Terms of Service

These terms govern your use of the Signal 9 Cyber Solutions LLC website and customer portal, and any engineering or managed services we provide. By creating an account or accepting a statement of work you agree to them. If you are agreeing on behalf of a company, you confirm you are authorized to bind it.

1. Services

We provide hands-on platform and security engineering, a managed detection and response service, and compliance work against NIST SP 800-53 and CMMC delivered in OSCAL formats. Engineering work is performed under a statement of work (SOW) that describes scope, deliverables and rates. Where a SOW conflicts with these terms, the SOW governs for that engagement.

All work is performed only on systems you own or are contractually authorized to permit testing on. You are responsible for obtaining that authorization, including from any third party whose infrastructure is in scope. We may decline or stop work where authorization is unclear.

2. Fees and payment

Services are billed as a recurring subscription, monthly or annually in advance. Engineering engagements agreed outside a subscription are billed on the terms set out in their statement of work. Invoices are payable on receipt unless the SOW states otherwise. Charges appear on card statements as SIGNALNINE.

Fees exclude applicable taxes. Amounts unpaid after 30 days may accrue interest at the lesser of 1.5% per month or the maximum the law allows, and we may suspend work on notice.

3. Term, renewal and cancellation

Subscriptions renew automatically at the end of each billing period until canceled. You may cancel at any time and cancellation takes effect at the end of the period already paid for; we do not refund partial periods. Refunds, and how engineering engagements end, are covered in our Cancellation and Refunds policy, which forms part of these terms.

4. Confidentiality and your data

Each party will protect the other's confidential information and use it only to perform or receive the services. Findings, reports and other deliverables we produce for you are yours on payment. We retain ownership of our pre-existing methods, tooling and know-how, including anything we develop generally rather than specifically for you.

Do not upload controlled unclassified information (CUI) to this portal. It is hosted on commercial infrastructure that is not authorized to store CUI. Where an engagement involves CUI, we will agree a separate handling arrangement in the SOW.

5. Sanctions and export control

You represent that you are not located in, organized under the laws of, or ordinarily resident in a jurisdiction subject to comprehensive sanctions, and that you are not a person or entity designated on any applicable restricted-party list. You will not use the services in breach of applicable sanctions or export control laws, and will not re-export or make our deliverables available where doing so would breach them. We may suspend or terminate immediately if we reasonably believe this clause has been breached.

6. Warranties and limitation of liability

We will perform the services with reasonable skill and care. Security work reduces risk; it cannot eliminate it, and no assessment, monitoring or compliance artifact is a guarantee that a system is secure, that an incident will be detected or prevented, or that an authorization or certification will be granted. Except as expressly stated, the services are provided without further warranties to the extent the law allows.

Neither party is liable for indirect or consequential loss, or for lost profits, revenue or data. Each party's total liability arising out of the services is limited to the fees paid or payable in the twelve months before the event giving rise to the claim. Nothing here limits liability that cannot be limited by law.

7. Accounts

You are responsible for activity under your account and for keeping credentials secure. An organization's owners and administrators control who may join it and what they can see, including all support requests raised by anyone in that organization. Tell us promptly if you believe an account has been compromised.

8. Governing law

These terms are governed by the laws of the State of New Mexico, without regard to conflict-of-law rules, and the courts of the State of New Mexico have exclusive jurisdiction over any dispute arising from them. If any provision is held unenforceable, the rest remains in force. These terms, together with the policies they reference and any statement of work, are the entire agreement between us.

9. Changes and contact

We may update these terms; material changes will be notified to account holders by email and the effective date above will change. Continued use after that date is acceptance. Questions go to contact@signalnine.org.