Terms of Service
These Terms of Service ("Terms") govern your access to and use of the services, platform, and website provided by Bridgham Cyber, LLC ("Bridgham," "we," "us," or "our"), a North Carolina limited liability company based in Raleigh, North Carolina.
By accessing or using our Services, you agree to be bound by these Terms. If you do not agree, you must not access or use the Services.
1. Definitions
1.1 "Client" or "Customer" means any individual or entity that engages Bridgham for professional services under a Service Agreement or accesses the Platform.
1.2 "Platform" means Bridgham's web-based dashboard, monitoring tools, AI Security Advisor, and any related technology provided as a delivery mechanism for our professional services.
1.3 "Service Agreement" means a signed contract between you and Bridgham governing the scope, pricing, deliverables, and terms of a specific professional engagement, including but not limited to the engagement letter for the Bridgham Cyber Security Program.
1.4 "Services" means the professional cybersecurity consulting services, advisory deliverables, and Platform access provided by Bridgham, as further described in Section 2.
1.5 "Bridgham Cyber Security Program" means Bridgham's single, ongoing advisory engagement as described in Section 2.2, which bundles all Services offered by Bridgham. Bridgham does not offer the components of the Bridgham Cyber Security Program as separate, individually priced services or service tiers.
2. Description of Services
2.1 Professional Services
Bridgham provides premium cybersecurity consulting services to mid-market businesses. Our professional capabilities include, but are not limited to:
- Cybersecurity posture assessments and gap analyses;
- Security policy and procedure development;
- Risk identification, documentation, and mitigation planning;
- Compliance readiness advisory (e.g., NIST CSF, SOC 2, ISO 27001, HIPAA, PCI DSS);
- Vendor and third-party risk assessments;
- Incident response planning and tabletop exercises;
- Employee security awareness training;
- AI-powered security advisory and monitoring through the Platform;
- Executive and board-level security reporting; and
- Ongoing strategic cybersecurity advisory.
These capabilities are delivered through the Bridgham Cyber Security Program, or as otherwise specified in the applicable Service Agreement.
2.2 The Bridgham Cyber Security Program
The Bridgham Cyber Security Program is Bridgham's comprehensive, bespoke cybersecurity assessment and advisory service. Subject to the terms of the applicable Service Agreement, the Bridgham Cyber Security Program generally includes:
- Discovery and Assessment Phase: In-depth evaluation of the Client's current cybersecurity posture, technology environment, regulatory obligations, and business risk profile;
- Documentation and Deliverables: Detailed security assessment report, risk register, remediation roadmap, and customized security policies and procedures;
- Implementation Support: Guided support for priority remediation actions and security improvements identified during the assessment;
- 12-Month Advisory Partnership: Ongoing access to Bridgham advisors for cybersecurity guidance, threat intelligence briefings, and strategic consultation;
- Quarterly Business Reviews: Scheduled reviews of security posture, progress against remediation roadmap, and emerging risk landscape;
- Priority Support: Dedicated communication channels and prioritized response for security inquiries and incidents;
- AI Security Advisor: Access to Bridgham's AI-powered security advisory tool through the Platform for real-time guidance; and
- Training: Security awareness training sessions for Client personnel as specified in the Service Agreement.
Fees, payment schedule, and term are stated in your engagement letter.
2.3 Platform Access
Platform access is included as part of the Bridgham Cyber Security Program. The Platform is a delivery mechanism for our professional services, not a standalone product. Platform features, availability, and functionality may vary based on the Client's engagement. Bridgham reserves the right to modify, update, or enhance Platform features at any time. Platform access is subject to these Terms and the applicable Service Agreement.
2.4 Nature of Services
The Services provided through the Platform and under any Service Agreement are advisory and consultative in nature. Bridgham does not guarantee specific security outcomes, compliance certifications, or regulatory approvals. References to NIST Cybersecurity Framework, SOC 2, ISO 27001, or other industry frameworks describe methodological benchmarks guiding our approach, not certification or attestation guarantees. Clients remain solely responsible for their own cybersecurity decisions, implementation of recommendations, and compliance obligations.
3. Account Registration and Eligibility
3.1 Eligibility
You must be at least 18 years of age and have the legal authority to bind the entity you represent to these Terms. By registering for an account or engaging Bridgham, you represent and warrant that you meet these requirements.
3.2 Account Information
You agree to provide accurate, current, and complete information during registration and to update such information as necessary. You are responsible for maintaining the confidentiality of your account credentials and for all activity under your account.
3.3 Authorized Users
If your Service Agreement permits multiple users, you are responsible for ensuring that all authorized users comply with these Terms. You are liable for any acts or omissions of your authorized users.
4. Payments
4.1 Payment Processing
- Payment Processor: Stripe, Inc. (PCI DSS Level 1 compliant).
- Payment Methods: Credit card, debit card, ACH, wire transfer (as supported by Stripe).
