Terms of Service

1 Acceptance of Terms

By accessing or using the Tagsia website (www.tagsia.com), creating an account, or using any Tagsia service including the Maritime Cyber Risk Assessment tool (“CyRA“), you (“User“, “you“, or “your“) agree to be bound by these Terms of Service (“Terms“).

If you are using Tagsia on behalf of a company or organisation, you represent that you have authority to bind that entity to these Terms, and “you” refers to that entity.

If you do not agree to these Terms, you must not use our services. Your continued use of the services constitutes ongoing acceptance of these Terms, including any updates.

These Terms should be read alongside our Privacy Policy, which explains how we handle your personal data.

2 Definitions

• “Tagsia” means the company operating www.tagsia.com and its services.
• “Services” means the Tagsia website, the CyRA tool, member resources, playbooks, intelligence content, and any other products offered by Tagsia.
• “CyRA” means the Maritime Cyber Risk Assessment tool, a questionnaire-based risk scoring platform aligned to SOLAS, DNV, and ISM/SMS frameworks.
• “Assessment Data” means the questionnaire responses, risk scores, findings, notes, vessel information, and related data you create using the CyRA tool.
• “Content” means all materials published by Tagsia on its website, including articles, playbooks, templates, compliance documents, and tool outputs.
• “Free Tier” means a registered account with read-only CyRA access, with no ability to save or print assessments.
• “Tier 1 (Single Vessel)” means a paid subscription allowing CyRA use for one vessel with saving and watermarked reports.
• “Tier 2 (Enterprise / Fleet)” means a paid subscription allowing CyRA use across multiple vessels with full report access.
• “Subscription” means a Tier 1 or Tier 2 paid plan purchased through the Tagsia platform.

3 Accounts & Registration

3.1 Account Creation

To access certain features, you must register for a Tagsia account. You agree to provide accurate, current, and complete information and to keep your account information updated.

3.2 Account Security

You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. You agree to:

• Use a strong, unique password of at least 8 characters containing uppercase letters and numbers
• Not share your login credentials with any other person
• Notify us immediately at security@tagsia.com if you suspect unauthorised access to your account

Tagsia is not liable for any loss or damage arising from your failure to protect your account credentials.

3.3 One Account Per User

Each individual must maintain only one account. Creating multiple accounts to circumvent usage limits or access controls is a material breach of these Terms and may result in immediate termination of all associated accounts.

3.4 Account Eligibility

You must be at least 18 years of age and legally capable of entering into binding contracts to create an account. Our services are intended for maritime industry professionals and related organisations.

4 Subscription Tiers & Access

Tagsia offers the following access tiers for the CyRA tool and associated resources:

4.1 Tier 1 Vessel Restriction

Tier 1 subscriptions are strictly limited to assessments relating to one (1) vessel. The vessel is determined by the first vessel name entered and saved in your account. Attempting to save assessments for a different vessel will be blocked at the system level. To assess additional vessels, you must upgrade to Tier 2.

4.2 Fair Use

Subscriptions are for individual or organisational use only, not for resale, sub-licensing, or provision to third parties as a service. If you wish to use CyRA as part of a consulting or audit service offered to clients, please contact us to discuss commercial licensing arrangements.

5 CyRA Tool — Scope & Limitations

5.1 What CyRA Does

The CyRA tool provides:

• Structured, questionnaire-based cyber risk scoring aligned to ISM/SMS frameworks, SOLAS, DNV cyber class notation scope, and IMO MSC-FAL.1/Circ.3 guidelines
• Likelihood and impact scoring based on observable system characteristics
• CIA (Confidentiality, Integrity, Availability) assessments
• Printable risk assessment reports for internal use and SMS documentation

5.2 What CyRA Does Not Provide

• Penetration testing or active vulnerability scanning of shipboard systems
• Certification, class notation, or regulatory approval of any kind
• Real-time threat intelligence or live vulnerability data
• Legal, insurance, or compliance advice
• Guarantee of compliance with IMO, flag state, or port state requirements

5.3 User Responsibility for Inputs

The accuracy of CyRA outputs depends entirely on the accuracy of the information you provide. You are responsible for ensuring that questionnaire answers accurately reflect the actual state of systems being assessed. Tagsia accepts no liability for risk scores derived from inaccurate, incomplete, or misleading inputs.

