Terms of Service

The service

Krypton GRC provides compliance readiness tooling: automated technical checks, guided questionnaires, control-to-framework mapping, gap reports, and related features.

Readiness, not certification

Our scans and scores are readiness and gap assessments. They are not certifications, attestations, or audit opinions under any framework (including SOC 2, ISO 27001, HIPAA, CMMC, or PCI DSS). Certification requires an accredited independent auditor. Do not represent a Krypton GRC report as a certification.

Acceptable use

• Use the service only for systems you own or are authorized to assess.
• Do not attempt to disrupt the service, bypass access controls, or misuse API credentials.
• You are responsible for the accuracy of information you enter and for keeping your bearer tokens confidential.

Availability

We aim for reliable service but do not guarantee uninterrupted availability. Features may change as the product evolves; material changes will be communicated.

Liability

To the maximum extent permitted by law, Terafram's liability for any claim arising from the service is limited to the fees you paid us in the 12 months before the claim. We are not liable for indirect, incidental, or consequential damages, including the outcome of third-party audits.

Contact

Questions about these terms: info@kryptongrc.com.