Terms of Service

Effective Date:

PolicyFoundry Terms of Service

Last updated: September 16, 2026

NOTICE — INTERIM VERSION: These Terms were prepared with care but have not yet been reviewed by a licensed attorney. They are intended to provide reasonable protection on an interim basis and must be reviewed by qualified counsel licensed in North Carolina before or shortly after commercial launch. Nothing in this document is legal advice.


1. Acceptance of Terms

By accessing or using PolicyFoundry.ai (the "Site") or purchasing any product, service, or subscription offered by PolicyFoundry ("we," "us," "our," or "PolicyFoundry," a business of AI Cyber Solutions LLC), you agree to be bound by these Terms of Service ("Terms"). If you are entering into these Terms on behalf of a company or other legal entity, you represent that you have authority to bind that entity, and "you" refers to that entity. If you do not agree to these Terms, do not use the Site or purchase our services.


2. Description of Services

PolicyFoundry produces framework-mapped AI governance policy documents and related compliance deliverables for financial technology companies and other regulated entities. Our current and future services include, but are not limited to:


  • Guardian — AI Acceptable Use Policy (currently available)

  • Barometer, Compass, Shield, Trust, Vault, SOC 2 Suite, and additional modules — in development or planned for future release

  • Regulation Watch — ongoing regulatory-change monitoring subscription

  • Other policy, compliance, and governance deliverables we may offer from time to time

Deliverables are drafted by PolicyFoundry through a structured process that uses AI-assisted drafting tools, based on your responses to our structured intake questionnaire. Unless the product description states otherwise at the time of purchase, each deliverable is reviewed by a credentialed practitioner before delivery. Specific product details, pricing, delivery timelines, and inclusions are described on the Site at the time of purchase and control over any general description in these Terms.


3. Nature of Deliverables; Customer Verification Responsibility

You acknowledge and agree that:

(a) PolicyFoundry deliverables are templates and informational work product, drafted from your intake responses and mapped to regulatory frameworks as they exist on the date of drafting. They are a starting point for your own governance program, not a finished legal or compliance instrument.

(b) Regulatory citations, statutes, and framework mappings are current as of the drafting date only. Laws, regulations, and standards change. PolicyFoundry does not undertake to update any delivered document after delivery except through a separately purchased subscription or revision.

(c) Certain items in your deliverable are marked for your verification (for example, "[CUSTOMER TO VERIFY]") or for review by your counsel (for example, "[REVIEW WITH COUNSEL]"). You are responsible for resolving every such item, with qualified counsel where indicated, before adopting, signing, submitting, or relying on the document.

(d) You are responsible for confirming that the deliverable fits your specific business, jurisdiction, licensing status, and regulatory posture before use.


4. Account Registration and Purchase

To purchase services, you must provide accurate and complete information, including name, email address, company name, and payment details. You are responsible for maintaining the confidentiality of any account credentials and for all activities conducted under your account.


5. Payment Terms

Payment is processed through Stripe or other third-party payment processors we select. By providing payment information, you authorize us to charge the applicable fees for the products or services you purchase.

All fees are quoted in United States Dollars unless otherwise specified. All sales are subject to applicable taxes, which are the responsibility of the purchaser.

Subscription services, including Regulation Watch, renew automatically for successive terms at the interval stated on the Site at purchase, unless cancelled by the customer before the renewal date. Cancellation instructions are provided in your account or by contacting hello@policyfoundry.ai.


6. Refund Policy


  • No charge before quote. No charge is made until you have received a quote and agreed to proceed.

  • Before intake submission — full refund. If you have paid but not yet submitted your intake questionnaire, you may request a full refund at any time by emailing hello@policyfoundry.ai, as no drafting has begun.

  • After intake submission — non-refundable. Once the intake questionnaire is submitted, drafting and any practitioner review begin. Because the deliverable is prepared specifically for you, the engagement is non-refundable at that point, except as stated in the delivery guarantee below.

  • Delivery guarantee. If PolicyFoundry fails to deliver within ten (10) business days of a complete intake submission, you may request a full refund — except where the delay is caused by incomplete or unclear intake responses requiring clarification from you.

  • Revisions beyond the agreed scope are quoted separately and are not subject to refund.

  • Refunds, when applicable, are issued to the original payment method within ten (10) business days of approval.


7. Delivery

Guardian and other policy deliverables are delivered via email to the address provided at purchase, typically within five (5) business days of intake submission. Delivered documents are provided in editable DOCX format and include a SHA-256 cryptographic fingerprint for integrity verification (see Section 8).

