Phase 0 · Pre-launch. Commercial activity has not commenced.
RenewalProof ← Back to site

Terms of Service

Version 1.0 · Effective Date: Not yet set — Phase 0, pre-launch (commercial activity has not commenced)

These Terms of Service ("Terms") form a binding agreement between Ellis Intelligence LLC, a Colorado limited liability company doing business as RenewalProof ("RenewalProof", "we", "us"), and the company subscribing to or using the Service ("Customer", "you").

The Service is intended for use by businesses documenting an incident response plan and tabletop exercise, typically in connection with a cyber-insurance renewal or a customer security questionnaire. The Service is not for use by consumers.

1. The Service

1.1 RenewalProof is a software-as-a-service application that provides a versioned Incident Response Plan ("IRP") builder, a guided tabletop exercise runner against an authored scenario library, and a cryptographically sealed, publicly verifiable attestation of a completed exercise — an evidence record the Customer can include in a cyber-insurance renewal packet or forward to a broker or underwriter.

1.2 Tier-specific features and limits (including any request-volume or usage bands) are described at renewalproof.com/pricing. Tier names, and the figures behind them, live on that page and are never restated in these Terms. Tier names: Solo ($59/mo, one plan, core scenario packs, sealed annual attestation) and Team ($149/mo, multi-participant runner, full scenario library, verify links across every exercise on record, evidence-bundle exports). Figures live at renewalproof.com/pricing and are never restated here.

1.3 Business Use Only. The Service is intended for use by a company's authorized workforce members for internal incident-response documentation purposes.

1.4 RenewalProof Is Software, Not an Insurance Broker, Producer, Consultant, or Certifier. RenewalProof is a software vendor providing a documentation and sealing tool. RenewalProof does not certify, grade, or score readiness of any kind, and does not act as an insurance broker, producer, agent, or advisor. RenewalProof does not:

1.5 RenewalProof Is Not Affiliated With Any Insurance Carrier, Broker, or Producer. RenewalProof is not appointed by, acting on behalf of, or in any commercial relationship with any insurance carrier, broker, agent, or producer. A sealed attestation is evidence of what the Customer's team did; it is not an insurance product, a policy term, or a representation made on behalf of any insurer.

1.6 Customer Self-Attests. The tabletop exercise is self-conducted by the Customer's own team using the Service as a guided documentation tool, and the resulting attestation is a self-attestation by the Customer. The Customer is responsible for the accuracy of what its team enters — participant names, roles, decisions recorded, and plan content. The sealed record documents what the Customer's team did and recorded; it does not independently verify the Customer's actual security posture or incident-response capability.

2. Account and Participants

2.1 Account creation requires an authorized representative of the Customer entity.

2.2 Each account is for a single company (tenant). Flat multi-tenant isolation is enforced — one company's plan, exercise, and attestation data never crosses to another's.

2.3 Participants Are Records, Not Accounts. Individuals logged as tabletop exercise participants (name, role, join time) do not hold credentials, do not authenticate, and are not "Users" of the Service in the account-holder sense. The Customer's authorized account holder is responsible for the accuracy of participant records it enters.

3. Subscriptions, Pricing, Billing

3.1 Solo and Team are monthly subscriptions, billed via Stripe; no annual-billing discount and no per-exercise fee.

3.2 30-day notice for material pricing changes.

3.3 Billing via Stripe. 3.4 Refunds. Monthly fees are non-refundable for the current billing period except pro rata on our material breach or on discontinuation under §12; any refund is paid within 30 days after the effective date of termination.

3.5 Annual Renewal and Re-Exercise Cadence. The Service tracks two independent annual deadlines as a convenience — the Customer's stated cyber-insurance renewal date and the anniversary of the most recent sealed attestation — and sends reminders ahead of each. The Customer remains solely responsible for meeting its own renewal timeline and any regulatory, contractual, or carrier-imposed re-exercise obligation.

3.7 No Service-Level Credits or Refunds. The Service carries no uptime or response-time commitment. No service credit, fee credit, refund, or other remedy arises from any delay, outage, missed response target, or unmet support expectation. The §12.1 limited-warranty remedy and the §10.2 pro-rata refund on our own discontinuation remain the only remedies.

4. Customer Data; Flat Multi-Tenancy

4.1 Ownership. As between us, you own all Customer Data you submit ("Customer Data"), including your company name, IRP plan content, participant records, exercise event logs, and the attestation records the Service generates for you.

4.2 License to Us. You grant us a limited license to host, store, transmit, display, and process Customer Data solely to provide the Service (including running the tabletop exercise, sealing the attestation, generating the sealed PDF, and managing the annual-cadence reminders).

4.3 No Training / No Selling. We do not sell or share Customer Data, and we do not use it to train any model or to improve a Service used by other customers. See our Privacy Policy.

4.4 Flat Per-Tenant Isolation. Each company is one tenant. Every tenant-scoped read and write routes through tenant-scoping helpers so no tenant can access another tenant's data. The public /verify/<token> surface is the one deliberate exception, addressed in §7.

