Terms of Service
Last updated: August 2, 2026
1. Who we are
GapLedger is an information security management system (ISMS) and compliance management service operated by Stratiback LLC, a Louisiana limited liability company (“GapLedger”, “we”, “us”). These terms are a binding agreement between Stratiback LLC and the organization that creates an account (“you”, “your organization”).
2. The service
GapLedger provides software for documenting and managing compliance programs — control libraries, risk registers, statements of applicability, corrective actions, internal audits, management reviews, evidence storage, and related exports. GapLedger is compliance management software. It is not legal advice, and we are not a certification body: certification decisions rest with your accredited auditor, and regulatory readiness remains your organization’s responsibility. Framework content (control titles, guidance, and cross-framework mappings) is provided as an editorial aid to the underlying standards, not as a substitute for them.
3. Accounts and security
You must provide accurate registration information and keep your credentials confidential. Multi-factor authentication is mandatory for every user. You are responsible for activity under your organization’s accounts and for promptly removing users who should no longer have access. Notify us via the contact form immediately if you believe an account has been compromised.
4. Trials
New organizations receive a 14-day free trial with full functionality. No payment method is required. When a trial ends without a subscription, the workspace becomes read-only: your data remains intact, readable, and exportable, but changes require an active subscription. We do not automatically charge you at the end of a trial.
5. Subscriptions and billing
Paid plans are billed per module, monthly or annually, at the prices published on our site at the time of purchase. Payment processing is handled by Stripe; we never see or store your card number. Charges appear on your statement under Stratiback LLC. Subscriptions renew automatically at the end of each billing period until canceled. You can cancel at any time from the billing page; your subscription remains active until the end of the period already paid for, after which the workspace becomes read-only. We do not offer pro-rated refunds for partial periods except where required by law.
6. Your data
Everything your organization puts into GapLedger — controls, risks, notes, evidence files, exports — belongs to your organization. We claim no rights over it beyond what is needed to operate the service. You can export your data at any time, including after a trial or subscription ends, while your account remains in read-only status. Our handling of personal data is described in the Privacy Policy.
7. Evidence retention — please read
Evidence files are stored in write-once storage with a one-year compliance retention lock. This is a feature: it lets you demonstrate to an auditor that evidence has not been altered or deleted. It also means that an uploaded evidence file cannot be deleted by anyone — including us — until its retention period expires, even if you close your account or ask us to erase your data. Do not upload material you may need destroyed on demand.
8. Acceptable use
You agree not to: attempt to access other organizations’ data; probe, scan, or test the vulnerability of the service without written permission; resell access to the service except through an agreed practice/consultant arrangement; use the service to store unlawful content; or interfere with other customers’ use of the service. We may suspend accounts that violate these terms, with notice where practicable.
9. Availability and support
We aim for high availability but do not currently offer a contractual SLA. Support is provided via the contact form during US business hours. We perform nightly backups of service data; evidence files are additionally protected by write-once storage.
10. Warranty disclaimer
The service is provided “as is” and “as available”. To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that use of the service will result in certification to any standard.
11. Limitation of liability
To the maximum extent permitted by law, neither party’s aggregate liability arising out of the service will exceed the amounts you paid us in the twelve months before the claim arose, and neither party is liable for indirect, incidental, special, or consequential damages. Nothing in these terms limits liability that cannot be limited by law.
12. Termination
You may stop using the service and cancel at any time. We may terminate or suspend the service for material breach of these terms. On termination, we will make your data available for export for at least 30 days, subject to the evidence retention lock described in section 7.
13. Changes
We may update these terms as the service evolves. For material changes we will give at least 14 days’ notice by email or in-app notice before they take effect. Continued use after the effective date constitutes acceptance.
14. Governing law
These terms are governed by the laws of the State of Louisiana, USA, without regard to conflict-of-law rules. Questions about these terms can be sent via the contact form.