Terms of Service

These proposed Terms of Service govern ShieldLine Cyber readiness advisory engagements and client portal access. This agreement is in draft status pending final owner sign-off and legal counsel review. Effective Date: October 2026.

Notice for Owner & Legal Review: This document represents the operational legal framework. Corporate entity formal name, state of organization, dispute resolution venue, and warranty disclaimers require formal attorney review before commercial launch.

1. Engagement & Service Scope

These Terms of Service ("Terms") constitute a legally binding agreement between you or the organization you represent ("Client," "you," or "your") and ShieldLine Cyber ("ShieldLine Cyber," "we," "us," or "our"). ShieldLine Cyber provides technical cybersecurity readiness assessment, evidence organization, and documentation advisory services for small and mid-sized businesses preparing for commercial cyber liability insurance applications or renewals.

Our offerings include the Cyber Insurance Readiness Snapshot ($299), the Cyber Insurance Readiness Sprint ($1,200), and the Snapshot-to-Sprint Upgrade ($901). Specific scope boundaries, deliverable formats, and file limits are detailed on the applicable service pages and in these Terms.

2. Independent Technical Advisory; No Insurance Brokerage

ShieldLine Cyber is an independent technical cybersecurity consultancy. ShieldLine Cyber is not an insurance company, insurance agency, underwriter, or insurance broker. We do not solicit, negotiate, sell, bind, or underwrite insurance policies, nor do we accept commissions, referral fees, or compensation from insurance carriers or brokers.

Our work consists solely of reviewing Client-provided evidence against common baseline controls evaluated by commercial insurers, identifying potential readiness gaps, and organizing documentation to assist Client in presenting verified technical facts to its chosen carrier or broker.

3. Disclaimer of Underwriting Outcomes

No underwriting decision, insurability determination, or premium rate is guaranteed. Underwriting requirements, insurability standards, exclusions, sublimits, endorsements, and final binding decisions rest entirely within the sole and unreviewable discretion of the third-party insurance carrier issuing the policy.

ShieldLine Cyber makes no warranty or representation that completion of an engagement, possession of an Evidence Binder, or adoption of recommended policies will result in policy approval, favorable pricing, renewal binding, or claim coverage in the event of an incident.

4. Client Responsibilities & Technical Accuracy

Client represents and warrants that all questionnaires, network diagrams, configuration screenshots, and policy documents submitted are accurate, current, and genuine. ShieldLine Cyber does not perform invasive live penetration testing, active exploit verification, or physical audits; our assessments rely upon the truthfulness and completeness of evidence provided by Client.

Client retains sole responsibility for implementing, testing, and managing technical controls (e.g., MFA enforcement, immutable backup retention locks, and EDR agent deployments). Implementation is executed by Client's internal personnel or third-party Managed Service Provider (MSP).

5. Delivery Timelines & SLA Commencements

Turnaround commitments (2 business days for the Snapshot; 7–10 business days for the Sprint) commence only after:

  • Full payment has been received and verified by our payment gateway.
  • Client has submitted the complete intake questionnaire in the Client Portal.
  • Client has uploaded all required supporting evidence exhibits.

Submissions received after 5:00 PM Eastern Time or on non-business days (weekends and US federal holidays) commence on the subsequent business day. Incomplete submissions pause the turnaround schedule until required clarifications are supplied.

6. Intellectual Property & Deliverable License

Upon receipt of full payment, ShieldLine Cyber grants Client a perpetual, worldwide, non-exclusive, non-transferable license to use, reproduce, and distribute the customized deliverables (Findings Reports, Evidence Binders, Policy Packs, and Remediation Plans) for Client's internal operational security governance and for submission to insurance carriers, underwriters, and brokers in support of insurance applications.

ShieldLine Cyber retains all proprietary rights, title, and interest in its underlying methodologies, diagnostic frameworks, document templates, and assessment tooling.

7. Confidentiality & Security

Both parties agree to treat all confidential technical and business data exchanged as strictly confidential. ShieldLine Cyber maintains administrative, technical, and physical safeguards designed to protect Client documentation in encrypted storage under United States jurisdiction. Evidence is accessed solely by authorized assessment personnel and is never shared with third parties or insurers without Client's explicit instruction.

8. Limitation of Liability

To the maximum extent permitted by applicable law, in no event shall ShieldLine Cyber, its founder, assessors, or contractors be liable for any indirect, incidental, special, consequential, or punitive damages, or for loss of profits, loss of data, business interruption, regulatory fines, or costs of substitute services arising out of or related to this agreement or the services provided.

ShieldLine Cyber's aggregate cumulative liability for all claims arising out of or related to an engagement shall not exceed the total fees actually paid by Client to ShieldLine Cyber for the specific service giving rise to the claim during the preceding 12 months.

9. Governing Law & Dispute Resolution

These Terms shall be governed by and construed in accordance with the laws of the United States and the State of Delaware (or the State in which ShieldLine Cyber is formally organized), without regard to its conflict of law principles. Any dispute arising out of or relating to these Terms shall be resolved through good-faith informal negotiations, or failing that, in the state or federal courts located within the designated jurisdiction.

[Note for Owner / Legal Review: Final legal entity name, corporate registration state, and mandatory arbitration clauses should be formally reviewed by qualified legal counsel.]

10. Modifications & Contact

ShieldLine Cyber reserves the right to update these Terms periodically. Continued use of our services following publication of revised Terms constitutes acceptance. For inquiries, contact us at hello@shieldlinecyber.com.