Terms and Conditions

These Terms and Conditions (“Terms”) govern your access to and use of cyberxone.ca (the “Site”), operated by CyberXOne Inc. (“CyberXOne”, “we”, “us”, “our”), a corporation incorporated under the Canada Business Corporations Act with its head office in Markham, Ontario.

By accessing or using the Site, you agree to be bound by these Terms. If you do not agree, you must not use the Site. These Terms apply only to the Site and do not replace or modify any separate written agreement you may enter into with CyberXOne for professional services.

1. What this Site is

The Site describes CyberXOne’s cybersecurity governance, risk, and compliance services. It exists to inform prospective clients and to allow you to contact us.

Nothing on this Site, including communications initiated through a contact form or email address published on the Site, creates a client, advisory, fiduciary, confidential, or other professional relationship with CyberXOne. A professional relationship begins only when the applicable parties enter into a written engagement agreement, statement of work, or other written agreement setting out the agreed scope and terms.

2. The content is general information, not advice

Everything published on this Site, including service descriptions, downloadable materials, articles, checklists, examples, and other guidance, is provided for general informational purposes and to describe our capabilities.

Site content is not professional, cybersecurity, legal, privacy, regulatory, financial, or compliance advice and must not be relied upon as a substitute for an assessment of your specific circumstances. Security and compliance requirements vary by organization, technology, sector, jurisdiction, contractual obligations, threat environment, and risk appetite. A control or approach appropriate for one organization may be unsuitable for another.

You should not act, or refrain from acting, solely on the basis of Site content without obtaining advice appropriate to your circumstances. References to laws, regulations, standards, frameworks, or industry practices are not representations that any particular requirement applies to you or that following the referenced material will achieve compliance or eliminate cybersecurity risk.

3. Accuracy and availability

We take reasonable care in preparing Site content, but we do not represent or warrant that it is complete, accurate, current, or suitable for any particular purpose. Cybersecurity threats, technologies, standards, frameworks, regulatory expectations, and laws change frequently, and Site content may not reflect the latest developments.

We do not guarantee that the Site will be continuously available, uninterrupted, secure, or error-free. We may correct, update, remove, suspend, restrict, or withdraw any part of the Site at any time, subject to applicable law. We are not responsible for delays or failures caused by internet, hosting, telecommunications, third-party service, or other circumstances outside our reasonable control.

4. Intellectual property

Unless otherwise stated, all content on the Site, including text, service descriptions, methodologies, downloadable documents, graphics, design elements, layout, the CyberXOne name, and the CyberXOne logo, is owned by CyberXOne Inc. or used under licence and is protected by applicable Canadian and international intellectual property laws.

4.1 What you may do

You may view the Site and download or print materials that are expressly made available for download solely for your own lawful, internal, non-commercial evaluation of CyberXOne and its services. This limited permission does not transfer any ownership or intellectual property rights to you.

4.2 What you may not do

Except as expressly permitted by these Terms or applicable law, without our prior written consent you may not:

reproduce, republish, or redistribute any content
use any content for commercial purposes
modify, adapt, or create derivative works from it
use our name, logo, or brand in any way that suggests endorsement or affiliation
systematically extract or scrape content, including for the purpose of training machine learning models
remove any copyright or proprietary notice

Third-party trademarks, service marks, standards, and framework names referenced on the Site, including ISO, NIST, PCI DSS, SOC, and HIPAA, belong to their respective owners or rights holders. References identify standards, frameworks, or subject areas relevant to our work and do not imply certification, accreditation, partnership, endorsement, sponsorship, or affiliation unless expressly stated.

5. Acceptable use

You must use the Site only for lawful purposes. You agree not to use, or attempt to use, the Site to:

break any applicable law or regulation
gain or attempt to gain unauthorized access to the Site, its servers, or any connected system
introduce malicious code, or conduct any scanning, probing, penetration testing, or denial of service activity against our infrastructure without our prior written authorization
interfere with anyone else’s use of the Site
submit false, misleading, or fraudulent information through any form
send unsolicited commercial messages to any contact address published here
collect information about other users

We may investigate suspected misuse, preserve relevant evidence, restrict access where reasonably necessary to protect the Site or others, and report suspected unlawful activity to appropriate authorities. Nothing in these Terms authorizes security testing of CyberXOne systems.

RESPONSIBLE DISCLOSURE

We welcome good-faith reports of suspected vulnerabilities, but these Terms do not authorize testing. If you believe you have identified a vulnerability in the Site, stop any activity that could access, alter, destroy, disrupt, exfiltrate, or expose data or systems and report the issue to contact@cyberxone.ca. Do not exploit the issue, access data that is not your own, establish persistence, use social engineering, degrade service, or publicly disclose technical details before CyberXOne has had a reasonable opportunity to investigate and respond.

6. Information you send us

You are responsible for information you submit through the Site and for ensuring that you have authority to provide it. Do not use the Site to transmit information that is unlawful, infringing, malicious, misleading, or that you are not authorized to disclose.

Do not send confidential, highly sensitive, security-sensitive, or regulated information through the general website contact form. This includes passwords or credentials, private keys, detailed network or system diagrams, exploit code, vulnerability details, incident evidence or specifics, personal health information, and personal financial information. The form is intended only for a general description of your requirements.

