Terms & Service Notice
Please read this notice before requesting support. It explains Cyber Touch Point's professionally guided, volunteer-powered service model and the boundaries that help protect participating organizations and team members.
1. Nature of the service
Cyber Touch Point provides structured, pro bono cybersecurity guidance to eligible small businesses, nonprofits, and community organizations. Our volunteer-powered team works within defined scopes, established program procedures, and professional leadership and guidance from Arnaz Consulting. Cyber Touch Point is not a managed security provider, law firm, compliance auditor, cyber insurer, or emergency incident-response service.
2. No guarantee or warranty
Information, checklists, observations, and recommendations are provided “as is” for general informational and risk-reduction purposes. Cybersecurity risk cannot be eliminated. Cyber Touch Point does not promise that its guidance will identify every weakness, satisfy a particular law or framework, prevent an incident, or produce a particular result.
3. Scope and access boundaries
An intake request does not create an engagement. If a request is accepted, the participants will agree on the scope and expected deliverables before work begins. Unless separately documented and approved, volunteers will not:
- Request or retain passwords, private keys, access tokens, payment information, personal records, or active incident evidence.
- Make changes directly to production systems, cloud environments, networks, or security controls.
- Conduct penetration testing, exploit vulnerabilities, monitor systems continuously, or represent that an organization is compliant.
- Provide legal advice, forensic conclusions, or emergency incident response.
4. Your responsibilities
You are responsible for deciding whether and how to use any recommendation, maintaining appropriate backups, obtaining authorization before changing systems, and consulting qualified IT, legal, insurance, compliance, or incident-response professionals when needed. Do not provide sensitive information through the website or email unless a separately approved process explicitly requires it.
5. Service-model acknowledgment
By requesting support, you acknowledge that Cyber Touch Point uses a professionally guided, volunteer-powered service model. Team members operate within a defined engagement scope and established program procedures. You agree to evaluate recommendations with an appropriate decision-maker before implementation and not to treat general guidance as a substitute for services from a licensed or specifically retained professional when those services are required.
6. Limitation of responsibility
To the fullest extent permitted by applicable law, Cyber Touch Point, its volunteers, advisors, and participating organizations are not responsible for indirect, incidental, special, consequential, or business-interruption losses arising from use of the website or reliance on general guidance. Any final limitation-of-liability or release terms applicable to an accepted engagement should be stated in a separately reviewed engagement agreement.
7. Active incidents
Do not use this service for an active attack or urgent security event. Contact your IT provider, cyber insurer, legal counsel, law enforcement when appropriate, or a qualified incident-response firm immediately.
8. Contact and changes
Questions about these terms may be sent to contact@cybertouchpoint.org. We may update this notice as the program and its procedures develop. Continued use of the website after an update is subject to the revised notice.