Terms of service

Effective Date: November 14, 2026

Entity: Galipeault Cybersecurity LLC (doing business as Karma Cybersecurity)

Location: Nashua, New Hampshire

Contact: billy@karmacybersecurity.com

These Terms of Service ("Terms") govern your access to and use of the website (karmacybersecurity.com) operated by Galipeault Cybersecurity LLC, dba Karma Cybersecurity ("we," "our," or "us"), as well as any professional cybersecurity consulting, GRC advisory, audit readiness, and fractional CISO services we provide. By accessing our website or engaging our services, you agree to be bound by these Terms.

1. Acceptance of Terms

By visiting our website, booking a consultation, submitting an inquiry, or executing a Statement of Work (SOW) with Karma Cybersecurity, you acknowledge that you have read, understood, and agree to these Terms. If you are entering into these Terms on behalf of a company or legal entity, you represent that you have the authority to bind that entity.

2. Professional Advisory Services

  • Scope of Engagement: All professional services—including CMMC readiness, NIST compliance assessments (800-171 / 800-53), SOC 2 preparation, and Fractional CISO retainers—are governed by these Terms and any specific, mutually executed Statement of Work or service agreement.

  • Advisory Nature: Our services consist of professional guidance, risk assessments, governance structuring, and technical recommendations. Unless explicitly stated in a signed SOW, Karma Cybersecurity does not act as a managed security service provider (MSSP) handling 24/7 network monitoring or incident remediation execution.

3. Intellectual Property & Deliverables

  • Our IP: All website content, branding, logos, proprietary frameworks, documentation templates, and methodologies displayed or utilized by Karma Cybersecurity are the exclusive property of Galipeault Cybersecurity LLC and are protected by applicable intellectual property laws.

  • Client Deliverables: Upon full payment for contracted services, clients receive a perpetual, non-exclusive license to use customized reports, System Security Plans (SSPs), policies, and artifacts generated specifically for their internal business operations.

4. Limitation of Liability & Compliance Disclaimer

  • No Guarantee of Certification: Cybersecurity and GRC frameworks (such as CMMC, NIST, or SOC 2) rely on third-party assessment organizations (C3PAOs), independent auditors, or federal bodies. While our advisory services are designed to maximize audit readiness, Karma Cybersecurity does not guarantee formal certification or audit clearance, as final determinations rest entirely with authorized external assessors.

  • Limitation of Liability: To the maximum extent permitted by applicable law, Galipeault Cybersecurity LLC shall not be liable for any indirect, incidental, special, consequential, or punitive damages—including loss of data, revenue, or business interruption—arising out of or in connection with our advisory services or website usage. Our total aggregate liability for any claim arising under these Terms shall not exceed the total fees paid by the client to Karma Cybersecurity for the specific service giving rise to the claim during the preceding six (6) months.

5. Confidentiality & Data Protection

We recognize the highly sensitive nature of enterprise architecture, Controlled Unclassified Information (CUI), and internal security postures.

  • Both parties agree to protect confidential information disclosed during advisory engagements using strict administrative and technical safeguards.

  • We handle all client data in accordance with our Privacy Policy and applicable federal and state regulatory frameworks.

6. Payment & Retainer Terms

  • Invoicing & Sprints: Fixed-fee compliance sprints, workshops, and project-based engagements are billed according to agreed milestone schedules outlined in individual proposals or invoices.

  • Fractional CISO Retainers: Monthly retainers are billed in advance and automatically renew unless terminated in accordance with the specific client agreement. Failure to remit payment for active advisory services may result in the suspension of deliverables and ongoing support.

7. Governing Law & Jurisdiction

These Terms and any disputes arising out of or related to our services shall be governed by and construed in accordance with the laws of the State of New Hampshire, without regard to its conflict of law principles. Any legal action or proceeding arising under these Terms shall be brought exclusively in the state or federal courts located in Hillsborough County, New Hampshire.

8. Modifications to Terms

We reserve the right to modify these Terms at any time. Changes will be posted directly to this page with an updated effective date. Continued use of our website or active engagement in our services following any modifications constitutes your formal acceptance of the updated Terms.

9. Contact Information

For any questions regarding these Terms of Service, please contact us at: