Skip to main content

Terms of Service

Last updated: March 27, 2026

1. Agreement to Terms

By accessing or using BlackSheep (“Service”), operated by BlackSheep (“Company,” “we,” “us”), you agree to be bound by these Terms of Service (“Terms”). If you are using the Service on behalf of an organization, you represent that you have authority to bind that organization to these Terms.

2. Description of Service

BlackSheep is a cloud-based cybersecurity compliance management platform designed for Registered Investment Advisors (RIAs) and financial services firms. The Service helps organizations manage compliance with SEC Regulation S-P, NYDFS 23 NYCRR 500, NIST CSF 2.0, SOC 2, and related regulatory frameworks.

The Service includes compliance tracking dashboards, policy management, incident response tools, vendor risk management, evidence collection, security monitoring, and audit preparation capabilities.

3. Account Registration

To use the Service, you must create an account with accurate and complete information. You are responsible for maintaining the confidentiality of your account credentials and for all activities under your account. You must notify us immediately of any unauthorized use.

Each organization (“Tenant”) may invite multiple users with role-based access (Owner, Admin, Member, Read-Only). The account owner is responsible for managing user access and permissions.

4. Subscription and Billing

The Service is offered on a subscription basis. Pricing plans and features are described on our website and may change with 30 days’ notice. All subscriptions begin with a 14-day free trial unless otherwise agreed.

  • Billing cycle: Subscriptions are billed monthly in advance.
  • Payment: Payments are processed via Stripe. You authorize us to charge your payment method on file.
  • Cancellation: You may cancel at any time. Access continues through the end of the current billing period.
  • Refunds: Fees are non-refundable except as required by law or at our sole discretion.

5. Acceptable Use

You agree not to:

  • Use the Service for any unlawful purpose or in violation of any applicable regulation.
  • Attempt to gain unauthorized access to any part of the Service or its infrastructure.
  • Interfere with or disrupt the Service, servers, or networks connected to the Service.
  • Reverse engineer, decompile, or disassemble any part of the Service.
  • Use the Service to store or transmit malicious code or infringing content.
  • Resell, sublicense, or make the Service available to third parties without authorization.

6. Your Data

You retain all rights to the data you upload to the Service (“Customer Data”). By using the Service, you grant us a limited license to process Customer Data solely to provide and improve the Service.

  • Data ownership: Customer Data remains your property at all times.
  • Data portability: You may export your data at any time using the Service’s export features.
  • Data deletion: Upon account termination, we will delete Customer Data within 90 days, subject to legal retention obligations.
  • Data protection: We protect Customer Data as described in our Privacy Policy and Security page.

7. Security

We implement industry-standard security measures including encryption in transit (TLS 1.2+) and at rest, multi-factor authentication, role-based access controls, automated security monitoring, and regular security assessments. Our infrastructure is hosted on Vercel and Neon (PostgreSQL), both SOC 2 Type II certified providers.

You are responsible for maintaining the security of your own account credentials, managing user access within your organization, and configuring appropriate access controls.

8. Service Level

We target 99.9% uptime for the Service, measured monthly. Scheduled maintenance windows are communicated in advance. We provide a system status page accessible from the admin dashboard. This is not a formal SLA unless separately agreed in writing (available for Enterprise plans).

9. Intellectual Property

The Service, including its design, code, features, documentation, and all associated intellectual property, is owned by BlackSheep. These Terms do not grant you any rights to our trademarks, service marks, or trade names. Compliance framework templates and generated reports are provided for your use but do not constitute legal advice.

10. Disclaimers

THE SERVICE IS PROVIDED “AS IS” WITHOUT WARRANTIES OF ANY KIND. WE DO NOT WARRANT THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, OR COMPLETELY SECURE.

Not legal or regulatory advice: BlackSheep is a compliance management tool. It does not provide legal, regulatory, or investment advice. The Service helps you organize and track compliance activities but does not guarantee regulatory compliance. You should consult qualified legal counsel for compliance determinations.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, BLACKSHEEP SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES ARISING FROM YOUR USE OF THE SERVICE. OUR TOTAL LIABILITY SHALL NOT EXCEED THE FEES PAID BY YOU IN THE 12 MONTHS PRECEDING THE CLAIM.

12. Indemnification

You agree to indemnify and hold harmless BlackSheep from any claims, damages, or expenses arising from your use of the Service, violation of these Terms, or infringement of any third-party rights.

13. Term and Termination

These Terms remain in effect while you use the Service. We may suspend or terminate your access for violation of these Terms, non-payment, or at our discretion with 30 days’ notice. Upon termination, your right to use the Service ceases, but provisions regarding data ownership, liability, and indemnification survive.

14. Modifications to Terms

We may update these Terms from time to time. Material changes will be communicated via email or in-app notification at least 30 days before they take effect. Continued use of the Service after changes constitutes acceptance.

15. Governing Law

These Terms are governed by the laws of the State of Delaware, without regard to conflict of law principles. Any disputes shall be resolved in the courts located in Delaware.

16. Contact

For questions about these Terms, contact us at:

BlackSheep
Email: legal@goblacksheep.io
Website: www.goblacksheep.io