Terms of Service
Last updated: 23/07/2026
1. Agreement
These Terms form a contract between you and Cyber Essential Check Ltd ("we", "us"). By creating an account you accept these Terms, our Privacy Notice, Acceptable Use Policy and Cookie Policy.
2. Nature of the service (readiness only)
Cyber Essential Check provides an automated readiness assessment aligned to Cyber Essentials v3.3 (Danzell). We are not an IASME- or NCSC-approved Certification Body. Nothing we produce constitutes a Cyber Essentials certificate. Formal certification must be obtained from an IASME-approved assessor.
3. Acceptable use
You warrant that you own or have explicit written authorisation to assess every domain, network or system you submit. Unauthorised scanning may breach the Computer Misuse Act 1990, the US CFAA and equivalent laws elsewhere. See our Acceptable Use Policy.
4. Accounts and security
You are responsible for safeguarding credentials and for all activity under your account. Notify us immediately of unauthorised access. We may suspend accounts for breach, non-payment, or security risk.
5. Fees, VAT and cancellation
- Free tier limited as described in-product; paid plans billed monthly in GBP.
- All fees are exclusive of VAT unless stated; VAT applied at UK statutory rate.
- You may cancel at any time; access continues to the end of the paid period.
- Consumer 14-day cancellation right does not apply — the Service is supplied to businesses acting in the course of trade.
6. Data protection
Where we process personal data on your behalf (e.g. connector data), our Data Processing Addendum is incorporated into these Terms and satisfies UK GDPR Art. 28 / EU GDPR Art. 28.
7. Intellectual property
The Service, its software, and content are our IP or licensed to us. You retain ownership of your inputs and results; you grant us a limited licence to process them solely to provide the Service.
8. Warranties and disclaimer
The Service is provided "as-is" and "as available". We do not warrant that findings are exhaustive or that following them will result in Cyber Essentials certification. Nothing in these Terms limits liability for death or personal injury caused by negligence, fraud, or any liability that cannot be excluded under English law.
9. Limitation of liability
Subject to clause 8, our aggregate liability under or in connection with these Terms (whether in contract, tort, statute or otherwise) is capped at the total fees paid by you in the 12 months preceding the event giving rise to the claim. We exclude liability for indirect, consequential, or loss-of-profits damages.
10. Termination
Either party may terminate for material breach not cured within 30 days. On termination we disable access; your data is deleted per the retention schedule in the Privacy Notice. Export data before termination via Settings → Export.
11. Governing law and disputes
These Terms are governed by the laws of England and Wales. Disputes are subject to the exclusive jurisdiction of the courts of England and Wales.