Peak INfoSec Legal Page
Welcome to the Peak InfoSec legal page! To streamline the engagement process, Peak InfoSec publishes all of our legal terms online, and this page serves as a central point from which you can access most of the legal agreements we use when providing services to visitors of our website and our clients. For the purposes of this page, the term “you” refers to you as an individual and, where appropriate, to the organization which you represent.
Peak InfoSec offers four core types of services (“Services“) to our clients:
- Access to our Website – Our Website allows you to purchase access to our courses and other events. The Website may provide additional resources to you such as online forums for exchanging information with others. All use of our website and attendance of any of our classes or other events is subject to our Terms of Use, Privacy Policy and Acceptable Use Policy. Please review those carefully before using our site or providing us with any information about you; you MUST accept them to continue using our Services.
- Assessments – When Peak InfoSec provides CMMC Level 2 Certification Assessment services in Peak InfoSec’s capacity as an Authorized or Accredited CMMC 3rd Party Assessment Organization (“C3PAO“), You must accept our CMMC Level 2 Certification Services Terms. Appeals of decisions made during a CMMC Level 2 Certification Assessment are subject to and must follow our Appeals Process.
- Training – Training Services involve Peak InfoSec providing a client with access to a course, conference, or other event which is generally available to members of the public (provided they meet any corresponding prerequisites) (collectively a “Group Training“). Training Services also include courses which are custom-developed for a client, or which are delivered as private courses for a client (collectively “Private Training“).
- Group Training – When Peak InfoSec enters into an agreement to allow You to access or otherwise attend Group Training, You typically enter into that agreement via a Registration Form on our website or a website we control. Attendance or other participation in any Group Training is also subject to our Code of Conduct and our Group Training Terms. When you register for the Group Training, you must accept our Group Training Terms and the Code of Conduct or you will not be permitted to attend the Group Training. The online Registration or Order Form and Group Training Terms collectively form the “Agreement” between Us and You.
- Private Training – When Peak InfoSec enters into an agreement to develop and/or provide Private Training for You, Peak InfoSec treats that Private Training is treated as Non-Certification Services, and the Private Training is subject to our Non-Certification Services Terms.
- Consulting – Peak InfoSec provides a wide range of Consulting Services to clients. When Peak InfoSec enters into an agreement to provide You with Consulting Services, You must accept our Non-Certification Services Terms.
IMPORTANT NOTE: All services provided by Peak InfoSec are provided subject to you accepting the applicable legal terms. Where a conflict exists between Peak InfoSec’s applicable legal terms and those provided by you (e.g., as part of a Purchase Order or other terms not expressly referenced in our Proposal or the Order Form), Peak InfoSec’s legal terms shall prevail.
Additional Notes
When Peak InfoSec enters into an agreement to provide Services to a client, we generally provide clients with a Proposal. The Proposal defines the Services we believe are best suited for the client. The Proposal may include multiple optional Services, and clients can choose the optional Service(s) which are best suited for their purposes. Clients indicate the Service(s) they wish to purchase via the Order Form that is included with the Proposal or one subsequently provided by Peak InfoSec. Once the Order Form is completed, Peak InfoSec sends the client an Invoice.
As part of this process:
- The Proposal provides a detailed description of the work to be performed that is associated with each option (i.e., the Proposal includes the Statement of Work).
- The Order Form indicates which option(s) are chosen by the client and the corresponding cost.
- The Invoice defines the final cost of the Service(s), including applicable taxes, to the client and other details.
- The Group Training Terms, Consulting Terms, or Assessment Terms, as appropriate, define the legal terms under which the Services are provided.
The corresponding legal terms, the Order Form, the Proposal, and the Invoice operate together to define the Agreement between the parties. When a Proposal and Invoice are issued by us to a Client, the Agreement is not effective until the Order Form is mutually executed by both parties. Any pre-printed or default terms incorporated into or associated with a client’s Purchase Order and the terms of any ancillary agreements (collectively the “Ancillary Terms“) are expressly superseded by the terms of the Agreement and in the event of a conflict, you must agree that the terms of the Agreement will prevail unless the Agreement expressly references and accepts those Ancillary Terms.
| Version | Date | Change Summary |
|---|---|---|
| 2026.02a | 2026-FEB-19 | Updated to refer to the Non-Certification Services Terms. |
| 2025.12a | 2025-DEC-22 | Updated to correct missing links, to point to Consulting Services Terms page, and to add the IMPORTANT NOTE. |
| 2025.07a | 2025-JUL-01 | Initial Version as Peak InfoSec |
| 2026.01a | 2026-JAN-05 | Revised to reflect updated scope of services |