Download Rubric

Preferred Option

Google Sheets Icon
Save From Google Sheets

Additional Options

Note: These options have limited functionality. The Google Sheets option is preferred.

PDF Icon
Download PDF
XLSX Icon
Download XLSX

These Terms of Service (“Terms”) govern your use of the Cybersecurity Rubric Sidekick (“CR Sidekick” or the “Service”), including the CR Sidekick Google Sheets Add-on and any related websites or tools provided by the Cybersecurity Coalition for Education (“CC4E”, “we”, “us”, or “our”).

By installing, accessing, or using the Service, you agree to be bound by these Terms and our Privacy Policy. If you do not agree, do not use the Service.

Table of Contents

Description of the Service

CR Sidekick is a free Google Sheets Add-on and companion AI assistant designed to help K–12 organizations complete self-assessments using the CC4E Cybersecurity Rubric 2.0.

The Service can:

  • Guide you through rubric questions and self-assessments via natural-language interaction.
  • Read and update authorized Google Sheets (for example, rubric checkboxes and scores).
  • Analyze documents you upload to help you interpret your current cybersecurity practices.
  • Generate summaries and reports of your self-assessment results.

The Service is provided for informational and educational purposes only and is not a substitute for professional legal, compliance, cybersecurity, or audit advice.

Eligibility and Organizational Use

The Service is intended for use by adults acting in a professional capacity (for example, school or district staff, administrators, and consultants).

By using the Service, you represent that:

  • You are at least 18 years old (or the age of majority in your jurisdiction); and
  • If you are using the Service on behalf of a school, district, or other organization, you are authorized to do so and to accept these Terms on that organization’s behalf.

Our Service is not directed to children under 13, and we do not knowingly collect personal information from children.

Data and Privacy

Your use of the Service is also governed by our Privacy Policy.

In summary:

  • Chat history is stored locally in your browser and in a hidden tab of your own Google Sheet. We do not store this chat history on our servers.
  • Uploaded files are temporarily processed on our servers and deleted after processing.
  • Assessment and report metadata (for example, rubric function, category, and generation date) and Google Sheets mappings may be stored in our database to support functionality and service improvement, as described in the Privacy Policy.
  • We do not sell your data to third parties.

By using the Service, you consent to our data practices as described in the Privacy Policy.

Use of Google APIs and Third-Party Services

CR Sidekick uses:

  • Google APIs, including the Google Sheets API, to read and write data in spreadsheets you explicitly authorize; and
  • Third-party AI providers (such as OpenAI) to process your prompts and uploaded content and generate responses.

By using the Service, you acknowledge and agree that:

  • Your use of Google services is governed by Google’s own Terms of Service and policies.
  • CR Sidekick’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We do not use Google user data to serve ads, and we do not use it to train generalized machine learning or AI models. We do not allow humans to read Google user data except (i) when you explicitly ask us to for a specific support request, (ii) when necessary for security or to comply with law, or (iii) when the data has been aggregated and anonymized so that it no longer identifies individual users.

We only use Google user data to provide or improve user-facing features that are visible and prominent in CR Sidekick’s interface and described in these Terms and our Privacy Policy.

Your content (such as chat messages and uploaded documents) may be sent to our AI provider(s) solely to generate responses.

We are not responsible for downtime, errors, or data loss caused by Google, AI providers, hosting providers, or other third-party services. We may change our infrastructure or choice of third-party providers at any time.

Your Responsibilities and Acceptable Use

You agree to use the Service responsibly and only for lawful purposes. In particular, you agree that you will not:

  • Use the Service in violation of any applicable law, regulation, or school/district policy.
  • Use the Service to store or process highly sensitive personal data (for example, Social Security numbers, financial account numbers, or medical records) beyond what is strictly necessary for your internal cybersecurity self-assessment work.
  • Attempt to gain unauthorized access to the Service, other users’ data, or any related systems or networks.
  • Interfere with or disrupt the operation of the Service (for example, by introducing malware, attempting to bypass security measures, or overloading the system).
  • Reverse engineer, decompile, or otherwise attempt to derive the source code or underlying models of the Service, except where permitted by law.

