Terms of service

These terms are between you and CISO Express, Inc. (“CISO Express”, “we”, “us”). By using ciso.express, creating a workspace, or connecting Sentinel to a workspace, you agree to them. If you are agreeing on behalf of an organisation, you confirm you have the authority to bind that organisation. If we have signed a master services agreement or data processing agreement with your organisation, that document controls wherever it conflicts with these terms.

1. What Sentinel is, and what it is not

Sentinel is a software agent that helps you organise and run a security and compliance program: it learns your organisational ownership model, tracks issues, requests evidence, escalates along a configured chain and produces reports.

Sentinel is not a substitute for professional judgement in every situation. It does not provide legal advice, it does not issue audit opinions or certifications, and it does not guarantee that you will pass an audit, avoid a breach or satisfy any particular regulator. Certification decisions belong to independent auditors and accreditation bodies. You remain responsible for the decisions you take based on the information Sentinel gives you.

2. Accounts, access and administration

• You need an authorised administrator to connect a workspace. That administrator is responsible for who else gets access.
• You are responsible for keeping credentials and integration tokens confidential and for activity under your workspace.
• You must have the right to share any directory, system or data you connect. Do not connect systems you are not authorised to share.
• We may suspend access if we reasonably believe there is a security risk, illegal use, or a risk to other customers, and we will tell you why as soon as we can.

3. Plans, billing and renewals

• Starter is $499 per month and Growth is $1,499 per month when billed monthly, per workspace. Enterprise pricing is agreed in an order form.
• Annual billing gives a discount equivalent to two months free and is charged upfront.
• Paid plans renew automatically at the end of each term until cancelled. You can cancel at any time from the console or by emailing us, and you keep access until the end of the paid term.
• Prices exclude taxes, which we add where the law requires. We may change prices with 30 days notice before your next renewal.
• Self-serve workspaces start free and move to a paid plan only when you explicitly choose one. We do not store card details before you subscribe.

4. Acceptable use

You agree not to:

• Use Sentinel to harass, surveil or evaluate employees beyond the security program purposes described in our documentation.
• Use it to monitor private communications that are outside the approved scope of the agent.
• Attempt to reverse engineer, resell or white-label the service without a written agreement.
• Upload malicious code, attempt to breach our systems, or use the service in a way that breaks the law.
• Use the service to build a competing product using our output.

5. Customer data and privacy

You own your data. We process it to provide the service and as described in our privacy policy and, where applicable, our data processing agreement. We do not use your content to train foundation models. You can export your evidence and issue history at any time and request deletion when the agreement ends; we delete workspace data within 7 days of a verified request unless we are required to hold it.

6. Our commitments

We will use commercially reasonable efforts to keep Sentinel available and to meet the support response times published for your plan. Enterprise customers may receive a written service level agreement; otherwise the service is provided without a contractual uptime guarantee. Planned maintenance is announced in advance in the product.

7. Intellectual property

We own the software, models, prompts, documentation, control mappings and the CISO Express name and marks. You own your data, your policies and your evidence. Nothing in these terms transfers ownership of either party’s property to the other.

8. Confidentiality

Each party will protect the other’s confidential information with at least the care it uses for its own, and will only use it to perform the agreement. This does not cover information that is public, independently developed, or required to be disclosed by law.

9. Warranties and disclaimers

Sentinel is provided “as is” and “as available”. To the maximum extent permitted by law we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement. We do not warrant that the service will be uninterrupted, error-free, or that it will identify every vulnerability, misconfiguration or compliance gap in your environment.

10. Limitation of liability

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, consequential or punitive damages, or for lost profits, revenue or data, even if advised of the possibility. Our total aggregate liability arising out of or related to the agreement is limited to the fees you paid us in the 12 months preceding the claim. Nothing in these terms limits liability that cannot be limited by law, including for gross negligence, wilful misconduct or fraud.

11. Term and termination

These terms apply while you use the service. Either party may terminate for material breach that is not cured within 30 days of written notice, or immediately if the other party becomes insolvent. On termination we will make your data available for export for 30 days, then delete it in line with our retention commitments.

12. Changes to these terms

We may update these terms for legal, regulatory or product reasons. For material changes we will give at least 14 days notice to customer administrators by email, and continued use after the effective date means you accept the update.

13. Governing law and contact

These terms are governed by the laws of the State of Delaware, United States, without regard to conflict of law rules, and the state and federal courts located in Delaware have exclusive jurisdiction, unless your order form says otherwise. Questions about these terms: hello@ciso.express.