PNH Security Engineering CORDON™ TERMS OF USE

CORDON Terms of Use

Effective date: October 2026 · Version: v1.0

These Terms of Use ("Terms") are a binding agreement between you ("User," "you") and PNH Security Engineering Consultants ("PNH," "we") governing your access to and use of the CORDON crowded-place security risk analysis application, CORDON screenings and reports, associated documentation, and generated outputs (collectively, the "Service"). By accepting these Terms when you set your password, request a quote or screening, make a purchase, or use the Service, you accept these Terms. If you are accepting on behalf of an organization, you represent that you have authority to bind that organization.

C-1. Nature of the Service. CORDON grades a crowded place or facility from AAA to D for security risk from nine attack modes, pursuant to the PNH CRD-M-01 method. It combines the likelihood of each attack mode, the chance it succeeds against the protection in place, and its consequences, and ranks protective measures by value. CORDON screenings, reports and grades are security risk consulting. They are not engineering services, do not create an engineer–client relationship, and do not constitute engineering advice, an engineering certification, a professional opinion, or a sealed or stamped engineering document. Where a reviewed report leads to design work, that work is a separate engagement through an entity that may render professional engineering services, under a licensed engineer in responsible charge.

C-2. User responsibility for inputs and outputs. Results are computed from the inputs you select, supply or confirm — including the facility type, address and location, occupancy, threat tier, site context, vehicle approaches, protective measures in place, costs and budget. Values the Service suggests from an address or a template are suggestions until you confirm them. You are solely responsible for (a) the accuracy, completeness, and site-fidelity of your inputs; (b) verifying that the modeled facility reasonably represents actual site conditions; (c) any reason you record for tailoring an attack mode; (d) the interpretation and application of any output; and (e) compliance with all laws, codes, standards and contractual requirements applicable to the facility. Outputs are only as valid as the inputs from which they are computed.

C-3. No control over use; assumption of risk. PNH has no knowledge of, and exercises no control over, the facilities or purposes to which you apply the Service, and PNH has no control over the use, misuse, or abuse of the Service or its outputs by any User or third party. You assume all risk arising from your use of the Service and from any decision, budget, design, procurement, or other action taken or not taken in reliance on its outputs.

C-4. What the Service does not do. A CORDON grade compares facilities and protection options. It is not a guarantee, a certification, or a prediction of any event, and a favorable grade is not a reason to forgo or defer protective measures. The Service does not (a) certify, warrant, or predict the performance of any barrier, product, or security measure; (b) verify site conditions or the information returned by third-party map services; (c) select, design, or approve any specific product; or (d) replace a site-specific threat, vulnerability, or risk assessment by a qualified professional. Model parameters not calibrated to data are PNH engineering judgment and are labeled as such.

C-5. Acceptable use. You may use the Service solely for lawful security risk assessment, protective planning, budgeting, procurement-support, research, and educational purposes. You shall not use the Service or its outputs to plan, facilitate, or carry out any unlawful act, including any act intended to harm persons or property, or to identify or rank facilities as targets. You shall not reverse engineer, decompile, scrape, redistribute, or attempt to extract the Service's methods, parameters, or incident data; share your sign-in or provide access to anyone other than the seat holder; circumvent access controls; resell or provide service-bureau access without a written PNH agreement; or remove or alter proprietary notices from any output. PNH may suspend or terminate access for violation of this section.

C-6. Accounts, licences, and payment. Accounts are created by PNH, one per user. The CORDON application is available to an account with a verified email address and its own active licence: a CORDON Pro subscription, or access granted by PNH. A licence may not be shared. Payments are processed by Stripe, Inc.; PNH does not receive or store your full payment card details. CORDON Pro renews annually until canceled; cancellation takes effect at the end of the current billing period. A Screening fee is credited against a Reviewed Report bought within 90 days. Except as expressly stated in these Terms or required by law, fees are non-refundable. Prices are in US dollars unless stated otherwise.

C-7. Free screenings. A free screening is offered by invitation from PNH or on request, at PNH's discretion. It is prepared from public data only, is released to a verified work address after you accept the screening terms, and carries no questionnaire, measures package, or delivery date.

