Digital Product License and Terms of Use - Version 1.0

Digital Product License

and Terms of Use

Version 1.0 | Effective October 7, 2026

These terms are between Cibernetica Consulting, LLC ("Cibernética," "we," or "us") and the individual or organization purchasing the licensed digital products ("you" or "Customer"). Read these terms before purchasing. Keep this copy with your order confirmation.

1. Scope and agreement

These terms cover Cibernética downloadable workbooks, templates and accompanying documentation identified in your order (the "Products"), including toolkit bundles. They cover only the Products purchased, not our entire catalog, future products or separately sold services. Product descriptions identify the included files, capacities, supported environments and any additional entitlements.

You agree by selecting an agreement control linked to these terms, or by placing an order through a checkout that clearly informs you that completing the order constitutes agreement to these terms. If purchasing for an organization, you represent that you have authority to accept for that organization. Do not complete a purchase if you do not agree. Merely receiving an updated file does not impose a new license on a prior purchase.

Professional services, managed services, subscriptions and custom engagements require their applicable order and separate service agreement. This license does not establish a service engagement. A separately signed agreement expressly addressing Product licensing controls where it conflicts with these terms. Mandatory legal rights are preserved.

2. Single-organization license

Subject to payment and these terms, we grant a non-exclusive, non-transferable license to use the purchased Products for one Customer organization's internal assessment, risk management, planning, reporting and related business activities. Unless the order expressly provides otherwise, affiliates, subsidiaries, client organizations and other separate legal entities require separate licenses.

You may create reasonable internal working and backup copies, enter your information, customize permitted inputs, and generate customer-specific reports. Your employees and contractors may use copies solely on your behalf and under appropriate confidentiality and use restrictions. You are responsible for their authorized use. A contractor's access does not license the contractor to reuse the Products for other clients.

For a one-time purchase, use of the delivered edition may continue without a recurring license fee while you comply with these terms. This does not promise future updates, perpetual download hosting or ongoing support. Keep your own downloaded backup. Bundle purchases license each included Product to the same Customer organization; they do not create separate resale or transfer rights.

Sharing and ownership

3. Reports, advisers and vendor questionnaires

You may share customer-specific reports and completed results with authorized management, auditors, your independent CPA firm, regulators and professional advisers for your organization's business purposes, subject to applicable confidentiality, privacy and third-party rights. Where necessary for that work, you may give those advisers controlled access to your completed working copy, but not a reusable template license for other organizations.

Vendor Self-Assessment permission. If your purchase includes the Vendor Risk Management Toolkit, you may send the Vendor Self-Assessment workbook, its User Guide and this license to prospective or existing vendors solely to complete and return assessments for your organization. Inform recipients of this limited purpose. Recipients may retain their completed return as a business record, but may not reuse or distribute the template to assess vendors for unrelated organizations. This permission does not extend to distributing the internal Vendor Risk Register or other templates.

4. Restrictions

Except for the permissions above, a separate written license, or rights that applicable law does not allow us to restrict, you may not:

Resell, sublicense, rent, publish or distribute the Products, including modified template copies, to other organizations.
Use Cibernética's protected original formulas, presentation or documentation to create or market a competing commercial template or assessment product.
Place template files or documentation in a public repository, marketplace or broadly accessible shared library.
Remove ownership, copyright, attribution or version notices, or misrepresent modified files as an unmodified Cibernética release.
Present the Products or their results as certification, regulatory approval, independent assurance or endorsement by a framework owner.

Using a Product to serve multiple client organizations, white-label distribution and commercial template redistribution require separate written permission. Sharing customer-specific results as permitted in section 3 does not itself grant recipients a template license.

5. Ownership and external frameworks

Cibernética and its licensors retain rights in their original Product content, design and documentation. You retain your rights in customer-entered information, decisions, evidence references and customer-specific reports; we acquire no ownership of that information through this license. Vendor and other third-party information remains subject to the relevant owners' rights and your agreements with them.

External standards, framework text, identifiers and trademarks remain subject to their applicable rights and terms. We do not claim ownership of public-domain material or restrict rights independently available in it. A purchase does not supply any separately required third-party license. NIST, CISA, AICPA and other referenced organizations do not endorse or certify these Products. SOC 2 is an AICPA trademark. Preserve applicable source notices and attribution.

Responsible use and limitations

6. Your information and responsibilities

These Products are customer-controlled files. We do not receive working-file contents merely because you use them. Your storage provider, collaboration platform or separately enabled add-ins may process data under their own terms. Information sent to us for support is handled under our published Privacy Policy and any applicable service agreement.

