Terms of Service

Effective date: July 27, 2026 · Last updated July 27, 2026

1. Who we are

InitialEyes ("InitialEyes," "we," "us") is operated by InitialEyes LLC, a Missouri limited liability company ("the Company"). By accessing initialeyes.com or purchasing any InitialEyes product or service, you agree to these Terms of Service.

2. What InitialEyes provides

InitialEyes is a self-serve software product. You use our tools to assess your own organization's readiness against published security and privacy frameworks. Our offerings include:

• Free readiness tools — interactive scoping and scoring estimators that run in your browser on public framework data.
• Readiness Assessment report — a one-time software-generated report containing a readiness score, ranked gaps, and a prioritized remediation plan.
• Template & Checklist Pack — a one-time download of self-assessment worksheets and document templates.
• Monitoring subscription — an optional recurring service that re-runs your assessment on a schedule and flags changes.

Sensitive regulated data. InitialEyes provides a self-administered readiness assessment based on information you report about your own controls. You agree not to submit, upload, or transmit to InitialEyes any Protected Health Information (as defined by HIPAA), Controlled Unclassified Information (CUI), Federal Contract Information (FCI), cardholder data, or other data subject to specific regulatory handling obligations. InitialEyes is not engaged as a HIPAA business associate and does not accept such data absent a separate written agreement executed in advance. If you require such an arrangement, contact us before submitting any regulated data.

3. Not legal advice, not an audit, not certification

This is important, so we say it plainly:

• InitialEyes does not provide legal advice. Nothing we produce is a substitute for advice from a licensed attorney or a qualified compliance professional.
• A readiness assessment is not a validating assessment, an audit, or an Attestation of Compliance, and does not guarantee that you will pass any formal audit, assessment, or certification.
• Readiness is not the same as certification. Formal validation — such as a PCI Attestation of Compliance via a Qualified Security Assessor, or a CMMC certification via a certified third-party assessor — is a separate process performed by others.
• Outputs are estimates and planning aids based on the information you provide and on public framework data. Their accuracy depends on the accuracy and completeness of your inputs.

4. Payments, and our Merchant of Record

Orders and payments for paid InitialEyes products are handled by Paddle (Paddle.com Market Ltd and its affiliates), which acts as our authorized reseller and Merchant of Record. Paddle processes your payment, handles applicable sales tax/VAT, and appears as the seller on your payment statement. Your purchase is also subject to Paddle's Buyer Terms. We do not receive or store your full payment card details.

5. Subscriptions and automatic renewal

The Monitoring subscription is billed on a recurring, automatically renewing basis at $39 per month until you cancel. By subscribing you authorize Paddle to charge your payment method each billing period at the then-current price. We will disclose the price, billing frequency, and auto-renewal clearly at checkout and obtain your express consent before charging.

You may cancel at any time through your account or by the cancellation method provided at purchase and in your receipt; cancellation stops future renewals. See our Refund & Cancellation Policy.

6. License and acceptable use

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable license to use InitialEyes tools and to use the reports and templates you purchase for your own organization's internal compliance purposes. You may not resell, redistribute, or present our outputs as a certification or as your own commercial product, reverse engineer the service, or use it unlawfully.

7. Your information

Our tools are designed to collect as little personal data as possible. We collect contact details only when you choose to provide them. How we handle information is described in our Privacy Policy.

8. Disclaimers of warranty

InitialEyes is provided "as is" and "as available," without warranties of any kind, express or implied, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement. We do not warrant that outputs are error-free or that use of InitialEyes will achieve any particular compliance outcome.

9. Limitation of liability

To the maximum extent permitted by law, the Company and its owners, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, or punitive damages, or for any loss of profits, data, or goodwill, arising out of or related to your use of InitialEyes. Our total liability for any claim relating to the service will not exceed the amount you paid to us (or to Paddle for our products) in the twelve (12) months before the event giving rise to the claim.

10. Indemnification

You agree to indemnify and hold harmless the Company from claims arising out of your misuse of the service or violation of these Terms.

11. Changes

We may update these Terms from time to time. Material changes will be posted here with a new effective date; continued use after changes take effect constitutes acceptance.

12. Governing law

These Terms are governed by the laws of the State of Missouri, without regard to its conflict-of-laws rules, and the exclusive venue for disputes will be the state or federal courts located in Greene County, Missouri.

13. Contact

Questions about these Terms: alerts@initialeyes.com. Mailing address: InitialEyes, 2207 W Hanover St, Springfield, MO 65807.