Canada Cyber-Safe · ISO/IEC 27001:2022 documentation packs
One organisation, perpetual, no renewal
Read this before you buy. It is short, and it is the whole agreement — there is nothing else to sign and nothing hidden behind a click-through. These terms are supplied with every Canada Cyber-Safe documentation pack.
What the licence says
1. What you are buying
A perpetual, non-exclusive, non-transferable licence for one organisation to use, adapt and rely on the documents in the pack you purchased. You are buying the licence, not ownership of the underlying work.
There is no subscription and no renewal. What you buy today remains yours to use indefinitely, including versions you adapt.
2. What you may do
Edit, adapt, rebrand and extend the documents however your organisation needs.
Use them across your whole organisation, with no limit on the number of people, and for any number of your own sites, entities and business units under common ownership.
Share them with your certification body, your auditors, your insurers and your regulators, including as evidence in an audit. Share them with contractors working on your management system, provided they use them only for you.
3. What you may not do
Resell, sublicense, publish or otherwise distribute the documents, whether edited or not.
Use them as the basis of a competing template, toolkit or product, or represent them as your own original work in a commercial offering.
Use them to deliver paid consulting services to other organisations — see section 4.
4. If you are a consultant
Consultants and managed service providers are welcome to buy the pack, and many will. But a single-organisation licence does not permit you to deploy these documents into your clients’ management systems as part of paid work.
If that is what you intend, contact us at help@cyber-safe.ca and we will licence it properly. We would rather sell you the right licence than discover the wrong one later, and the price is reasonable.
5. What this is not
Not a certificate. Certification against ISO/IEC 27001:2022 is issued only by an accredited certification body. We are not one and do not intend to become one.
Not compliance. Buying documents does not make an organisation compliant. Operating a management system does.
Not legal advice. These are a starting point for your own legal and professional advice, particularly on the Canadian obligations they reference.
Not a substitute for the standard. ISO/IEC 27001:2022 is copyrighted and must be obtained from ISO or the Standards Council of Canada. Nothing in the pack reproduces its text.
6. Our independence rule
We will not carry out an independent assessment of a management system built on documents we sold you. This is not a limitation of liability, it is a statement of principle: independence is the only thing that makes an assessment worth having, and we are not trading it for a document sale.
If you want both, we will tell you plainly which one to buy elsewhere.
Where the line falls. A runbook is a procedure, not a management system, so buying one does not prevent us from assessing you. A documentation pack is a management system, and buying one does. If you are not sure which side of that line a purchase puts you on, ask before you buy and we will tell you.
7. Warranty and liability
The documents are supplied as they are. We have taken care over their accuracy, including the Canadian legal references, and they reflect the position at the date of publication. Law and standards change; you are responsible for confirming currency before you rely on them.
To the extent permitted by law, our total liability arising from the pack is limited to the amount you paid for it. We are not liable for indirect or consequential loss, including any regulatory outcome, audit finding or business loss.
8. Refunds
Because the pack is delivered in full and immediately, we do not offer refunds once the files have been sent. If a file is corrupt, missing or not what the page described, tell us and we will fix it or refund you. We would rather refund a dissatisfied buyer than argue with one.
9. Updates
Where we materially revise a document you have bought, we will send you the revision at no cost for twelve months from purchase. After that you may buy the current version at whatever the then-current price is, or carry on with what you have.
10. Who you are contracting with, and governing law
Your contract is with Skeldra Group, of 100 University Avenue, Toronto, Ontario. Canada Cyber-Safe is a trading name of Skeldra Group.
These terms are governed by the laws of the Province of Ontario and the federal laws of Canada applicable in it. They cover the documentation packs; use of this website is covered separately by our terms and conditions, and where the two differ in respect of a pack you have bought, these licence terms prevail.
Questions to help@cyber-safe.ca.
Version 1.0, first issue. Last updated 28 August 2026.
Anything here you want changed before you buy?
Ask. If you need a consultant or multi-organisation licence, a purchase order rather than a card payment, or a term your legal team cannot live with looked at again, tell us. We would rather agree it in advance than have it surface afterwards.