soc2zip Terms of Service

These Terms of Service (“Terms”) are between you and soc2.zip, a service operated by Motivato Sp. z o.o., a Polish limited liability company with its registered office at ul. Nowogrodzka 31, 00-511 Warszawa, Poland (KRS 0000528892, NIP 7010438730) (“soc2zip,” “we,” “us”). They govern your use of soc2zip and any package you purchase from us.

These Terms are separate from the SOC2Auditors.org Terms of Service, which cover the auditor directory and matching service. If you use both products, both sets of terms apply.

You agree to these Terms by purchasing soc2.zip and by checking the agreement box when you complete the intake form. We do not begin preparing your package until you have agreed. If you do not agree, do not submit the intake form; contact us at hello@soc2auditors.org and we will refund your purchase.

1. What soc2zip is

soc2zip is a one-time SOC 2 readiness package assembled from your inputs and reviewed by a human before delivery. You answer questions in our intake form, pay, and we email you an archive containing draft policies, a CAIQ Lite questionnaire, an evidence index, auditor introductions, and a README. If you choose to email us supporting documents (org chart, vendor list, architecture sketch), we may incorporate them into your package.

soc2zip is not a CPA firm. soc2zip does not perform SOC 2 audits, attestations, or examinations. soc2zip does not issue SOC 2 reports. The opinion that closes a SOC 2 engagement is signed by a licensed CPA firm, not by us. soc2zip prepares you for that firm.

soc2zip is not a law firm and the contents of any package are not legal advice.

2. The package: how it’s made and what you get

How it’s made

We combine your form answers, any supporting documents you choose to email us, maintained reference materials, and automated document-processing tools. A human reviews the package before delivery. Third-party license notices, where required, are included in the delivered archive.

Yellow-highlight convention

Any control that we could not ground in your form answers is rendered with a [USER TO CONFIRM:] marker. You must replace each one with your actual control before relying on the document or sharing it with anyone.

Your duty to review

You are responsible for reviewing every document in the package for accuracy, completeness, and applicability to your business before submitting it to any auditor, customer, prospect, or regulator. soc2zip does not warrant that the package will pass any specific audit, satisfy any specific customer’s procurement requirements, or comply with any specific law or regulation.

3. What you owe us

Payment

You agree to pay the price displayed at checkout: currently $1,500 for Documents or $2,400 for AWS Verified, unless a different promotional price is displayed. All prices are in USD and are exclusive of any applicable VAT or sales tax, which will be added where required. Payment is processed by Stripe; their Terms apply to the payment transaction.

Accurate inputs

You represent that the information you provide in the intake form is accurate and complete to the best of your knowledge, and that any documents you email us are yours to share or you have permission to share them.

Business use only

You represent that you are purchasing soc2zip for a business or organization, acting in a business capacity, and not as a consumer for personal, family, or household purposes. soc2zip is a business-to-business service and is not offered to consumers.

No misrepresentation

You agree not to:

Represent the soc2zip package as a SOC 2 audit report, attestation, or CPA-signed opinion.
Distribute the package or any part of it as a product or service of your own (you may include components in your own SOC 2 evidence, which is the whole point; you may not white-label and resell).
Use the package for any purpose unrelated to your own SOC 2 readiness.

4. What we owe you

Delivery

We will normally email your package within 3 business days after you complete the intake and provide any access needed for the tier you purchased. If we anticipate delay, we will email you. If we have not delivered within 14 days of receiving everything required to begin, you may demand a refund and we will issue one within 5 business days. The package is delivered by email, as an attachment or a secure download link; please keep your copy, as we may not be able to guarantee indefinite re-delivery.

Quality

We will use commercially reasonable efforts to produce a package consistent with our calibration fixture and prior customer packages. If a package is materially incomplete or contains material errors, we will re-deliver or refund, your choice. See §8 (Refunds) below for details.

Fieldwork guarantee

Bring this package to your auditor. If they will not work from the format, we revise it until they will, at no charge. Whether you pass is the part you own. This guarantee covers the document format; it does not extend to your control environment, AWS configuration, or any remediation the audit identifies.

5. Intellectual property

Your inputs

You retain ownership of everything you give us: your form answers, any supporting documents you email us. You grant soc2zip a non-exclusive, worldwide, royalty-free license to use those inputs solely to (a) generate your package and (b) deliver it to you.

Your package

When we deliver your package, we grant you a non-exclusive, worldwide, perpetual, royalty-free license to use the contents for your business, including using them in your own SOC 2 audit, your customer trust pages, and your internal compliance program. You may modify them. You may not redistribute the package, or substantial verbatim portions of it, as a standalone product or service.

Automated processing

We do not use your form answers or supporting documents to train third-party models. Our contracted processing providers may process those inputs only to provide the service to us, subject to their business terms and our Privacy Policy.

We do retain hashed, de-identified versions of submissions to verify that prompt changes don’t degrade quality on prior cases. See the Retention and deletion section of the Privacy Policy.

