CEMarque Terms of Service

Effective date: 19 September 2026
Operator: Ronald D. Coburn, a sole proprietor trading as CEMarque, operating the CEMarque service
Place of establishment: North Carolina, United States
Business address: 2608 Erwin Rd, Unit 402, Durham, NC 27705, United States
Contact: support@cemarque.com
Telephone: +1 (919) 525-1616
Registration and tax details, where applicable: Sole proprietorship; no company registration number. Tax identification available on request.

These Terms govern the CEMarque website at cemarque.com, its checker, and the services you purchase directly from us. “We”, “us”, and “CEMarque” mean the operator identified above. “You” means the person or organisation using or purchasing the service, as the context requires.

1. Agreement and scope

We present these Terms before you place an order and require an affirmative indication of acceptance at checkout. Your order confirmation identifies the service, price, billing arrangements, and applicable terms. Merely visiting the public site does not authorise a payment or subscribe you to a paid service.

The Refund and Cancellation Policy forms part of these Terms. Our Privacy Notice explains personal-data processing; accepting these Terms is not consent to optional marketing or optional tracking.

A separate written agreement expressly accepted by both parties controls over these Terms for the subjects it addresses. Specific commitments in the accepted order supplement these Terms. If standard wording conflicts, mandatory law prevails and an expressly promised, more favourable customer refund or delivery commitment is honoured. We will not use a general disclaimer to remove a specific paid-service obligation.

2. Intended users and authority

CEMarque is intended for business and professional use. By purchasing for an organisation, you confirm that you have authority to bind it. You must have legal capacity to enter the contract. Paid services are not offered to people under 18.

Paid services are sold to business purchasers only. At checkout you confirm that you are purchasing in a business or professional capacity, and we do not knowingly sell to consumers. Your obligations nevertheless depend on your actual role and circumstances: a business-use statement does not deprive a person of consumer rights that legally apply, and the consumer provisions in these Terms and the Refund Policy apply wherever they are required.

We sell worldwide, subject to applicable sanctions and export-control law, and we may decline or reverse an order we cannot lawfully accept. Prices are in US dollars. Any tax, duty, or charge arising in your own country is your responsibility unless we are required to collect it.

3. What CEMarque does

CEMarque supplies information and document-preparation assistance concerning the EU Cyber Resilience Act, Regulation (EU) 2024/2847, and the specific related developments included in a purchased service. It can help identify likely scope, classification, applicable requirements, and documents to prepare.

CEMarque prepares documents; the responsible economic operator fulfils the obligations that apply to it. The manufacturer remains responsible for its declaration of conformity and the product's compliance. Importers, distributors, authorised representatives, and other actors have the duties applicable to their respective roles. You must establish which roles you hold.

We are not a law firm, notified body, certification body, market-surveillance authority, or your authorised representative. The service and deliverables provide regulatory information and document-preparation assistance, not legal advice for your circumstances. We do not provide legal representation, issue an official conformity certificate, grant a CE marking, conduct the legally required conformity-assessment procedure, or guarantee acceptance by an authority or customer. Using the service does not create an attorney–client relationship.

A document set does not replace product engineering, cybersecurity controls, testing, vulnerability handling, required independent assessment, or the evidence needed to support a declaration. Where legal or technical judgement is needed, you remain responsible for obtaining qualified advice and assessment. These statements do not remove our responsibility for delivering the service we actually promised.

4. Services and availability

4.1 Free checker and facts material

The public scope and classification checker, verdict links, and facts corpus are free. Results depend on the answers supplied, the assumptions identified, and the rules and sources used at the time. They are an informational assessment, not a binding legal determination or a guarantee of compliance.

Verdict pages and the answers displayed on them are public. Do not enter confidential or unnecessary personal information. Section 5 explains publication; the Privacy Notice explains retention.

4.2 Attestation Pack

The standard Attestation Pack costs US$149 once per product, subject to any clearly disclosed taxes or offer price at checkout. It is a document-preparation service. It is available only when the order page expressly allows purchase; a waitlist is not an order.

