CYRUS

Last Updated: September 28, 2026

Welcome to Cyrus Cybersmith (accessible at cyruscybersmith.ai), a platform created by The One STP, Inc. ("Company," "we," "us," or "our") to help your business build enterprise-grade security resilience.

This User Agreement ("Agreement") is a legal contract between us and you or the business entity you represent ("User," "you," or "your"). By logging into your dashboard or using our services, you agree to these terms. Please read them carefully to help ensure a clear, fair, and successful partnership.

1. EVALUATION PERIOD AND ASSESSMENT SERVICES

1.1. Free Baseline Assessment: This Agreement grants you complimentary access to Cyrus Cybersmith for a 90-day evaluation period to create your initial Baseline Risk Assessment.

1.2. Post-Assessment: We look forward to supporting your growing security posture! These evaluation terms apply only during your free 90-day window. To transition to a paid production tier or extend platform access beyond 90 days, we will work with you to execute a separate commercial agreement (such as a Master Services Agreement or Service Order Form).

1.3. vCISO Services: The Platform includes dashboards designed to facilitate human-in-the-loop validation and advisory reviews by our seasoned security professionals. Please note that access to the software platform does not bind The One STP, Inc. to ongoing standalone consulting, crisis response management, or legal audit signatures. Any high-touch professional advisory services, specialized architecture reviews, or dedicated vCISO hours outside standard platform validation features are governed by a separate professional services Statement of Work (SOW).

2. INTELLECTUAL PROPERTY RIGHTS AND PROPRIETARY LICENSING

2.1. Ownership: The Cyrus Cybersmith platform, code, data structures, cross-mapping engines, AI workflows, risk methodologies, and designs are exclusive IP of The One STP, Inc.

2.2. Limited License: You receive a limited license for internal risk management and may not copy, modify, distribute, reverse-engineer, scrape, disassemble, or use the platform to build a competing product.

2.3. 3rd Party Proprietary Licensing: Third-party frameworks (e.g., HITRUST, ISO, COBIT, SCF) belong to their owners. You must secure all required third-party licenses and comply with their terms; The One STP, Inc. does not supply or guarantee these licenses.

2.4. Your Data: You retain full ownership of your data, telemetry, and system details, granting us a limited license to process them solely for dashboard and risk analytics.

3. LIMITATION OF LIABILITY AND DISCLAIMERS

3.1. Standard SaaS Delivery: We maintain enterprise-grade standards for our architecture. During this complimentary evaluation period, the platform is provided on an "As-Is" and "As-Available" basis.

3.2. Guided Onboarding & Optimization Phase: The 90-day assessment serves as a collaborative setup and optimization phase. During this period, we connect telemetry feeds, refine AI workflows, and tailor metrics to your infrastructure. Automated insights provide directional guidance as we fine-tune your environment.

3.3. Standard Data Safeguards: You remain responsible for maintaining independent backups of any connected infrastructure environments (such as AWS, GCP, or GitHub). We recommend verifying your system backups regularly during the assessment period.

3.4. Not Binding Legal Advice: Cyrus Cybersmith helps map risks and estimate financial exposures (such as Annualized Loss Expectancy). Platform outputs do not constitute legal advice or formal audit certifications. Please review critical compliance decisions with your legal and compliance advisors.

3.5. Cap on Liability: To maintain balanced risk during this complimentary evaluation, The One STP, Inc. and its team are not liable for indirect, incidental, or consequential damages (including business interruptions or data losses). Our total aggregate liability under this evaluation agreement is capped at $100.00 USD.

4. DISPUTE RESOLUTION AND BINDING ARBITRATION

4.1. Friendly Arbitration: If a dispute arises, we commit to seeking an informal resolution first. If we cannot resolve the issue directly, both parties agree to binding individual arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules.

4.2. Bringing Claims Individually: All claims must be brought strictly on an individual basis. Both parties waive any right to participate in class-action lawsuits or collective litigation proceedings.

5. GOVERNING LAW AND JURISDICTION

This Agreement is governed by the laws of the State of Washington, USA. Any disputes falling outside of arbitration will be subject to the exclusive jurisdiction of the state or federal courts in King County, Washington.