5.4 Not a Substitute for Professional Advice

CyRA outputs should be reviewed by a qualified maritime cybersecurity professional before being used to make operational, investment, or compliance decisions. Tagsia recommends that assessments with High or Critical risk scores be reviewed by a Designated Person Ashore (DPA), Chief Security Officer, or qualified external consultant.

5.5 Framework Alignment

While CyRA’s methodology is aligned with SOLAS, DNV, ISM, and IMO guidelines as at the date of publication, regulatory requirements evolve. It is your responsibility to ensure that your risk management practices remain aligned with current flag state and class society requirements.

6 Payments & Billing

6.1 Pricing

Current subscription prices are displayed on our pricing page at tagsia.com/shop. All prices are exclusive of VAT unless otherwise stated. VAT will be applied where required by law based on your billing address.

6.2 Payment Processing

Payments are processed by SureCart in partnership with Stripe. By making a purchase, you agree to SureCart’s and Stripe’s terms of service and privacy policies. Tagsia does not store payment card information.

6.3 Subscription Renewals

Subscriptions renew automatically at the end of each billing period unless cancelled. You will receive a reminder email before renewal. You may cancel auto-renewal at any time through your account portal or by contacting us at billing@tagsia.com.

6.4 Refund Policy

We offer a 14-day money-back guarantee for new subscriptions. If you are not satisfied with your paid subscription for any reason within 14 days of your initial purchase, contact us at billing@tagsia.com for a full refund. Refunds are not available after 14 days or for subscription renewals.

6.5 Failed Payments

If a payment fails, your account will be downgraded to Free tier access. Saved assessment data will be retained for 30 days to allow you to resolve the payment issue. After 30 days of non-payment, we reserve the right to delete account data, subject to our data retention policy.

6.6 Price Changes

We reserve the right to change subscription prices. Existing subscribers will be notified at least 30 days before a price change takes effect and may cancel before the new price applies.

7 Intellectual Property

7.1 Tagsia Content

All content on the Tagsia website, including but not limited to articles, playbooks, compliance templates, the CyRA tool, its methodology, scoring algorithm, questionnaire framework, report templates, and all associated software code, is the intellectual property of Tagsia or its licensors and is protected by copyright, trademark, and other applicable intellectual property laws.

7.2 Licence to Use

Subject to your compliance with these Terms and payment of applicable fees, Tagsia grants you a limited, non-exclusive, non-transferable, revocable licence to:

• Access and use the CyRA tool for your own internal maritime cyber risk assessment purposes
• Download and use compliance documents and templates for your own internal operations
• Print and retain CyRA reports for inclusion in your SMS documentation

7.3 Restrictions

You may not, without express written permission from Tagsia:

• Copy, reproduce, distribute, or publish any Tagsia content for commercial purposes
• Resell, sublicense, or offer CyRA as a service to third parties
• Reverse engineer, decompile, or attempt to extract the CyRA scoring algorithm or source code
• Remove or alter any copyright, trademark, or proprietary notices
• Use Tagsia’s name, logo, or branding without prior written consent

7.4 Your Assessment Data

You retain all ownership of the Assessment Data you create using CyRA. Tagsia claims no intellectual property rights over your assessment inputs or outputs. We process this data solely to provide the service and as described in our Privacy Policy.

8 User Content & Data

By submitting Assessment Data and other content to Tagsia’s platform, you grant Tagsia a limited, non-exclusive licence to store, process, and display that content solely for the purpose of providing the service to you.

You warrant that any content you submit does not violate any third-party rights (including confidentiality obligations to clients or employers) and that you have the right to share it with our platform.

Tagsia may use anonymised, aggregated statistical data derived from all users’ assessments (e.g. “average risk score for navigation systems across the fleet”) to improve the CyRA tool and produce industry benchmarks, provided that no individual user or vessel can be identified.