The standard Pack comprises:

Before payment, the order page identifies the actual delivered formats and versions, software needed to open or edit them, material compatibility limits, technical access restrictions, and any promised download or retrieval period, together with required inputs, product-specific exclusions, and agreed additions. Relevant limitations and retrieval commitments are also included in the saveable order information. We do not imply compatibility with a downstream SBOM or document tool merely because it supports a similarly named file format. We will not silently omit an advertised item. If we cannot prepare an included item, we will explain the issue and offer an agreed adjustment or refund.

The standard Pack is not represented as a complete CRA technical file, an EU Declaration of Conformity, a conformity assessment, a penetration test, or a managed vulnerability-reporting service. A future plan or separately agreed engagement may include additional documents or services; its actual order must say so.

4.3 Delivery and regeneration

During concierge delivery, we prepare and email the initial Pack within five business days after receiving payment and the completed inputs reasonably needed for your order, unless a different period was expressly agreed before purchase. We identify missing information and confirm the delivery date. If information remains unavailable, we will not invent facts or evidence. You may cancel before delivery under the Refund Policy.

For consumer purchases, the early-performance rules in Section 5 of the Refund Policy apply. A required request to begin a service is obtained separately. If the required request is absent, the five-business-day delivery period begins after the withdrawal period ends, provided payment and completed inputs have been received. Where digital-content law requires consent and acknowledgment of lost withdrawal rights before early supply, we instead delay that supply until the withdrawal period ends. The applicable timetable is disclosed before purchase. These restrictions do not apply to business purchases without a consumer withdrawal period.

Initial delivery means the complete included document set has been sent to your nominated email address as accessible files or working download links. Incomplete, inaccessible, or bounced delivery is addressed under the Refund Policy.

The Pack includes regeneration for 12 months after initial delivery, for the same product and the same document categories. You may submit updated product information and request that we regenerate the affected materials using the sources and templates then available. We do not automatically monitor your product or discover changes for you. There is no separate charge for these included updates. We agree a reasonable delivery date for each request and do not impose an undisclosed numerical limit on included regeneration.

The accepted order identifies the product and baseline scope. Ordinary versions or releases of that same product are not automatically treated as a new product. If a requested change materially exceeds the agreed scope, we explain why and identify any proposed additional charge before work proceeds. A request made before the 12-month period ends remains eligible even if our completion date falls later. We may reasonably ask you to supply the updated information needed to complete it.

We will not treat failure to respond to an input request as acceptance of an incomplete delivery. If required inputs remain unavailable, we contact you about completing or ending the order. Ending it before initial delivery results in a full refund under the Refund Policy.

A different product, a substantial expansion of the original document scope, independent verification, or additional consulting requires a separate quotation that you may accept or decline. Corrections to our own defective work are addressed under the Refund Policy and are not converted into paid changes.

4.4 CEMarque Watch — Bulletin

The standard Watch Bulletin subscription costs US$29 per calendar month, subject to disclosed taxes or an expressly agreed offer. It supplies regulatory information by email. Before purchase, the order page specifies the publication frequency, first expected edition, subject coverage, and any included archive or supplementary alerts. Those particulars form part of the contract and appear in your order confirmation.

Watch is billed monthly. No annual subscription is offered at present; if one is introduced, it is available only if expressly offered at checkout. Its full annual price, taxes, 12-month billing period, renewal terms, and cancellation method must be stated before purchase and in the confirmation. A monthly equivalent, if shown, is a comparison and does not turn an annual charge into monthly instalments. The annual billing period does not change the edition frequency promised in the order.

Watch summarises developments within that stated scope. It is not continuous surveillance, a guarantee to identify every development, individual legal advice, a product-specific compliance determination, or a service that files incident or vulnerability reports for you. You remain responsible for tracking and meeting deadlines applicable to your business.

