Terms of Service

Effective October 2026An Agreement Between You and ProfytAI Pte. Ltd.

These terms are an agreement between you and ProfytAI Pte. Ltd., the Singapore company that provides AssessrLog. AssessrLog is a product and trading name of ProfytAI Pte. Ltd., not a separate legal entity. These terms govern your access to and use of the AssessrLog website, application, and related services. Please read them closely, especially the sections on self-assessment, fees and automatic renewal, the disclaimer of warranties, and the limitation of liability. By creating an account or using AssessrLog, you agree to these terms.

01Acceptance of These Terms

By creating an account, accessing, or using AssessrLog, you affirmatively accept these terms and our Privacy Policy, which is incorporated here by reference. If you do not agree, do not create an account and do not use the service.

Authority to bind your organization. If you use AssessrLog on behalf of a company or other organization, you represent that you are authorized to accept these terms for that organization. In that case, references to you mean both you and that organization, and both are bound by these terms.

You must be able to form a binding contract to use the service. The service is intended for business and professional use by United States defense suppliers, not for personal, family, or household use.

Electronic transactions. You agree to transact with us electronically. Your acceptance of these terms, your acknowledgements at checkout, and your payment authorization are given electronically, and you agree they have the same effect as a handwritten signature under the U.S. E-SIGN Act and applicable state law. You agree to receive these terms, disclosures, and notices electronically. You may withdraw this consent, or request a paper copy, through our Contact page, though doing so may mean we can no longer provide the service.

02Definitions

These terms use a few defined words. They have the following meanings.

ProfytAI, we, us, our. ProfytAI Pte. Ltd., a private company limited by shares incorporated in Singapore (UEN 202542653R), the provider of the service. AssessrLog is a product and trading name of ProfytAI Pte. Ltd.
Service. The AssessrLog website, application, software, and any related features we make available under these terms.
You, customer. The person or organization that accepts these terms and uses the service.
Authorized user. An individual you permit to access the service under your account, such as an employee or contractor.
Customer data. The scoping, determinations, narratives, evidence files you upload, and other content you enter into the service.
FCI. Federal Contract Information, as defined in FAR 52.204-21(a). This is the information CMMC Level 1 is designed to protect.
CUI. Controlled Unclassified Information, as defined in 32 CFR Part 2002. The service does not accept CUI.
Subscription. A paid plan for the service, purchased at checkout or under a written order, for a monthly or annual term.
Active assessment. An assessment in your account that is open for work. It is the billable unit the plan and its add-on price are counted in.
Written order. An ordering document that references these terms and is signed or accepted by both you and ProfytAI.
CMMC Status Date. The date the CMMC Status results are submitted to SPRS, or to the CMMC instantiation of eMASS as appropriate, as defined in 32 CFR § 170.4. The six-year artifact retention period runs from this date.
Affirmation. The statement of continuing compliance a senior official of your company submits in the Supplier Performance Risk System (SPRS) when the self-assessment is completed, and annually after that (32 CFR § 170.22).

03The Service

AssessrLog is a self-serve system of record that helps an FCI-only defense supplier organize and document its own CMMC Level 1 self-assessment. Within the service you can scope your Federal Contract Information, work the 59 assessment objectives across the 15 requirements at your own pace, record a determination for each objective with the basis and evidence behind it, upload the evidence files that support those determinations, keep an append-only record of that work, and assemble a package to support your annual affirmation.

FCI-only scope. AssessrLog is built for CMMC Level 1, which protects FCI. It does not accept CUI, and it is not built for CMMC Level 2 or any higher level. Do not use the service to manage a Level 2 assessment or to store CUI.

We may improve, change, or discontinue features of the service over time. We will use reasonable efforts to avoid disrupting your work when we do.

Maintenance windows. We may perform maintenance that makes the service temporarily unavailable, with or without prior notice. We will use reasonable efforts to schedule planned maintenance at times intended to minimize disruption to your use of the service. The service may be unavailable during maintenance windows, and we are not liable for any unavailability, delay, or loss of access resulting from scheduled or emergency maintenance.

04Self-Assessment, Not Certification

This is the most important section of these terms. Please read it carefully.

