Assessment Terms

Effective November 7, 2026.

What these terms cover

These terms apply to every Cyber Defense & Privacy Assessment (“assessment”) provided by T&T Solutions LLC (“we”) to you (“you,” the client). If we agree to anything different in a written proposal, the proposal wins where the two conflict. Our Privacy Policy also applies.

Scope

Each package covers the number of accounts, devices, and environments described on our service page, or in your written proposal for Small Business and custom assessments. An assessment includes a guided review with a senior expert, AI-assisted analysis of de-identified findings, a written report with a security scorecard and prioritized recommendations, and a walkthrough of your results.

An assessment identifies and prioritizes risks. It doesn’t include fixing them, setting up new tools, ongoing monitoring, or responding to an active security incident. We’re happy to quote any of these separately.

Your authorization

You confirm that you own, or are authorized to manage, every account, device, and network included in the assessment. If the assessment covers accounts belonging to other people, such as family members or employees, you confirm you have their permission. For business assessments, the person who schedules the assessment confirms they have authority to approve it for the business.

How the assessment works

• You stay in control of your credentials. We never ask for your passwords. You sign in to your own accounts while we guide you, usually over a secure screen share.
• We don’t record sessions unless you agree in writing beforehand.
• You make the changes. During the review we may suggest settings to look at, but you decide whether to change anything. Our recommendations are yours to act on.
• Be accurate with us. Our findings depend on the information and access you share. We can’t assess what we aren’t shown.

AI tools

We use AI tools to help analyze findings and draft your report. We don’t enter personal information into AI tools. They work only with de-identified findings, such as which security settings are missing, and a senior expert reviews every finding and recommendation before it reaches you.

Confidentiality

Your report describes your security weaknesses, so we treat everything from your assessment as confidential. We share it only with you and the people you authorize, unless the law requires otherwise. We keep assessment notes and reports for 12 months after delivery and then delete them, or sooner if you ask.

If we find an active problem

If we see signs that an account or device may already be compromised, we’ll tell you right away and recommend immediate steps, such as changing a password or contacting your bank. Responding to an incident is outside the scope of an assessment, but we can help under a separate agreement.

Healthcare and other regulated businesses

If your business is subject to HIPAA or similar rules, tell us before your assessment. We’ll either put a Business Associate Agreement in place or plan the assessment so that we don’t view protected health information.

Pricing, payment, and scheduling

• Price: Personal and Comprehensive assessments have the fixed prices shown on our service page. Small Business assessments start at the price shown, and we confirm your exact price in writing before work begins.
• Payment is due before your guided review session, unless we agree otherwise in writing.
• Rescheduling is free with at least 24 hours’ notice.
• Cancellation: if you cancel before your guided review session begins, we’ll refund your payment in full. Once the review has begun, the fee is non-refundable, because the work is underway.
• Missed sessions: if you miss a session without notice, we’ll offer one new time. After that, the assessment may be treated as cancelled after work began.

No guarantee

An assessment reduces risk by finding and prioritizing weaknesses, but no review can find every vulnerability or make anyone immune to fraud, hacking, or data loss. We provide our assessments with professional care, but we don’t guarantee that you won’t experience a security incident, and our recommendations are not legal, financial, or insurance advice.

Limitation of liability

To the fullest extent the law allows, our total liability for any claim related to an assessment is limited to the fee you paid for it, and we are not liable for indirect, incidental, special, or consequential damages, including loss of data, funds, profits, or business. This limit doesn’t apply to liability that the law doesn’t allow us to limit.

Governing law

These terms are governed by the laws of the Commonwealth of Virginia. Any dispute will be handled in the state or federal courts located in Virginia.

Changes and questions

We may update these terms for future assessments. The version in effect when you schedule your assessment applies to it. Questions? Send them through our contact form (choose “Privacy or legal question”).