Terms of service

A hosted service that scores the compliance posture of Microsoft SQL Server instances from data produced by our read-only collector, which you run yourself. Quick Assessment is a one-off engagement. Pilot is a 60-day engagement. The Sovereign licence is an annual, per-instance right to use the hosted service, sold after an assessment or pilot. Anything labelled preview in the product is provided as-is, is not part of what you paid for, and may change or be withdrawn.

Our framework mappings and scores are advisory. They are not an audit, an attestation, a certification, or legal advice, and they do not make you compliant with NIST, CJIS, DISA STIG, SOX, HIPAA or any other regime. You remain responsible for your own configurations, changes and compliance decisions.

• Keep account credentials secure and tell us promptly if they are compromised.
• Run the collector only on systems you are authorised to scan, with a least-privilege read-only login.
• Do not attempt to access another customer's data, or probe the service without written permission.
• Do not resell, sublicense or white-label the service without a written agreement.

Fees are stated in US dollars and are due in advance: by card at checkout, or within 30 days of invoice where we have agreed invoicing or a purchase order. Founding-customer rates apply only to the offer and period stated at the time of purchase. Applicable taxes, including Arizona transaction privilege tax where due, are added. Annual licences run for twelve months from activation and do not renew automatically unless the order form says so.

You license a number of instances. If you need more, buy more; we will tell you when you approach the limit. Registering more instances than you have licensed may be blocked.

You own the data your collector sends. We use it only to operate the service for you, as described on our trust page and privacy notice. We do not sell it and we do not use it to train models.

We aim for continuous availability and support during the hours on our support page, but the service is provided without an uptime guarantee unless a service-level exhibit is signed with your order form.

The service is provided "as is" to the fullest extent permitted by law. Our total liability arising out of or relating to the service is limited to the fees you paid us in the twelve months before the event giving rise to the claim. Neither party is liable for indirect, incidental or consequential loss, or lost profits or data, except that nothing limits liability for fraud, death or personal injury, or wilful misconduct.

Either party may terminate for material breach not cured within 30 days of written notice. We may suspend access immediately for non-payment, or for use that threatens the security of the service. On termination you may request an export of your data for 30 days, after which it is deleted.

These terms are governed by the laws of the State of Arizona, United States, and the courts of Maricopa County, Arizona have exclusive jurisdiction, without regard to conflict of law rules.

We may update these terms; material changes take effect on your next renewal or purchase. Questions go to rhoylle@rhoylle.com.