Terms of Service

1. Acceptance of these terms

These Terms of Service (“Terms”) govern access to and use of the Sense Six Cyber client portal (the “Service”), operated by Sense Six Cyber (“Sense Six Cyber,” “we,” “us”). By signing in to or otherwise using the Service, you agree to these Terms. If you’re using the Service on behalf of an organization, you’re agreeing on that organization’s behalf, and confirming you have the authority to do so.

2. What the Service is

The Service is a client portal used to manage cybersecurity governance, risk, and compliance (“GRC”) work between Sense Six Cyber and its clients — tracking compliance checklist progress across security frameworks, maintaining a risk register, managing policy document review, and administering a third-party vendor risk program, including security questionnaires sent to a client’s own vendors.

3. Accounts and access

Accounts are created by Sense Six Cyber for its client contacts. You’re responsible for maintaining the confidentiality of your password and any second factor (2FA) enrolled on your account, and for all activity that occurs under it. Notify us immediately if you believe your account has been compromised. We may suspend or terminate access at our discretion, including if an engagement with your organization ends or if we reasonably believe these Terms have been violated.

4. Acceptable use

You agree not to:

• Access or attempt to access another client’s data, account, or portal instance
• Upload malicious files, or attempt to circumvent the Service’s file-scanning safeguards
• Use the Service to store or transmit content you don’t have the right to share
• Interfere with the normal operation of the Service, including through automated scraping or load
• Reverse-engineer or attempt to extract the Service’s source code, except as permitted by law

5. Your content and data

You (or your organization) retain ownership of the compliance data, risk register entries, vendor information, and documents you submit through the Service (“Client Content”). You grant Sense Six Cyber the right to host, process, and display Client Content solely to provide the Service and perform the GRC consulting engagement it supports. You’re responsible for ensuring you have the right to submit any Client Content, including any personal or third-party information it contains.

6. Third-party vendor questionnaires

As part of the vendor risk program, a client may request that one of its own vendors complete a security questionnaire through a unique, unauthenticated link. A vendor completing that questionnaire is providing information directly to the requesting client (via Sense Six Cyber, acting as the client’s processor for that purpose), not creating an account or agreeing to these Terms as a Service user.

7. Availability and changes

We aim to keep the Service available and reliable but don’t guarantee uninterrupted access. We may modify, suspend, or discontinue features of the Service, or update these Terms, at any time; material changes will be communicated to active client accounts. Continued use of the Service after a change constitutes acceptance of the updated Terms.

8. Disclaimer and limitation of liability

The Service is provided “as is.” While we take reasonable, industry-standard measures to secure the Service and the data within it, no system is completely secure, and we can’t guarantee the Service will be error-free or uninterrupted. To the fullest extent permitted by law, Sense Six Cyber isn’t liable for indirect, incidental, or consequential damages arising from use of the Service. Nothing in these Terms limits liability that can’t be limited under applicable law.

9. Termination

Either party may end the underlying engagement per its own agreement; we may suspend or terminate Service access at that point, or earlier for a genuine violation of these Terms. Sections that by their nature should survive termination (e.g. Sections 5, 8, and 10) will continue to apply.

10. Governing law

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. [Confirm the correct governing jurisdiction for Sense Six Cyber’s actual registered entity before treating this as final.]

11. Contact

Questions about these Terms can be directed to your Sense Six Cyber engagement contact, or to sensesixcyber@gmail.com.