5. Acceptable Use

5.1 No reverse engineering, no scraping, no building a competing product from the Service, no resale.

5.2 No Misrepresentation of Certification or Endorsement. You will not represent to any party (an insurance carrier, broker, underwriter, auditor, or any other party) that RenewalProof has certified, assessed, graded, scored, or otherwise validated your incident-response readiness, or that RenewalProof is affiliated with, endorsed by, or acting on behalf of any insurance carrier, broker, or producer. A sealed attestation is a self-conducted documentation artifact; it does not constitute an assessment, certification, or endorsement by RenewalProof or by any insurer.

5.3 Self-Conducted Exercise. The Customer is responsible for the accuracy of the plan content, participant records, and decisions its team enters during a tabletop exercise. RenewalProof produces the sealed documentation artifact from what the Customer's team does and records; it does not verify the Customer's underlying incident-response capability.

6. Service Outputs, Accuracy, and Disclaimers

6.1 Self-Attestation, Not a Certification. The IRP Builder, Tabletop Runner, and sealed attestation the Service generates document the Customer's own self-conducted plan and exercise. They are not a certification, a compliance determination, an insurance-underwriting assessment, or a legal opinion. The Customer is solely responsible for the accuracy of the information it enters and for the completeness and appropriateness of the plan and exercise as documentation of its actual incident-response posture. The sealed attestation, the sealed PDF, and the public verify page render as plain text/typography only — no seal graphic, badge, ribbon, watermark, or certificate-style image is used anywhere, so the output never visually resembles a third-party validation or certification mark.

6.2 No Guarantee of Insurance Outcome. A sealed attestation does not guarantee insurability, coverage, renewal, claims outcomes, or premiums, and is not an endorsement by any insurer. RenewalProof does not guarantee the output will satisfy any specific carrier's, broker's, or underwriter's requirements.

6.3 No Carrier Comparison, Coverage Advice, or Broker-Channel Distribution. RenewalProof does not compare insurance carriers, recommend coverage, or advise on policy terms, at any tier, under any circumstance, and does not go to market through any referral arrangement, revenue-share deal, or other partnership with an insurance broker, agent, or producer as a distribution channel. The §1.5 affiliation disclaimer is paired with these hard scope limits — on product, coverage advice, and distribution channel alike — because the disclaimer alone does not defend against a DOI producer-licensing read if RenewalProof's actual conduct remains functionally within a covered entity's scope.

6.4 Implementation Is the Customer's Responsibility. The Service documents the Customer's incident-response plan and the tabletop exercise as self-reported and self-conducted. Actual incident-response readiness depends on the Customer implementing and exercising the plan it has documented. RenewalProof does not implement incident-response controls, facilitate the exercise, or monitor ongoing readiness.

6.5 No Autonomous Distribution. RenewalProof does not transmit, distribute, or share a sealed attestation, the public verify link (§7.3), or any other Service output with any broker, underwriter, auditor, or other third party on the Customer's behalf; the Customer decides if, when, and with whom to share it. Because a human — the Customer — always makes that sharing decision, this sits in the standard disclaimer-plus-no-auto-action tier, not the stricter tier reserved for brands whose own output reaches a regulator or external party directly (e.g., breach/adverse-action notices).

7. Sealed Attestation and the Public Verify Surface

7.1 A sealed attestation is generated when the Customer closes a tabletop exercise and strikes the seal. The seal covers the full evidence bundle — the plan version in effect, the scenario and its exact content version as exercised, the participant log, and the ordered exercise-event spine — hashed together with SHA-256 (sha256), computed and stored at seal time.

7.2 A sealed attestation, once generated, is immutable in the Service's records. If the Customer runs a new tabletop exercise, a new sealed attestation is generated; the prior sealed attestation is retained as a record and marked superseded only if explicitly replaced.

7.3 Each sealed attestation is assigned a unique, unguessable verification token. The public page at renewalproof.com/verify/<token> allows anyone holding that link — the Customer's broker, underwriter, or auditor, for example — to independently confirm the record has not been altered since sealing, without creating an account or logging in. The verify page discloses only the evidence-bundle summary (scenario, plan lineage, participant count, exercise end date, the hash, and the seal status); it does not disclose the Customer's tenant identity or any other tenant's data, and it is not enumerable — the token itself is the only lookup key.

7.4 The SHA-256 seal is a data-integrity mechanism. It proves the sealed record has not been altered since generation; it does not constitute an attestation by RenewalProof, a certification, or an endorsement by any insurer or third party.

8. Annual Cadence and Reminders

8.1 The Service tracks two independent annual cadences and sends reminders at 60, 30, and 7 days before each deadline, business-day-shifted: (a) the Customer's stated cyber-insurance renewal date, and (b) the anniversary of the Customer's most recently sealed attestation. Each reminder is a courtesy notification; the Customer remains responsible for meeting its own renewal and re-exercise obligations on schedule.

8.2 The Service does not automatically detect a change in the Customer's insurance carrier, policy terms, or renewal date. The Customer is responsible for keeping its stated renewal date current and for initiating a new tabletop exercise when its own obligations warrant one.