The order identifies the service start date and the paid period covered by the first charge. Any mandatory consumer delay before digital-content supply does not use up that paid entitlement. If a material error in an edition is brought to our attention and confirmed, we provide a correction through the bulletin's delivery channel within a reasonable time, promptly where the error could materially affect a deadline or required action. General disclaimers do not replace that correction obligation or the service-failure remedies in the Refund Policy.

Unless your order permits wider distribution, editions are for your organisation's internal use, including sharing with its professional advisers under confidentiality. Do not resell or publicly republish complete editions. This restriction does not give us ownership of underlying facts, public legislation, or third-party material.

4.5 Future products and waitlists

Descriptions of Product, Agency, hosted security, evidence storage, monitoring, reporting, API, or other future plans do not make those services part of a Pack or Watch subscription. A waitlist signup creates no payment obligation and does not reserve a launch date. We will identify any service that becomes available, its price, and its terms before taking an order.

5. Public verdicts and reliability of information

Before submitting checker answers, review the notice explaining publication. A verdict page may display your selected answers, assessment, assumptions, generation date, and rules or facts version. Anyone who obtains the URL can access a public page. Links may be shared, indexed, copied, or archived by others; a hard-to-guess URL is not a private access control.

We aim to keep public verdict links available for at least 12 months after creation, subject to lawful removal, privacy requests, security incidents, misuse, and service closure. We do not promise perpetual hosting. We may retain them longer to support reference links while that remains appropriate. The Privacy Notice explains personal-data retention and removal requests.

A saved verdict records the assessment made at a particular time. It does not automatically become a fresh assessment when your product, the law, our interpretation, or the Facts Table changes. Re-run the checker when relevant facts change and review the dates and limitations attached to any result. Report suspected factual errors to support@cemarque.com.

6. Orders, payment, and taxes

Prices are stated in US dollars. Before you authorise payment, checkout displays the service, total payable, applicable taxes or tax treatment, and any recurring charge. We do not add optional paid items without your agreement. The final paid-order action clearly communicates the obligation to pay. A free signup, double opt-in confirmation, or preliminary offer review is not the final paid-order action.

An order is accepted when we send a confirmation accepting it. A payment-provider receipt alone is not a separate promise to supply an unavailable service. If payment is captured and we cannot accept the order, we refund it promptly. We send the accepted order and applicable contractual information in a form you can save.

We do not begin charging for a waitlist, convert a one-time purchase to a subscription, add a new product, or increase an agreed order price without the agreement required for that change. If we identify a material pricing or description error before acceptance, we explain the corrected offer and let you accept it or receive back any payment taken. We do not silently substitute a different service.

Stripe processes payments. We do not request or store full card numbers or card security codes. Payment providers may process transaction and fraud-prevention information under their own terms and privacy notices. Provide accurate billing and tax information. We remain responsible for taxes we are legally required to collect or remit; these Terms do not transfer that obligation to you. You are responsible for any lawful self-assessment or reverse-charge obligations that apply to your business.

7. Renewals, cancellation, and email preferences

A monthly Watch subscription renews each calendar month on the schedule disclosed at checkout until cancelled. An expressly selected annual subscription renews every 12 months instead. Checkout must show the full charge, renewal frequency, service start date, and cancellation method before you agree. The confirmation records the next renewal date. If a billing date does not exist in the renewal month, the renewal follows the adjustment disclosed in the payment schedule. We do not switch the billing interval without your agreement.

You may cancel future renewals at any time using the cancellation link supplied with the subscription or by emailing support@cemarque.com. Cancellation is effective for future renewal when received, even if we process the request later. We confirm cancellation and refund a renewal charged after a timely cancellation. You remain entitled to the current paid period unless you request an immediate stop or receive a refund ending it.

Receipt means the request reaches our designated email system or the online cancellation control confirms submission; it does not depend on an employee opening the request. If a cancellation control fails, you may use email. If our system failure prevents an otherwise timely cancellation, we investigate the evidence and refund a resulting renewal. Statutory withdrawal dispatch rules remain unaffected.

