Terms of Service
Effective: 2026-05-15
These Terms of Service ("Terms") govern your access to and use of Compliance Assessment Tool, LLC's website at complianceassessmenttool.com, the API at https://api.complianceassessmenttool.com, the embeddable iframe portal, and the MCP server (collectively the "Service"). By accessing the Service you agree to these Terms.
If you are accessing the Service on behalf of a Partner organization that has executed a Master Services Agreement with us, that MSA governs your access and these Terms supplement it. Where there is a conflict, the MSA controls.
1. Account & eligibility
You must be at least 18 years old and authorized to bind the entity you represent. API keys are issued to a single legal entity; you may not share them outside that entity. You are responsible for all activity that occurs under your API keys.
2. Use of the Service
Subject to these Terms and the MSA, we grant you a non-exclusive, non-transferable, revocable license to access the Service for your internal business purposes and to deliver compliance services to your end-user merchants. You may embed our iframe portal in your own properties subject to our brand guidelines.
3. Restrictions
You may not: (a) reverse engineer, decompile, or attempt to derive source code from the Service except to the extent expressly permitted by applicable law; (b) use the Service to build a competing product; (c) circumvent or attempt to circumvent any security feature including rate limits, tenant isolation, or audit logging; (d) submit cardholder data (PAN, full track, CVV, PIN) to the Service — we are not in PCI scope to receive it and doing so is a breach of these Terms; (e) use the Service to violate any law, regulation, or third-party right; (f) misrepresent the identity of merchants on whose behalf you are using the Service. See our full Acceptable Use Policy.
4. Fees
Fees are set in the Order Form executed with your MSA. Our standard model is per-merchant-assessed, billed monthly in arrears. No partner-tier rate limits, no per-call metering, no usage minimums. Invoices are due net 30. Late payments accrue interest at the lesser of 1% per month or the maximum permitted by law.
5. Intellectual property
The Service, including all software, documentation, and trademarks, remains the exclusive property of Compliance Assessment Tool, LLC. You retain ownership of all Customer Data you submit. You grant us a limited license to process Customer Data solely to deliver the Service to you, as further described in our Data Processing Addendum.
6. Confidentiality
Each party agrees to protect the other's Confidential Information using at least the same care it uses to protect its own Confidential Information of like kind, and in no event less than reasonable care. Confidential Information includes the Service's non-public APIs, security documentation, pricing, and roadmap discussions.
7. Privacy
Our handling of personal data is described in our Privacy Policy and (for Partner-side processing) our DPA.
8. Service level commitment
Our uptime commitment and service credits are set out in the Service Level Agreement.
9. Warranty disclaimer
EXCEPT AS EXPRESSLY PROVIDED IN THE MSA, THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION ANY WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, OR ARISING FROM A COURSE OF DEALING OR USAGE OF TRADE. We do not warrant that any Self-Assessment Questionnaire generated by the Service will be accepted by any specific acquiring bank, card brand, or QSA; final acceptance is at the discretion of the receiving party.
10. Limitation of liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY WILL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, ARISING OUT OF OR RELATED TO THESE TERMS, WHETHER IN CONTRACT, TORT, OR ANY OTHER THEORY, AND WHETHER OR NOT THE PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. EACH PARTY'S AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS WILL NOT EXCEED THE GREATER OF (A) THE FEES PAID OR PAYABLE TO US IN THE TWELVE MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY, OR (B) ONE THOUSAND U.S. DOLLARS. The exclusions and limitations above do not apply to (i) breaches of confidentiality, (ii) a party's indemnification obligations, or (iii) liability that cannot be limited by law.
11. Indemnification
You will indemnify, defend, and hold harmless Compliance Assessment Tool, LLC from and against any third-party claim arising out of your breach of these Terms, your violation of law, or the inaccuracy of any Customer Data you submit. We will indemnify, defend, and hold harmless Partner against any third-party claim alleging that the Service as provided by us infringes a US patent, copyright, or trademark, subject to the procedures and exclusions stated in the MSA.
