Terms of Service

These terms govern engagements purchased or booked through virtual-infra.com. If we sign a separate statement of work or master services agreement with you, that document takes precedence over anything here.

Last updated: 26 August 2026

1. Who you are contracting with

Virtual Infrastructure Services LLC ("VIS LLC", "we", "us"), a limited liability company registered in New Jersey, United States, with its office in South Brunswick, New Jersey.

2. What we are, and what we are not

We are a readiness and architecture consultancy. We are not a C3PAO. We do not perform certified CMMC assessments and we cannot issue a CMMC certification. Under CMMC ecosystem independence rules, an organisation that consults on remediation cannot also act as your certifying assessor. Your certified assessment must be carried out by an accredited C3PAO you engage separately and pay directly.

Nothing we provide is legal advice. Where a question turns on contract interpretation, export control, or your obligations to a specific prime, you should take advice from a qualified attorney.

3. Fixed-price engagements and what they assume

Our published fixed prices assume a single physical site, one CUI or FCI boundary, and up to 100 in-scope endpoints, with reasonable and timely access to your people, systems and documentation.

If your environment falls outside those assumptions — multiple sites, more than one enclave, unusual operational-technology estates, or materially more endpoints — the engagement is no longer fixed price at the published figure. We will tell you this on the scoping call, before any work begins. You may then proceed on revised terms, or cancel for a full refund.

4. Scope changes

Work outside the agreed scope is quoted separately and only begins once you approve it in writing. We will not carry out additional chargeable work and invoice you for it afterwards.

5. What we cannot promise

We do not guarantee that you will pass a C3PAO assessment, achieve any particular SPRS score, win any contract, or reach any specific compliance status. Those outcomes depend on decisions, systems, budgets and personnel outside our control, and on the judgement of an independent assessor. What we commit to is competent, diligent work against the scope we agree, delivered by people who have done it before.

6. Your responsibilities

• Give us accurate information about your systems, contracts and data flows.
• Provide timely access to the people and systems the engagement requires.
• Nominate someone with authority to make decisions and approve scope changes.
• Maintain your own obligations — incident reporting under DFARS 252.204-7012, your SPRS submission and annual affirmation remain yours. We can advise on them. We cannot sign them for you.

Where delay is caused by information or access we have asked for and not received, timelines move accordingly.

7. Payment

Fixed-price engagements bought online are payable in full at the point of order. Engagements quoted after a scoping call are invoiced per the statement of work, payable within 15 days unless agreed otherwise. Prices are in US dollars and exclude third-party licensing and any C3PAO assessment fee, which you pay the assessor directly.

8. Cancellation and refunds

• Before the scoping call: cancel for any reason and receive a full refund.
• After the scoping call but before fieldwork begins: full refund, less any work already performed at your request.
• Once fieldwork has begun: refunds are pro-rated against work completed and deliverables issued.
• If we determine on the scoping call that your environment is out of scope and you choose not to proceed on revised terms, you receive a full refund.

Refund requests go to info@virtual-infra.com. We would always rather resolve a problem directly than have it become a card dispute — please contact us first.

9. Confidentiality

Engagements of this kind require us to see sensitive material about your systems and, in some cases, information relating to your handling of Controlled Unclassified Information. We treat everything you share as confidential, use it only to deliver the engagement, disclose it only to personnel who need it, and apply the same controls we advise our clients to adopt. This obligation survives the end of the engagement.

We expect the same of you in respect of our methods, templates and deliverables.

10. Ownership of deliverables

On full payment, the reports, plans and documentation we produce specifically for you are yours to use inside your organisation and to share with your assessor, your primes and the Department of War as required. We retain ownership of our underlying methods, templates, tooling and know-how, including anything of general application we develop while working with you.

11. Limitation of liability

To the fullest extent permitted by law, our total aggregate liability arising out of or in connection with an engagement is limited to the fees you paid for that engagement. We are not liable for indirect or consequential loss, loss of profit, loss of contract, or loss of anticipated savings. Nothing in these terms limits liability for fraud, wilful misconduct, or anything else that cannot lawfully be limited.

12. Non-solicitation

During an engagement and for six months afterwards, neither party will solicit the other's personnel who were directly involved in the work, except through a general public advertisement.

13. Termination

Either party may terminate an engagement on 15 days' written notice. You pay for work performed up to termination. Sections 5, 9, 10, 11 and 14 survive.

14. Governing law

These terms are governed by the laws of the State of New Jersey, United States, and the courts of New Jersey have exclusive jurisdiction. Before litigating, both parties agree to attempt good-faith resolution in a conversation.

15. Changes

We may update these terms. The version that applies to your engagement is the one published when you placed your order or signed your statement of work.