Unsubscribing from promotional emails does not cancel paid Watch delivery or necessary billing communications. A control labelled to stop the paid Watch bulletin also cancels future renewal. We distinguish these choices and do not treat a marketing opt-in as agreement to a paid subscription.

We give at least 30 calendar days' advance email notice of a subscription price increase or material reduction in the purchased service. It applies no earlier than the first renewal after that notice period. You may cancel before then. Where affirmative agreement is legally required, we obtain it; silence does not replace it. Already-paid periods and accepted Pack orders are not repriced.

If a renewal payment fails, we notify you and may suspend the next unpaid period. Any payment retry remains limited to the agreed charge and disclosed billing arrangement. Cancellation stops retries for future periods you have cancelled; it does not erase a lawful amount already due for a service actually supplied. We do not add an undisclosed late-payment fee.

8. Your inputs and cooperation

Provide information that is accurate and complete to the best of your knowledge, including uncertainties. You must have authority to provide the material and to permit its use for the engagement. Do not send credentials, private keys, unnecessary personal data, or information you are prohibited from disclosing.

You retain ownership of your inputs. You grant us a limited right to use, reproduce, adapt, and share them with authorised service providers only as reasonably needed to perform the engagement, maintain agreed services, correct problems, and meet applicable legal obligations. We do not receive an unrestricted right to commercialise your confidential information.

Before adopting a document, review its factual statements, placeholders, assumptions, contact details, commitments, and suitability for your product. Do not sign a statement you cannot substantiate. Notify us of errors rather than treating an automatically or manually generated document as independently verified evidence.

9. Confidentiality and personal data

We will use reasonable care to protect non-public information you supply for a paid engagement and use it only for the purposes described in these Terms and the Privacy Notice. Access is limited to people and providers who need it and are subject to appropriate confidentiality obligations. We do not publish Pack inputs or deliverables merely because checker verdicts are public.

These confidentiality obligations do not apply to information that is lawfully public without our breach, already lawfully known to us without restriction, independently developed without using your confidential material, or lawfully received from another source. If disclosure is required by law, we limit it to what is required and notify you where legally permitted and practicable.

We do not use confidential Pack inputs or deliverables to train a general-purpose AI model or permit a provider to do so under our engagement. Any AI processing used to perform the service must be covered by the provider and processing disclosures in the Privacy Notice and appropriate contractual safeguards. This is a service commitment, not a claim that every third-party AI product automatically provides these protections.

We do not publish your name, logo, product details, Pack, or testimonial as a customer endorsement without separate permission. Permission to process material for your order is not permission to use it in marketing. Public checker results remain subject to the publication disclosures in Section 5.

If an engagement requires us to process personal data on your behalf as a processor, the parties must put an appropriate data-processing agreement in place before that processing starts. These Terms and the Privacy Notice do not substitute for that agreement. We separately act as controller for our own customer administration, billing, and security purposes as explained in the Privacy Notice.

10. Your rights in delivered documents

For paid, non-refunded Pack deliverables, we grant you a perpetual, worldwide, non-exclusive, royalty-free licence to use, copy, edit, sign where appropriate, archive, and share the documents for the product for which they were prepared. You may give copies to customers, suppliers, insurers, advisers, auditors, notified bodies, and authorities for legitimate product and compliance activities. You may publish policies or contact materials intended for public use.

This licence continues after the included regeneration period ends. You may permit a successor owner of the same product to use the documents with it. You may not resell our templates or deliverables as a standalone document product or represent them as official certification. If you change a document, you are responsible for the change and must not falsely attribute the changed statement to CEMarque.

Refunded deliverables are treated as described in the Refund Policy. Cancellation of Watch alone does not revoke rights in a separately purchased, non-refunded Pack.