CMMC Level 1 is an annual self-assessment (32 CFR § 170.15). AssessrLog helps you organize and document that self-assessment. It does not perform the assessment for you, and it does not certify anyone.

What AssessrLog is not. AssessrLog is not a certifier, not an assessor, and not a CMMC Third-Party Assessment Organization (C3PAO). We do not audit your environment. We do not verify your evidence. We do not review or approve your determinations. AssessrLog and ProfytAI are not affiliated with, endorsed by, or acting on behalf of the U.S. Department of Defense or the CMMC accreditation body.

No guarantee of any outcome. AssessrLog does not guarantee that you will pass a self-assessment, meet the requirements of FAR 52.204-21, satisfy the corresponding NIST SP 800-171A assessment objectives, win or keep any contract, or achieve any particular result in SPRS. No feature, label, count, or generated document is a promise that you are compliant.

We do not make or submit your affirmation. AssessrLog does not file anything to SPRS on your behalf. It does not send your results to the Department of Defense or to any prime contractor. The affirmation is yours to make, through the official government system, by a senior official of your company.

You are solely responsible for your self-assessment. That responsibility is entirely yours, and it includes each of the following.

How you scope your environment and identify where your FCI lives.
The determination you record for each of the 59 objectives.
The accuracy, sufficiency, and truthfulness of the evidence you rely on.
Your decision that the assessment is complete and ready to affirm.
The annual affirmation your senior official submits in SPRS.

The affirmation carries legal weight. An affirmation of CMMC compliance is a formal statement to the U.S. Government. It must be truthful and accurate. A false affirmation can carry serious legal consequences for your company and for the official who signs it. You are responsible for making sure your affirmation is true before it is submitted. AssessrLog does not and cannot make that judgment for you.

Documents that AssessrLog generates are your work product, created to support your own self-assessment. They are not official Department of Defense forms, and they are not a certificate of compliance. At Level 1 a self-assessment does not produce a numeric score, and a plan of action and milestones (POA&M) is not permitted (32 CFR § 170.21(a)(1), 32 CFR § 170.24). Each objective is met, not met, or not applicable, and a person on your team confirms every determination.

05Accounts and Your Responsibilities

Your credentials. You are responsible for your account and for keeping your sign-in credentials secure. You are responsible for all activity that happens under your account. Tell us promptly if you believe your account has been accessed without your permission.

Authorized users. You may allow authorized users to access the service under your account. You are responsible for their compliance with these terms, and their acts and omissions are treated as your own.

Accurate information. Please give us accurate account information and keep it current.

You confirm every determination. A person on your team must review and confirm each determination. The service is a place to organize and record your judgment. It is not a substitute for that judgment.

06Evidence, FCI, and the CUI Boundary

Evidence you upload. The service is the system of record for your Level 1 self-assessment. You may upload the evidence artifacts that support your determinations, such as policies, configurations, screenshots, and exports, and those uploads are stored in the service, versioned and content-hashed. Evidence for a Level 1 assessment can contain Federal Contract Information, and the service is built to hold it.

Your no-CUI representation. The service requires you to attest at each upload that the file contains no CUI. Beyond that per-upload attestation, you represent and warrant that nothing you upload or enter into the service contains CUI, classified information, information controlled under the International Traffic in Arms Regulations or the Export Administration Regulations, or other material beyond the Level 1 FCI scope, and that you have the right to store everything you upload. Only you can know what your files contain, so responsibility for classifying them stays with you.

If out-of-scope material arrives anyway. If we detect or reasonably suspect that uploaded material contains CUI or other out-of-scope information, we may quarantine it, restrict access to it, or delete it, and we will notify you through the service or by email. You agree to cooperate with the removal of out-of-scope material, and you remain responsible for any obligations that arise from having introduced it.

07AI Features Never Decide

Parts of the service use artificial intelligence to provide grounded, cited guidance, for example while you scope your environment. That output is advisory background for your own judgment, and nothing more.

AI output is never a determination. It does not decide that an objective is met, not met, or not applicable, and the service will not record a determination without a person on your team confirming it.
AI output does not state that a specific asset, system, or organization of yours is in scope or out of scope, or that you are or are not compliant. Those judgments are yours.
AI output can be incomplete or wrong. Review anything you rely on. AI output is not legal, compliance, or professional advice.

