Skip to main content
OpsRoadmaps

Terms

Terms of use & disclaimer

Using OpsRoadmaps means accepting the following. It is written to be read, not to be survived.

Status of this document

These terms were written by the engineering team and have not been reviewed by a lawyer. They are not tailored to any jurisdiction, say nothing about governing law or dispute resolution, and are not a substitute for a contract. Formal legal review is required before this page can be relied on as an enforceable agreement, and before any paid plan is offered.

What a result means — and does not

  • Scores, maturity levels, risk ratings and roadmaps are decision aids. They reflect the answers you gave, scored by published rules.
  • No certification. OpsRoadmaps certifies, accredits and attests nothing, and issues no badge or mark of compliance.
  • No compliance guarantee. A result is not evidence of conformance with SOC 2, ISO 27001, PCI DSS, HIPAA, GDPR, NIS2, or any other framework, and will not satisfy an auditor, a regulator, or a customer's security questionnaire on its own.
  • No audit. We do not inspect, scan or connect to your systems. We never ask for infrastructure credentials, and you should never give them to us.
  • No professional advice. Content is general engineering guidance, not legal, regulatory, financial or security advice for your specific situation.
  • No warranty of outcome. Acting on a roadmap reduces identified gaps. It does not guarantee availability, security, or the absence of incidents.

Your side

  • Answer honestly. An optimistic self-assessment produces a flattering, useless result.
  • Do not upload credentials, secrets, personal data you have no right to share, or anything you would not want stored on our server. Evidence uploads are for artefacts like a restore report, not for production secrets.
  • You are responsible for decisions you make using this product, and for who you invite into your organization.
  • Do not attempt to break, overload, or scrape the service.

Our side

  • The service is provided as-is, on a single-region deployment that is intentionally not highly available. We target reasonable uptime; we do not offer an SLA.
  • Completed assessment results are immutable — we do not retroactively rescore your history when the methodology changes.
  • Published content and methodology may change. Each result records the version that produced it.
  • We handle your data as described in the privacy policy, including its honest list of what is not built yet.
  • We may suspend access that threatens the service or other users.

Content and ownership

Your assessments, notes and evidence remain yours. Our published guidance — questions, scoring rules, recommendations, runbooks and checklists — remains ours, and cites third-party sources that belong to their authors. Quoting us with attribution is fine; republishing the catalog is not.