Digital Product License & Terms of Use
Effective Date: August 29, 2026
Version 1.0
1. Agreement and Acceptance
These Digital Product License & Terms of Use (the “Terms”) govern the purchase, download, access, and use of digital products made available by ThriveBridge Strategies LLC (“ThriveBridge,” “we,” “us,” or “our”). The purchaser and the legal entity for whose benefit the product is purchased are referred to as the “Customer.”
Before completing a purchase, the Customer must be provided access to these Terms and must affirmatively agree to them through the checkout or ordering process. If an individual accepts these Terms on behalf of an organization, that individual represents that the individual has authority to bind that organization. Electronic acceptance and electronic records may be used to form this agreement to the extent permitted by applicable law.
If the Customer does not agree to these Terms, the Customer must not complete the purchase, download, access, copy, or use the product. Continued use after valid acceptance remains subject to these Terms.
2. Covered Products
These Terms apply to ThriveBridge downloadable digital products, including workbooks, templates, guides, policy packages, trackers, training materials, checklists, readiness tools, reference materials, and related electronic files, unless ThriveBridge expressly provides a different written license for a particular product.
Product descriptions, order confirmations, invoices, and product-specific notices may establish additional scope, technical, or use conditions. If a product-specific written license expressly conflicts with these Terms, the product-specific license controls for that product.
3. License Grant
Subject to payment of all applicable fees and compliance with these Terms, ThriveBridge grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable license to use the purchased digital product for the Customer’s own internal business purposes.
Unless a separate written license states otherwise, the standard license is a single-organization license for one purchasing legal entity. The Customer may permit its employees, individual contractors, managed service providers (MSPs), managed security service providers (MSSPs), information technology providers, attorneys, auditors, assessors, and other service providers acting solely on behalf of that licensed legal entity to access the product only as reasonably necessary to support the Customer’s internal use. Such service providers may not retain the blank product for reuse with other customers, redistribute it, resell it, or incorporate it into a reusable multi-client toolkit.
The license is a license to use the product; ownership of the product and underlying intellectual property is not transferred. The license may be suspended or terminated only as provided in these Terms, including for material breach, unauthorized redistribution or resale, infringement or misuse of ThriveBridge intellectual property, fraud, or failure to pay amounts properly due.
4. Permitted Uses
The Customer may:
• Use the product internally to support the Customer’s own readiness, governance, cybersecurity, information protection, training, documentation, or compliance activities.
• Enter, modify, and maintain Customer-specific information in editable product fields where the product is designed for such use.
• Create reasonable internal working copies and backups for the licensed organization.
• Provide completed Customer-specific outputs to the Customer’s employees, management, legal counsel, auditors, assessors, customers, prime contractors, or Government representatives when reasonably necessary for the Customer’s own business, contractual, assessment, or compliance purposes, provided the underlying blank ThriveBridge product is not redistributed.
5. Prohibited Uses
Except where ThriveBridge provides prior written authorization or a separate professional or consultant license, the Customer may not:
• Resell, redistribute, sublicense, publish, upload to a public repository, commercially share, or otherwise make the product or substantially similar derivative copies available to third parties.
• Use the standard license as a reusable consulting deliverable, template library, or assessment tool across multiple unrelated client organizations.
• Remove, obscure, or materially alter ThriveBridge copyright, proprietary, licensing, source, or limitation notices.
• Represent the product as an official U.S. Government, Department of Defense, Cyber AB, accreditation-body, or certification-body product.
• Represent purchase or use of the product as proof that the Customer is certified, compliant, approved, assessed, or guaranteed to receive a particular assessment, contractual, regulatory, or Government outcome.
• Use the product to create a competing commercial template, toolkit, workbook, training package, or other product intended for resale or external licensing.
Nothing in these Terms restricts the Customer from independently creating its own policies, procedures, records, or other materials using its own knowledge, facts, and experience, provided the Customer does not copy or commercially exploit ThriveBridge’s protected original expression or other ThriveBridge intellectual property beyond the license granted.
6. Intellectual Property and Ownership
ThriveBridge and its licensors retain all right, title, and interest in and to the digital products, including original text, organization, workflow design, instructional content, visual design, formulas, logic, dashboards, proprietary guidance, and other protectable elements, subject to any third-party or public-domain materials identified within a product.
Government statutes, regulations, clauses, standards, guidance, and other public materials remain subject to their applicable ownership and use rules. ThriveBridge does not claim exclusive ownership of Government requirements or other material that is not owned by ThriveBridge. ThriveBridge’s intellectual property rights apply to its original compilation, presentation, commentary, workflow, guidance, and other original product elements.
7. Customer Data and Completed Outputs
As between ThriveBridge and the Customer, the Customer retains ownership of Customer-specific information that the Customer enters into a product. The Customer is responsible for safeguarding sensitive information placed into a downloaded product and for determining whether the product may be stored, transmitted, shared, or processed in the Customer’s environment.
Unless separately agreed in writing, purchase of a downloadable product does not require the Customer to provide completed product files or Customer data back to ThriveBridge.