Subscription services such as Regulation Watch are delivered on an ongoing basis via email notification when applicable regulatory changes are identified. PolicyFoundry does not guarantee that any subscription will identify every regulatory change relevant to you, and a subscription is not a substitute for your own monitoring or for advice of counsel.


8. Document Integrity Verification

Each PolicyFoundry policy document is issued with a SHA-256 cryptographic fingerprint of the file exactly as delivered. Because any change to a file changes its fingerprint, the fingerprint cannot be embedded in the document it describes. It is recorded in the separate Document Verification Report delivered with your policy, and the policy's document control block refers you to that report.

You may confirm that your file is unchanged in either of two ways: (a) compute the SHA-256 hash of your file locally and compare it to the fingerprint in the Document Verification Report; or (b) use the verification tool at policyfoundry.ai/verify, which computes the hash locally in your browser and compares it to the fingerprint you enter. PolicyFoundry does not upload or store your file through this tool.

A mismatch is expected after you complete, sign, or otherwise edit the document; the fingerprint certifies the document as delivered. The fingerprint confirms only that a file is byte-identical to what was delivered; it is not a certification of legal sufficiency, regulatory acceptance, or accuracy. To have a completed or adopted version fingerprinted, send the final file to hello@policyfoundry.ai with your document reference number.


9. Minor Revisions and Corrections

For policy documents delivered by PolicyFoundry:

  • Included: Minor clarifications, typographical corrections, and adjustments to stated facts (such as organization name or effective date) are included at no additional charge when requested within seven (7) business days of delivery.

  • Not included: Material revisions, restructuring, additional frameworks, expanded scope, or substantive changes beyond the original intake scope are handled on a case-by-case basis at discounted rates for prior customers.


10. Intellectual Property

Customer License to Delivered Documents. Upon full payment and delivery, the customer receives a perpetual, non-exclusive, worldwide license to use, modify, adapt, and distribute the delivered policy document within their organization for their internal business, compliance, and regulatory purposes. The customer may present the delivered document, in original or modified form, to auditors, regulators, examiners, and internal stakeholders.

PolicyFoundry Retained Rights. PolicyFoundry retains all right, title, and interest in and to: the underlying methodology, intake framework, drafting and verification processes, regulatory mappings, question sets, analytical approaches, document templates, gate and quality-control tooling, brand elements, trade dress, and all other intellectual property used in producing customer deliverables. The customer does not acquire any right to resell, sublicense, republish, or commercially redistribute the delivered document or any PolicyFoundry intellectual property to third parties outside their organization.

Feedback. If you provide suggestions or feedback, you grant PolicyFoundry a perpetual, royalty-free license to use it without obligation to you.

Site Content. All content on the Site, including text, graphics, logos, images, and software, is owned by PolicyFoundry or its licensors and is protected by applicable intellectual property laws. You may not copy, reproduce, distribute, or create derivative works from Site content without our prior written permission.


11. Customer Obligations and Warranties

You represent and warrant that:


  • You are authorized to purchase services on behalf of the entity you represent.

  • The information you provide in the intake questionnaire and at purchase is accurate and complete to the best of your knowledge.

  • You will not submit unlawful, misleading, or fraudulent information.

  • You will not submit highly sensitive information — including consumer or employee personally identifiable information, protected health information, financial account numbers, or classified government information — through the intake questionnaire. The questionnaire is designed to be answered about your organization's practices, systems, and vendors, not about identifiable individuals; do not include identifiable individuals' data in your responses.

  • Your use of the delivered document will comply with all applicable laws.

You acknowledge that the quality and specificity of the delivered policy depends on the completeness and accuracy of your intake responses. PolicyFoundry is not responsible for deliverables that are inadequate due to incomplete, inaccurate, or unclear customer-provided information.


12. No Legal, Regulatory, or Compliance Advice

PolicyFoundry produces policy documents and compliance materials for informational and operational purposes. Nothing provided by PolicyFoundry — including the Site, delivered documents, intake questionnaires, newsletters, verification reports, or any other communication — constitutes legal advice, regulatory advice, compliance advice, tax advice, or an opinion of counsel. Delivered documents are not a substitute for advice from qualified legal counsel, compliance advisors, or regulatory specialists familiar with your specific circumstances. You are solely responsible for having the delivered document reviewed by qualified counsel before adoption or submission to any regulatory authority.


13. No Client or Advisory Relationship

Use of the Site, purchase of services, or receipt of delivered documents does not create an attorney-client relationship, a consulting engagement, an accountant-client relationship, or a fiduciary relationship of any kind between you and PolicyFoundry, its principals, or its staff. PolicyFoundry's principals may hold professional certifications; those certifications do not create any professional-client relationship with you and are not a substitute for licensed legal advice.


