Effective date: April 13, 2026 | Last updated: April 13, 2026
These Terms of Service ("Terms") govern your use of the Control171 platform ("Service") operated by Harrison Ventures LLC ("Company," "we," "our," or "us"), a Washington State limited liability company. The Service is accessible at getsprs.com and control171.com.
By creating an account or using the Service, you agree to be bound by these Terms. If you do not agree, do not use the Service.
Control171 is a self-service CMMC (Cybersecurity Maturity Model Certification) compliance readiness platform that provides gap assessment tools, SPRS score calculation, System Security Plan (SSP) generation, Plan of Action and Milestones (POA&M) tracking, evidence management, and AI-powered compliance guidance for defense contractors.
Important: Control171 is a compliance readiness tool, not a Certified Third-Party Assessor Organization (C3PAO). Use of the Service does not constitute a CMMC assessment or certification. The Service helps you prepare for assessment but does not perform, guarantee, or replace the official CMMC certification process conducted by authorized C3PAOs under the Cyber AB.
To use the Service, you must create an account and provide accurate, complete information. You are responsible for maintaining the security of your account credentials and for all activity that occurs under your account. You must notify us immediately of any unauthorized use of your account.
You must be at least 18 years old and have the authority to bind your organization to these Terms. By creating an account on behalf of an organization, you represent that you have such authority.
The Service is offered in three subscription tiers: Recon, Sentinel, and Command. Each tier includes different features, storage limits, and team member allowances as described on the pricing page. We reserve the right to modify plan features and pricing with 30 days' advance notice to existing subscribers.
New accounts receive a 14-day free trial of the Sentinel plan. No credit card is required to start the trial. At the end of the trial period, your account will be converted to read-only mode until you subscribe to a paid plan. Your data is preserved during this period.
Paid subscriptions are billed monthly or annually through Stripe. By subscribing, you authorize us to charge your payment method on a recurring basis. All fees are stated in U.S. dollars and are non-refundable except as provided in Section 3.6.
The first 20 paying customers ("Founding Members") are eligible for reduced pricing that is locked for the lifetime of their continuous subscription. If a Founding Member cancels their subscription and later resubscribes, standard pricing will apply. Founding Member status is non-transferable.
You may cancel your subscription at any time through the billing settings in your account or by contacting us. Cancellation takes effect at the end of the current billing period. You will retain access to the Service until the end of the period you have already paid for. After cancellation, your data is preserved in read-only mode for 90 days, after which it is scheduled for deletion.
If you are not satisfied with the Service within the first 30 days of your initial paid subscription, you may request a full refund of your first payment. To request a refund, contact [email protected] within 30 days of your first charge. Refunds are not available after the 30-day period or for subsequent billing cycles.
We may change subscription prices with 30 days' advance notice. Price changes will apply to the next billing cycle after the notice period. Founding Member pricing is exempt from price increases for the duration of the continuous subscription.
You agree to use the Service only for lawful purposes related to CMMC compliance assessment and readiness. You agree not to:
You retain full ownership of all data you upload to or create within the Service, including assessment responses, evidence files, SSP content, and organization information. We claim no ownership over your data.
You grant us a limited, non-exclusive license to use, store, and process your data solely as necessary to provide and improve the Service. This license terminates when your data is deleted from our systems.
You may export your data at any time using the export features in the Service, including assessment reports (Word format), SSP documents (Word format), and evidence files. We will not restrict your ability to export your own data.
You may request deletion of your account and all associated data at any time by contacting us. We will process deletion requests within 30 days. Some data may persist in encrypted backups for up to 30 additional days.
The Service includes AI-powered features for gap analysis, remediation guidance, and document generation. These features are powered by third-party AI models (currently Anthropic's Claude). By using AI features, you acknowledge that:
The Service, including its design, code, features, documentation, and branding, is the intellectual property of Harrison Ventures LLC and is protected by copyright and other intellectual property laws. Your subscription grants you a limited, non-exclusive, non-transferable right to use the Service for your internal business purposes during the subscription term.
The CMMC framework, NIST SP 800-171, and related government standards referenced in the Service are public domain U.S. government works and are not claimed as our intellectual property.
THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR NON-INFRINGEMENT. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.
Without limiting the foregoing, we make no warranty or representation that:
TO THE MAXIMUM EXTENT PERMITTED BY LAW, HARRISON VENTURES LLC AND ITS OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, OR BUSINESS OPPORTUNITIES ARISING OUT OF OR RELATED TO YOUR USE OF THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY.
OUR TOTAL LIABILITY FOR ANY CLAIMS ARISING UNDER THESE TERMS SHALL NOT EXCEED THE TOTAL AMOUNT YOU PAID TO US FOR THE SERVICE DURING THE TWELVE (12) MONTHS PRECEDING THE CLAIM.
These limitations apply even if we have been advised of the possibility of such damages and regardless of whether any limited remedy fails of its essential purpose.
You agree to indemnify, defend, and hold harmless Harrison Ventures LLC and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, or expenses (including reasonable attorneys' fees) arising out of or related to: (a) your use of the Service; (b) your violation of these Terms; (c) your violation of any third-party rights; or (d) any content you upload to or create within the Service.
Control171 is an independent commercial product and is not endorsed, sponsored, or affiliated with the U.S. Department of Defense, the Cyber AB (formerly CMMC Accreditation Body), NIST, or any C3PAO.
The compliance guidance, assessment tools, and document templates provided by the Service are based on our interpretation of publicly available CMMC requirements and NIST SP 800-171 Rev 2. Regulatory requirements may change. You are ultimately responsible for ensuring your organization meets all applicable compliance requirements.
Use of the Service does not create a consultant-client relationship, attorney-client relationship, or any professional advisory relationship between you and Harrison Ventures LLC, except where explicitly agreed in writing under a separate vCISO advisory engagement (Command tier).
The Service integrates with third-party services including Supabase (database), Stripe (payments), Anthropic (AI), and Cloudflare (hosting). Your use of these services is governed by their respective terms and policies. We are not responsible for the availability, accuracy, or practices of third-party services.
We reserve the right to modify, suspend, or discontinue any part of the Service at any time with reasonable notice. We will provide at least 30 days' notice before discontinuing core features or the entire Service, and will provide data export capabilities during the notice period.
We may update these Terms from time to time. We will notify you of material changes by email and by posting the updated Terms on the Service at least 30 days before they take effect. Your continued use of the Service after the effective date of updated Terms constitutes acceptance.
These Terms are governed by the laws of the State of Washington, without regard to conflict of law principles. Any disputes arising under these Terms shall be resolved in the state or federal courts located in Pierce County, Washington. You consent to the personal jurisdiction of such courts.
If any provision of these Terms is held to be invalid or unenforceable, the remaining provisions shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable.
These Terms, together with our Privacy Policy, constitute the entire agreement between you and Harrison Ventures LLC regarding the use of the Service. These Terms supersede any prior agreements or understandings, whether written or oral.
Our failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.
If you have questions about these Terms of Service, contact us at:
Harrison Ventures LLC
Tacoma, Washington
Email: [email protected]
Web: getsprs.com