Skip to main content

Terms and Conditions of SCF Connect

This document can be printed for reference by using the print command in the settings of any browser.

Who we are

SCF Connect is provided by:

SCFCONNECT LLC
30 N Gould St
Sheridan, WY 82801

These Terms govern your use of the SCF Connect application and form a binding agreement between you and SCFCONNECT LLC. Please read them carefully. By creating an account or using the Service, you agree to them.

What SCF Connect is

SCF Connect is a subscription platform for managing a cybersecurity and compliance program. It supports assessments, systems of record, gap assessments, risk registers, evidence management, and collaboration with practitioners, assessors and vendors.

Third-party framework content

Some material available through SCF Connect originates with third parties and carries its own terms:

  • Secure Controls Framework content is the property of its owner and is made available subject to that owner's terms.
  • Optional ComplianceForge material is governed by the ComplianceForge Terms and Conditions at complianceforge.com/terms-conditions .

Where third-party terms conflict with these Terms in respect of that material, the third-party terms govern.

Accounts

You need an account to use the Service. You may create one directly or be invited by an organization already using the platform.

You agree to provide accurate information, to keep it current, and to keep your credentials confidential. You are responsible for activity under your account. Accounts are for named individuals and must not be shared. Tell us promptly if you believe your account has been compromised.

We may decline or revoke registration at our discretion, including where an account appears to have been created on behalf of another person or organization without authority.

Organizations, invited users and shared access

The Service is designed for several parties to work on the same compliance program:

  • An organization subscribes and controls its own workspace.
  • The organization may invite practitioners, assessors, assessment organizations and vendors to participate in specific engagements.

Where you are invited into an organization's workspace, that organization determines what you can see and do, and it controls the content in that workspace. Invitations can be withdrawn by the organization at any time. Some invited roles use the Service at no charge.

If you invite someone into your workspace, you are responsible for having the authority to share the content you expose to them.

Your content

You keep ownership of what you upload. Evidence, narratives, findings, policies, assessments and files you or your organization put into the Service remain yours.

You grant us a limited licence to host, store, transmit, display and process that content solely to operate and provide the Service to you, including creating backups. We do not use your content to train models, and we do not sell it.

You are responsible for having the rights to the content you upload and for what it contains. Do not upload content you are not permitted to share. We do not inspect uploaded file contents.

Personal information inside your content is governed by our Privacy Policy, under which the uploading organization is the controller and we act on its instructions.

Our intellectual property

The Service, including its software, design and documentation, belongs to us or our licensors. Subject to these Terms, we grant you a non-exclusive, non-transferable, revocable right to use the Service for your organization's internal compliance purposes for as long as your subscription is active. You may not copy, resell, sublicense, reverse-engineer or create derivative works of the Service, or use it to build a competing product.

Acceptable use

You agree not to:

  • Use the Service unlawfully, or in breach of a third party's rights
  • Attempt to gain unauthorized access to the Service, other accounts, or other organizations' data
  • Probe, scan or test the Service's security without our written permission
  • Interfere with or disrupt the Service, or place unreasonable load on it
  • Scrape or bulk-extract content other than your own
  • Resell or provide the Service to third parties without our agreement
  • Upload malware, or content that is unlawful or infringing

API

Where API access is available, using it is subject to these Terms. You are responsible for anything you build on it and for any third-party product that accesses your data through it. We may change, rate-limit or withdraw API endpoints, and will give reasonable notice of breaking changes where we can.

Plans, fees and payment

Plans, entitlements and current pricing are shown on our pricing page and during checkout, and include options that differ by framework coverage, number of users and term length. Some plans are provided at no charge.

Prices are exclusive of taxes unless stated. You are responsible for applicable taxes.

Payment

Card payments are processed by our payment provider. Card details are entered directly into the provider's hosted fields; we never receive or store them. We receive confirmation that payment succeeded, and retain a subscription reference and status. Where an invoice arrangement applies, payment is due on the terms stated on the invoice.

If a payment fails or is refused, we are not obliged to provide the Service and may suspend access until payment is resolved.

Free trial

Where a free trial is offered, it runs for the period stated at sign-up. No payment method is required to begin one.

What happens when the trial period ends depends on whether you have added a payment method:

  • If you have added one, the trial converts to a paid subscription and the first charge is taken automatically. You can switch off renewal before the trial ends to prevent this.
  • If you have not, the subscription is cancelled automatically and you are not charged.

One trial per organization. Content you created during a trial is retained as described below, so a subscription started later can pick up where the trial left off.

Renewal

Subscriptions renew automatically at the end of each billing period, monthly or annually according to your plan, at the then-current price for that plan, until cancelled. We will give reasonable notice before a price increase takes effect on renewal.

