Terms of Service
Last updated: July 11, 2026
1. Acceptance of Terms
By accessing or using CMMC Compass, you agree to these Terms of Service. If you do not agree, do not use the service.
2. Description of Service
CMMC Compass is a compliance documentation tool that helps organizations assess their implementation of NIST SP 800-171 Rev 2 controls, calculate an estimated SPRS score, and generate draft compliance documents including a System Security Plan, Plan of Action and Milestones, and gap analysis.
3. Not a Certification or Legal Compliance Guarantee
CMMC Compass does not certify compliance with CMMC 2.0, NIST SP 800-171, or any other framework. AI-generated content, including SSP narratives, is a drafting aid only and must be reviewed, verified, and edited by the customer before submission to any assessor, contracting officer, or third party. Nymbus Security makes no guarantee that use of this service will result in a passing CMMC assessment or SPRS score.
4. Prohibited Content
Users must not enter Controlled Unclassified Information, classified information, or any regulated data into CMMC Compass. The service is designed for general, non-sensitive descriptions of security controls and practices only.
5. Account Registration
Access to CMMC Compass is currently invite-only. Users are responsible for maintaining the confidentiality of their login credentials and for all activity under their account.
6. User Content
Customers retain ownership of the assessment data, implementation notes, and any content they submit. Nymbus Security may process this content to provide the service, including sending relevant excerpts to third-party AI providers for narrative generation.
7. Fees
Pricing and billing terms will be provided at the time of subscription. Nymbus Security reserves the right to change pricing with advance notice to active customers.
8. Termination
Nymbus Security may suspend or terminate access for violation of these terms, including submission of prohibited content.
9. Disclaimer of Warranties
The service is provided "as is" without warranties of any kind, express or implied.
10. Limitation of Liability
To the maximum extent permitted by law, Nymbus Security is not liable for indirect, incidental, or consequential damages arising from use of the service.
11. Changes to These Terms
Nymbus Security may update these terms from time to time. Continued use of the service after changes constitutes acceptance.
12. Contact
Questions about these terms can be sent to jay@nymbussecurity.com.