If any AI output appears to make a compliance judgment for you, treat that as an error in the output, not as advice, and do not rely on it.

08Fees, Renewal, Payment, and Cancellation

8.1Fees

You will pay the fees displayed at checkout or stated in an applicable written order. As of the effective date shown above, the fees for the Practitioner plan are as follows.

Practitioner subscription. $149 per month, or $99 per month when billed annually at $1,188 for the year, paid in advance. The plan includes one active assessment.
Additional active assessment. $49 per month for each additional active assessment. The first month is charged in full when the assessment is added, and the assessment then bills monthly, as described in subclause 8.6.

The prices above are the current prices and may change as described in these terms. The fee, billing frequency, and amount that apply to your purchase are those displayed at checkout or stated in your written order, which govern if they differ from the prices listed here. Unless expressly stated otherwise, all fees are denominated in United States dollars and exclude applicable sales, use, withholding, value-added, and similar taxes. You are responsible for applicable taxes other than taxes imposed on ProfytAI’s net income.

8.2Payment Authorization

By providing a payment method and purchasing a recurring subscription, you expressly authorize ProfytAI and its payment processor to store or tokenize the payment credentials and to charge the applicable subscription fees, add-on fees, and taxes at the billing frequency disclosed before purchase. This authorization continues until cancellation becomes effective or the subscription otherwise terminates.

8.3Automatic Renewal

Unless expressly identified as non-renewing, each paid subscription automatically renews for successive periods equal to the then-current subscription term until cancelled. A monthly subscription renews monthly. An annual subscription renews every 12 months.

Before you submit payment, the service will disclose the amount due, the billing frequency, the automatic-renewal nature of the subscription, and the available cancellation method. We may send renewal reminders as required by applicable law or payment-network rules. For any subscription with a term of one year or longer, we will send an advance renewal reminder by email before the renewal charge, stating the amount, the renewal date, the plan, and a direct way to cancel. Failure to receive a courtesy reminder does not void a renewal you validly authorized, except where applicable law provides otherwise.

8.4Cancellation

You may disable automatic renewal at any time through the authenticated billing functionality in the service. You are not required to telephone us or to give 30 days’ advance written notice to stop a future renewal.

Cancellation takes effect at the end of the then-current paid subscription term. You keep full paid access to the service, including your main assessment and every paid active assessment, through the end of that term. When the paid term ends, access to the service ends, and export during the closure window is handled as described in the section on term and termination. Cancellation prevents future renewal charges but does not retroactively cancel a term already paid for, and fees already charged, including any upfront assessment fee, are not refunded, as described in subclauses 8.5 and 8.6.

8.5Refunds and Credits

Except where required by applicable law, expressly stated at checkout or in a written order, or expressly provided elsewhere in these terms, including the pro rata refund on termination for convenience in the section on term and termination, fees are prepaid, non-refundable, and non-creditable once charged. We do not provide prorated refunds or credits for unused portions of a subscription term, voluntary cancellation, reduced usage, or failure to use the service.

We may issue a refund or credit in our discretion, and doing so creates no obligation to do the same in another case. Nothing in this subsection limits rights that cannot lawfully be waived.

8.6Additional Assessments

How additional assessments are billed. The base subscription includes the number of active assessments stated at checkout. Every additional active assessment is billed monthly. Which subscription carries it depends on how your own plan is billed, because one subscription cannot mix a monthly charge with a yearly one.

Monthly plan. Additional assessments are quantities on your existing subscription. They are billed with it on its regular billing date, and adding one does not create a second subscription or a separate renewal date.
Annual plan. Your plan is billed yearly and additional assessments are billed monthly, so they cannot sit on the same subscription. The first additional assessment you add opens a separate monthly subscription, which then carries your additional assessments. That subscription has its own billing date, its own monthly renewal, and its own invoice. Your annual plan keeps its own renewal date, and it is not re-dated, prorated, or credited when you add or remove an assessment.

