Terms and conditions.

# Terms and Conditions

## Scope and identity
These terms describe the public governance portfolio and tools maintained by Md. Abdullah Al Owasi. Contact: abdullahalowasi369@gmail.com. The public tools provide inspectable metadata review and planning support. Paid advisory or implementation work requires a separate written scope, commercial agreement and acceptance criteria. No engagement or promise of availability arises from using a button or viewing a report.

## Open-source rights
The repository code is distributed under the existing GNU Affero General Public License version 3 in LICENSE. That license governs copying, modification, distribution and applicable network-source obligations. These website terms do not narrow the permissions granted by LICENSE. Preserve required license, copyright and attribution notices. Framework names and third-party marks belong to their owners; no endorsement is implied.

## Review responsibility
Public calculations use supplied metadata and documented qualitative policies. They do not certify compliance, authorize deployment, validate the contents of an evidence URL, replace an audit opinion or supply legal advice. Framework applicability, evidence sufficiency, acceptance of risk and release decisions remain with the designated reviewer and authority. Illustrative examples are synthetic, and modeled savings are assumptions rather than measured results.

## Authorized use and data
Use only metadata you are authorized to process. Do not enter credentials, secrets, personal records or confidential evidence into public scenarios. Evidence URLs are references; the browser inspector does not fetch their contents. Browser edits remain in memory unless you explicitly save on that device or export them. Browser storage belongs to that origin and device, and may be cleared by the browser. Keep independent backups. A contact brief is sent only when you send the prepared email in your email application.

## Optional server evaluations
Organization evaluations require configured identity, tenant storage and a processing provider. Before submitting non-public information, confirm the scope, privacy arrangements, provider disclosure, retention and organizational authorization with the operator. Server-side quotas and identity checks apply; browser storage does not grant entitlement. Unconfigured services display an access-request or unavailable state. No subscription charge or unlimited entitlement is implied by public preview pages.

## Acceptable use
Do not attempt unauthorized access, upload malicious content, impersonate an approver, fabricate evidence, bypass tenant authorization or use the public outputs as approval that has not been given. Follow the terms of any external evidence source you reference.

## Availability, warranty and liability
The open-source software is provided under the warranty and liability provisions of LICENSE, subject to applicable law. Public pages may change or become unavailable. The operator does not promise a compliance result, job offer, consulting contract, revenue outcome or delivery date without a separately agreed engagement. Independent review and testing are required before deploying these components for shared enterprise operations.

## Services, support and changes
A service statement of work should define scope, data handling, responsibilities, deliverables, fees, support period, cancellation terms and acceptance criteria. Those terms are agreed before work begins. Repository history records changes to these public terms. Questions or issues may be raised through the contact brief.