These terms keep the access model clear: annual access, grandfathered legacy access, magic-link sign-in, guided missions, and the local-first desktop Builder.
New access is sold as an annual subscription through secure checkout. Existing active legacy customers may keep grandfathered access unless revoked or refunded. The app uses magic-link sign-in and checks for an active customer record before sending access links.
Individual access is for preparing your own submission. Consultant access is for MSPs, IT consultancies, and Cyber Advisors using the material and Consultant-only client deliverable templates across client engagements within the purchased client band. Active access includes the Software Update Checker. The service does not use cloud answer sync; the hosted customer area stores limited mission completion and licence registry metadata for the signed-in account.
Consultant desktop apps must be activated against the checkout account before normal Consultant use. Activation codes are short-lived, account-specific, and must not be shared outside your licensed organisation.
Consultant Starter includes 1 activated device, Consultant Growth includes 2, and Consultant Practice includes 5. Extra device seats are sold from the signed-in Consultant download hub at £99/year per activated device.
Consultant bands are based on active client engagements. An active client engagement means a client for whom you use the Consultant Builder, mission material, templates, reports, evidence workflow, or RightCyber-derived deliverables during the licence year.
If you need more capacity than your current band allows, buy a higher Consultant band before using the material for those additional client engagements. New Consultant client workspaces require an online licence registration check against the active client registry.
The registry records account email, licence band, activated device identifiers, and client workspace identifiers needed to enforce the licence. It does not store Builder answers, evidence files, screenshots, gap notes, or Evidence Pack exports.
Do not share sign-in links, attempt to bypass paid access, share activation codes, copy activated device secrets to another computer, overload the service, scrape protected material at scale, or use RightCyber material to misrepresent your controls, scope, evidence, or certification status.
The mission route, supporting background guides, local desktop Builder, templates, Consultant deliverables, and operational design belong to RightCyber or its licensors. Consultant access permits client use within your engagements, including adapting deliverables for a paying client, but it does not transfer ownership or allow resale as a standalone product, template library, or competing service.
The standard Consultant Partner route is co-branded and should preserve Powered by RightCyber wording where RightCyber material, workflow, screenshots, templates, or deliverables are used. Full white-label use requires a separate written agreement.
A partner must not suggest that RightCyber is the certifying body, guarantees certification, or has checked the client's evidence unless RightCyber has separately agreed a specific service in writing. In partner-led engagements, the partner takes first-line support for their own client relationship, advice, scope decisions, deliverable wording, and client communications.
RightCyber is practical preparation material and includes a local desktop Builder. It is not legal advice, does not replace assessor judgement, and does not guarantee certification.
The AI Safe Use Pack is practical support for managing public AI tool use. It is not a Cyber Essentials certification requirement, not legal advice, not full data loss prevention, and not a guarantee that every sensitive item will be detected.
For access or licence issues, email info@rightcyber.co.uk with your checkout email, licence type, and the page where you got stuck. Existing local Builder work remains accessible during service or network interruptions, including after the 30-day refresh grace state, but new device activation and new Consultant client registration require an online licence check. Support does not include managed remediation, assessor representation, or completing the questionnaire for you.
RightCyber does not guarantee certification, contract award, insurance acceptance, or assessor approval. To the fullest extent permitted by law, RightCyber is not liable for indirect, consequential, or business interruption losses arising from use of the service. RightCyber's aggregate liability for paid access is limited to the amount paid for the relevant licence in the 12 months before the claim, except where liability cannot legally be excluded or limited.
These terms are governed by the laws of England and Wales. The service is operated by Alec Pedersen trading as RightCyber, and disputes are subject to the courts of England and Wales unless consumer law gives you mandatory rights in another jurisdiction.