Adding an assessment. When you add an additional active assessment, one full month of the additional assessment fee stated in subclause 8.1, or the price otherwise disclosed to you before the change, is due and charged immediately. That upfront charge covers the first 30 days of active assessment service, and the assessment is provisioned only after the payment succeeds. Before you confirm, the service will display the amount due today and the billing date the assessment will follow.

Alignment with your billing date, on a monthly plan. On a monthly plan, your next invoice may include a one-time credit line, shown as “Credit for additional assessment days already paid”. It aligns the new assessment with the subscription’s regular billing date by removing the overlap between the upfront payment and the recurring charge for the same period. Exact credit amounts depend on the actual activation and billing timestamps, and taxes may change final amounts. From the following billing period, the assessment is simply part of the regular recurring invoice.

There is no such credit on an annual plan. On an annual plan no such credit appears and none is due. The upfront payment covers the assessment’s first month of service, and the assessment then bills on the separate monthly subscription described above. Your annual plan invoice is not adjusted or credited when you add an assessment.

The upfront fee is non-refundable. Consistent with subclause 8.5, the upfront assessment fee is non-refundable once charged. This applies even where you later cancel the subscription. Cancellation of the subscription does not refund any upfront assessment fee.

Deactivating an assessment. When you deactivate an additional active assessment, the period you have already paid for is not cut short unless you cancel your entire base subscription. The assessment remains fully usable until the end of the period already charged, and no partial-period refund or credit is issued. Before that date you may keep the assessment active at no further charge. The additional active assessment fee for that assessment stops from your next billing date, and when the period ends the deactivation takes effect. A deactivated assessment carries no fee. If you cancel the base subscription, access to the service ends at the end of the current billing cycle as described in subclause 8.4, even where an assessment’s paid period would otherwise have run longer.

When every additional assessment is deactivated, on an annual plan. The separate monthly subscription that carries your additional assessments ends at the end of the period already charged and is not charged again. Adding or activating an assessment later starts additional assessment billing again as described in this subclause.

A deactivated assessment is locked. Once the deactivation takes effect, the assessment cannot be opened, read, reported on, or exported until it is activated again. Nothing is deleted, and the assessment and its Integrity Ledger are kept unchanged for as long as you hold a subscription covering them. Because export is not available while an assessment is deactivated, you are responsible for downloading or exporting any records you need before the deactivation takes effect. The service offers that export before you confirm.

Activating a deactivated assessment. Before the deactivation takes effect, keeping the assessment active costs nothing. After it takes effect, activating the assessment again is charged as adding an assessment, at the then-current additional active assessment fee, which the service will disclose and you will confirm before the change takes effect. Where the service imposes limits on deactivating or activating assessments, those limits will be disclosed in the service and form part of these terms.

You cannot delete assessments yourself. The service does not offer deletion of an assessment. Deactivating it stops its fee. Deletion of your customer data is handled as described in the section on term and termination and in our Privacy Policy.

8.7Failed or Reversed Payments

If a payment is declined, reversed, disputed, or otherwise not received, we may retry the charge, request an alternate payment method, suspend paid functionality, or terminate the subscription after any notice required by law. You remain responsible for undisputed amounts properly incurred before suspension or termination.

The read-only hold. If a payment for your base subscription fails, your account is placed on a read-only hold for 7 days from the day the payment failed. During the hold you can open, read, report on, and export your records, but you cannot change them. We email your billing contact when the payment fails and again before the hold ends, and both name the date it ends. Paying the outstanding amount lifts the hold straight away. If it is not paid within those 7 days, access to the service ends, your additional assessments end, and the subscription ends as described in the section on term and termination.

A failed payment for additional assessments only. On an annual plan, additional assessments are carried on a separate monthly subscription. If a payment for that subscription alone fails, the additional assessments it carries are closed from the day the payment failed, and your base subscription and main assessment are not affected. For 7 days you can still export each of them. If the payment is not made within those 7 days, those additional assessments end and the subscription carrying them is cancelled.

8.8Price Changes

Except where a specific written pricing commitment applies, we may change subscription or add-on prices prospectively. A price increase will not alter a subscription term already paid, and will ordinarily take effect no earlier than the next renewal following the notice period stated in the applicable communication. We will provide advance notice of a material price increase where required by law or payment-network rules.

