Vigil

EU Cyber Resilience Act — reporting obligations start September 11, 2026

Effective July 2026

Terms & Conditions

These terms govern your use of Vigil, a Cyber Resilience Act reporting-readiness documentation service operated by Kynth Studio. By purchasing a pack, you agree to them.

1. What Vigil Does

We prepare documentation packs for the EU Cyber Resilience Act’s September 2026 reporting obligations: a scope-determination memo, a coordinated vulnerability disclosure policy with security.txt, a vulnerability-handling SOP, a CycloneDX SBOM generated from your repository, a 24h/72h/14-day reporting runbook with pre-drafted notification templates, and a December 2027 conformity gap checklist. The retainer tier adds 12 months of on-call drafting support for incident and vulnerability filings.

2. Fees & Billing

Readiness Pack — $349, one time: the full pack for one product.

Readiness Plus — $649, one time: the pack for up to 5 products or repositories, with per-product scope memos and a CI SBOM snippet.

Readiness + Retainer — $899, one time: everything in Plus, plus 12 months of on-call drafting support.

Payments are processed by Stripe. All fees are one-time; there are no subscriptions and nothing renews automatically.

3. Your Materials

You confirm you are authorized to share the product information, documents, and repository access you give us, and that we may use them to prepare your pack. We only access repositories you point us at.

4. Your Responsibilities

Provide accurate product and company information. Reviewing, adopting, and publishing the documents is done by you — and any actual report to ENISA or a national CSIRT is filed by you. Vigil prepares the artifacts and, on the retainer tier, helps you draft filings, but we never file on your behalf.

5. What We Can & Can’t Promise

We prepare your pack carefully from the regulation’s published text and ENISA guidance, based on the information you provide. A documentation pack does not make your product CE-compliant and does not guarantee any regulatory outcome. Vigil is not a law firm and does not provide legal advice, and we are not affiliated with the EU, ENISA, or any CSIRT.

6. Refunds & Cancellation

If we are unable to deliver your pack for a reason within our control, we’ll refund your fee. If your scope check shows you are out of scope before we start work, we’ll refund in full.

7. Limitation of Liability

To the fullest extent permitted by law, our total liability for any claim relating to the service is limited to the fees you paid us in the prior twelve months. We are not liable for indirect or consequential damages, or for penalties that accrue due to information you provided or actions only you can take.

8. Governing Law

These terms are governed by the laws of the State of New York. We may update them from time to time; any updates will be published on this page with a revised effective date, and continued use after a change means you accept the updated terms. Questions? Contact us at <a href="mailto:hello@kynth.studio">hello@kynth.studio</a>.