Last updated: April 17, 2026
These terms apply when you buy the PolicyDone SOC 2 Kit or any other product on policydone.io from Financial Outsiders LLC ("we", "us"). If you buy, you agree to them. If you don't agree, please don't buy.
The PolicyDone SOC 2 Kit ($997) is a one-time purchase of a set of 15 tailored information security policy documents, a controls matrix, an evidence checklist, and an auditor-readiness brief, delivered as a single zipped package in Microsoft Word and PDF formats. Contents may be revised over time; what you buy is what we ship.
We deliver within 72 hours of receiving your completed intake form. Business hours are counted; weekends and U.S. public holidays do not count toward the 72-hour window. If we miss the 72-hour SLA for any reason other than missing information from you, we will notify you and provide an updated delivery time.
Delivery is considered complete when we send a download link to the email address you provided in the intake form.
To receive a useful kit, you must:
We are not responsible for the consequences of inaccurate information provided in the intake, or for operational gaps at your company that are separate from the documents themselves.
Once delivered, you may:
You may not:
We are not attorneys, auditors, or your employees. We provide policy documentation, not legal advice, audit opinions, or managed security services. Passing a SOC 2 audit requires operating the controls the policies describe — that operational work is yours.
If your SOC 2 auditor rejects the kit we delivered, we refund $997 in full. Full details, including the written-confirmation requirement and what the refund does and does not cover, are in our Refund Policy, which is incorporated into these terms by reference.
The kit is provided "as is." We do not warrant that it will pass every auditor's review; we promise only that if it doesn't, we refund you. We disclaim all implied warranties to the fullest extent permitted by law.
Our total liability under these terms is limited to the amount you paid for the kit ($997). We are not liable for indirect, incidental, or consequential damages — including lost business, delayed audit, or third-party fees — arising from your use of the kit.
Information you provide via the intake form is treated per our Privacy Policy. We do not share specifics of your company with any third party except as necessary to deliver the kit (e.g., passing details to AI services we use in drafting; these services do not retain or train on your data under our agreements).
These terms are governed by the laws of the State of Delaware, without regard to conflict-of-law principles. Any dispute arising from these terms will be resolved in the state or federal courts located in Delaware, and you consent to that jurisdiction.
We may update these terms. The current version is always at policydone.io/terms.html. Material changes affecting existing customers will be communicated by email before taking effect.
Questions? rob@policydone.io. We respond same day.
These terms are designed to be readable in plain English. They are a commercial contract, not a substitute for legal advice. Reviewed by Rob Shaner; final legal review pending.