- Currency: All prices are in United States Dollars (USD).
- By providing payment information, you authorize Bridgham and its payment processor to charge the applicable fees in accordance with your Service Agreement.
4.2 Engagement Pricing
Fees, payment schedule, and term are stated in your engagement letter.
4.3 Refund Policy
Refund terms are governed by the applicable Service Agreement. In the absence of a signed Service Agreement, refund requests will be evaluated on a case-by-case basis.
4.4 Taxes
You are responsible for all applicable taxes, duties, and governmental assessments arising from your engagement with Bridgham, except for taxes based on Bridgham's net income.
4.5 Late Payments
Overdue payments may accrue interest as specified in the applicable Service Agreement or, in the absence of such provision, at the lesser of 1.5% per month or the maximum rate permitted by applicable law.
5. Intellectual Property
5.1 Bridgham Intellectual Property
Bridgham retains all right, title, and interest in and to the Platform, Services, methodologies, frameworks, tools, templates, and all related intellectual property. Nothing in these Terms transfers ownership of any Bridgham intellectual property to you.
5.2 Client Deliverables
Subject to the terms of the applicable Service Agreement, Bridgham grants to the Client a non-exclusive, non-transferable license to use deliverables produced during the engagement solely for the Client's internal business purposes.
5.3 Feedback
If you provide feedback, suggestions, or ideas regarding the Services or Platform, Bridgham may use such feedback without restriction or obligation to you.
5.4 Restrictions
You shall not: (a) reverse-engineer, decompile, or disassemble any portion of the Platform; (b) reproduce, distribute, or create derivative works of Bridgham's proprietary materials; (c) remove or alter any proprietary notices or labels; or (d) use Bridgham's intellectual property for any purpose not expressly authorized under these Terms or the applicable Service Agreement.
6. AI and Data
6.1 AI-Powered Features
The Platform includes AI-powered features, including the AI Security Advisor, that process Client data to provide security recommendations and insights. These features are advisory tools and do not replace professional judgment. Bridgham does not warrant that AI-generated recommendations are error-free or suitable for any particular purpose.
6.2 AI Training Opt-Out
(a) Service Agreement Clients: If you have a signed Service Agreement, the AI Training opt-out provisions in that Agreement govern your rights regarding the use of your data for AI training purposes.
(b) Platform Users Without a Service Agreement: You may opt out of AI training by emailing support@bridghamcyber.com. Upon receipt, we will exclude your data from future AI training activities within thirty (30) days. Opting out does not affect models already trained prior to your opt-out request.
6.3 Data Processing
Bridgham processes Client data in accordance with our Privacy Policy and applicable data protection laws. Where a Data Processing Addendum ("DPA") is executed as part of a Service Agreement, the DPA governs the processing of personal data.
6.4 De-Identification
When Client data is used for AI training or product improvement, Bridgham de-identifies such data in accordance with industry-standard practices consistent with Federal Trade Commission guidance on de-identification, including removal of direct identifiers, suppression of quasi-identifiers, and reasonable measures to prevent re-identification.
6A. How We Use Your Data and AI
Your data stays yours. We use it to run your service and to train a private advisor for your firm; that advisor is ours, and your access ends when you leave. We also keep de-identified, pooled insights that help protect every client and cannot be traced back to you. We never share your data with another client. You can export your reports during the engagement, ask us to delete your identifiable data on request, and opt out of de-identified use in your first 30 days. For the full picture, see our AI transparency page.
7. Acceptable Use
7.1 You agree not to use the Services or Platform to:
- Violate any applicable law, regulation, or third-party rights;
- Upload or transmit any malicious code, viruses, or harmful components;
- Interfere with or disrupt the integrity or performance of the Platform;
- Attempt to gain unauthorized access to any systems or networks connected to the Platform;
- Use the Services for any purpose other than your own internal cybersecurity needs;
- Resell, sublicense, or commercially exploit the Platform or deliverables without Bridgham's prior written consent; or
- Misrepresent your identity or affiliation.
7.2 Bridgham reserves the right to suspend or terminate access for any violation of this Section 7.
8. Disclaimers
8.1 The Services and Platform are provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory, including but not limited to implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.
8.2 Bridgham does not warrant that: (a) the Services will meet your specific requirements; (b) the Platform will be uninterrupted, timely, secure, or error-free; (c) the results obtained from the Services will be accurate or reliable; or (d) any security vulnerabilities will be identified or remediated.
8.3 Bridgham's Services are advisory in nature. No advice or information, whether oral or written, obtained from Bridgham shall create any warranty not expressly stated in these Terms or the applicable Service Agreement.
8.4 Bridgham does not guarantee that its Services will prevent security breaches, data loss, cyberattacks, or other security incidents.