9. Intellectual Property

9.1 We own the Service and its contents, including the authored scenario library. You own your Customer Data, including your IRP plan content.

9.2 The scenario packs in the library are authored content owned by RenewalProof; the Customer receives a license to use them for tabletop exercises under its subscription, not to redistribute or resell them.

10. Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS." WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, AND NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE IS FREE FROM ERRORS OR THAT THE SERVICE'S OUTPUTS WILL SATISFY ANY SPECIFIC CARRIER, BROKER, UNDERWRITER, OR AUDITOR.

11. Limitation of Liability

TO THE EXTENT PERMITTED BY APPLICABLE LAW, OUR AGGREGATE LIABILITY ARISING FROM OR RELATED TO THE SERVICE WILL NOT EXCEED THE FEES YOU PAID IN THE TWELVE MONTHS PRECEDING THE CLAIM. IN NO EVENT ARE WE LIABLE FOR INDIRECT, CONSEQUENTIAL, SPECIAL, INCIDENTAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOST PROFITS, ANY DENIED CLAIM, LOST COVERAGE, OR INCREASED PREMIUM ARISING FROM A CARRIER'S DECISION, OR ANY FINDING, INQUIRY, INVESTIGATION, OR ENFORCEMENT ACTION BY ANY REGULATORY, ADMINISTRATIVE, OR ENFORCEMENT BODY OF ANY KIND — INCLUDING WITHOUT LIMITATION ANY STATE ATTORNEY GENERAL, STATE INSURANCE REGULATOR, OR THE FTC. This carve-out is stated as broadly as possible and applies uniformly regardless of the specific statute, regulation, or regulatory or enforcement body involved; a party asserting that this carve-out does not apply to a particular claim, statute, or regulatory or enforcement body bears the burden of establishing that, rather than us bearing the burden of having disclaimed each one individually.

11.1 Indemnification — stated in the contract you execute. Both indemnities — ours for IP infringement and yours — are stated in full on the face of §7 of the RenewalProof Engagement & Tiers SOW, together with the claim procedure. That §7 is the indemnification block carried on the face of the click-signed Order Form you accept at either tier, rendered above the agree control. Those provisions govern; this §11.1 is a cross-reference and does not restate them. These Terms state no indemnification obligation separate from, additional to, or narrower than SOW §7, and nothing in these Terms enlarges or limits it. The liability cap stated above in this §11 does not apply to either party's obligations under SOW §7.

12. Term and Termination

12.1 These Terms continue until the subscription is canceled or terminated. Cancellation takes effect at the end of the current billing period.

12.2 We may terminate for material breach of these Terms (including misrepresentation of certification or affiliation status), with 10 days' written notice (email to the account or billing contact, deemed given when sent; the period runs from the send date) unless the breach is incurable.

12.3 On termination, Customer Data (including sealed attestation records) is available for export for 30 days, then deleted. Sealed attestations remain independently verifiable at their existing /verify/<token> links against the exported record's hash; RenewalProof's own copy is deleted per this schedule.

13. Governing Law; Disputes

Governed by Colorado law. Disputes are resolved by binding arbitration administered by JAMS in Boulder County, Colorado, except that either party may seek injunctive relief in a Colorado court. Each party waives any right to a jury trial and to participation in any class, collective, or representative proceeding.

Assignment; Change of Control. You may not assign, delegate, or transfer these Terms, in whole or in part, whether by operation of law, merger, or change of control, without our prior written consent; any attempted assignment in violation of this sentence is void. We may, without your consent and without notice except as any applicable data-protection law requires, assign or transfer these Terms and all of our rights and obligations under them, in whole or in part, (a) to a successor or acquirer in connection with a merger, acquisition, or sale of substantially all of our business or assets, or (b) to an affiliate, subsidiary, or newly formed entity in connection with a corporate conversion, reorganization, or contribution or drop-down of assets undertaken to effect a sale, reorganization, or transfer of the specific business line or product to which these Terms relate. Upon such an assignment, all of our rights under these Terms pass to the assignee, the assignee assumes our obligations arising after the assignment, and your continued use of the Service constitutes acknowledgment of the assignee as "RenewalProof" going forward. A change in our ownership, control, equity holders, or entity form is not a breach of, default under, or ground to terminate, suspend, renegotiate, or re-price these Terms, and does not trigger any right of termination, consent, first refusal, most-favored-nation, audit, or refund on your part. This paragraph controls over any contrary term in a Customer purchase order or procurement addendum.

14. Updates

30 days' email notice to the Customer billing contact for material changes. Notice is deemed given when sent; the 30-day period runs from the send date, and failure to read a notice does not extend it. Continued use after the effective date constitutes acceptance.

15. Contact

[email protected] — legal [email protected] — privacy

RenewalProof is a product of Ellis Intelligence LLC. This page reflects RenewalProof's current policies — see also our Terms of Service, Privacy Policy, DPA, Cookies, and Subprocessors pages. Questions about this document? Email [email protected].