Terms of Service

By creating an account, accessing the Platform, or clicking "I Agree," you confirm that (a) you have read, understood, and agree to be bound by these Terms; (b) you are at least 18 years of age; (c) you have the authority to bind your organization to these Terms if registering on its behalf; and (d) your use will comply with all applicable laws and regulations.

If you are using the Platform on behalf of an organization, "you" in these Terms refers to that organization. You represent and warrant that you have full authority to bind the organization.

Subject to these Terms and the timely payment of applicable subscription fees, Skyhigh Cybersecurity grants you a limited, non-exclusive, non-transferable, revocable, non-sublicensable license to access and use the Platform solely for your organization's internal cybersecurity preparedness and training purposes.

This license is restricted to the tier specified in your subscription (Starter / Professional / Enterprise) and the number of authorized users associated with your account. The Platform is licensed to you, not sold. No ownership rights are transferred by these Terms or any subscription.

You may use the Platform to:

• Conduct internal tabletop exercises and cybersecurity preparedness drills
• Train your cybersecurity, incident response, and leadership teams
• Generate and retain After Action Reports for your organization's internal use
• Access exercises in all available languages (English, French, Portuguese, Spanish)

All exercise scenarios, scenario injects, discussion questions, facilitator guides, After Action Report templates, platform design, user interface, source code, graphics, and all other content on or in the Platform (collectively, "Platform Content") are the exclusive intellectual property of Skyhigh Cybersecurity LLC and are protected by United States and international copyright, trade secret, trademark, and other applicable intellectual property laws.

"Skyhigh Cybersecurity," the Skyhigh Cybersecurity logo, "Beyond the Hype. Above the Threats." and associated marks are trademarks of Skyhigh Cybersecurity LLC. You may not use these marks without prior written consent.

Nothing in these Terms transfers or conveys any intellectual property rights to you. Any feedback, suggestions, or improvement ideas you provide regarding the Platform may be used by Skyhigh Cybersecurity without obligation or compensation to you.

Paid subscriptions are billed through Stripe on a monthly or annual basis, as selected at checkout. Prices displayed at the time of purchase govern your subscription. Skyhigh Cybersecurity reserves the right to adjust pricing for new subscriptions or renewals with at least 30 days' prior notice to existing subscribers.

Subscriptions automatically renew at the end of each billing period unless cancelled before the renewal date. You are responsible for managing your subscription cancellation via the Account Portal or by contacting info@skyhighcybersecurity.com.

Refund Policy: Due to the digital and immediately accessible nature of the Platform content, refunds are generally not issued once exercise content has been accessed. Exceptions may apply where required by applicable consumer protection law. Contact info@skyhighcybersecurity.com to discuss billing disputes.

Free tier accounts are limited to access of the first 3 exercise scenarios and may not be used for commercial training delivery, paid consulting, or services rendered to external clients. Skyhigh Cybersecurity reserves the right to modify, limit, or discontinue the free tier at any time, with reasonable notice where practicable.

Free tier accounts are subject to all other provisions of these Terms, including the Acceptable Use Policy and Intellectual Property sections.

The Platform references and claims alignment with frameworks including CISA CTEP (Cybersecurity Tabletop Exercise Program), IEC 62443 (Industrial Automation and Control Systems Security), NIST SP 800-82 (Guide to OT Security), and other industry standards. These references reflect the platform developer's own interpretation, mapping, and alignment efforts.

They do not imply official certification, endorsement, approval, or affiliation with CISA, the Department of Homeland Security, IEC, NIST, or any government agency or standards body. Organizations with specific regulatory compliance requirements should consult qualified professionals to assess whether this Platform meets their particular compliance needs.

Your use of the Platform is also governed by our Privacy Policy, which is incorporated into these Terms by reference. The Privacy Policy describes how we collect, use, store, and protect your personal information. By agreeing to these Terms, you also consent to the data practices described in the Privacy Policy.

You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account. Notify Skyhigh Cybersecurity immediately at info@skyhighcybersecurity.com if you suspect unauthorized access to your account.

Skyhigh Cybersecurity reserves the right to suspend or terminate your access to the Platform at any time, with or without notice, for: (a) violation of these Terms; (b) non-payment of subscription fees; (c) misuse or abuse of the Platform; (d) activities that harm Skyhigh Cybersecurity, other users, or third parties; or (e) as required by law.

Upon termination, your license to use the Platform is immediately revoked. Sections addressing Intellectual Property, Disclaimer of Warranties, Limitation of Liability, and Governing Law survive termination.

You agree to defend, indemnify, and hold harmless Skyhigh Cybersecurity LLC and its officers, directors, employees, and agents from and against any claims, liabilities, damages, judgments, awards, losses, costs, or expenses (including reasonable attorneys' fees) arising from: (a) your use of the Platform; (b) your violation of these Terms; (c) your violation of any applicable law or third-party rights; or (d) any content you submit or transmit through the Platform.

These Terms shall be governed by and construed in accordance with the laws of the State of Delaware, United States, without regard to its conflict of law provisions. Skyhigh Cybersecurity LLC is a United States limited liability company operating globally under US law.

Dispute Resolution — Binding Arbitration: Any dispute, controversy, or claim arising out of or relating to these Terms or the Platform — including questions of validity, interpretation, or breach — shall be resolved by final and binding arbitration administered by JAMS (www.jamsadr.com) under the JAMS Streamlined Arbitration Rules & Procedures then in effect. Arbitration may be conducted remotely via video conference at the election of either party. The arbitrator's award shall be final and may be entered as a judgment in any court of competent jurisdiction.

IP & Emergency Relief: Either party may seek emergency injunctive or equitable relief from a court of competent jurisdiction solely to protect intellectual property rights or confidential information pending the outcome of arbitration. Venue for such actions shall be the state or federal courts located in Delaware, United States.

European Union & United Kingdom Users: If you are a consumer located in the EU, EEA, or UK, nothing in these Terms limits your rights under the mandatory consumer protection laws of your country of residence. You retain the right to bring claims before your local courts and may also access the EU Online Dispute Resolution platform at ec.europa.eu/consumers/odr. Where applicable, EU Directive 2019/770 on digital content and services applies.

International Users: By accessing the Platform from outside the United States, you consent to the transfer and processing of your data in the United States in accordance with our Privacy Policy. You agree that US law governs these Terms regardless of your country of access, except where mandatory local law requires otherwise.

Class Action Waiver: To the fullest extent permitted by applicable law, you waive any right to participate in a class-action lawsuit, collective arbitration, or any representative proceeding against Skyhigh Cybersecurity. Each dispute shall be arbitrated on an individual basis only.

Skyhigh Cybersecurity reserves the right to modify these Terms at any time. We will notify registered users of material changes via email to the address on file and/or by posting updated Terms with a revised "Last Updated" date. Your continued use of the Platform after changes become effective constitutes acceptance of the revised Terms. We encourage you to review these Terms periodically.

Entire Agreement: These Terms, together with the Privacy Policy and any order confirmations, constitute the entire agreement between you and Skyhigh Cybersecurity regarding the Platform and supersede all prior agreements.

Severability: If any provision of these Terms is found unenforceable, the remaining provisions remain in full force and effect.

Waiver: Skyhigh Cybersecurity's failure to enforce any right under these Terms does not constitute a waiver of that right.

Assignment: You may not assign or transfer your rights under these Terms without Skyhigh Cybersecurity's prior written consent. Skyhigh Cybersecurity may assign these Terms in connection with a merger, acquisition, or sale of assets.

For legal inquiries, Terms questions, or account-related matters:

These Terms of Service were last reviewed on March 2, 2026. Skyhigh Cybersecurity LLC reserves the right to update these Terms at any time in accordance with Section 14.