9. Limitation of Liability
9.1 To the maximum extent permitted by applicable law, Bridgham's total aggregate liability arising out of or related to these Terms, the Services, or the Platform shall not exceed the total fees paid by you to Bridgham during the twelve (12) months preceding the claim, or the amount specified in the applicable Service Agreement, whichever is greater.
9.2 In no event shall Bridgham be liable for any indirect, incidental, special, consequential, or punitive damages, including but not limited to loss of profits, data, business opportunities, or goodwill, regardless of the cause of action or theory of liability.
9.3 The limitations in this Section 9 shall apply regardless of whether Bridgham has been advised of the possibility of such damages and shall survive any failure of essential purpose of any limited remedy.
10. Indemnification
10.1 You agree to indemnify, defend, and hold harmless Bridgham Cyber, LLC, its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use of the Services or Platform; (b) your breach of these Terms; (c) your violation of any applicable law or third-party rights; or (d) any data or content you provide to Bridgham.
11. Dispute Resolution
11.1 Service Agreement Disputes
If you have a signed Service Agreement with Bridgham, the dispute resolution provisions of that Agreement govern any disputes arising from or related to the services provided under that Agreement.
11.2 Informal Resolution
For disputes not governed by a Service Agreement, the parties shall first attempt to resolve the dispute informally by contacting Bridgham at support@bridghamcyber.com. The parties agree to negotiate in good faith for a period of thirty (30) days before initiating formal dispute resolution.
11.3 Mediation
If informal negotiation does not resolve the dispute within thirty (30) days, either party may initiate mediation administered by JAMS in Raleigh, North Carolina. The mediation shall be conducted in accordance with the JAMS Mediation Rules then in effect. The costs of mediation shall be shared equally by the parties.
11.4 Binding Arbitration
If the dispute is not resolved through mediation within sixty (60) days of the mediation request, either party may submit the dispute to binding arbitration administered by JAMS in Raleigh, North Carolina. The arbitration shall be conducted in accordance with the JAMS Comprehensive Arbitration Rules then in effect. The arbitrator's decision shall be final and binding.
11.5 Exceptions
Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to prevent the actual or threatened infringement, misappropriation, or violation of intellectual property rights or confidential information.
11.6 Governing Law
These Terms shall be governed by and construed in accordance with the laws of the State of North Carolina, without regard to its conflict-of-laws principles.
11.7 Venue
For any matters not subject to arbitration, the exclusive venue shall be the state or federal courts located in Wake County, North Carolina.
12. Term and Termination
12.1 Term
These Terms are effective as of the date you first access or use the Services or Platform and remain in effect until terminated.
12.2 Termination by Bridgham
Bridgham may suspend or terminate your access to the Services and Platform at any time, with or without cause, upon written notice. Upon termination: (a) any active Service Agreement will be addressed per its termination provisions; and (b) Platform access will be terminated.
12.3 Termination by Client
You may request termination of your account by contacting support@bridghamcyber.com. Refunds, if any, are governed by the applicable Service Agreement.
12.4 Effect of Termination
Upon termination: (a) your right to access the Platform ceases immediately; (b) Bridgham may retain or delete your data in accordance with our Privacy Policy and applicable law; and (c) Sections 5, 6, 8, 9, 10, 11, and 13 shall survive termination.
13. General Provisions
13.1 Entire Agreement
These Terms, together with the Privacy Policy and any applicable Service Agreement, constitute the entire agreement between you and Bridgham with respect to the subject matter hereof. In the event of a conflict between these Terms and a signed Service Agreement between you and Bridgham, the Service Agreement shall prevail.
13.2 Amendments
Bridgham may update these Terms at any time by posting the revised version on our website. Material changes will be communicated via email or Platform notification at least thirty (30) days before taking effect. Your continued use of the Services or Platform after the effective date constitutes acceptance of the updated Terms.
13.3 Severability
If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.
13.4 Waiver
The failure of Bridgham to enforce any right or provision of these Terms shall not constitute a waiver of such right or provision.
13.5 Assignment
You may not assign or transfer these Terms or your rights hereunder without Bridgham's prior written consent. Bridgham may assign these Terms without restriction.
13.6 Force Majeure
Bridgham shall not be liable for any delay or failure in performance resulting from causes beyond its reasonable control, including but not limited to acts of God, natural disasters, war, terrorism, cyberattacks on Bridgham's infrastructure, pandemic, government action, or failure of third-party services.
13.7 Notices
All notices under these Terms shall be in writing and sent to Bridgham Cyber, LLC at support@bridghamcyber.com, or to the postal address stated in your engagement letter. Notices to you will be sent to the email address associated with your account.
14. Contact Information
Bridgham Cyber, LLC
Raleigh, North Carolina
General inquiries: support@bridghamcyber.com
Privacy inquiries: support@bridghamcyber.com
Legal inquiries: support@bridghamcyber.com
Support: support@bridghamcyber.com
Effective September 26, 2026