Our original software, editorial content, templates, compilation, branding, and other protected material remain ours or our licensors'. We do not claim exclusive ownership of legislation, regulatory facts, your inputs, or material licensed by third parties. Any expressly supplied open-source or public-content licence governs the material it covers.

11. Storage and recordkeeping

Download and maintain your own copies of documents, evidence, and correspondence. A new one-time Pack offer does not include indefinite cloud storage unless expressly promised. These Terms do not shorten an existing customer’s accepted retrieval, hosting, regeneration, or refund commitment, including a more generous commitment in an earlier offer. We provide any retrieval or hosting period expressly promised with your order, and we do not make access during that promised period conditional on buying an unrelated subscription.

The end of our operational retention period does not determine the retention period required of you by the CRA or another law. Maintain records for your applicable obligations. Our Privacy Notice describes our own retention; it is not a substitute for your recordkeeping duties.

12. Acceptable use

Do not use the service to infringe others' rights, submit unlawful content, introduce malware, attempt unauthorised access, circumvent access restrictions, interfere with availability, or automate requests at rates that materially disrupt the service. Reasonable public access is not prohibited merely because it is automated.

Do not forge or manipulate a verdict to misrepresent its source, describe CEMarque output as an official EU approval, or falsely claim certification. Good-faith reporting of suspected security issues to support@cemarque.com is welcome; it does not authorise access to other customers' information or disruptive testing.

13. Suspension, termination, and service closure

We may restrict access where reasonably necessary to address a material breach, unlawful activity, non-payment, or a security threat. Where practicable, we explain the issue and allow a reasonable opportunity to resolve it. Immediate restriction may be necessary to protect users, data, or service availability.

We do not continue taking renewal payments for a subscription we have permanently terminated. If we close a paid service or terminate it for our convenience, we refund prepaid, unprovided service and address any undelivered Pack under the Refund Policy. Suspension does not permit us to retain amounts we are legally required to refund.

Where practicable, we give advance notice of a planned service closure and an opportunity to obtain deliverables or records still available within an agreed retrieval period. Closure does not remove an outstanding refund, a valid correction claim, or the remedies for unprovided regeneration. We do not condition those remedies on accepting another service.

Rights and obligations that logically continue, including confidentiality, payment already properly due, document licences, applicable limitations, and dispute provisions, survive termination. Surviving rights remain subject to mandatory law and the Refund Policy.

14. Service standards and limitations

We will provide paid services with reasonable care and skill and in accordance with their agreed description. Our express delivery, regeneration, correction, and refund commitments remain effective.

Subject to those commitments and any non-excludable rights, we do not warrant that the website will be uninterrupted or that informational outputs will be free of every error. Legal texts, guidance, standards, and interpretations evolve. We do not guarantee a particular regulatory, commercial, procurement, or insurance outcome.

For business customers, to the extent permitted by law, other implied warranties or conditions are excluded. This exclusion does not apply where it would contradict our express obligations or remove a mandatory right. A product's non-compliance does not by itself prove that our service was defective, and our disclaimers do not excuse a failure to perform the service we agreed to provide.

15. Liability

For business customers only, and subject to the exceptions below, neither party is liable to the other for indirect or consequential losses arising from this agreement. To the extent permitted by law, our liability for lost profits, revenue, anticipated savings, goodwill, loss of business opportunity, and regulatory fines or penalties imposed on you is excluded.

For business customers only, and subject to the same exceptions, our aggregate liability arising from the services is limited to the amounts you paid us in the 12 months before the event giving rise to the claim, to the extent permitted by applicable law. For a claim arising from a one-time Pack, that cap is not less than the fee paid for that Pack, even if payment occurred more than 12 months before the relevant event. The Pack floor does not extend the agreed regeneration period or shorten any applicable claim period.

The exclusions and cap do not limit: refunds expressly owed under the Refund Policy; fraud or fraudulent misrepresentation; deliberate misconduct; death or personal injury caused by negligence where liability cannot lawfully be limited; or any other liability, statutory compensation right, or remedy that cannot lawfully be excluded or restricted.

