to act on behalf of your organization to use the Service. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account. Notify us promptly of any unauthorized use.

4. Your Responsibilities

You are responsible for:

• The accuracy and completeness of all information you enter.
• Reviewing and validating all generated documents before use or submission.
• Ensuring your use of the Service complies with all applicable laws, regulations, and contractual obligations.
• Not entering CUI or other prohibited content (see Section 2).
• Independently verifying your actual compliance posture, including, where required, engaging a qualified assessor or C3PAO.

5. Subscriptions, Fees, and Payment

Paid plans are billed through our third-party payment processor. One-time purchases are charged at the time of purchase. Subscriptions renew automatically at the then-current rate until canceled. Fees are non-refundable except where required by law or expressly stated. We may change pricing with notice; changes apply to subsequent billing periods.

6. Intellectual Property

The Service, including its software, design, and content (excluding your inputs and generated documents), is owned by SharpAudit and protected by intellectual-property laws. You retain ownership of the information you input and the documents generated from it. You grant us a limited license to process your inputs solely to provide the Service.

7. Disclaimers

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE,” WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT GENERATED DOCUMENTS WILL BE ACCURATE, COMPLETE, OR SUFFICIENT FOR ANY ASSESSMENT, CERTIFICATION, OR LEGAL OR CONTRACTUAL REQUIREMENT.

8. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SHARPAUDIT WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, DATA, OR BUSINESS, ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY FOR ANY CLAIM WILL NOT EXCEED THE AMOUNT YOU PAID US IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

9. Indemnification

You agree to indemnify and hold harmless SharpAudit from any claims, damages, or expenses arising from your use of the Service, your violation of these Terms, your submission of prohibited content (including CUI), or your reliance on generated documents.

10. Termination

We may suspend or terminate your access for violation of these Terms or for any conduct that creates risk or legal exposure for us or others. You may cancel at any time through your account settings.

11. Changes to These Terms

We may update these Terms from time to time. Material changes will be communicated through the Service or by email. Continued use after changes take effect constitutes acceptance.

12. Governing Law

These Terms are governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-laws rules.

13. Contact

Questions about these Terms: support@cmcguardianapp.com — SharpAudit LLC.