Ops Defend

Product terms

Last updated: 7 September 2026
Provider: OPS DEFEND LIMITED (trading as Ops Defend) (“we”, “us”).
Customer: the organisation that creates an account or buys a plan (“you”).

1. The service

CeGrc is a Cyber Essentials preparation software service. It helps you organise questions, evidence, assets, and readiness work.

Important: We are not a Certification Body. We do not issue, award, or guarantee Cyber Essentials certificates or assessment outcomes. Certification is only available via an NCSC-approved Certification Body you engage separately.

2. Plans

Current SKUs (prices may change; checkout / order confirmation controls):

  • Starter £249
  • Programme — £499
  • Assist — £299 (may include human assistance — see clause 8)

Features for each plan are described on the Site or in-app at purchase.

3. Accounts and access

  • Accounts use magic-link email authentication (password may be added later).
  • You must keep access to your email secure and tell us of suspected compromise.
  • You are responsible for users you invite and for content uploaded into your workspace.
  • Roles: Customer (org users) and Admin (our staff / platform admin). Admin access to customer workspaces is limited to operating, securing, and (where purchased) assisting with the service.

4. Acceptable use

You must not use the service to:

  • break the law or others’ rights;
  • upload malware or attempt to probe/attack the platform;
  • upload special-category data, children’s data, or data you have no right to process, unless we have expressly agreed in writing;
  • resell or white-label the service without our written agreement;
  • reverse engineer the service except as permitted by law.

We may suspend access for serious breach or security risk, after notice where reasonably practicable.

5. Your data and privacy

  • You (or your organisation) remain the controller of personal data you enter about your staff/systems in the workspace; we act as processor for that workspace content, and as controller for account, billing, and our own logs/marketing as described in the Privacy notice.
  • Processing details: Privacy notice + (when ready) Data Processing Addendum on request. Solicitor review recommended for larger / enterprise deals.

6. Fees and Stripe

  • Fees are as shown at checkout. Payments are processed by Stripe.
  • Unless stated otherwise, fees are exclusive of VAT.
  • Refunds (B2B goodwill): CeGrc is sold primarily to businesses. If you buy as a business, you may request a goodwill refund within 7 days of first payment where the workspace has not been heavily used and (for Assist) the Assist session has not started. After that, fees are non-refundable except where the law requires a refund.
  • No statutory consumer cooling-off assumed: we do not treat typical purchases as consumer distance contracts. If you are a consumer and mandatory cooling-off rights apply by law, those rights are not affected.

7. Intellectual property

  • We own the platform, software, and our templates/content.
  • You own your uploaded content and answers.
  • You grant us a licence to host and process your content solely to provide the service (and Assist, if bought).

8. Assist SKU

If you buy Assist, we may provide human guidance. Unless agreed in writing otherwise:

  • Assist is advisory/preparatory support, not certification or a guarantee of pass;
  • an Ops Defend Admin may access your workspace and evidence only when assigned to your Assist session (need-to-know); access continues for 7 days after the Assist session ends and is then auto-revoked; access is logged where practicable;
  • Assist staff are UK-based; they must not browse unrelated customer tenants or download evidence to personal devices;
  • Admin access for Assist is protected with MFA and Conditional Access (and related identity hardening);
  • you remain responsible for implementing controls and for any Certification Body engagement.

9. Warranties and disclaimer

The service is provided with reasonable skill and care. We do not warrant that:

  • use will achieve Cyber Essentials certification or any particular score;
  • the service will be uninterrupted or error-free;
  • templates match every future NCSC or Certification Body interpretation.

10. Liability

To the fullest extent permitted by law:

  • we exclude liability for indirect, consequential, special, or punitive loss; loss of profit, revenue, goodwill, or data;
  • our total aggregate liability arising out of or in connection with the service in any 12-month period is limited to the fees you paid us for the service in that period;
  • nothing limits liability for death/personal injury caused by negligence, fraud, or other non-excludable liability.

11. Term and termination

  • Subscription length as purchased (or month/year as shown at checkout).
  • You may stop using the service at any time; fee refunds only as in clause 6.
  • On termination we will disable access and delete or anonymise workspace content per the Privacy notice retention periods, subject to legal holds.

12. Changes

We may update the service and these terms. Material adverse changes to terms will be notified by email or in-app with reasonable notice where practicable. If you do not agree, you may stop using the service before the change takes effect.

13. Governing law

Laws of England and Wales; exclusive jurisdiction of the courts of England and Wales (subject to mandatory consumer rights if ever applicable).

14. Contact

Support: hello@opsdefend.co.uk · Privacy: hello@opsdefend.co.uk