For consumers, these business exclusions and cap do not apply. We remain responsible for losses and remedies for which applicable consumer law makes us responsible. Nothing here excludes mandatory rights concerning reasonable care and skill, conformity, personal data, or withdrawal.

16. Third-party claims involving business customers

If you are a business customer, you will reimburse our reasonable third-party claim costs and damages to the extent caused by your knowing infringement of a third party's intellectual-property rights in material you supplied, your unlawful use of the service, or your deliberate misrepresentation of our output as official certification.

This obligation does not apply to the extent a claim results from our breach, negligence, unlawful conduct, or unauthorised alteration of your material. It does not apply merely because your product is the subject of a claim.

We will notify you promptly, provide reasonable cooperation at your expense, and allow you to control a reasonable defence with suitable advisers. A delay in notice reduces your obligation only to the extent it materially prejudices the defence. Neither party may agree a settlement imposing an admission, payment, or continuing obligation on the other without that party's prior written consent, not unreasonably withheld. This section does not apply to consumers.

17. Changes to these Terms

The version supplied with an accepted Pack order continues to govern that order. For ongoing subscriptions, material changes are notified by email at least 30 calendar days before the first renewal to which they will apply, with an explanation and a cancellation opportunity. We seek express agreement where required. We do not retrospectively remove accrued rights.

Changes must have a reasonable basis, such as a change in law, service delivery costs, security needs, provider arrangements, or the features actually offered. Notice alone does not authorise us to replace the essential nature of a purchased service or make a change that applicable law requires you to accept expressly. If you do not accept a change requiring consent, we may end future renewals with the required notice, while supplying or refunding already-paid service.

Changes required urgently by law or necessary to address an immediate security issue may take effect sooner to the extent necessary. We notify affected customers as soon as practicable and preserve mandatory termination and refund rights. Minor clarifications that do not reduce rights may be posted with an updated date.

18. Governing law and disputes

For business contracts, the chosen governing law is North Carolina. Subject to mandatory jurisdiction rules, the agreed courts and venue are the state courts located in Durham County, North Carolina, or, where federal jurisdiction exists, the United States District Court for the Middle District of North Carolina. These selections must identify the actual legal jurisdiction and competent courts; they do not override the consumer protections in the following paragraph.

For consumers, any choice of law or court applies only to the extent permitted by mandatory law. It does not deprive you of mandatory protections or courts available to you in your country of habitual residence, including where EU, EEA, or UK law applies.

Please contact support@cemarque.com if a dispute arises so we can try to resolve it. Doing so is voluntary and does not restrict urgent relief, regulator complaints, payment disputes, or court rights. These Terms do not impose mandatory arbitration or a class-action waiver.

19. Other provisions

If a provision is unenforceable, the remaining provisions continue to the extent legally possible; a mandatory right is not replaced by the nearest restrictive wording. A failure to enforce a provision immediately is not a waiver of later enforcement.

Neither party may transfer this agreement in a way that materially reduces the other's rights without consent, except that we may transfer it as part of a genuine business reorganisation or sale where the successor assumes our obligations and your rights are not materially reduced. We notify affected subscribers of a change of contracting operator.

These Terms, the Refund Policy, and the accepted order record the agreement for the services they cover, without excluding statements or remedies that applicable law requires to remain effective. Privacy rights and separate data-processing obligations remain applicable.

“Business days” means Monday through Friday, excluding US federal holidays. All other references to days mean calendar days. These definitions do not shorten mandatory legal periods.

20. Contact

Ronald D. Coburn, a sole proprietor trading as CEMarque, operating the CEMarque service
2608 Erwin Rd, Unit 402, Durham, NC 27705, United States
support@cemarque.com
+1 (919) 525-1616

Questions about this page: support@cemarque.com. See also: Terms of Service · Refund and Cancellation Policy · Privacy Notice.