9 Prohibited Use

You agree not to use Tagsia or the CyRA tool to:

• Violate any applicable law, regulation, or third-party rights
• Conduct, support, or facilitate any unlawful activity, including cyber attacks against vessels or maritime infrastructure
• Upload or transmit malware, viruses, or any malicious code
• Attempt to gain unauthorised access to any part of the platform or another user’s data
• Scrape, crawl, or systematically extract content from the Tagsia website
• Circumvent subscription tiers through technical means, proxy services, or other methods
• Impersonate any person or entity or misrepresent your affiliation
• Use the platform in any way that could damage, disable, or impair its operation
• Create assessments for vessels or systems you do not have authorisation to assess

Violation of these prohibitions may result in immediate account termination and, where applicable, reporting to relevant authorities.

10 Disclaimers

Tagsia does not warrant that:

• The CyRA tool will be error-free, uninterrupted, or meet your specific requirements
• Risk scores generated by CyRA are accurate, complete, or suitable for any particular regulatory purpose
• The content on the website is current, complete, or free of errors
• The platform will be free from security vulnerabilities or that your data will never be compromised despite our security measures

Nothing in these Terms excludes or limits any warranties that cannot legally be excluded in your jurisdiction.

11 Limitation of Liability

To the maximum extent permitted by applicable law, Tagsia and its officers, directors, employees, and agents shall not be liable for:

• Any indirect, incidental, consequential, special, or punitive damages
• Loss of profits, revenue, data, or goodwill
• Any damage or loss arising from your reliance on CyRA outputs to make operational, safety, or compliance decisions
• Any cyber incident, vessel incident, port state control detention, or regulatory non-compliance arising from or in connection with your use of CyRA
• Any third-party content, services, or links accessed through our platform

Some jurisdictions do not allow the exclusion or limitation of certain liabilities. In such jurisdictions, our liability is limited to the minimum extent permitted by law.

12 Indemnification

You agree to indemnify, defend, and hold harmless Tagsia and its officers, directors, employees, agents, and licensors from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising from or relating to:

• Your use of the Services in violation of these Terms
• Your Assessment Data or other content submitted to the platform
• Your violation of any applicable law or third-party rights
• Any misrepresentation made by you in connection with the Services

13 Termination

13.1 Termination by You

You may close your account at any time by contacting us at support@tagsia.com or using the account deletion function in your settings. Upon account closure, your personal data will be deleted in accordance with our Privacy Policy. Paid subscriptions are not refunded upon voluntary termination after the 14-day refund window.

13.2 Termination by Tagsia

We reserve the right to suspend or terminate your account at any time, with or without notice, for:

• Material breach of these Terms, including prohibited use violations
• Non-payment of subscription fees
• Conduct that poses a risk to the platform, other users, or third parties
• Required by law

We will endeavour to provide reasonable notice before termination except where immediate action is required to protect the platform or other users.

13.3 Effect of Termination

Upon termination, your right to access the Services ceases immediately. Assessment data may be exported by you prior to termination on request. Provisions of these Terms that by their nature should survive termination (including intellectual property, disclaimers, limitation of liability, and governing law) shall survive.

14 Governing Law & Dispute Resolution

[TBC — to be completed by legal counsel based on Tagsia’s jurisdiction of incorporation.]

These Terms and any dispute arising from them shall be governed by and construed in accordance with the laws of [jurisdiction to be confirmed], without regard to its conflict of law provisions.

14.1 Informal Resolution

Before initiating any formal legal proceeding, both parties agree to attempt to resolve any dispute informally by contacting legal@tagsia.com. We will make reasonable efforts to resolve the matter within 30 days.

14.2 Formal Disputes

If informal resolution is unsuccessful, disputes shall be subject to the exclusive jurisdiction of the courts of [jurisdiction to be confirmed]. If you are a consumer in the EU, you may also be entitled to use the EU Online Dispute Resolution platform at ec.europa.eu/consumers/odr.

15 Changes to Terms

We reserve the right to modify these Terms at any time. When we make material changes we will:

• Update the “Last Updated” date at the top of this document
• Send registered users an email notification at least 14 days before the changes take effect
• Display a prominent notice on our website

For non-material changes (such as clarifications, corrections, or minor formatting updates), we may update the Terms without prior notice. Your continued use of the Services after changes take effect constitutes your acceptance of the revised Terms.

If you do not agree with revised Terms, you may close your account before the effective date of the changes.

16 Contact

For questions or concerns about these Terms of Service, please contact us: