Terms of Service

1. Acceptance of these terms

These Terms of Service (“Terms”) govern access to and use of the Sense Six Cyber GRC Lab (the “Service”), a free, self-serve GRC/TPRM training platform operated by Sense Six Cyber Inc. (“Sense Six Cyber,” “we,” “us”). By joining the waitlist, creating an account, or otherwise using the Service, you agree to these Terms.

2. What the Service is

The Service is a hands-on training lab for people learning governance, risk, and compliance (“GRC”) and third-party risk management (“TPRM”). It’s free, with no payment step anywhere in signup or use. Every student works through the same practice scenario, a fictional company (“Fernbridge Logistics”), across five hands-on labs, elective bonus labs, course modules, and a capstone project. The Service is not a consulting engagement, and the risks, policies, vendors, and other records you create in it are practice work against a fictional scenario, not real business data about you, your employer, or any real third party.

3. The waitlist

Seats open in phases. Joining the waitlist requires an email address and, at signup, your agreement to receive email from us (see Section 7). You can refer other people using your own referral link; enough referrals unlock Founding Member status. Joining the waitlist doesn’t guarantee a seat or any particular timeline for one.

4. Accounts and access

An account is created either by using an instructor-issued invite code yourself (self-serve signup) or by an instructor inviting you directly. You’re responsible for maintaining the confidentiality of your password and any second factor (2FA) enrolled on your account, and for all activity that occurs under it. Notify us immediately if you believe your account has been compromised. We may suspend or terminate access at our discretion, including if we reasonably believe these Terms have been violated.

5. Acceptable use

You agree not to:

• Access or attempt to access another student’s account or data
• Upload malicious files, or attempt to circumvent the Service’s security safeguards
• Submit real personal or third-party information into the practice scenario — it’s designed around a fictional company, and nothing you enter should be a real person’s actual data
• Interfere with the normal operation of the Service, including through automated scraping or load
• Reverse-engineer or attempt to extract the Service’s source code, except as permitted by law

6. Your practice work

You retain ownership of the practice content you create through the Service (risk register entries, policy drafts, checklist progress, reflections, and similar — “Your Work”). You grant Sense Six Cyber the right to host, process, and display Your Work solely to provide the Service, including showing it to your instructor for feedback and grading. Since Your Work is practice against a fictional scenario, it shouldn’t contain real personal or confidential information about you, your employer, or any real third party in the first place (see Section 5).

7. Sense Six Cyber’s proprietary content

Everything in the Service that isn’t Your Work, including the compliance frameworks, checklist templates, control guidance, document templates, reference and career resources, course modules, and any other original material Sense Six Cyber has authored or compiled (“Academy Content”), is owned by Sense Six Cyber or its licensors. The underlying standards Academy Content references (e.g. ISO, NIST, PCI, OSFI, UK GDPR) remain the property of their respective standards bodies and regulators; Sense Six Cyber’s own compilation, guidance text, templates, and comparisons built around them are what’s protected here.

While you have access to the Service, you’re granted a limited, non-exclusive, non-transferable license to use Academy Content for your own personal learning. You agree not to:

• Redistribute, resell, or sublicense Academy Content
• Reproduce or publish Academy Content publicly (e.g. a blog, social post, public repository, or course platform) without Sense Six Cyber’s prior written permission
• Use Academy Content, in whole or in part, to build, train, or improve a competing GRC product, course, or consulting offering

“Sense Six Cyber” and associated names and logos are Sense Six Cyber’s marks and aren’t covered by the license above.

8. Email and marketing communications

We’ll always send you certain emails that are part of using the Service itself — account confirmations, a notice when your waitlist seat opens up, grading and feedback, due-date reminders, and similar — regardless of the choice below, since these exist because of an action you took or a feature you’re using.

Separately, joining the waitlist or creating an account requires agreeing to receive occasional marketing and update emails from us. You can withdraw that agreement at any time, without affecting your waitlist spot or account, by using the unsubscribe link in any marketing email or by emailing admin@sensesixcyber.com. See our Privacy Policy for more detail.

9. Availability and changes

We aim to keep the Service available and reliable but don’t guarantee uninterrupted access. We may modify, suspend, or discontinue features of the Service, or update these Terms, at any time; material changes will be communicated to active accounts. Continued use of the Service after a change constitutes acceptance of the updated Terms.

10. Disclaimer and limitation of liability

The Service is provided “as is.” While we take reasonable, industry-standard measures to secure the Service and the data within it, no system is completely secure, and we can’t guarantee the Service will be error-free or uninterrupted. To the fullest extent permitted by law, Sense Six Cyber isn’t liable for indirect, incidental, or consequential damages arising from use of the Service. Nothing in these Terms limits liability that can’t be limited under applicable law.

11. Termination

You may stop using the Service at any time. We may suspend or terminate Service access for a genuine violation of these Terms, or if the Service or a given cohort is discontinued. Sections that by their nature should survive termination (e.g. Sections 6, 7, 10, and 12) will continue to apply.

12. Governing law

These Terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, without regard to conflict-of-law principles. Sense Six Cyber Inc. is incorporated federally under the Canada Business Corporations Act, with its registered office in Ontario.

13. Contact

Questions about these Terms can be directed to admin@sensesixcyber.com.