14. Disclaimer of Warranties

THE SITE AND ALL SERVICES, PRODUCTS, AND DELIVERABLES ARE PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, OR THAT THE DELIVERABLES WILL SATISFY ANY SPECIFIC REGULATORY EXAMINATION, AUDIT, OR LEGAL REQUIREMENT.

Where a deliverable includes practitioner review, PolicyFoundry reviews it against applicable regulatory standards as they exist on the drafting date, but does not warrant or guarantee that any delivered document is legally sufficient, error-free, complete, current after the drafting date, or that it will be accepted without modification by any particular auditor, examiner, court, or regulator. You are responsible for reviewing delivered documents with qualified legal counsel before adoption or submission to any regulatory authority.

PolicyFoundry does not warrant that the Site will be uninterrupted, secure, or error-free.


15. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, POLICYFOUNDRY, AI CYBER SOLUTIONS LLC, AND THEIR PRINCIPALS, MEMBERS, EMPLOYEES, CONTRACTORS, AND AFFILIATES SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST DATA, REGULATORY FINES OR PENALTIES, OR COSTS OF SUBSTITUTE SERVICES, ARISING OUT OF OR RELATED TO YOUR USE OF THE SITE, OUR SERVICES, OR OUR DELIVERABLES, WHETHER BASED IN CONTRACT, TORT, STRICT LIABILITY, OR ANY OTHER THEORY, EVEN IF POLICYFOUNDRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

IN NO EVENT SHALL THE AGGREGATE LIABILITY OF POLICYFOUNDRY AND AI CYBER SOLUTIONS LLC TO YOU, ARISING OUT OF OR RELATED TO THESE TERMS OR ANY DELIVERABLE, EXCEED THE AMOUNT PAID BY YOU TO POLICYFOUNDRY FOR THE SPECIFIC PRODUCT OR SERVICE GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM.

Some jurisdictions do not allow certain limitations; in those jurisdictions, liability is limited to the maximum extent permitted by law.


16. Indemnification

You agree to indemnify, defend, and hold harmless PolicyFoundry, AI Cyber Solutions LLC, and their principals, members, employees, contractors, and affiliates from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use, modification, adoption, or distribution of any deliverable; (b) your use of the Site or our services; (c) your violation of these Terms; (d) your violation of any applicable law or third-party right; or (e) the information you provided in the intake questionnaire or at purchase.


17. Third-Party Services

PolicyFoundry uses third-party service providers for payment processing (Stripe), email delivery, hosting, analytics, AI-assisted drafting (see Section 2), and related operational functions. Your use of our services may be subject to the applicable terms of these providers. PolicyFoundry is not responsible for the acts or omissions of third-party providers.


18. Confidentiality of Intake Information

PolicyFoundry treats the substantive business information you submit through the intake questionnaire as confidential and uses it to produce and support your deliverables and to improve our services, subject to our Privacy Policy. This Section does not apply to information that is public, that we receive lawfully from another source, or that we must disclose by law.


19. Suspension and Termination

PolicyFoundry may suspend or terminate your access to the Site or services for violation of these Terms or for unlawful, abusive, or fraudulent use. Sections that by their nature should survive termination — including Intellectual Property, Disclaimers, Limitation of Liability, Indemnification, and Governing Law — survive.


20. Modifications to Terms

PolicyFoundry may update these Terms at any time. Unless the product description states otherwise at purchase, material changes will be communicated via the Site or by email to registered customers, and the "Last updated" date above will be revised. Terms in effect at the time of your purchase govern that purchase. Your continued use of the Site or services after changes take effect constitutes acceptance of the updated Terms.


21. Governing Law and Dispute Resolution

These Terms are governed by the laws of the State of North Carolina, United States, without regard to conflict-of-law principles. Any dispute arising out of or related to these Terms or your use of our services will be resolved exclusively in the state or federal courts located in Mecklenburg County, North Carolina, and you consent to personal jurisdiction and venue in those courts. Each party will bear its own costs except as otherwise provided by law or these Terms.


22. Severability

If any provision of these Terms is found to be unenforceable, that provision will be enforced to the maximum extent permissible, and the remaining provisions will remain in full force and effect.


23. Entire Agreement

These Terms, together with the Privacy Policy, Cookie Policy, and any additional terms applicable to specific products, constitute the entire agreement between you and PolicyFoundry with respect to your use of the Site and purchase of services, and supersede any prior agreements on that subject.


24. Contact

Questions about these Terms should be directed to: hello@policyfoundry.ai

PolicyFoundry · a business of AI Cyber Solutions LLC · Charlotte, NC, USA

This document is an interim draft prepared without licensed legal review. Have it reviewed by an attorney licensed in North Carolina before relying on it for commercial transactions.