Last drafted: September 2, 2026
These Package License Terms (“Terms”) govern the documentation packages sold by Lumos Innovations, LLC (“Lumos”), currently the CMMC Level 1 (FAR 52.204-21) Starter Package and the CMMC Level 2 (NIST SP 800-171) Full Package, together with any revised or successor edition unless that edition is accompanied by its own terms. Purchase constitutes acceptance of these Terms.
Relationship to our other terms. The Site’s Terms of Use govern use of the website and describe our advisory services; its provisions on free toolkit and lead-magnet downloads do not apply to these paid packages. Where the Terms of Use conflict with these Terms as to the packages, these Terms control. Refunds are governed by the Refund Policy, which controls on any question of refund eligibility. Paid service engagements are governed by their signed Statement of Work and Master Services Agreement, which control over both.
Upon purchase the purchaser receives a non-exclusive, perpetual, worldwide, non-transferable, non-sublicensable license to use the purchased package within a single legal entity — one corporation, LLC, partnership, sole proprietorship, non-profit or government agency.
The license does not transfer title or any ownership interest in the underlying intellectual property, which remains with Lumos.
Within the licensed organization the purchaser may:
-use the documents across any number of employees, sites, divisions or business units, with no seat limit;
-edit, rewrite, restructure, rebrand and extend the documents, including applying the organization’s own name, logo and formatting;
-adopt the resulting documents as the organization’s own policies, procedures and records, and retain and continue using them indefinitely — including after any consulting engagement under which they were prepared has ended;
-provide the resulting documents to assessors, primes, contracting officers and regulators as evidence of the organization’s own compliance posture.
The derivative documents produced under this section belong to the licensed organization for its own operational use. This does not extend to the source library itself, which remains subject to section 4.
The purchaser may not:
The package is licensed as delivered on the date of download. It is a point-in-time set of documents.
-There is no subscription, no renewal obligation and no entitlement to updates, corrections, upgrades or future revisions, and no obligation on Lumos to notify the purchaser of any.
-If the underlying standard is revised and Lumos publishes a revised or renumbered edition, that edition is a separate product, sold at its then-current price. No discount, credit or upgrade path is offered or implied to existing purchasers.
The delivered files are editable Word and Excel with no portal, no license server and no expiry, and remain usable and amendable by the licensed organization for as long as it wishes.
The package is documentation, not certification. Lumos is not a C3PAO and does not issue, certify or guarantee any CMMC certification, assessment outcome or SPRS score. Formal assessments and certification decisions are made exclusively by accredited C3PAOs and the Cyber AB.
The documents reflect Lumos’s professional judgment at the time of publication. They do not guarantee a passing assessment, a contract award, or continued eligibility for any contract requiring CMMC certification. The purchaser is responsible for ensuring the adopted documents accurately describe its actual environment and practices.
All sales are final. The packages are digital content delivered in full on purchase. Refund eligibility, the narrow remedies available, and the pre-purchase disclosures are set out in the Refund Policy, which governs on any question of refunds.
If a refund is issued, or a chargeback is filed, the licence granted in section 2 terminates on that date. On termination the purchaser must cease use of, and delete all copies of, the source library as delivered. Continued possession or use of the source library after termination is unlicensed use of copyrighted material.
Documents already authored by the organization under section 3 are not affected by termination. A refund reclaims the library Lumos supplied; it does not reach back into the organization’s own adopted policies, procedures and records, which remain the organization’s own under section 3. The restrictions in section 4 continue to apply to those derivatives after termination.
These Terms are governed by the laws of the State of Ohio, without regard to conflict-of-law principles, consistent with the Site’s Terms of Use. If any provision is held unenforceable, the remainder continues in effect. No employee, contractor or representative has authority to vary these Terms; any variation is effective only if given in writing by an officer of Lumos Innovations, LLC.
To the fullest extent permitted by law, Lumos Innovations shall not be liable for any indirect, incidental, consequential, or special damages arising from your use of the Site or reliance on its content. Liability arising from a paid engagement is governed exclusively by the signed SOW/Master Services Agreement for that engagement.
You agree to indemnify and hold Lumos Innovations harmless from claims arising out of your misuse of the Site or violation of these Terms.
Lumos may update these Terms at any time. Continued use of the Site after changes are posted constitutes acceptance of the revised Terms. The "Last drafted" date above will be updated accordingly.
Email contactus@lumosinnovations.com from the address used at purchase, describing the issue. No ticket system, no web form. A human reads it and replies.