12. Term & termination
These Terms remain in effect while you have an active API key or executed MSA. We may suspend access for material breach with 10 days' written notice and an opportunity to cure. Either party may terminate for convenience per the notice provisions in the MSA. Sections that by their nature should survive termination (IP, confidentiality, indemnification, limitation of liability, governing law) will survive.
13. Governing law & disputes
13.1 Governing law. These Terms are governed by the laws of the State of Delaware, without regard to its conflict-of-laws rules. The U.N. Convention on Contracts for the International Sale of Goods does not apply.
13.2 Venue & jury waiver. Any dispute will be resolved exclusively in the state or federal courts located in Wilmington, Delaware. The parties consent to personal jurisdiction in those courts and irrevocably waive any right to a jury trial.
13.3 Class action waiver. Each party waives any right to bring or participate in a class, collective, or representative action arising out of these Terms. Disputes will be resolved on an individual basis only.
13.4 Time limit. Any claim arising out of these Terms must be brought within one (1) year after the cause of action accrues; otherwise it is permanently barred (except where applicable law prohibits a contractual shortening of the limitations period).
14. Beta / preview features
From time to time we may make features available that are designated as "beta," "preview," or "experimental." These are provided as-is, without warranty, support obligation, or service-credit eligibility, and may be modified, suspended, or removed at any time. Your use of beta features is voluntary and at your sole risk.
15. Force majeure
We are not liable for any failure or delay in performance (other than refund obligations) caused by events beyond our reasonable control, including acts of God, natural disasters, war, terrorism, civil unrest, government acts, labor disputes, internet backbone failures, denial-of-service attacks, sub-processor outages (AWS, OpenAI), or pandemics.
16. Electronic communications consent
By using the Services you consent to receive communications from us electronically (email and in-product notices) for all transactional, service, security, and legal-notice purposes. You agree that all agreements, notices, disclosures, and other communications we provide electronically satisfy any legal requirement that they be in writing, including under the U.S. Electronic Signatures in Global and National Commerce Act (E-SIGN) and the Uniform Electronic Transactions Act (UETA).
17. Counterparts & electronic signatures
These Terms may be accepted by clicking through an acceptance interface in the Services, by checking an "I agree" box, or by use of the Services after notice. An MSA referencing these Terms may be executed in counterparts and by electronic signature (DocuSign, HelloSign / Dropbox Sign, Adobe Sign, or equivalent), each of which is an original.
18. Severability & survival
If any provision is held invalid or unenforceable, the remaining provisions remain in effect and the invalid provision will be modified to the minimum extent necessary to make it enforceable. Sections that by their nature should survive (3 Restrictions, 5 Intellectual property, 6 Confidentiality, 9 Warranty disclaimer, 10 Limitation of liability, 11 Indemnification, 13 Governing law & disputes, 16 Electronic communications consent, and 18 Severability & survival) will survive any termination.
19. Entire agreement
These Terms, together with any executed MSA, the DPA, the SLA, the AUP, and the Privacy Policy, are the entire agreement between you and us on their subject matter and supersede any prior or contemporaneous agreements. If you have executed an MSA with us, the order of precedence is: (1) Order Form, (2) DPA, (3) MSA, (4) SLA, (5) AUP and Privacy Policy. A click-through acceptance of these Terms does not override a counter-signed MSA.
20. No third-party beneficiaries; waiver
These Terms do not create rights for any person other than you and us. Failure or delay in enforcing a right is not a waiver of that right.
21. Changes
We will post any material change at least 30 days before it takes effect for existing Partners. Continued use after the effective date constitutes acceptance. If a change materially reduces your rights, you may terminate your Order Form without penalty by giving us notice before the change takes effect.
22. Contact
Compliance Assessment Tool, LLC
1111B S Governors Ave, #39128, Dover, DE 19904
Legal & everything else: chris.larson@complianceassessmenttool.com