8. Compliance, Assessment, and Government Status Disclaimer
ThriveBridge digital products are independent commercial readiness, documentation, management, training, and support tools. They are not official CMMC assessments, CMMC certifications, Government determinations, legal opinions, accreditation decisions, or guarantees of compliance, certification, contract award, assessment outcome, SPRS status, or Government acceptance.
Use of a product does not establish that an organization satisfies CMMC, FAR, DFARS, NIST, Department of Defense, contractual, regulatory, or other requirements. References to CMMC, FAR, DFARS, NIST publications, Department of Defense guidance, or other Government requirements are provided for informational, traceability, and readiness-support purposes. The applicable solicitation, contract, regulation, clause, and authoritative Government source control in the event of any inconsistency.
For CMMC Level 1, the applicable organization remains responsible for conducting and documenting the required self-assessment, submitting required assessment information in SPRS when applicable, and completing required affirmation activities. Level 1 does not use a calculated partial CMMC score, and CMMC assessment POA&Ms are not permitted for Level 1.
ThriveBridge is an independent company and is not affiliated with, endorsed by, sponsored by, or acting on behalf of the U.S. Department of Defense, Cyber AB, or any other Government agency or accreditation body unless expressly stated in a separate written agreement.
9. Customer Responsibilities
The Customer is solely responsible for decisions and actions concerning its contracts, information, systems, security program, assessment scope, compliance status, representations, affirmations, and Government submissions. Customer responsibilities include, as applicable:
• Determining which contractual, statutory, regulatory, security, and assessment requirements apply.
• Correctly identifying and classifying Federal Contract Information (FCI), Controlled Unclassified Information (CUI), and other protected information.
• Defining and validating applicable system, organizational, and assessment boundaries.
• Implementing, operating, and maintaining required safeguards and security practices.
• Maintaining adequate, accurate, current, and final supporting evidence.
• Validating information before relying on it for an assessment, certification, representation, affirmation, proposal, contract action, or Government submission.
• Obtaining appropriate legal, cybersecurity, accounting, contracting, assessment, or other professional advice when needed.
10. CUI and Scope Escalation
Products designed for CMMC Level 1 or FCI-only environments may not be appropriate when CUI is present or reasonably suspected.
If CUI is identified or reasonably suspected, the Customer should stop relying on an FCI-only or Level 1-only workflow for a final compliance determination and evaluate the additional contractual, cybersecurity, scoping, and CMMC requirements that may apply.
11. Regulatory and Product Changes
Cybersecurity, acquisition, CMMC, FAR, DFARS, NIST, and related requirements and Government guidance may change after a product is released.
ThriveBridge may revise products from time to time, but purchase of a product does not guarantee that future versions, updates, regulatory revisions, or replacement products will be provided without additional charge.
The Customer is responsible for checking the product version, release date, source register, product notices, applicable contract language, and current authoritative Government guidance before relying on a product for a specific compliance or business decision.
12. No Professional or Legal Advice
Digital products provide general business, readiness, governance, cybersecurity, information-protection, and compliance support.
They do not constitute legal advice, an attorney-client relationship, an independent certification decision, an accredited assessment, accounting advice, or a substitute for professional advice tailored to the Customer’s particular facts and contractual obligations.
13. Product Availability, Compatibility, and Technical Requirements
The Customer is responsible for having compatible software, hardware, permissions, and technical capability to open and use the purchased file format. Product listings should identify the principal file format and material technical requirements known to ThriveBridge.
ThriveBridge does not warrant that a product will operate identically in every software version, third-party application, operating system, cloud environment, or security configuration.
If a delivered file is corrupted, incomplete, or materially inaccessible as delivered, the Customer should contact ThriveBridge using the support method identified on the website or order confirmation.
14. Refunds and Digital Products
Because downloadable digital products are delivered electronically and can generally be retained after delivery or access, sales are final once the digital product has been delivered or made available for download, except where a refund, replacement, or other remedy is required by applicable law or expressly promised by ThriveBridge in writing.
Before purchase, ThriveBridge will make the applicable digital-product refund terms reasonably available to the Customer.
If the Customer experiences a verified delivery problem, corrupted file, duplicate charge, or other material fulfillment error attributable to ThriveBridge, the Customer should contact ThriveBridge promptly so ThriveBridge can evaluate an appropriate replacement, correction, or refund.
Nothing in this section limits non-waivable rights or remedies available under applicable law.
15. No Warranties
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, DIGITAL PRODUCTS ARE PROVIDED “AS IS” AND “AS AVAILABLE.”
THRIVEBRIDGE DISCLAIMS EXPRESS AND IMPLIED WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, ACCURACY, COMPLETENESS, AND RESULTS, EXCEPT TO THE EXTENT A WARRANTY CANNOT LAWFULLY BE DISCLAIMED.
