# Data License

The SCF control data files in this repository (`scf-controls.json`, `framework-to-scf.json`) are licensed under:

**Creative Commons Attribution-NoDerivatives 4.0 International (CC BY-ND 4.0)**

**Copyright:** ComplianceForge
**Source:** [Secure Controls Framework (SCF)](https://securecontrolsframework.com/)
**Version:** SCF 2025.4 (Released December 29, 2025)

---

## License Summary

You are free to:

- **Share** — copy and redistribute the material in any medium or format for any purpose, even commercially

Under the following terms:

- **Attribution** — You must give appropriate credit to ComplianceForge, provide a link to the license, and indicate if changes were made
- **NoDerivatives** — If you remix, transform, or build upon the material, you may not distribute the modified material

---

## ⚠️ Important: AI Derivative Content Restriction

The SCF End User License Agreement specifically prohibits:

> "utilizing Artificial Intelligence (AI) (or similar technologies) to leverage SCF content to generate policies, standards, procedures, metrics, risks, threats or other derivative content"

This means you **may not** use AI systems (including Claude, ChatGPT, or similar) to generate derivative content based on SCF data.

**Permitted Uses:**
- Query and analyze control mappings
- Map between frameworks
- Reference controls in your work (with attribution)
- Understand compliance requirements

**Prohibited Uses:**
- Asking AI to write policies/procedures based on SCF controls
- Creating derivative frameworks for distribution
- Generating automated compliance content using AI

---

## Full License

The complete CC BY-ND 4.0 license is available at:
https://creativecommons.org/licenses/by-nd/4.0/legalcode

For SCF-specific terms and conditions, see:
https://securecontrolsframework.com/terms-conditions/

---

## Questions?

For questions about permitted uses, contact ComplianceForge directly or consult a legal professional.

**This is not legal advice.** Consult qualified legal counsel for compliance guidance specific to your situation.
