Terms of Service

By creating an account or using SightGlass (the “Service”), you agree to these terms on behalf of yourself and, where applicable, the organization you represent. If you do not agree, do not use the Service.

SightGlass ingests security signals (host hardening scans, cloud posture checks, vulnerability imports) and connects them to governance workflows: risk management, compliance controls, audits and evidence, policies, and vendor assessments.

You are responsible for safeguarding your credentials and for activity under your account. Organization owners and admins control membership, roles, and settings within their workspace, including security requirements such as mandatory two-factor authentication and single sign-on.

Only submit scan data from systems you own or are explicitly authorized to assess. You must not use the Service to store or distribute malware (uploads are scanned and rejected), attempt to access other tenants' data, probe or disrupt the Service, or violate applicable law. We may suspend accounts that put the platform or other customers at risk.

Your organization owns the content it submits. You grant us the limited rights needed to operate the Service (store, process, display, and transmit your content as you direct). Handling of personal data is described in the Privacy Policy. Export features are available in-product; on termination you may export your data before deletion.

New workspaces start on the Free plan. Paid plans require a payment method and are billed annually at sign-up; you may upgrade or downgrade at any time, and charges are prorated. Paid-plan pricing and limits are shown at sign-up and in Settings. Features may be added or adjusted between plans over time.

SightGlass helps you organize and evidence your security and compliance program. It does not provide legal advice, and using it does not by itself make you compliant with any framework, regulation, or standard, nor guarantee any certification or audit outcome. Framework content is provided for convenience and may not reflect the latest versions of the underlying standards.

We work to keep the Service available and secure but provide it “as is” without warranties of uninterrupted or error-free operation. We may improve or modify features, and will not materially reduce core functionality of your plan during a paid term without notice.

To the maximum extent permitted by law, neither party is liable for indirect, incidental, special, or consequential damages, and our aggregate liability is limited to the amounts paid for the Service in the twelve months preceding the claim. Nothing here limits liability that cannot be limited by law.

You may stop using the Service and delete your workspace at any time. We may suspend or terminate access for material breach of these terms, with notice where practicable. Sections that by their nature should survive termination (including data ownership, disclaimers, and liability limits) survive.

These terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein. Questions about these terms: [email protected].