8.9Promotional, Trial, and Founding Offers

Any free trial, evaluation, introductory offer, discount, founding-access arrangement, or promotional pricing is governed by the specific terms disclosed at enrollment. If a trial does not automatically convert, you must affirmatively purchase a paid subscription to continue. If a trial does automatically convert, the amount and timing of the first charge, the recurring billing frequency, the cancellation method, and the automatic-renewal terms will be disclosed before enrollment, and we will send an advance reminder by email at least seven days before the first charge, in addition to any reminder required by law or payment-network rules.

09Customer Data, Ownership, and Retention

Your content is yours. As between you and us, you own your customer data. You keep all rights to the scoping, determinations, narratives, and evidence you upload.

License to operate the service. You grant us a limited, non-exclusive, worldwide license to host, store, process, transmit, and display your customer data, and to make backups of it, solely for the purpose of providing, securing, and improving the service for you. This license ends when your customer data is deleted from the service, except for backups kept for a limited period and for the retention described below.

Retention While You Subscribe. Under the CMMC rule, the artifacts used as evidence for a Level 1 self-assessment must be retained for six years from the CMMC Status Date (32 CFR § 170.15(c)(2)). That retention obligation belongs to your organization and not to us. We retain your assessment record and its evidence for as long as you hold a paid subscription covering it. An assessment you have deactivated stays covered by your subscription, although it carries no fee while it is deactivated. We do not undertake to retain your data for any fixed period beyond what this section and the section on term and termination state, and the six years in the rule is not a commitment by us to store anything for six years. When your subscription ends, export, the closure window, and what happens to your data after it are handled as described in the section on term and termination. You remain responsible for meeting your own record-keeping obligations.

Data processing. Our handling of personal data is described in our Privacy Policy and, where one is in place with your organization, in a data processing agreement.

10Acceptable Use and Restrictions

You agree to use AssessrLog only for its intended purpose and in line with applicable law. You agree not to do any of the following.

Use the service for any unlawful purpose or in violation of any applicable regulation.
Upload CUI, classified information, information controlled under the International Traffic in Arms Regulations or the Export Administration Regulations, or other material beyond the Level 1 FCI scope. The service holds your Level 1 assessment record and its evidence, which can include FCI, and nothing more sensitive than that.
Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code or underlying structure of the service, except to the limited extent this restriction is prohibited by law.
Copy, modify, or create derivative works of the service or its software.
Probe, scan, or attempt to disrupt or defeat the security or integrity of the service.
Access the service by any means other than the interface we provide, or use it to build or benchmark a competing product.
Scrape, harvest, or bulk-copy our public reference pages by automated means, or reproduce or redistribute that content as a dataset or a competing reference. Ordinary reading, linking, and good-faith search-engine and AI crawling that respects our robots directives are welcome.
Upload malware, or content you do not have the right to store.
Resell, sublicense, or misrepresent the service.

We may suspend or limit access when we reasonably need to protect the service, its users, or third parties, or to comply with law.

11Intellectual Property

The service, including its software, design, look and feel, text, and other content that we provide, belongs to ProfytAI and its licensors, and is protected by intellectual property laws. Except for the limited rights granted in these terms, we reserve all rights in and to the service.

We grant you a limited, non-exclusive, non-transferable, revocable right to access and use the service for your internal business purposes under these terms.

Feedback. If you send us feedback or suggestions, you grant us a perpetual, irrevocable, royalty-free license to use them to improve the service, with no obligation to you.

Regulatory reference content. Our public CMMC reference pages restate regulatory material that is US-government public domain, drawn from FAR 52.204-21, NIST SP 800-171A, and 32 CFR Part 170. We claim no ownership of that underlying regulation. We do own the original selection, arrangement, wording, and presentation of these pages as a compilation, and that compilation is protected. You may read, link to, and quote these pages with attribution. Reproducing the compilation, or a substantial part of it, for redistribution or to build a competing reference requires our written consent.

12Confidentiality

Each party may receive confidential information from the other in connection with the service. Confidential information includes non-public information that is marked confidential or that a reasonable person would understand to be confidential, including your customer data and our non-public product and security information.

