Terms of service

1. Who you are dealing with

Cairn is operated by Mahomed Aqeel Ahmed Hussein, a sole trader based in Queensland, Australia. In these terms, "we" and "us" mean that business, and "you" means the organisation that holds a Cairn account.

2. What Cairn does, and what it does not

Cairn is a tool for recording your own assessment of a business against the Australian Signals Directorate's Essential Eight Maturity Model, and for producing a report of what you found.

Cairn does not assess anything. Every judgement in a Cairn report is one you or your staff entered. We do not verify your answers, inspect any system, or form an opinion about any business. A report produced with Cairn is your professional work, issued under your name, and your responsibility.

Cairn is not a certification. Nothing produced here certifies compliance with the Essential Eight, the Information Security Manual, or any other standard, and Cairn is not an accredited assessor. Where an assessment must be performed by an independent party, Cairn does not satisfy that requirement.

Cairn is not security advice. The framework content is reproduced from the ASD's published material; how it applies to a particular business is a matter for your professional judgement.

3. Your account

Cairn is for businesses. To create an account you must be 18 or over and using Cairn for a business, not for personal, household or family purposes. When you sign up you confirm that, and that you agree to these terms and the privacy policy; we keep a record of when you did.

You are responsible for what happens under your account, including the actions of anyone you invite to your team. Keep credentials to yourself, use a password you do not use elsewhere, and remove people who leave.

An account owner can see and change everything belonging to the organisation, including every client record and assessment.

4. Your clients' information

The businesses you assess, and the evidence you upload about them, remain yours. We claim no ownership of it and we do not use it to train anything or sell it to anyone.

You are responsible for having the right to put that information into Cairn. If you upload evidence about a client's systems, you should be confident your engagement with them allows it.

We access your content only where it is necessary to run or support the service, to fix a fault, or where the law requires it.

5. Sharing reports

A share link is a credential. Anyone holding one can read that report without signing in. They expire on the date you choose and you can revoke one at any time, but while a link is live, whoever has it can use it. Send them carefully.

6. Paying for Cairn

The free plan covers one client business. The Pro plan is $199 AUD per month and removes that limit. Prices are in Australian dollars.

Subscriptions are billed monthly in advance by Stripe. We never see or store your card details. You can cancel at any time from the billing page; your subscription then runs to the end of the period you have paid for and does not renew.

We may change the price with at least 30 days' notice by email. If you do not accept the new price, cancel before it takes effect.

7. Ending the arrangement

You can stop using Cairn whenever you like. Cancelling returns you to the free plan; your data is not deleted, but you will be limited to one client business until you subscribe again.

You can ask us to delete your account and everything in it by emailing hello@ucecairn.com. Deletion is permanent.

We may suspend or close an account that is being used unlawfully, that is being used to attack or degrade the service, or where fees have gone unpaid after we have asked. Except where the law or the circumstances make it impossible, we will tell you first and give you a chance to fix it.

8. Availability

We try to keep Cairn running and we do not promise it always will be. There is no uptime guarantee. We may take it down for maintenance, and we will avoid business hours where we reasonably can.

Keep your own copies of anything you cannot afford to lose. Reports download as PDFs for exactly that reason.

9. Your rights under the Australian Consumer Law

Nothing in these terms excludes, restricts or modifies any guarantee, right or remedy you have under the Australian Consumer Law that cannot lawfully be excluded. Our services come with guarantees that cannot be excluded, including that they will be provided with due care and skill.

Where we are permitted to limit our liability for a failure to meet a consumer guarantee, our liability is limited to resupplying the service or paying the cost of having it resupplied.

Otherwise, and to the extent the law allows, our total liability to you arising out of or in connection with Cairn in any 12-month period is limited to the fees you paid us in that period, and neither party is liable for indirect or consequential loss.

Because Cairn records your assessment rather than making one, we are not liable for the content of an assessment, for a conclusion drawn from a report, or for a security incident at a business you assessed.

10. Changes to these terms

We may update these terms. If a change materially affects you we will email the account owner at least 30 days before it takes effect. Continuing to use Cairn after that means you accept the change.

11. Governing law

These terms are governed by the laws of Queensland, Australia, and the courts of that State have non-exclusive jurisdiction.

12. Getting in touch

Email hello@ucecairn.com.