These Site Terms were last updated on 1 October 2026.
These Site Terms describe the rules and disclaimers under which you may use the Website and any information and content provided on it, including ratings and rating reports.
Definitions
In these Site Terms, on the Website and in any materials or content related to the Website, we use the following definitions:
Applicability of these Site Terms
Whenever you use or access the Website, you confirm that you agree to these Site Terms. The Website uses cookies to record when you accessed it and which version of the Site Terms applied at that time, as described in the Privacy Policy. If we make a material change to these Site Terms, we will publish notice on the Website at least thirty (30) days before the change takes effect and, for registered users of the Platform, notify you by email within the same period. It is your responsibility to read the Site Terms.
Services and Information provided to you
IISRI® provides you with:
- security and privacy ratings of your organisation and of your suppliers
- security and privacy rating reports, underpinning the rating
- other security and privacy professional services, including audits
Any organisation may request IISRI® to assess and issue an Internal Security Rating for its services or organisation. IISRI® may, at its sole discretion, decline such a request.
External Security Ratings are provided through the Platform and are governed by these Site Terms and by the CyberRank End User Platform Agreement. For any person who has accepted the End User Platform Agreement, that Agreement governs the Services and prevails over these Site Terms to the extent of any conflict, including as to warranties, liability and indemnities.
Intellectual Property Rights
The Website, the Platform, the IISRI® rating framework and all information and content related to them are the property of the Licensor or its licensors, are operated and made available by IISRI® under licence, and are protected by copyright and other intellectual property laws. Content derived from publicly available information providers remains subject to those providers’ rights. The Website and its content may not be reproduced, copied or distributed without the written permission of IISRI®. You shall respect the proprietary interests of the Licensor and IISRI® in the Website, the Platform and their content.
Forbidden Use Policy
You agree to follow this Forbidden Use Policy. You will not:
- (a)use or attempt to use any website mining, scraping or mirroring tool, or take a copy of any information or materials from the Website
- (b)obtain or access, or attempt to obtain or access, by any means, any information or content of the Website that has not been made intentionally publicly available, or test the security of any IISRI® server, infrastructure, network, application or the Website without the written permission of IISRI®
- (c)or interfere or attempt to interfere with the Website by excessive load, traffic or requests, or reverse engineer the rating framework, as this may indirectly compromise the confidence of assessments and put the Public and their information at risk.
Complaints, Corrections and other requests
IISRI® aims to provide an opinion as accurately and objectively as possible. We encourage assessed organisations and the Public to review and clarify any inaccuracies in our statements, such as reports, news and other content on the Website. If you, as the assessed organisation or another stakeholder, think you have found an inaccuracy or omission in our statements, please send your request to legal@iisri.com.
The complaint process is available for all other types of request. Please send your complaint to legal@iisri.com or use our contact form.
If a complaint or correction relates to an External Security Rating, please submit it through the reporting function in the Platform at CyberRank.ai. Other comments about the Platform may be directed to the CyberRank support team at support@iisri.com.
Disclaimer
IISRI® DOES NOT GUARANTEE THE ACCURACY, COMPLETENESS, TIMELINESS OR AVAILABILITY OF ANY INFORMATION OR CONTENT, INCLUDING RATINGS AND RELATED MATERIALS, AND IS NOT RESPONSIBLE FOR ANY ERRORS OR OMISSIONS, REGARDLESS OF THE CAUSE, OR FOR THE RESULTS OBTAINED FROM THE USE OF SUCH INFORMATION. IISRI® RATINGS ARE STATEMENTS OF OPINION, NOT STATEMENTS OF FACT OR RECOMMENDATIONS TO USE OR BUY SERVICES OR TO COOPERATE WITH ANY ORGANISATION. IISRI® GIVES NO EXPRESS OR IMPLIED WARRANTY TO YOU (OR ANY OTHER PERSON OR ENTITY) OF MERCHANTABILITY OR FITNESS FOR ANY PARTICULAR PURPOSE OR USE. ANY INFORMATION OR MATERIAL ON THE WEBSITE MAY CONTAIN INACCURACIES OR OTHER ERRORS. IN NO EVENT SHALL IISRI®, THE LICENSOR, IGSC OR THEIR STAFF BE LIABLE, WHETHER IN CONTRACT, WARRANTY, TORT (INCLUDING NEGLIGENCE) OR ANY OTHER FORM OF LIABILITY, FOR ANY DIRECT, INDIRECT, INCIDENTAL, EXEMPLARY, COMPENSATORY, PUNITIVE, SPECIAL OR CONSEQUENTIAL DAMAGES, COSTS, EXPENSES, LEGAL FEES OR LOSSES (INCLUDING, WITHOUT LIMITATION, DEFAMATION, LOSS OF REPUTATION, LOSS OF INCOME OR PROFITS, AND OPPORTUNITY COSTS OR LOSSES CAUSED BY NEGLIGENCE) ARISING FROM THE USE OF THE WEBSITE OR ITS CONTENT. THESE LIMITATIONS APPLY WHETHER OR NOT IISRI® OR ITS STAFF HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH LOSSES OR DAMAGES. ALL INFORMATION AND MATERIALS ON THE WEBSITE ARE PROVIDED ON AN “AS IS” BASIS. IISRI® RATINGS ARE STATEMENTS OF OPINION EXPRESSED BY SECURITY EXPERTS OR PRODUCED THROUGH AUTOMATION; ANYONE CAN BUILD A RATING FRAMEWORK OR AUTOMATION TOOLING THAT MAY LEAD TO DIFFERENT OPINIONS. IF YOU HAVE ANY DOUBT, YOU SHOULD CONSULT YOUR SECURITY OR OTHER PROFESSIONAL ADVISER. WHEN USING IISRI® SERVICES, INCLUDING AUTOMATED ASSESSMENTS, TO ASSESS OTHER ORGANISATIONS SUCH AS YOUR VENDORS, YOU ARE RESPONSIBLE AND LIABLE FOR OBTAINING ALL NECESSARY AUTHORISATIONS AND CONSENTS FROM THOSE ORGANISATIONS IN ACCORDANCE WITH THE END USER PLATFORM AGREEMENT, AND IN NO EVENT SHALL IISRI® OR ITS STAFF BE LIABLE IF YOU FAIL TO DO SO. FOR PERSONS WHO HAVE ACCEPTED THE END USER PLATFORM AGREEMENT, LIABILITY FOR THE SERVICES IS GOVERNED BY THAT AGREEMENT. SOME JURISDICTIONS DO NOT ALLOW CERTAIN OF THE EXCLUSIONS OR LIMITATIONS ABOVE; IN THAT CASE THEY APPLY TO YOU ONLY TO THE EXTENT PERMITTED BY APPLICABLE LAW.
Legal Jurisdiction
Independent Information Security Rating Institute Ltd is a New Zealand registered company. These Site Terms and the Website are governed in all respects by the laws of New Zealand.