The receiving party will use the disclosing party’s confidential information only to perform under these terms, will protect it with reasonable care, and will not disclose it except to its personnel and advisors who need it and are bound to keep it confidential. This does not apply to information that is public through no fault of the receiving party, that the receiving party already knew, that it lawfully received from a third party, or that it independently developed. A party may disclose confidential information when required by law, giving reasonable notice where allowed.

13Disclaimer of Warranties

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY.

To the fullest extent allowed by law, we disclaim the implied warranties of merchantability, fitness for a particular purpose, and non-infringement, and any warranty arising from a course of dealing or usage of trade. We do not warrant that the service will be uninterrupted, timely, secure, or error-free, or that it will meet your requirements.

No guarantee of a compliance outcome. AssessrLog helps you organize and document a self-assessment. It does not guarantee any assessment result, contract award, affirmation outcome, or finding of compliance with FAR 52.204-21, NIST SP 800-171, or any CMMC requirement. You rely on the service, and on your own determinations, at your own discretion and risk.

14Limitation of Liability

TO THE FULLEST EXTENT ALLOWED BY LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR ANY LOST PROFITS, LOST REVENUE, LOST DATA, OR LOST BUSINESS, ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE FULLEST EXTENT ALLOWED BY LAW, THE TOTAL LIABILITY OF PROFYTAI FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE OR THESE TERMS WILL NOT EXCEED THE AMOUNT YOU PAID US FOR THE SERVICE IN THE 12 MONTHS BEFORE THE EVENT GIVING RISE TO THE CLAIM.

Exceptions to these limits. The exclusion of damages and the liability cap above do not apply to a party’s breach of its confidentiality obligations, to ProfytAI’s gross negligence, willful misconduct, or fraud, to either party’s indemnification obligations, to amounts you owe for the service, or to any liability that cannot be limited or excluded under applicable law, including liability for death or personal injury.

These limits apply to all theories of liability, whether in contract, tort, or otherwise. Some jurisdictions do not allow certain limits, so parts of this section may not apply to you.

15Indemnification

You agree to defend, indemnify, and hold harmless ProfytAI and its officers, employees, and agents from and against claims, losses, liabilities, and expenses, including reasonable legal fees, that arise from your use of the service, from your customer data, from your self-assessment or affirmation, from a breach of your no-CUI representation in the section on evidence and the CUI boundary, or from your breach of these terms or of applicable law. We will notify you of the claim, allow you to control the defense, and cooperate reasonably.

Our indemnity to you. We will defend you against a third-party claim that the service, as provided by us and used as permitted, infringes that third party’s intellectual property rights, and we will pay the damages finally awarded against you or agreed by us in settlement of that claim. If the service becomes, or we believe it may become, the subject of such a claim, we may at our option obtain the right for you to keep using it, modify or replace it so it is non-infringing, or end the affected subscription and refund any prepaid, unused fees. This indemnity does not apply to a claim arising from your customer data, from combining the service with anything we did not provide, or from use of the service other than as permitted. You will promptly notify us of the claim, let us control its defense and settlement, and cooperate. This states our entire liability, and your exclusive remedy, for a third-party intellectual property claim.

16Term and Termination

These terms apply while you have an account or use the service.

Ending your subscription. You may stop future renewals at any time by cancelling online, as described in the section on fees, renewal, payment, and cancellation. Cancellation takes effect at the end of the then-current paid term. You may also close your account at any time.

Termination for cause. Either party may terminate for a material breach that is not cured within 30 days after written notice. We may suspend or terminate access immediately where needed to protect the service or comply with law, and may suspend or terminate for non-payment as described in the section on fees, renewal, payment, and cancellation, subject to any notice required by law.

Termination for convenience by us. We may terminate a paid subscription for convenience on written notice. The termination takes effect at the end of your then-current paid term, or earlier with a pro rata refund of prepaid fees for the unused period.

Data export. You may export your customer data from the service, including every assessment in your account, while your subscription is active and during the closure window described below.

The closure window. When your subscription ends, your account is closed to ordinary use, but we keep it and its records available to you for a limited window. The length of the window depends on how the subscription ended.

A subscription you paid for. If it ended because you cancelled, or otherwise at the end of a period you paid for, the window is 30 days from the day it ended.
A subscription that ended unpaid. If it ended because a payment was not received, the window is the 7 days that began on the day the payment failed. These are the same 7 days as the hold described in subclause 8.7, not 7 more.

During the window you can sign in and export each assessment. If you subscribe again during the window, the same account returns, with its assessments, evidence, and Integrity Ledger as you left them. Additional assessments end with the subscription that carried them and do not return. You may add them again, and each one is charged as adding an assessment. The date your window closes is shown in the service and in the email we send when your subscription ends, and it does not change after that.

After the closure window. When the window closes, your records can no longer be exported or restored through the service, and subscribing again starts a new account. We have no obligation to keep your customer data after the window closes or to provide it to you on request, and we may delete it from the service at any time after that. We may be required to keep data for longer by law, a legal hold, or a separate signed agreement.

Your six-year retention obligation is yours. The CMMC rule requires the artifacts used as evidence for a Level 1 self-assessment to be kept for six years from the CMMC Status Date (32 CFR § 170.15(c)(2)). That obligation belongs to your organization as the contractor, not to us. We are not responsible for maintaining your records for six years or for any other period the CMMC rule, a contract, or any other law requires of you. The retention and archive features of the service help you organize your records, but they do not replace your own copies, and we do not guarantee that any record will remain available to you for any period. Export your records, and store them where you can produce them for the full period, before your subscription ends. We are not liable for any claim, penalty, finding, loss of contract eligibility, or other loss that arises because records were not available to you or were not retained for any required period.

Survival. The sections on customer data and retention, intellectual property, confidentiality, disclaimer of warranties, limitation of liability, indemnification, governing law, and general terms survive termination, together with any payment obligations already incurred.

17Governing Law and Dispute Resolution

These terms, and any dispute or claim arising out of or in connection with them or the service, are governed by the laws of the Republic of Singapore, without regard to conflict of laws principles. The courts of Singapore have exclusive jurisdiction over any such dispute or claim.

Nothing in this section deprives you of the protection of mandatory consumer-protection or automatic-renewal laws of your place of business that cannot be excluded by agreement, and those laws continue to apply to you regardless of the governing law chosen above.

Before starting a formal proceeding, the parties will try in good faith to resolve the dispute informally by contacting each other. Any dispute that is not resolved that way is decided by the courts described above. Nothing in this section prevents either party from seeking urgent injunctive relief in any court of competent jurisdiction.

18Changes to These Terms

We may update these terms as the product and the law change. When a change is material we will update the date shown above and tell you through the service or by email. For a paid subscription, we will give advance notice of a material change by email, and the change takes effect for that subscription no earlier than its next renewal, unless the change is required by law, so you can cancel before it applies. Non-material changes take effect when posted, or on a later effective date if we give one. If you keep using the service after an update takes effect, that means you accept the updated terms. If you do not agree, stop using the service and close your account.

19General

The provider. The service is provided by ProfytAI Pte. Ltd., a private company limited by shares incorporated in Singapore, UEN 202542653R, with its registered office at 32 Pekin Street, #05-01, Singapore 048762. AssessrLog is a product and trading name of ProfytAI Pte. Ltd. and is not a separate legal entity.

Assignment. You may not assign these terms without our prior written consent. We may assign them to an affiliate or in connection with a merger, acquisition, or sale of assets. These terms bind and benefit the parties and their permitted successors.

Force majeure. Neither party is liable for a delay or failure to perform caused by events beyond its reasonable control, such as natural disasters, outages, or acts of government.

Severability. If any provision is held unenforceable, the rest of these terms stays in effect, and the unenforceable provision is limited to the minimum extent needed.

Entire agreement. These terms, the Privacy Policy, any data processing agreement in place between us and your organization, and any written order together are the entire agreement between you and us about the service. They replace any prior agreement on this subject. If those documents conflict, a written order controls, then the data processing agreement for the processing it covers, then these terms, then the Privacy Policy. A failure to enforce a provision is not a waiver of it.

Notices. We may give notice through the service or by email to the address on your account. You may send notice to us through our Contact page.

20Contact

Questions about these terms can be sent through our Contact page.