You are responsible for:

  • The accuracy of the information you provide to the Service.
  • Ensuring that your use of the Service complies with your organization’s data protection, privacy, and cybersecurity policies (including FERPA and other applicable laws or regulations, where relevant).

Intellectual Property and License

CR Sidekick, including its user interface, documentation, and underlying software, is owned by the Cybersecurity Coalition for Education and/or its licensors.

Subject to these Terms, we grant you a limited, non-exclusive, non-transferable, revocable license to install and use the Service for your internal educational and administrative purposes.

Except as expressly permitted by us in writing, you may not:

  • Copy, modify, or create derivative works of the Service;
  • Sell, resell, or commercially exploit the Service; or
  • Remove or alter any copyright, trademark, or other proprietary notices.

You retain all rights to your own data and content (including Sheets, uploaded documents, and assessment results). We do not claim ownership of your underlying data.

The Service provides AI-generated guidance and suggestions based on the CC4E Cybersecurity Rubric 2.0 and the information you provide.

You understand and agree that:

  • The Service does not provide legal advice, cybersecurity certification, or formal audit services.
  • Use of the Service does not guarantee compliance with any law, regulation, policy, or standard (including but not limited to state/federal regulations, NIST frameworks, or insurance requirements).
  • All outputs should be reviewed and validated by qualified personnel before being relied on for official reporting, compliance, or audit purposes.

Disclaimers of Warranties

THE SERVICE IS PROVIDED “AS IS” AND “AS AVAILABLE”, WITH NO WARRANTIES OF ANY KIND, WHETHER EXPRESS OR IMPLIED.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, WE SPECIFICALLY DISCLAIM ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

  • IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT;
  • ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, TIMELY, SECURE, OR ERROR-FREE;
  • ANY WARRANTY AS TO THE ACCURACY, COMPLETENESS, OR RELIABILITY OF ANY OUTPUT OR GUIDANCE PROVIDED BY THE SERVICE.

You use the Service at your own risk.

Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT SHALL CC4E OR ITS DIRECTORS, OFFICERS, EMPLOYEES, CONTRACTORS, OR AGENTS BE LIABLE FOR ANY:

  • INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES; OR
  • LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITIES,

ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF OR INABILITY TO USE THE SERVICE, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Our total aggregate liability for any claims arising out of or relating to the Service will not exceed USD $100 (or the minimum amount required by applicable law if higher).

Some jurisdictions do not allow the exclusion or limitation of certain damages; in those jurisdictions, our liability will be limited to the fullest extent permitted by law.

Termination and Suspension

We may suspend or terminate your access to the Service at any time, with or without notice, if we reasonably believe that:

  • You have violated these Terms;
  • Your use of the Service poses a risk to the security, integrity, or availability of the Service or to other users; or
  • We are required to do so by law or by a third-party provider (for example, Google or our AI provider).

You may stop using the Service at any time by uninstalling the Add-on and discontinuing all access.

Upon termination, the license granted to you under these Terms will automatically end. Sections that by their nature should survive (including but not limited to Disclaimers, Limitation of Liability, and Governing Law) will continue to apply.

Changes to the Service and These Terms

We may update or change the Service (including adding or removing features) at any time. We may also update these Terms from time to time.

When we make material changes, we will update the “Last Updated” date at the top of these Terms. Your continued use of the Service after changes become effective means you accept the revised Terms. If you do not agree, you must stop using the Service.

Governing Law

These Terms are governed by the laws of the State of New Jersey, without regard to its conflict-of-law principles.

Any disputes arising out of or relating to these Terms or the Service will be subject to the exclusive jurisdiction of the state and federal courts located in New Jersey, and you consent to the personal jurisdiction of those courts.

Contact Us

If you have questions about these Terms or the Service, please contact us: