Terms of Service

Last updated: 6 August 2026

These Terms of Service ("Terms") govern your access to and use of Certivar (the "Service"). Certivar is operated by Neo-2 Consulting Limited, a corporation registered in the Province of Saskatchewan, Canada, with its registered office in Saskatoon, Saskatchewan ("Neo-2", "Certivar", "we", "us"). By creating an account or using the Service, you agree to these Terms. If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization.

1. What the Service is

Certivar is a compliance service. We scope your compliance program, draft your policies, orchestrate evidence collection, monitor your systems on an ongoing basis, and prepare material for your external auditor, across frameworks including SOC 2, ISO 27001, HIPAA and PCI DSS. Parts of the Service are performed by automated systems, including artificial intelligence; how that works is described in our Privacy Policy. We may update, improve or modify the Service from time to time.

2. We are not your auditor

This is the most important thing on this page. Neo-2 is not a chartered professional accounting firm, a certification body, or a law firm. We do not perform audits, issue SOC 2 reports, issue ISO 27001 certificates, or provide legal advice. Those must come from an independent, accredited third party that you engage separately. Nothing we produce is an audit opinion or a certification, and preparing you well does not guarantee that you will pass an audit or obtain any certification.

We take no referral fee, commission or other consideration from any auditor or certification body, and we do not accept payment for placement in any directory or recommendation we provide. If that ever changes, we will disclose it here before it takes effect.

3. Your responsibilities

The Service depends on accurate information about your organization and its systems. You are responsible for the accuracy of what you tell us, for completing the tasks assigned to you, for maintaining the confidentiality of your account credentials, and for all activity under your account. Where the Service asks a named individual to approve something, that approval is an attestation by that person and by your organization — not by us.

4. Acceptable use

You agree not to misuse the Service, including by accessing it other than through the interfaces we provide, interfering with or disrupting it, uploading unlawful or infringing content, attempting to induce the Service to produce false or unsupported compliance evidence, or using it to violate any applicable law or the rights of others.

5. Fees and billing

Engagements are billed in advance on a recurring basis, monthly or annually, at the rate shown at the time of purchase. Fees are non-refundable except where required by law. We may change pricing with reasonable notice, effective from your next billing period. Amounts are exclusive of applicable taxes, including GST/PST where these apply. If payment fails, we may suspend the engagement after notice and a grace period.

6. Your data

You retain all rights to the data, documents and evidence you provide ("Customer Data"). You grant us a limited licence to process Customer Data solely to deliver and support the Service. We do not use Customer Data to train artificial intelligence models, and we do not sell it. Our handling of personal information is described in our Privacy Policy.

7. Intellectual property

The Service, including its software, framework templates, policy baselines and content, is owned by Neo-2 and protected by intellectual property laws. Policies and other documents we prepare specifically for you are yours to use, keep and take with you. These Terms do not grant you any right to our trademarks or branding.

8. Disclaimers

Except as expressly stated in these Terms, the Service is provided "as is" and we disclaim all warranties to the maximum extent permitted by law, including implied warranties of merchantability, fitness for a particular purpose and non-infringement. See section 2 regarding audits and certifications.

9. Limitation of liability

To the maximum extent permitted by law, Neo-2 will not be liable for any indirect, incidental, special, consequential or punitive damages, or for lost profits, lost data, or the outcome of any audit or certification decision. Our total aggregate liability for any claim arising out of or relating to the Service will not exceed the fees you paid to us in the twelve months preceding the event giving rise to the claim. Nothing in these Terms limits liability that cannot be limited under applicable law.

10. Termination

You may end your engagement at any time, effective at the end of your current billing period. We may suspend or terminate access if you materially breach these Terms, or where necessary to protect the Service or other clients. On termination you may export your policies, evidence and audit materials for a period of thirty days, after which we may delete them in accordance with our Privacy Policy. Sections 2, 6, 7, 8, 9 and 11 survive termination.

11. Governing law

These Terms are governed by the laws of the Province of Saskatchewan and the federal laws of Canada applicable in that province, without regard to conflict-of-laws rules. You and Neo-2 submit to the exclusive jurisdiction of the courts of the Province of Saskatchewan, sitting in Saskatoon.

12. Changes to these Terms

We may update these Terms from time to time. If we make material changes, we will give notice through the Service or by email before they take effect. Continued use after that date constitutes acceptance.

13. Contact

Neo-2 Consulting Limited
Saskatoon, Saskatchewan, Canada
legal@certivar.com