Effective August 2, 2026 · Last updated August 2, 2026
These Terms of Service (“Terms”) govern your access to and use of RegulatoryForge (the “Service”), operated by RegulatoryForge (“we,” “us,” “our”). By creating an account or using the Service, you agree to these Terms. If you do not agree, do not use the Service. If you are agreeing on behalf of a company, you represent that you have authority to bind that company.
The Service generates draft documents and analyses to assist your compliance work. It is a drafting and tracking tool, not a law firm, not a C3PAO, not a Registered Provider Organization, and not a substitute for qualified professional judgment. We do not certify you, and using the Service does not guarantee that you will pass a CMMC assessment, achieve any certification, or satisfy any contractual or regulatory obligation. You are responsible for having your documents and assessments reviewed by qualified personnel before you rely on them.
Scores, assessments, and representations you submit to the Supplier Performance Risk System (SPRS), to a contracting officer, or to any government system are your representations, not ours. Knowingly submitting an inaccurate score or false statement to the U.S. Government can carry civil and criminal liability, including under the False Claims Act (31 U.S.C. §§ 3729–3733). Verify every figure independently before submitting it. We are not responsible for the accuracy of anything you submit.
RegulatoryForge provides software for generating CMMC and NIST SP 800-171 compliance documentation, tracking control implementation status, estimating SPRS scores, and related compliance workflows. We may add, modify, or discontinue features at any time. If we discontinue a feature you are actively paying for, we will give you reasonable notice.
Trials
New accounts receive a free trial with limited functionality, including a limited number of preview generations. Trials do not require a credit card. When the trial period ends, access to subscriber-only features stops until you subscribe. We may modify or end trial offers at any time.
Paid subscriptions
Cancellation
You may cancel at any time through your billing settings or by emailing support@regulatoryforge.com. Cancellation takes effect at the end of your current billing period. You keep access until then. We do not prorate partial periods.
Refunds
Monthly plans and bundles. Payments are non-refundable. Your free trial is the evaluation period — use it to confirm the Service fits before you subscribe. Cancelling stops future charges; you keep access through the end of the period you already paid for.
Annual plans. Contact us within 30 days of your first annual payment and we will refund it in full. After 30 days, annual payments are non-refundable.
Always refunded. Billing errors, duplicate charges, and charges following a prolonged service outage — regardless of plan or timing. Email support@regulatoryforge.com and we will make it right.
Several features generate drafts using third-party AI models. AI output can be incomplete, outdated, or wrong, and it may state something confidently that is incorrect. Every generated document is a draft. You must review, verify, and edit it before relying on it, submitting it, or presenting it to an assessor.
Content you submit to an AI-assisted feature is transmitted to our AI provider for processing, as described in our Privacy Policy. Do not submit CUI, classified information, or export-controlled technical data.
You agree not to:
We may suspend or terminate accounts that violate this section, without refund, and without notice where the violation poses a security risk.
You retain all ownership of the information you enter and the documents you generate. You grant us a limited license to store, process, and transmit that content solely to operate and support the Service. We do not use your content to train machine learning models.
You represent that you have the right to submit the content you upload, and that doing so does not violate any law, contract, or third-party right.
The Service — including its software, interface, templates, control mappings, scoring logic, and documentation — is owned by RegulatoryForge and protected by intellectual property law. These Terms grant you a limited, non-exclusive, non-transferable, revocable right to use the Service while your subscription is active. No other rights are granted.
Underlying government publications, including NIST SP 800-171, NIST SP 800-171A, and DFARS clauses, are public documents and are not our property.
The Service depends on third-party providers, including cloud hosting, payment processing, email delivery, and AI model providers. We are not responsible for their acts, omissions, or outages. Your use of the Service may also be subject to their terms where you interact with them directly — for example, entering card details on Stripe’s checkout page.
The service is provided “as is” and “as available,” without warranties of any kind, express or implied, including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.
We do not warrant that the Service will be uninterrupted, error-free, or secure, that defects will be corrected, or that any document, score, or analysis it produces is accurate, complete, current, or sufficient for any regulatory, contractual, or assessment purpose.
To the maximum extent permitted by law, RegulatoryForge will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, lost revenue, lost contracts, lost data, loss of goodwill, failure to obtain or maintain any certification, loss of a contract award, or government penalties or enforcement actions, arising out of or related to your use of the Service, whether based in contract, tort, or any other theory, even if we have been advised of the possibility of such damages.
Our total aggregate liability for all claims relating to the Service will not exceed the greater of (a) the amount you paid us in the twelve months preceding the event giving rise to the claim, or (b) one hundred U.S. dollars ($100).
Some jurisdictions do not allow certain limitations, so parts of this section may not apply to you. Nothing here limits liability that cannot be limited by law.
You agree to defend, indemnify, and hold harmless RegulatoryForge and its officers, employees, and agents from any claim, demand, loss, or expense — including reasonable attorneys’ fees — arising from your use of the Service, your content, your submissions to any government system, or your violation of these Terms or of any law.
You may stop using the Service and delete your account at any time. We may suspend or terminate your access if you materially breach these Terms, if your payment fails and is not cured, or if we are required to by law.
On termination, your right to use the Service ends immediately. Export your data before you cancel — data retention after termination is described in our Privacy Policy. Sections 6 through 11, and any payment obligations already incurred, survive termination.
We may update these Terms as the product and the law change. For material changes, we will update the “Last updated” date above and notify active account holders by email at least 14 days before the change takes effect. Continued use after the effective date constitutes acceptance. If you do not agree, cancel before the effective date.
These Terms are governed by the laws of the Commonwealth of Virginia, without regard to its conflict-of-laws rules. Any dispute will be brought exclusively in the state or federal courts located in Virginia, and you consent to their jurisdiction.
Before filing anything, contact us at support@regulatoryforge.com. Most disputes are resolved faster by email than by litigation, and we will engage in good faith for at least 30 days.
RegulatoryForge
General and billing: support@regulatoryforge.com
Security: security@regulatoryforge.com
4210 Divided Sky Court