6. Liability: please read this part

Disclaimers

THE SOC2ZIP PACKAGE AND SERVICES ARE PROVIDED “AS IS.” TO THE FULLEST EXTENT PERMITTED BY LAW, SOC2ZIP DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. SOC2ZIP DOES NOT WARRANT THAT THE PACKAGE WILL PASS ANY SPECIFIC SOC 2 AUDIT, SATISFY ANY SPECIFIC PROCUREMENT REQUIREMENT, OR COMPLY WITH ANY SPECIFIC LAW.

Limitation of liability

TO THE FULLEST EXTENT PERMITTED BY LAW:

General cap. soc2zip’s aggregate liability for any claim arising out of or relating to your package, the services, or these Terms is capped at the total amount you paid us, or US$100, whichever is greater.
Privacy/security cap. For claims arising out of unauthorized access to or disclosure of documents you emailed to soc2zip, soc2zip’s aggregate liability is capped at US$50,000. This cap applies in place of the General cap for such claims and is set deliberately higher to increase your protection in the event of a data incident.
Excluded damages. soc2zip is not liable for indirect, incidental, special, consequential, or punitive damages, lost profits, lost revenue, lost data, or business interruption, even if we were told the damages were possible.

These limits apply whether the claim is in contract, tort (including negligence), warranty, or any other theory. Nothing in these Terms limits liability that cannot be limited under applicable law, including liability for fraud or willful misconduct.

Indemnification: you protect us

You agree to defend, indemnify, and hold harmless soc2zip and its operators from any third-party claim arising from (a) your distribution or representation of the package, (b) your inaccurate inputs, or (c) your violation of these Terms.

Indemnification: we protect you (limited)

If a third party claims that text in your package, as delivered to you, infringes their copyright or trade secret, we will defend the claim and pay damages, up to the General cap above. To get this protection, notify us promptly at hello@soc2auditors.org and let us control the defense.

7. Your data and privacy

How we handle your data, including retention and deletion, is in the Privacy Policy, which is part of these Terms.

8. Refunds

Within 14 days of delivery. “Delivery” means the day we send your package. You may request a full refund for any reason or no reason: email hello@soc2auditors.org from the address you used at checkout, and we process it within 5 business days to your original payment method.

After 14 days. Refunds are at our discretion, and we are pragmatic: if we made a real mistake (a missing section, a wrong control, a package that didn’t generate), we refund or re-deliver. If you have already used the package in your audit, a refund is unlikely.

At any time, for a material error. If we shipped the wrong package, the package failed to generate, or a critical artifact (CAIQ Lite, evidence index, policies) is missing or corrupted, contact us and we re-deliver or refund, your choice.

When we refund, the amount is whatever you paid (package plus any add-ons), issued to your original payment method; Stripe takes 5–10 business days to post it. Any unredeemed Async Q&A add-on is cancelled. You may keep any copy already in your inbox, but the license to use those documents ends on refund, and you should not continue to use them in a SOC 2 audit or share them with third parties.

Not refundable: the Async Q&A add-on once we have answered your first question, and any portion of the package you already submitted to an auditor, customer, or regulator before requesting the refund.

Chargebacks. Please email us before disputing a charge with your bank — a chargeback costs us a fee on top of the refund. We have never refused a same-week refund.

The fieldwork guarantee in §4 also applies: if your auditor will not work from the format, we revise it until they will, at no charge.

9. Changes to these Terms

We may update these Terms. The version that applies to your purchase is the version in effect on the date you paid. We will not retroactively reduce your rights for purchases made under prior versions.

If we make a material change to the live Terms (changes to the liability cap, refund policy, or data-handling), we will email customers who purchased in the prior 12 months at least 30 days before the change takes effect.

10. Termination

We may terminate your access to the soc2zip service if you breach these Terms, for example by reselling the package or misrepresenting it as a CPA-signed audit. We will refund any unused add-on amounts.

11. Governing law and disputes

These Terms are governed by the laws of the State of Delaware, USA, without regard to its conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Binding arbitration. Any dispute arising out of or relating to these Terms or your package will be resolved by final and binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules, before a single arbitrator, seated in Wilmington, Delaware. The arbitration may be conducted by videoconference and decided on the documents where the amount in dispute allows. Judgment on the award may be entered in any court of competent jurisdiction; awards are enforceable internationally under the New York Convention.

Individual basis only. Disputes will be resolved only on an individual basis. You and soc2zip each waive any right to bring or participate in a class, collective, or representative action.

Small-claims carve-out. Either party may instead bring an individual claim in a small-claims court that has jurisdiction.

Consumer rights. soc2zip is a business-to-business service (see §3, Business use only). If, despite that, you are a consumer protected by mandatory law in your country of residence, nothing in these Terms deprives you of rights you cannot waive under that law, and this section applies only to the extent that law permits.

12. Miscellaneous

Entire agreement. These Terms (together with the Privacy Policy) are the entire agreement between you and soc2zip about the package.
Severability. If any part is unenforceable, the rest survives.
No waiver. Our failure to enforce any provision is not a waiver of it.
Assignment. You may not assign these Terms without our consent. We may assign these Terms to an acquirer in connection with a sale of the business.
Notices. To us: hello@soc2auditors.org. To you: the email address you provided at checkout.

13. Contact

hello@soc2auditors.org

Last updated: 2026-06-19. Version 1.0.0.

Terms of Service