C-8. Intellectual property. The Service, the CRD-M-01 method, the CORDON name and marks, report formats, the incident database, and all underlying software are proprietary to PNH and protected by law. Subject to these Terms and payment of applicable fees, PNH grants you a limited, non-exclusive, non-transferable license to use the Service and to use reports you generate for your internal business purposes and those of your clients. You own your facility inputs and the assessment files you save.

C-9. Reports and reviewed reports. Reports and grade cards generated in the application are issued under your name and are not reviewed by PNH. A screening is labeled as a screening everywhere. Only a Reviewed Report carries a PNH review statement; its scope, price, and delivery are set out in PNH's written quote, and it is security risk consulting, not engineering services.

C-10. Disclaimer of warranties. THE SERVICE AND ALL OUTPUTS ARE PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND. TO THE MAXIMUM EXTENT PERMITTED BY LAW, PNH DISCLAIMS ALL WARRANTIES, EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, NON-INFRINGEMENT, AND UNINTERRUPTED OR ERROR-FREE OPERATION. NO ORAL OR WRITTEN INFORMATION OBTAINED FROM PNH OR THROUGH THE SERVICE CREATES ANY WARRANTY NOT EXPRESSLY STATED IN THESE TERMS.

C-11. Limitation of liability. TO THE MAXIMUM EXTENT PERMITTED BY LAW: (a) NEITHER PNH NOR ITS PRINCIPALS, OFFICERS, EMPLOYEES, ENGINEERS, CONTRACTORS, OR LICENSORS SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, OR FOR ANY PROPERTY DAMAGE, PERSONAL INJURY, OR DEATH, ARISING OUT OF OR RELATING TO THE SERVICE OR ANY OUTPUT, WHETHER BASED IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, OR ANY OTHER THEORY, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES; AND (b) PNH'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE SERVICE SHALL NOT EXCEED THE AMOUNTS YOU PAID TO PNH FOR THE SERVICE IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM. THE FOREGOING LIMITATIONS APPLY NOTWITHSTANDING ANY FAILURE OF ESSENTIAL PURPOSE OF ANY LIMITED REMEDY. Some jurisdictions do not allow certain exclusions or limitations; in such jurisdictions, PNH's liability is limited to the greatest extent permitted by law.

C-12. Indemnification. You shall defend, indemnify, and hold harmless PNH and its principals, officers, employees, engineers, contractors, and licensors from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to (a) your inputs; (b) your use, misuse, or inability to use the Service or any output; (c) your violation of these Terms or of applicable law; or (d) any facility, measure, procurement, or incident in connection with which the Service or any output was used.

C-13. Modifications; availability. PNH may modify the Service, pricing, and these Terms; material changes will be notified through the Service or by email, and continued use after the effective date constitutes acceptance. PNH may suspend the Service for maintenance or security. PNH does not warrant continuous availability, nor the availability of the third-party map services the address lookup uses.

C-14. Governing law; disputes. These Terms are governed by the laws of the State of California, without regard to conflict-of-laws rules. Before starting any proceeding, a party shall give the other written notice of the dispute (to PNH at pnhsec@pnhsec.com), and the parties shall try in good faith to resolve it within thirty (30) days. Any dispute not so resolved shall be brought exclusively in the state or federal courts located in Los Angeles County, California, and each party consents to the personal jurisdiction of and venue in those courts; either party may, however, seek injunctive relief to protect its intellectual property or to stop misuse of the Service in any court of competent jurisdiction. If any provision is held unenforceable, the remainder continues in effect.

C-15. Entire agreement. These Terms, together with any written PNH quote, license or services agreement, constitute the entire agreement regarding the Service and supersede prior discussions. Section headings are for convenience only.

Contact: PNH Security Engineering Consultants · pnhsec.com · pnhsec@pnhsec.com · +1-818-253-9557

© 2026 PNH LLC. CORDON and CRD-M-01 are proprietary to PNH Security Engineering Consultants.

CORDON results are computed from user-supplied inputs and are screening estimates unless issued as reviewed reports. A CORDON grade is not engineering advice, a certification, a guarantee or a prediction of any event. Use is subject to the CORDON Terms of Use and the Privacy Policy.