THRIVEBRIDGE DOES NOT WARRANT THAT USE OF A PRODUCT WILL RESULT IN CMMC STATUS, CERTIFICATION, COMPLIANCE, A CONTRACT AWARD, A PARTICULAR ASSESSMENT RESULT, A GOVERNMENT ACCEPTANCE DECISION, OR THE ELIMINATION OF CYBERSECURITY OR BUSINESS RISK.
16. Limitation of Liability
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THRIVEBRIDGE WILL NOT BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS, LOST DATA, LOSS OF CONTRACT, LOSS OF CERTIFICATION OR ASSESSMENT STATUS, OR BUSINESS INTERRUPTION ARISING FROM OR RELATED TO A DIGITAL PRODUCT OR THESE TERMS, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THRIVEBRIDGE’S AGGREGATE LIABILITY ARISING FROM OR RELATED TO A PARTICULAR DIGITAL PRODUCT WILL NOT EXCEED THE AMOUNT ACTUALLY PAID TO THRIVEBRIDGE FOR THAT PRODUCT.
Some jurisdictions do not permit certain warranty disclaimers or limitations of liability. In those jurisdictions, these provisions apply only to the maximum extent permitted by law.
17. Indemnification
To the extent permitted by applicable law, the Customer agrees to defend, indemnify, and hold harmless ThriveBridge Strategies LLC and its owners, officers, employees, and agents from third-party claims, losses, liabilities, damages, judgments, and reasonable costs, including reasonable attorneys’ fees, to the extent arising from the Customer’s unlawful redistribution or resale of a product, unauthorized commercial exploitation of ThriveBridge intellectual property, material misrepresentation of the product as an official certification or Government product, or material violation of these Terms.
This obligation does not apply to the extent a claim results from ThriveBridge’s fraud, gross negligence, willful misconduct, or other liability that applicable law does not permit ThriveBridge to disclaim, limit, or shift.
18. Suspension and Termination
ThriveBridge may suspend or terminate the Customer’s license for a material breach of these Terms, including unauthorized redistribution or resale, infringement or misuse of ThriveBridge intellectual property, fraud, or failure to pay amounts properly due.
When a breach is reasonably capable of cure, ThriveBridge may provide notice and a reasonable opportunity to cure before termination.
Upon termination, the Customer must cease unauthorized use and distribution and delete unauthorized copies. Termination does not require destruction of Customer-owned information or independently created Customer records that do not contain protected ThriveBridge product content.
Provisions concerning intellectual property, disclaimers, limitations of liability, indemnification, governing law, and provisions that by their nature should survive will survive termination.
19. Updates to These Terms
ThriveBridge may update these Terms for future purchases or future product versions.
The version presented or incorporated at the time of purchase will generally govern that purchase unless the Customer and ThriveBridge agree otherwise or a change is required by law.
ThriveBridge will maintain a visible version number and effective date for published Terms.
20. Governing Law and Venue
These Terms are governed by the laws of the State of Maryland, without regard to conflict-of-law principles, except to the extent federal law or another non-waivable law applies.
Subject to applicable jurisdictional requirements and non-waivable rights, any judicial proceeding arising from these Terms shall be brought in a state or federal court of competent jurisdiction in Maryland.
Nothing in these Terms waives any right or protection that applicable law does not permit the parties to waive.
21. Severability; Waiver; Assignment; Entire Agreement
If a provision of these Terms is held unenforceable, the remaining provisions remain in effect to the maximum extent permitted by law. A failure to enforce a provision is not a waiver of future enforcement.
The Customer may not assign or transfer the license except as part of a bona fide merger, acquisition, or sale of substantially all assets of the licensed legal entity, and only if the successor agrees to these Terms.
ThriveBridge may assign these Terms in connection with a merger, acquisition, reorganization, or sale of its business or relevant assets.
These Terms, together with any applicable product-specific license, order terms, and expressly incorporated notices, constitute the agreement concerning the licensed digital product and supersede prior discussions about the same subject.
22. Contact
Questions regarding licensing, permissions, product access, legal notices, or these Terms should be directed through the official contact method published on the ThriveBridge Strategies website.
The website contact information designated for legal notices is incorporated into these Terms by reference and should be maintained as a current, monitored business contact.
Customers should not transmit CUI, export-controlled information, classified information, passwords, authentication secrets, or other sensitive Government or customer information through a general website contact channel unless ThriveBridge has expressly authorized an appropriate protected method.
STANDARD BUSINESS LICENSE SUMMARY
Licensee:
One purchasing legal entity.
Primary Use:
Internal business and compliance/readiness activities.
Internal Users:
Employees and supporting individual contractors and authorized service providers acting on behalf of the licensed entity.
Customer-Specific Outputs:
May be shared as reasonably necessary for the licensed entity’s own business, contractual, assessment, or compliance purposes.
Resale / Redistribution:
Not permitted.
Multi-Client Consultant Use:
Not permitted under the Standard Business License.
Ownership:
ThriveBridge retains ownership of the product and original intellectual property.
END OF DIGITAL PRODUCT LICENSE & TERMS OF USE
© 2026 ThriveBridge Strategies LLC. All rights reserved.