Cancelling renewal

You may switch off renewal at any time, from within the Service or by contacting us.

Switching off renewal stops the next charge. It does not end your subscription immediately. Your access continues for the remainder of the term you have already paid for, and the subscription then ends with no further charge:

  • A monthly plan runs to the end of the current month.
  • An annual plan runs to the end of the annual term you purchased.

You may keep using the Service normally for that remaining time.

What happens to your data

When your term ends we retain your Customer Content rather than deleting it, so that your subscription can be reactivated without loss. We do not delete it automatically.

You may request deletion of your Customer Content at any time, during or after your subscription, by contacting us. We will action a verified request within 30 days. Deletion is permanent and we cannot recover deleted content afterwards. Some records may be retained where we are required to keep them by law, and routine backups are overwritten on their own cycle.

Switching off renewal is not by itself a deletion request. Separately, assessments you cancel inside the Service are hidden from your workspace after a period but are retained.

Suspension and termination by us

We may suspend or terminate your access if you materially breach these Terms, if payment is overdue, if required by law, or if your use threatens the security or stability of the Service. Where practicable we will give notice and an opportunity to remedy. For non-payment we may suspend before terminating.

Availability and changes to the Service

We aim to keep the Service available but do not guarantee uninterrupted access. Maintenance, updates and factors outside our control may cause interruptions.

We may add, change or remove features. We will not make changes that materially reduce core functionality you are paying for during a paid term without notifying you.

We do not offer a service level agreement, uptime commitment or service credits.

Disclaimer

The Service is provided "as is" and "as available". To the maximum extent permitted by law we disclaim all implied warranties, including merchantability, fitness for a particular purpose and non-infringement.

SCF Connect is a tool for managing a compliance program. It does not provide legal, audit or certification advice, and using it does not by itself make your organization compliant with any framework, standard or regulation. Responsibility for your compliance posture, and for the accuracy of what you record, remains yours.

Limitation of liability

To the maximum extent permitted by law, we are not liable for indirect, incidental, special, consequential, punitive or exemplary damages, or for lost profits, goodwill, or data, arising from or relating to your use of or inability to use the Service.

To the maximum extent permitted by law, our total aggregate liability arising from or relating to these Terms or the Service, whether in contract, tort or otherwise, will not exceed the total fees you paid to us for the Service in the twelve months immediately preceding the event giving rise to the claim. Where no fees have been paid, our total aggregate liability will not exceed one hundred United States dollars (US$100).

These limitations apply even if a remedy fails of its essential purpose, and they do not limit liability that cannot be limited under applicable law.

Indemnification

You agree to indemnify us against claims, damages and reasonable costs arising from your use of the Service in breach of these Terms, or from content you upload.

Confidentiality

Each party will protect the other's confidential information and use it only for purposes of this agreement. Your Customer Content is your confidential information.

Changes to these Terms

We may update these Terms. For material changes we will give notice to account holders before they take effect. Continuing to use the Service after that constitutes acceptance. If you do not accept a material change, you may cancel as described above.

General

Assignment

You may not assign this agreement without our consent. We may assign it in connection with a merger, acquisition or sale of assets, on notice to you.

Severability and waiver

If a provision is unenforceable, the rest remains in force. Failure to enforce a provision is not a waiver of it.

Entire agreement

These Terms, together with the Privacy Policy and any order form, are the whole agreement between us on this subject.

Governing law and venue

These Terms are governed by the laws of the State of Wyoming, United States, without regard to conflict-of-laws principles. Subject to the informal resolution step below, the courts located in Wyoming have exclusive jurisdiction over any dispute arising from them.

Nothing in this section removes any protection or right of action available to you under the mandatory law of your country of residence that cannot be waived by agreement.

Resolving disputes

Before either of us files a claim, we each agree to try to resolve the dispute directly.

The party raising the dispute will send the other a written notice describing it and the outcome sought, using the notice details below. Both parties will then attempt in good faith to resolve it, including by discussing it directly, for 30 days from the date that notice is received. Neither party may commence proceedings before that period has expired.

This requirement does not apply to a claim for injunctive or other equitable relief, or to a claim for infringement or misuse of intellectual property, and it does not prevent either party from raising a matter with a regulator. Any applicable limitation period is paused while the 30 days run.

Contact and notices

Formal notices under these Terms, including a notice commencing the dispute-resolution period, may be given by email to privacy@scfconnect.com, or in writing to:

SCFCONNECT LLC
Attn: Legal Notices
30 N Gould St
Sheridan, WY 82801
United States

A notice sent by email is treated as received on the next business day after it is sent. A notice sent by post is treated as received five business days after it is posted. We will send notices to you at the email address on your account, so please keep it current.

Latest update: July 15, 2026