Operator: QSai LLC (CISO Marketplace)
Site / Platform: cisodiy
Domains Covered: cisodiy.pages.dev, ciso.diy, www.ciso.diy
Effective Date: 2026-09-01
Next Scheduled Review: 2027-09-01
Jurisdictions in Scope: EU, US, US-CA, global
1. [What This Agreement Covers](#1-what-this-agreement-covers)
2. [Licence, Not Sale](#2-licence-not-sale)
3. [Licence Tiers and Scope of Use](#3-licence-tiers-and-scope-of-use)
4. [What You May Do](#4-what-you-may-do)
5. [What You May Not Do](#5-what-you-may-not-do)
6. [Ownership of Your Outputs](#6-ownership-of-your-outputs)
7. [Our Intellectual Property](#7-our-intellectual-property)
8. [Updates and Continued Access](#8-updates-and-continued-access)
9. [Third-Party and Open-Source Components](#9-third-party-and-open-source-components)
10. [No Professional Advice; No Certification](#10-no-professional-advice-no-certification)
11. [Warranty Disclaimer](#11-warranty-disclaimer)
12. [Limitation of Liability](#12-limitation-of-liability)
13. [Term and Termination](#13-term-and-termination)
14. [Changes to This Agreement](#14-changes-to-this-agreement)
15. [Governing Law](#15-governing-law)
16. [Contact](#16-contact)
This End User Licence Agreement ("Agreement") governs your use of the digital products licensed through cisodiy at cisodiy.pages.dev, ciso.diy, www.ciso.diy — including documents, guides, workbooks, spreadsheets, schemas, prompt libraries, scripts, templates and any accompanying files (collectively, the "Materials").
It is entered into between you (or the entity you represent) and QSai LLC (CISO Marketplace). You accept it by completing a purchase, downloading any Material, or using any Material.
Your use of the site itself is governed by our Terms of Service, personal data by our Privacy Policy, and purchases by our Refund & Return Policy. Where this Agreement conflicts with those documents in respect of the Materials, this Agreement controls.
The Materials are licensed, not sold. QSai LLC (CISO Marketplace) and its licensors retain all right, title and interest in them. You acquire only the rights expressly granted in Section 3, for the tier you purchased.
Your licence is non-exclusive, non-transferable, non-sublicensable, and perpetual for the version you receive, subject to Section 13.
The tier you hold is the one shown on your receipt and stated in your delivery email. Where those disagree, the receipt controls.
Each Material is offered at one or more tiers. The tier determines who may use it and for whom — nothing else. Every tier receives the same files; a higher tier never unlocks additional content.
| Tier | Who may use it | May be used for | May not |
|---|---|---|---|
| Standard | One named person | That person's own programme, or their own client engagements | Sharing the files with anyone else |
| Individual Practitioner | One named person | That person's own programme, or their own client engagements | Sharing the files with anyone else |
| Team Licence | Up to five named practitioners within one firm | Those practitioners' own programme and client engagements | Use by a sixth person; sharing outside the team |
| Organisation Licence | Employees and contractors of one legal entity, unlimited seats | That entity's own programme, across its business units and subsidiaries | Use for external clients as a service; sharing outside the entity |
| vCISO / MSSP Licence | Staff of one practice | An unlimited number of client engagements. You may present deliverables you produce as your own work product | Redistributing the Materials themselves to clients; reselling or relicensing |
Named person means a specific individual, not a role or a seat that rotates between people.
One legal entity means a single incorporated organisation. Affiliates under common control are included only where they are consolidated subsidiaries of the licensed entity.
Where a Material is sold under a tier not listed above, the scope stated in your delivery email applies, and QSai LLC (CISO Marketplace) will confirm it in writing on request.
Within the scope of your tier, you may:
1. Use and adapt the Materials for the purposes described in Section 3, including editing, extending, reformatting and rebranding them for internal use;
2. Produce and distribute outputs — completed workbooks, generated policies, assessments, reports, board papers, client deliverables and running systems built from a schema or prompt library;
3. Reuse the method — the structure, sequence, reasoning and approach — in your own work, including work you are paid for;
4. Make copies for backup, version control and internal continuity, provided access remains limited to those your tier covers.
Attribution is appreciated but not required for outputs. It is required only where you reproduce a Material substantially verbatim.
You may not:
1. Redistribute the Materials themselves — by file, link, repository, shared drive or attachment — to anyone outside your licensed scope, including clients;
2. Resell, relicense, sublicense, rent or lend the Materials, in original or modified form;
3. List or offer the Materials on any marketplace, storefront, course platform, or file-sharing service, whether free or paid, under your branding or ours;
4. Use the Materials to build a competing product that is substantially the Materials — a repackaging, translation, reformatting or lightly-edited derivative offered to others;
5. Remove or obscure copyright notices, licence statements, version identifiers or provenance markings from the files themselves, except where your tier expressly permits rebranding of outputs;
6. Share access credentials or download links issued to you;
7. Use the Materials in violation of applicable law, or to provide services you are not lawfully permitted to provide.
Training a machine-learning model on the Materials, or submitting them in bulk to a third-party AI service in a manner that permits retention or training, is not permitted. Using an AI tool as a working aid on your own licensed copy is permitted.
You own what you produce. Completed workbooks, populated registers, generated policies, assessments, deliverables and systems you build using the Materials are yours, and QSai LLC (CISO Marketplace) claims no interest in them or in the data you enter.
