1. Organizational Status

ISACO (International Systems Assurance & Certification Organization) is an independent private standards and certification body.
ISACO is not a governmental agency, not a regulatory authority, and does not issue legally mandated certifications unless explicitly stated.

All ISACO certifications are based on our proprietary framework, assessment criteria, and audit methodology.

---

2. No Legal Equivalence to Government or ISO Standards

ISACO certifications are not equivalent to ISO certifications, government-issued licenses, statutory permits, or regulatory approvals.
Certification under ISACO confirms alignment with our framework and standards but does not replace legal compliance requirements in any jurisdiction.

Organizations remain solely responsible for meeting all applicable laws and regulations.

---

3. Limitation of Liability

ISACO, its officers, assessors, and affiliates are not liable for:

• Business decisions made by certified organizations
• Losses, damages, or claims resulting from certification or non-certification
• Misuse, alteration, or falsification of ISACO certificates or seals
• Any third-party interpretation of ISACO certification status
• Legal or regulatory noncompliance by certified organizations

All certifications are issued based on information provided by the client.
ISACO is not responsible for inaccurate, incomplete, or misleading information submitted by organizations.

---

4. Certification Validity & Use

ISACO certifications:

• Are valid only for the period specified on the certificate
• Require annual renewal or reassessment
• May be suspended or revoked if an organization fails to meet standards
• May not be altered, edited, or misrepresented in any form
• Must always include the verification code and correct certification level

Unauthorized use of the ISACO name, seal, or brand is strictly prohibited.

---

5. Intellectual Property Rights

All ISACO materials — including the ISACO Framework, manuals, guidelines, templates, questionnaires, certificates, seals, trademarks, and branding — are protected under intellectual property law.

You may not:

• Reproduce ISACO documents for resale
• Distribute ISACO materials without permission
• Create derivative versions of ISACO standards
• Use ISACO branding in unauthorized ways
• Claim ISACO approval without certification

Limited usage for documentation, internal training, and audit preparation is granted to organizations undergoing certification.

---

6. Data Protection & Confidentiality

ISACO respects the confidentiality of all documentation submitted for assessment.

We commit to:

• Keeping client data confidential
• Using documents only for assessment purposes
• Not sharing reports or materials without client authorization

ISACO may anonymize data for research, benchmarking, and improvement of the framework.

---

7. Website & Resource Use

By using the ISACO website or downloading resources, you agree not to:

• Misrepresent ISACO standards
• Use materials for competing certification bodies
• Engage in fraudulent or misleading use of ISACO content
• Present ISACO certification as government-mandated

ISACO may update resources without prior notice.

---

8. Appeals & Complaints

Organizations have the right to:

• Appeal certification decisions
• Report auditor misconduct
• File complaints regarding improper use of ISACO materials

ISACO investigates all legitimate concerns in accordance with our internal governance policies.

---

9. Governing Law

All ISACO activities, agreements, and certifications are governed by the legal jurisdiction in which ISACO is registered.
Disputes arising from assessments or certification decisions must be addressed through ISACO’s official dispute-resolution procedures before any external legal action.

---

10. Contact Information

For legal, compliance, or certification inquiries:
Contact ISACO Support