Unless CyberXOne has expressly agreed otherwise in writing, communications sent through the Site or to a general contact address should not be treated as a secure channel and do not, by themselves, create professional privilege, a fiduciary duty, or a contractual confidentiality obligation. If an engagement proceeds, the applicable agreement will address confidentiality and appropriate methods for exchanging sensitive information.

By submitting information, you represent that, to the best of your knowledge, you are authorized to provide it and that it is not materially false or misleading. Our handling of personal information is described in our Privacy Policy.

7. Third party links

The Site may contain links to third-party websites, tools, standards bodies, or other resources for convenience or reference. Unless expressly stated, a link does not constitute endorsement, sponsorship, or affiliation. We do not control third-party resources and are not responsible for their availability, content, security, accuracy, terms, or privacy practices. Your use of them is subject to the third party’s own terms and policies.

8. Disclaimer of warranties

To the fullest extent permitted by applicable law, the Site and its content are provided on an “as is” and “as available” basis, without representations, conditions, guarantees, or warranties of any kind, whether express, implied, statutory, or otherwise. To that extent, CyberXOne disclaims implied warranties or conditions of merchantability, fitness for a particular purpose, title, non-infringement, and any warranty arising from course of dealing or usage of trade.

We do not warrant that the Site, its servers, downloadable materials, or communications will be free from viruses, malicious code, vulnerabilities, or other harmful components. You are responsible for using appropriate security controls, backups, and protective measures when accessing Internet resources. Nothing in these Terms excludes any warranty, condition, or right that cannot lawfully be excluded.

9. Limitation of liability

To the fullest extent permitted by applicable law, CyberXOne Inc. and its directors, officers, employees, agents, and contractors will not be liable for indirect, incidental, special, consequential, exemplary, aggravated, or punitive damages, or for loss of profits, revenue, opportunity, anticipated savings, data, business, or goodwill, arising out of or relating to the Site or your use of, reliance on, or inability to use the Site, regardless of the cause of action and even if advised of the possibility of such loss.

To the fullest extent permitted by applicable law, CyberXOne’s total aggregate liability arising out of or relating to the Site or these Terms, regardless of the cause of action, will not exceed CAD $100. This limitation does not apply to liability that cannot lawfully be excluded or limited.

Nothing in these Terms excludes or limits liability to the extent that exclusion or limitation is prohibited by applicable law. The exclusions and limitations in this section apply only to the Site and not to professional services delivered under a separate written agreement.

SCOPE OF THIS CLAUSE

This section applies to the Site only. Liability arising from cybersecurity consulting, assessments, vCISO services, or other professional services delivered under a signed engagement agreement or statement of work is governed by that agreement, including any negotiated warranties, indemnities, and liability limitations.

10. Indemnity

To the fullest extent permitted by applicable law, you agree to indemnify and hold harmless CyberXOne Inc. and its directors, officers, employees, agents, and contractors from third-party claims, liabilities, losses, damages, costs, and reasonable legal expenses to the extent arising from your unlawful use of the Site, your material breach of these Terms, or your infringement or violation of another person’s rights. CyberXOne will not seek indemnification under this section for losses caused solely by CyberXOne’s own unlawful conduct.

11. Privacy

Our collection, use, disclosure, retention, and protection of personal information in connection with the Site are described in our Privacy Policy. The Privacy Policy should be read together with these Terms, but privacy rights and obligations remain subject to applicable privacy law.

12. Governing law and jurisdiction

These Terms and any dispute relating to the Site are governed by the laws of the Province of Ontario and the federal laws of Canada applicable in Ontario, without giving effect to conflict-of-laws principles that would require the application of another jurisdiction’s laws.

Subject to any rights or remedies that cannot lawfully be restricted, the courts located in Ontario, Canada will have exclusive jurisdiction over disputes arising out of or relating to these Terms or the Site, and you submit to their jurisdiction. If you access the Site from outside Ontario, you are responsible for complying with laws that apply to your access and use.

13. Changes to these terms

We may revise these Terms from time to time to reflect changes to the Site, our practices, or applicable requirements. The current version will be posted on the Site with its effective date and version number. Revised Terms apply prospectively from their stated effective date. Your continued use of the Site after revised Terms take effect constitutes acceptance of those revised Terms to the extent permitted by applicable law.

14. General

Severability. If any provision of these Terms is held to be invalid, illegal, or unenforceable, it will be interpreted or modified to the minimum extent necessary to make it enforceable where permitted, and the remaining provisions will continue in full force and effect.

No waiver. A failure or delay by CyberXOne to exercise or enforce a right or provision under these Terms does not waive that right or provision. A waiver is effective only if made in writing by an authorized representative of CyberXOne.

Entire agreement. These Terms, together with the Privacy Policy and any notices expressly incorporated into them, constitute the agreement between you and CyberXOne regarding use of the Site. They do not amend, supersede, or affect any separate written engagement agreement or statement of work, which governs the professional services covered by that agreement.

Language. These Terms are drawn up in English. Les parties ont exigé que ce document soit rédigé en anglais.

Revision history

VERSION	DATE	SUMMARY OF CHANGE
1.0	2025-08-01	Initial publication
1.1	2026-08-24	Updated legal wording; clarified Site-only scope, professional-advice disclaimer, acceptable use, responsible vulnerability disclosure, information submission, third-party links, warranties, liability, indemnity, privacy, jurisdiction, and change-management provisions.