If your auditor won't accept it, you don't pay for it.

If your auditor will not accept it, you do not pay for it.

If an auditor will not accept PSCO Approved Reviews as evidence of independent code review for the change-management control in scope, PSCO works the finding directly with the auditor. If it stands, PSCO refunds 100% of fees paid for that audit period.

Clause · draft, pending counsel review

Audit Acceptance. If Customer’s independent auditor determines in a written report that Approved Reviews delivered under this Agreement do not constitute acceptable evidence of independent code review for the change-management control within the audit’s scope, Customer shall notify PSCO within thirty (30) days of the report. PSCO shall, at its expense, engage with the auditor to address the finding. If the finding is not withdrawn or remediated within sixty (60) days of notice, PSCO shall refund to Customer all Fees paid for Approved Reviews delivered during the audit period to which the finding relates. This remedy is Customer’s sole remedy for an auditor’s non-acceptance.

Every in-scope PR is decided by a named human before psco/approved turns green.

No in-scope pull request receives a passing psco/approved check without a decision by a named Officer. Coverage is measured and published to you monthly.

Clause · draft, pending counsel review

Coverage. PSCO shall not set the psco/approved status to success for any commit of an In-Scope Pull Request unless a named Officer has reviewed that commit against the then-current Security & Compliance Model and recorded an approval decision. PSCO shall report monthly the number of In-Scope Pull Requests decided, the number merged with a passing psco/approved status, and any exceptions, and shall make the underlying attestation records available to Customer and Customer’s auditor.

A missed SLA earns a 10% credit per incident, capped at 50% of the month.

Each service level has a decision window: four business hours on Standard, one hour on Priority, thirty minutes on Always-on. A round decided after its deadline is an incident. Each incident earns a 10% credit on that month’s fees, up to 50% of the month.

Clause · draft, pending counsel review

Service Credits. If PSCO fails to record a decision on an In-Scope Pull Request within the Decision Window for Customer’s Service Level, Customer shall be entitled to a credit equal to ten percent (10%) of the Monthly Fee for each such failure, not to exceed fifty percent (50%) of the Monthly Fee for the month in which the failures occurred. Credits are applied to the next invoice. Failures caused by unavailability of GitHub or Customer’s systems, or by Customer’s removal of Officer access, are excluded.