You are responsible for scope, accurate inputs, evidence review, applicability judgments, approved settings, authorized decisions, access controls, lawful processing, backups and record retention. Keep sensitive evidence in controlled storage and use references where appropriate. Do not enter passwords, authentication secrets or unnecessary personal information. Worksheet protection is an accidental-edit safeguard, not encryption or an approval system.

Use qualified reviewers, preserve fixed lists and formulas, and validate outputs before relying on or sharing them. Follow the Product's instructions and supported-software requirements. Changes to formulas, structures, validation or thresholds can affect results; we are not responsible for errors caused by your modifications or unsupported environments.

7. Decision-support tools, not assurance

The Products support assessment, planning and management review. They do not perform an audit, SOC 2 examination, penetration test, legal analysis or independent verification of evidence. They do not issue an audit opinion, certify compliance, guarantee readiness, establish vendor suitability, ensure an examination outcome or prevent adverse events.

Scores, sensitivity adjustments, priorities and suggested improvements are planning conventions, not regulator- or framework-owner passing standards. Qualitative ratings are not measured event probabilities or financial-loss estimates. Framework mapping does not establish applicability, implementation or compliance. A recorded approval does not authenticate the approver's authority. Users remain responsible for decisions, control implementation and follow-up.

Products do not synchronize with separate workbooks, inspect linked evidence, route approvals or provide automatic updates unless the purchased Product expressly includes that function. The Products and guidance are not legal, regulatory, accounting, insurance or other professional advice.

8. Warranty limitations

To the maximum extent permitted by applicable law, the Products are provided "as is" and "as available." We disclaim implied warranties, including merchantability, fitness for a particular purpose, title and non-infringement. We do not warrant uninterrupted or error-free operation, compatibility with unsupported software, or satisfaction of a particular law, contract, audit or certification requirement. Nothing in this section excludes a mandatory warranty or overrides an express written commitment in your order.

9. Liability limitations

To the maximum extent permitted by applicable law, Cibernética will not be liable for indirect, incidental, special, exemplary, consequential or punitive damages, or loss of profits, revenue, business opportunity, goodwill, data or security arising from the Products. Our aggregate liability related to the affected Products will not exceed the amount you paid for them during the twelve months before the event giving rise to the claim. If purchased in a bundle, the cap uses the amount paid for that bundle during that period, not a separate cap for each component.

These exclusions and limits apply only where legally permitted. They do not exclude liability or remedies that applicable law does not allow us to exclude or limit, including any applicable mandatory consumer protections.

Support and license administration

10. Delivery, refunds, support and updates

Products are digital downloads; no physical item is shipped. Access instructions are supplied through the purchase channel following successful payment. Contact us if delivery fails or a file is inaccessible or defective.

Any refund or cancellation policy disclosed at purchase applies subject to mandatory law. This license does not create a blanket "no refunds" rule or waive non-excludable cancellation, refund or digital-content rights. Where immediate digital delivery requires separate consent or acknowledgment under applicable law, acceptance of this license alone is not a substitute for it.

Support, updates, customization, implementation and training are included only when stated in your order or a separate agreement. We do not promise lifetime support, automatic framework updates or future editions. Microsoft Excel and other required third-party software are not supplied under this license.

11. Duration and termination

The license remains in effect unless terminated under these terms. It terminates for a material breach that is not cured where notice or an opportunity to cure is required by applicable law or an applicable signed agreement. Upon termination, stop unlicensed use and distribution and delete unlicensed template copies.

You and authorized vendor recipients may retain customer-specific completed records required by applicable law or documented retention obligations, with appropriate access restrictions. Retention does not authorize new template use, redistribution or use for another organization. Ownership, restrictions, liability limitations and provisions intended to survive continue to apply where legally permitted.

12. Versions and general provisions

The license version presented and accepted with your purchase governs that purchase unless you separately agree to a change. Publishing a revised license or replacing a download does not retroactively change previously agreed rights. Keep your order confirmation and the applicable license version.

For purchases governed by this version, this shared license replaces the separate product-license documents in the delivered package. References in accompanying guides to the Product's "License and Terms" mean this shared document. Prior purchases remain governed by their applicable agreement; the receipt of a replacement package alone does not change that agreement.

You may not assign the license without our written consent except where mandatory law provides otherwise. If a provision is unenforceable, the remaining provisions continue to the extent permitted by law. Failure to enforce a provision is not a waiver. These terms and the applicable order and signed licensing agreements govern the Products. Nothing here requires arbitration or waives non-excludable rights or access to remedies available under applicable law.

13. Contact and document control

Licensor: Cibernetica Consulting, LLC

Website: ciberneticausa.com

Licensing and support: contact@ciberneticausa.com, or the contact channel identified in your purchase confirmation.

Document: Cibernética Digital Product License and Terms of Use, version 1.0, effective October 7, 2026. Applies to purchased digital Products as described in section 1.