Terms of Service.

DBIT Defense provides cybersecurity readiness and compliance support to defense contractors — including gap assessments, System Security Plan and POA&M development, remediation support, and assessment preparation. We are not a C3PAO and do not perform formal CMMC certification assessments.

The website and free-tier client portal are provided as an informational and self-service tool. Paid engagement work is performed under a separate scoping document and statement of work.

• You are responsible for the accuracy of the information you submit and for protecting access to your account.
• Client portal accounts are authenticated through one-time email magic links. You agree not to share these links and to notify us promptly if you believe your email has been compromised.
• We may suspend or terminate accounts that are used to abuse the service, attempt to access other clients' data, or violate applicable law.
• Free-tier accounts may be deleted after 18 months of inactivity following at least 14 days' written notice.

You agree not to:

• Reverse-engineer, scrape, or attempt to interfere with the operation of the site or portal beyond ordinary use.
• Upload content that infringes intellectual property, contains malware, or violates applicable export-control law.
• Use the AI document-generation feature to produce content intended to deceive an assessor, evade a contractual requirement, or otherwise misrepresent the state of your environment.
• Submit Controlled Unclassified Information (CUI) to the free-tier portal unless you have explicitly arranged that with us in a signed services agreement.

The site's design, written content, code, and trade dress are the property of DBIT Defense unless otherwise marked. Public-domain photographs displayed on the site are works of the United States Federal Government (17 U.S.C. § 105) and are credited where they appear.

You retain ownership of all content you upload to the client portal. By uploading, you grant DBIT Defense a limited, non-exclusive license to store, display, process, and analyze that content solely to deliver the service to you.

The "Generate with AI" feature inside the client portal uses a third-party large language model to draft policy and SSP-section text based on the engagement profile you provide. The output is:

• A draft, not a final document. Every AI draft must be reviewed and adapted by a qualified human before being relied upon for an assessment.
• Not legal advice. AI-generated text is not a substitute for review by a licensed attorney or qualified compliance professional.
• Provided "as is." DBIT Defense is not responsible for any decision made solely on the basis of unreviewed AI output.

The site and free-tier portal are provided on an "as is" and "as available" basis, without warranty of any kind, express or implied. We make no warranty that the site will be uninterrupted, error-free, or that any defect will be corrected.

Information about CMMC, NIST SP 800-171, DFARS clauses, and the CMMC phased rollout is provided for informational purposes only. Always consult the cited authoritative source (linked throughout the site) before relying on any deadline, control text, or program detail in a contractual or assessment context.

To the maximum extent permitted by law, DBIT Defense will not be liable for any indirect, incidental, special, consequential, or punitive damages arising out of or related to your use of the site or free-tier portal. Our total cumulative liability to you for any claim arising out of or related to the site or free-tier portal will not exceed one hundred United States dollars ($100).

For paid engagements, a separate limitation-of-liability provision in the executed services agreement applies.

These terms are governed by the laws of the State of Florida, without regard to its conflict-of-law provisions. Any dispute arising from these terms or your use of the site will be resolved in the state or federal courts located in Palm Beach County, Florida.

We may update these terms periodically. Material changes will be posted on this page with an updated "Effective" date at least 30 days in advance.

Questions about these terms? Email legal@dbitdefense.com or use the form on our contact section.