By accessing or using the website and services of Penacity (“Company,” “we,” “our,” or “us”), you agree to be bound by these Terms of Service (“Terms”). If you do not agree, you must not use our website or services.
These Terms apply to all visitors, clients, and users interacting with our services as described in our Privacy Policy.
2. Services Overview
Penacity provides cybersecurity, compliance, and assessment-related services, including services performed in its capacity as a Certified Third-Party Assessor Organization (C3PAO).
All services are subject to separate contractual agreements where applicable. These Terms govern general use of our website and baseline service interactions.
3. Eligibility
You must be at least 18 years old and legally capable of entering into binding agreements to use our services. By using our services, you represent that you meet these requirements.
4. Use of Website
You agree to use our website only for lawful purposes. You must not:
* Attempt to gain unauthorized access to systems or data
* Interfere with the operation or security of the website
* Use the site to transmit harmful, unlawful, or deceptive content
* Engage in scraping, automated data extraction, or misuse of content
We reserve the right to restrict or terminate access for violations.
5. Intellectual Property
All content on our website—including text, branding, logos, and materials—is owned by or licensed to Penacity and protected by applicable intellectual property laws.
You may not copy, reproduce, distribute, or create derivative works without prior written permission.
6. Client Responsibilities
When engaging our services, clients agree to:
* Provide accurate and complete information
* Ensure they have the legal right to share any data provided to us
* Comply with applicable laws and regulations
* Maintain responsibility for their internal systems and security posture
We are not responsible for issues arising from inaccurate or incomplete client-provided information.
7. Data Handling and Privacy
Your use of our services is also governed by our Privacy Policy, which explains how we collect, use, and safeguard data.
By using our services, you acknowledge and agree to those data practices.
8. Third-Party Services
We may rely on third-party providers (e.g., cloud hosting, analytics tools) to support operations.
We are not responsible for the practices or content of third-party services not under our control.
9. Disclaimers
Our services and website are provided on an “as-is” and “as-available” basis.
While we follow recognized cybersecurity standards (including NIST SP 800-171 and Cyber Essentials), we do not guarantee:
* That services will be uninterrupted or error-free
* That all vulnerabilities or risks will be identified
* Absolute security of any system or data
No system or assessment can eliminate all cybersecurity risk.
10. Limitation of Liability
To the fullest extent permitted by law, Penacity shall not be liable for:
* Indirect, incidental, or consequential damages
* Loss of data, revenue, or business opportunities
* Damages arising from unauthorized access or cyber incidents
Our total liability, where applicable, is limited to the amount paid for the relevant services under contract.
11. Indemnification
You agree to indemnify and hold harmless Penacity from any claims, damages, or liabilities arising from:
* Your misuse of the website or services
* Your violation of these Terms
* Your failure to comply with applicable laws or regulations
12. Termination
We may suspend or terminate access to our website or services at any time if:
* You violate these Terms
* Required by law or regulatory obligations
* Necessary to protect our systems, clients, or operations
13. Compliance and Regulatory Obligations
As part of our operations, we adhere to applicable regulatory and certification frameworks, including those related to cybersecurity assessments.
Users and clients acknowledge that certain obligations may require us to:
* Retain or disclose information as required by law
* Cooperate with regulatory authorities
* Maintain audit and compliance records
14. Changes to Terms
We may update these Terms periodically. Updates will be posted with a revised “Last Updated” date.
Continued use of our services after changes constitutes acceptance of the revised Terms.
15. Governing Law
For questions regarding these Terms, please contact us using the contact details provided in our Privacy Policy .
16. Contact Information
For questions regarding these Terms, please contact us using the contact details provided in our Privacy Policy.
Creating security for companies through assessment, monitoring and active defense.