Terms of Service

01 — AcceptanceAcceptance of these terms

By accessing or using stonebridgetechsolutions.com (the "Site"), you agree to these Terms of Service. If you do not agree with them, do not use the Site. If you are using the Site on behalf of an organization, you represent that you have authority to bind that organization to these terms.

02 — IdentityWho we are

Stonebridge Tech Solutions, LLC ("Stonebridge," "we," "us") is a cloud infrastructure, software, and data engineering firm with its principal place of business in Sacramento, California. We operate this Site. Our registrations and credentials are published on our certifications page, and our handling of personal information is described in our privacy policy.

03 — Not adviceContent is not professional advice

We publish detailed technical content about HIPAA, FedRAMP, SOC 2, CMMC, HITRUST, and related frameworks, including control mappings, reference architectures, checklists, and implementation guides. This material is engineering information, not legal, regulatory, compliance, or audit advice.

We are an engineering firm. We are not a law firm, not an accredited assessment organization, and not a 3PAO. Nothing on this Site constitutes a legal opinion, a certification, an attestation, or an assurance that any system will satisfy any regulatory requirement or pass any assessment.

04 — No relationshipNo consulting relationship

Using the Site, reading our content, downloading a resource, subscribing to the newsletter, running the estimator, or booking a discovery call does not create a consulting, advisory, or professional relationship between you and Stonebridge, and does not create any duty of care.

A relationship begins only when both parties sign a written agreement describing scope, deliverables, and fees. Discovery calls are exploratory conversations, and anything discussed on one is preliminary and non-binding on either side.

05 — EngagementsPaid engagements

These terms govern the Site only. Paid work is governed by a separate executed consulting agreement, statement of work, and where applicable a Business Associate Agreement, subcontract, or teaming agreement.

Where these terms conflict with a signed engagement agreement, the engagement agreement controls for matters within its scope. Pricing, timelines, and scope descriptions published on the Site are illustrative and are not offers capable of acceptance. Fees are fixed in a written proposal, not on a web page.

06 — ToolsFree tools and estimates

The audit cost estimator and any similar tools we publish produce directional estimates based on generalized models, not quotes, bids, proposals, or assessments of your actual environment.

Outputs depend entirely on the inputs you provide and on assumptions that may not apply to your organization. Actual control counts, assessment costs, and engagement scope vary with your architecture, your assessor, your data classification, and your contractual obligations. Do not use these outputs as the sole basis for budgeting, procurement, or planning decisions. We make no representation that any estimate will match actual cost.

07 — DownloadsDownloads and the newsletter

Some resources, such as the HIPAA CI/CD audit checklist, are delivered by email in exchange for your address. Requesting one also subscribes you to our monthly Field Notes newsletter, which is stated on the form at the point of collection. Every email includes a one-click unsubscribe, and unsubscribing is honored promptly.

Downloaded resources are provided for your internal business use. You may share them within your organization and with your auditors and advisors. You may not resell them, republish them publicly, or present them as your own work. Our handling of your email address is described in the privacy policy.

08 — IPIntellectual property

The Site's written content, structure, design, and the Evidence-Driven Infrastructure framework are owned by Stonebridge and protected by copyright and other applicable law. The Stonebridge name and logo are our marks.

What you may do

• Use the code and configuration. Terraform snippets, pipeline configuration, policy rules, and control patterns published on this Site may be used freely in your own systems, commercially, with no attribution required. We publish them so they get used.
• Quote and link. You may quote reasonable excerpts of our written content with attribution and a link to the source page.
• Share internally. You may circulate our articles and resources inside your organization and with your auditors and advisors.

What you may not do

• Republish substantial portions of our written content on another site, with or without attribution.
• Present our written content, case studies, or framework as your own work or your firm's methodology.
• Use our name, logo, or client testimonials to imply a partnership, endorsement, or engagement that does not exist.
• Scrape the Site to train a model or build a derivative content product.

If you want to reproduce something beyond these permissions, email us. We usually say yes.

09 — UseAcceptable use

You agree not to:

• Probe, scan, or test the vulnerability of the Site or attempt to breach its security controls without our prior written authorization.
• Interfere with the Site's operation, including through automated traffic that degrades availability for others.
• Submit false contact information, use the forms to distribute unsolicited messages, or use them to transmit malicious content.
• Submit anyone else's personal information, protected health information, controlled unclassified information, or confidential data through any form on this Site. Our forms are not a secure channel for sensitive data.
• Use the Site in violation of any applicable law or export control regulation.

We may restrict or block access to the Site for any use that violates these terms.

10 — Third partiesThird-party services and links

The Site embeds and links to third-party services, including Calendly for scheduling, Formspree for form processing, and Google Fonts. Your use of those services is governed by their own terms and privacy policies, and we do not control them.

We link to external documentation, regulations, and vendor resources for reference. Those links are not endorsements, and we are not responsible for third-party content, availability, or accuracy.

11 — AvailabilityAvailability of the site

We provide the Site on an as-available basis. We may change, suspend, or discontinue any part of it, including free tools and published resources, at any time and without notice. We are not liable for any unavailability or for content that is removed or revised.

12 — WarrantiesDisclaimer of warranties

THE SITE AND ALL CONTENT, TOOLS, AND RESOURCES ON IT ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED. To the fullest extent permitted by law, we disclaim all warranties including merchantability, fitness for a particular purpose, non-infringement, accuracy, and any warranty arising from course of dealing or usage of trade.

We do not warrant that the Site will be uninterrupted or error-free, that content is current or complete, or that any code, pattern, or recommendation published here will be suitable for your environment or will satisfy any regulatory, contractual, or assessment requirement.

13 — LiabilityLimitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW, STONEBRIDGE AND ITS OWNERS, EMPLOYEES, AND CONTRACTORS WILL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, or for any loss of profits, revenue, data, goodwill, or business opportunity, arising from or related to your use of the Site or reliance on its content, even if we have been advised of the possibility of such damages.

Our total aggregate liability arising from or related to the Site will not exceed one hundred US dollars ($100). This limit applies to the Site only; liability arising under a signed engagement agreement is governed by that agreement.

Some jurisdictions do not allow certain exclusions or limitations, so parts of the above may not apply to you. In that case our liability is limited to the greatest extent permitted by applicable law.

14 — IndemnityIndemnification

You agree to indemnify and hold harmless Stonebridge and its owners, employees, and contractors from any claim, demand, loss, or expense, including reasonable attorneys' fees, arising from your misuse of the Site, your violation of these terms, or your violation of any law or third-party right.

15 — LawGoverning law and disputes

These terms are governed by the laws of the State of California, without regard to its conflict of law rules. Any dispute arising from or related to these terms or the Site will be brought exclusively in the state or federal courts located in Sacramento County, California, and you consent to the personal jurisdiction of those courts.

Before filing anything, email us. Most disagreements resolve faster in a conversation than in a filing, and we would rather have the conversation.

16 — ChangesChanges to these terms

We may revise these terms at any time. When we do, we will update the "Last updated" date above. Material changes will be noted prominently on this page. Continuing to use the Site after a change takes effect means you accept the revised terms. If you do not accept them, stop using the Site.

17 — GeneralGeneral provisions

If any provision of these terms is held unenforceable, the remaining provisions stay in effect and the unenforceable provision is modified to the minimum extent necessary to make it enforceable. Our failure to enforce any provision is not a waiver of it. These terms, together with the privacy policy, are the entire agreement between you and Stonebridge regarding the Site. You may not assign your rights under these terms; we may assign ours in connection with a merger, acquisition, or sale of assets.

18 — ContactContact

Questions about these terms go to a person, not a ticket queue.