This is true at every tier. What differs by tier is who may produce those outputs and for whom, not who owns them.
You are responsible for the accuracy, completeness and fitness of anything you produce and issue to a third party.
QSai LLC (CISO Marketplace) retains ownership of the Materials, including their text, structure, schemas, formulas, prompt designs and accompanying documentation, and of all trademarks and trade dress associated with cisodiy.
Nothing in this Agreement transfers ownership or grants trademark rights. Where your tier permits you to present outputs as your own work product, that permission extends to the output only, not to the Materials or to any claim of authorship over them.
Where a Material is revised, you may re-download the current version at no additional charge, for as long as cisodiy offers that Material. There is no expiry on this and no separate maintenance fee.
Re-download serves the current version. QSai LLC (CISO Marketplace) does not undertake to retain or supply superseded versions, and you should retain your own copy of any version you rely on for an audit, an engagement record or a regulatory filing.
QSai LLC (CISO Marketplace) may discontinue, withdraw or materially revise a Material. Doing so does not revoke a licence already granted to you for a version you have received.
Some Materials reference, include or generate configuration for third-party and open-source software, frameworks and standards. Those components remain governed by their own licences and terms, and this Agreement grants you no rights in them.
Where a Material names commercial hardware or software, that is a reference, not a requirement or an endorsement, and QSai LLC (CISO Marketplace) is not a party to your relationship with that vendor.
Published frameworks, standards and regulations referenced in the Materials remain the property of their respective bodies. Mappings and interpretations of them are ours.
The Materials are engineering and programme documentation. They are not legal, financial, audit, tax or insurance advice, and using them does not create a professional or advisory relationship.
They do not produce a certification, an accreditation, an assurance opinion, or a regulatory determination. Where a Material supports preparation for an audit, an assessment or a filing, the opinion, certificate or determination remains the exclusive province of the independent party qualified to issue it.
Where a Material addresses a question of law — whether a statute applies to you, whether a lawful basis holds, whether a transfer mechanism is adequate — it is written to route that question to qualified counsel rather than answer it.
The Materials are provided "as is" and "as available", without warranty of any kind, express or implied, including any implied warranty of merchantability, fitness for a particular purpose, accuracy, currency, or non-infringement.
QSai LLC (CISO Marketplace) does not warrant that the Materials are complete or current, that they will meet your requirements, that any framework mapping is exhaustive or will be accepted by an assessor, or that any figure, benchmark or citation remains accurate after its stated verification date.
Some jurisdictions do not permit the exclusion of certain warranties. Where that is so, the exclusions above apply to the maximum extent permitted, and nothing in this Agreement limits rights that cannot lawfully be limited.
To the maximum extent permitted by law, QSai LLC (CISO Marketplace) shall not be liable for any indirect, incidental, special, consequential, exemplary or punitive damages, nor for loss of profit, revenue, data, goodwill, business opportunity, or for any regulatory penalty, audit finding, claim or reputational harm, arising from or relating to the Materials — whether in contract, tort, or otherwise, and whether or not QSai LLC (CISO Marketplace) was advised of the possibility.
QSai LLC (CISO Marketplace)'s aggregate liability arising from or relating to the Materials shall not exceed the amount you paid for the Material giving rise to the claim.
Nothing in this Agreement excludes or limits liability for death or personal injury caused by negligence, for fraud or fraudulent misrepresentation, or for any other liability that cannot lawfully be excluded.
This Agreement takes effect when you first purchase, download or use a Material, and continues for as long as you hold a copy.
QSai LLC (CISO Marketplace) may terminate your licence on written notice if you materially breach Sections 3, 5 or 7 and do not remedy the breach within thirty days of notice, where the breach is capable of remedy.
On termination you must cease using the Materials and destroy all copies within your control, other than copies you must retain to comply with a legal or regulatory obligation. Outputs you lawfully produced before termination remain yours, and Sections 6, 7, 10, 11, 12 and 15 survive.
Termination does not, by itself, entitle you to a refund. Refund eligibility is governed by our Refund & Return Policy.
QSai LLC (CISO Marketplace) may revise this Agreement. The version in force for a Material is the version published on the date you purchased it, and a revision does not retroactively narrow a licence you already hold.
Material changes will be reflected in an updated Effective Date and published at cisodiy.pages.dev, ciso.diy, www.ciso.diy. This Agreement is reviewed at least annually; the next scheduled review is 2027-09-01.
This Agreement is governed by the laws applicable to QSai LLC (CISO Marketplace) in its jurisdiction of incorporation, without regard to conflict-of-laws principles, and the courts of that jurisdiction shall have exclusive jurisdiction over any dispute — save that QSai LLC (CISO Marketplace) may seek injunctive relief in any competent court to restrain unauthorised distribution of the Materials.
Where mandatory consumer-protection law in your jurisdiction of residence grants you rights or a forum that this Section would otherwise displace, those rights and that forum prevail.
Questions about this Agreement, a team or bulk purchase, white-label terms, or a licence scope not covered above:
QSai LLC (CISO Marketplace)
Email: [email protected]
Please state the product, the tier on your receipt, and the question. We aim to acknowledge within five business days.
Document ID: CC-EULA-MASTER-001
Owner: Chief Compliance Officer
Classification: Public
Effective Date: 2026-09-01
Next Review: 2027-09-01