Terms of Service
These terms govern your use of FreeSRA.com and the assessment application at app.freesra.com (the "Service"), operated by Secvara. By using the Service, you agree to these terms and to the Privacy Policy. If you do not agree, do not use the Service.
What the Service is
FreeSRA is a free questionnaire. It records your answers and shows a summary against NIST CSF and any additional frameworks you select, such as HIPAA, PCI DSS, or SOC 2. The result is informational. It is not legal advice, not an audit, and not a certification that you meet HIPAA, HITRUST, PCI DSS, SOC 2, or any other requirement. You are responsible for how you use the result.
Secvara may offer paid security services separately. Using the free assessment does not obligate you to buy anything, and it does not obligate Secvara to perform remediation.
Accounts
Sign-in is through Google. You must use a Google account you are allowed to use. You are responsible for activity under that sign-in. We may refuse or close an account that breaks these terms or that we cannot verify.
Some email addresses are allowed to edit assessment questions and rules. That access is limited to people Secvara authorizes. Do not share an editor session.
What you may submit
You agree that you have the authority to answer for the organization you describe. Do not submit patient names, medical records, insurance identifiers, or other protected health information. Do not submit payment card numbers, passwords, or other secrets. The questions are about security practices, not about individual patients.
You keep ownership of the answers you submit. You give Secvara permission to store and process them so we can run the assessment, save your progress, and contact you if you asked us to.
Acceptable use
Do not misuse the Service. That includes trying to break or probe the application, uploading malware, scraping it in a way that degrades it for others, or using it to violate the law.
The Service can change
The assessment is free and may change or stop. Questions, scoring, and saved drafts can be updated. We may suspend the Service for maintenance or security.
Disclaimers and liability
The Service is provided "as is." Secvara disclaims warranties of merchantability, fitness for a particular purpose, and non-infringement, to the extent the law allows. Secvara is not liable for indirect, incidental, or consequential damages, or for decisions you make based on an assessment result, to the extent the law allows. If Secvara is found liable, the total liability for a claim relating to the free Service is limited to one hundred U.S. dollars.
Contact
Secvara, operator of FreeSRA.com
Email: [email protected]