Release notes, licensing, support, and policy information for Boo-Tech products.
e1 Governance Accelerator — v1.1 (2026-06-08) — Current
Broadened the toolkit's framing from "healthcare SaaS" to healthcare organizations generally; rewrote all 258 control requirement statements (tagged with [BUID Reference] markers) and 52 supporting narrative statements across the six domain policies into original implementation language; corrected the e1/i1/r2 certification-tier comparison table in the Implementation Guide; refreshed branding and trademark/attribution language throughout; added the Product Changelog, Start Here guide, License Agreement, and in-document Version History tracking.
e1 Governance Accelerator — v1.0 (2026-06-03) — Initial Release
Six governance domain policies (Domains 01, 13, 14, 15, 17, 19) pre-mapped to HITRUST CSF e1 control references, plus the Readiness Assessment, Evidence Tracker, Gap Assessment, Internal Audit Workbook, Executive Dashboard, RACI Matrix, Framework Crosswalk, and Governance Readiness Scorecard workbooks, and the initial Implementation Guide.
i1 Security Operations Accelerator — v1.0 — Current
Initial release covering 17 of 19 HITRUST domains (01–15, 17, 19): domain policies plus supporting procedures, standards, checklists, and evidence guides, the full assessment toolkit, and technical-domain trackers (vulnerability, vendor security, access review, technical control matrix).
r2 Enterprise Security Accelerator — v1.0 — Current
Initial release covering all 19 HITRUST domains and 172 controls, plus the five-part Enterprise Artifacts suite (Enterprise Risk, Privacy Program, Executive Governance, Assessment Management, Internal Audit Program).
The e1 Accelerator is the only tier with a published version history so far — see Release Notes above. i1 and r2 are both currently at their initial Version 1.0; a changelog will be published here for each tier as updates are released. All three toolkits also track document-level revision history inside each individual policy document. Licensed customers receive updates through the same channel as their original purchase.
Policies, procedures, and guides are delivered as Word (.docx) or PDF documents; workbooks and trackers are delivered as Excel (.xlsx) files.
Per the License Agreement included with your purchase, Boo-Tech maintains each toolkit on an ongoing basis — refining language, correcting control mappings, and expanding coverage — and licensed customers can expect periodic updates delivered through the same channel as their original purchase.
Each tier's toolkit is scoped to match its certification pathway: e1 includes the 6 governance-foundation domains (01, 13, 14, 15, 17, 19); i1 includes 17 of 19 domains (adds 11 technical domains to e1's governance base); r2 includes all 19 domains and 172 controls, plus the Enterprise Artifacts suite. See each product page for the exact domain list and file count.
Each Governance Accelerator ships with its own signed License Agreement (PDF) inside the package. All three follow the same structure and core terms, tailored to what's actually included in that tier's toolkit:
1. Grant of License — Boo-Tech grants the purchasing organization ("Licensee") a non-exclusive, non-transferable license to access, copy, customize, and use the Toolkit — including its domain policies, procedures, workbooks, assessment tools, and Implementation Guide — for its own internal information security governance, risk, and compliance activities.
2. Permitted Use — Licensee may customize, brand, and adapt the Toolkit for internal use; distribute it internally to employees, contractors, and workforce members; and share completed or in-progress artifacts with auditors, assessors, regulators, and business partners. The r2 license additionally permits distribution across the Licensee's enterprise, including subsidiaries and affiliated business units, and sharing with the Licensee's Board of Directors or Risk Committee.
3. Restrictions — The Toolkit may not be resold, sublicensed, rented, leased, or distributed as a standalone or competing product. Licensee may not represent the Toolkit or any artifact produced from it as having been produced, reviewed, certified, or endorsed by HITRUST Alliance, any assessor firm, or any regulatory body. Copyright, trademark, and attribution notices may not be removed except for permitted internal branding customization. The license conveys no ownership interest — all intellectual property remains with Boo-Tech.
4. Trademark Disclaimer — HITRUST® is a registered trademark of HITRUST Alliance. This is an independent implementation toolkit, not affiliated with, endorsed by, sponsored by, or approved by HITRUST Alliance. References to HITRUST CSF domains, control categories, and certification tiers (e1, i1, r2) describe the framework the Toolkit is mapped to only. The Toolkit must not be described as an "Official," "Approved," or "Certified" HITRUST Toolkit.
5. No Warranty — The Toolkit is provided "as is," without warranties of any kind. Boo-Tech does not warrant that use of the Toolkit will result in HITRUST CSF certification or compliance with any law or standard. Content is for informational and implementation guidance purposes only and does not constitute legal, compliance, or professional advice — Licensee should engage qualified legal counsel and a HITRUST Authorized External Assessor for formal certification activities.
6. Limitation of Liability — Boo-Tech is not liable for indirect, incidental, special, consequential, or punitive damages arising from use of the Toolkit. Total aggregate liability is capped at the amount paid for the Toolkit.
7. Term and Termination — The license is effective upon purchase and continues until terminated for uncured material breach (30-day cure period). Previously distributed copies and derivative works already in use may continue to be used for their original internal purpose after termination.
8. Governing Law — Governed by the laws of the jurisdiction in which Boo-Tech is organized, without regard to conflict-of-law principles.
9. Entire Agreement — This Agreement is the entire agreement between Licensee and Boo-Tech regarding use of the Toolkit and supersedes prior understandings; if any provision is unenforceable, the rest remains in effect.
The full, signed License Agreement PDF is included in every package and controls in the event of any difference with this summary.
For product questions, implementation support, or consulting inquiries, use the contact form.
All Governance Accelerator purchases are final. Because these are digital products delivered instantly upon purchase, Boo-Tech does not offer refunds once a download link has been issued, except where required by applicable law. If you believe you were charged in error, were charged more than once for the same order, or received a corrupted or incomplete download, contact us through the contact form and we'll make it right.
Effective date: August 10, 2026.
This Privacy Policy explains what information Boo-Tech collects through this website (the "Site"), how it's used, and your choices. It covers the Site only — use of a purchased Governance Accelerator toolkit is governed separately by that product's License Agreement, above.
Information we collect. When you use the Free Resources form or the Contact form, we collect the information you provide: first name, last name, email address, company name, and, for the Contact form, your message. We do not collect payment card information directly — purchases are processed entirely by Lemon Squeezy, a third-party payment processor, under its own privacy policy.
How we use it. We use the information submitted through the Contact form to respond to your inquiry. Submitting the Free Resources form also opts you in to Boo-Tech's mailing list for product updates and marketing communications — this is disclosed directly on that form at the point of submission, and you can unsubscribe at any time using the link in any email from us. We do not sell your personal information to third parties.
Security. We use reasonable administrative and technical measures — including encrypted (HTTPS) connections and access controls with our service providers — to help protect the personal information we collect. No method of transmission or storage is completely secure, and we can't guarantee absolute security.
Third-party services and cookies. The Site itself does not set its own tracking or advertising cookies. We rely on a small number of third-party services, each of which may set its own cookies or collect data under its own policy:
Data retention. We retain the information you submit for as long as needed to fulfill the purpose it was collected for, or as required by law. You can unsubscribe from our mailing list at any time using the link in any email from us, or by contacting us directly.
Your rights. Regardless of where you live, you may request access to, correction of, deletion of, or a copy (export) of the personal information we hold about you, or object to certain uses of it. To exercise any of these rights, use the contact form. We'll respond within a reasonable time and may need to verify your identity first.
Indiana residents. Indiana's Consumer Data Protection Act (effective January 1, 2026) grants Indiana residents rights to access, correct, delete, and port their personal data, and to opt out of certain profiling, targeted advertising, or sale of personal data. It applies to businesses that control or process the personal data of at least 100,000 Indiana consumers annually, or at least 25,000 Indiana consumers while deriving more than 50% of gross revenue from selling personal data. Boo-Tech does not meet either threshold, but we extend the same core rights — access, correction, deletion, and portability — to all users regardless of location, and we do not sell personal data or use it for targeted advertising.
California residents. The California Consumer Privacy Act, as amended by the CPRA, applies to businesses that exceed certain thresholds — currently over $26,625,000 in annual gross revenue, or that buy, sell, or share the personal information of 100,000 or more California residents or households annually, or that derive over half of annual revenue from selling or sharing personal information. Boo-Tech does not meet these thresholds. As a courtesy, California residents may still submit access, correction, or deletion requests using the contact details above, and we will not discriminate against you for making one.
Children's privacy. This Site is intended for business use and is not directed at children. In line with the federal Children's Online Privacy Protection Act (COPPA), we do not knowingly collect personal information from anyone under 13.
Changes. We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised effective date; for material changes, we'll also notify our mailing list by email.
Effective date: August 10, 2026.
By accessing or using the Boo-Tech website (the "Site"), you agree to these Terms of Use. If you do not agree, do not use the Site.
Use of the Site. You may browse the Site and use its forms and checkout links for their intended purposes — learning about Boo-Tech's products, requesting free resources, purchasing products, and contacting Boo-Tech. You agree not to: use the Site unlawfully; attempt unauthorized access to it or any connected third-party service; interfere with its operation (including through scraping, bots, or denial-of-service activity); submit false or fraudulent information through any form on the Site; impersonate Boo-Tech or any other person or entity; or submit content through the Contact form that is defamatory, harassing, or otherwise unlawful.
Products and purchases. Governance Accelerator products (e1, i1, r2) are sold as digital downloads through Lemon Squeezy, a third-party payment processor; Boo-Tech does not directly collect or store your payment card information. Use of a purchased toolkit is governed by the License Agreement included with that product, not by these Terms. If anything here appears to conflict with a product's License Agreement regarding use of that product, the License Agreement controls.
Intellectual property. The Site itself — its text, design, layout, graphics, and the Boo-Tech name and logo — is owned by Boo-Tech. You may not copy or republish the Site's content for commercial purposes without permission. This does not apply to the Governance Accelerator toolkit content you receive after purchase, which is governed separately by that product's License Agreement.
Third-party services and links. The Site relies on Lemon Squeezy (checkout and payment), Brevo (email and form processing), and Google reCAPTCHA (spam protection). Your use of these services through the Site is also subject to each provider's own terms. Boo-Tech is not responsible for the content, practices, or availability of third-party services.
Disclaimer of warranties. The Site is provided "as is" and "as available," without warranties of any kind, express or implied, including implied warranties of merchantability, fitness for a particular purpose, or non-infringement. Boo-Tech does not warrant that the Site will be uninterrupted, error-free, or secure.
Limitation of liability. To the maximum extent permitted by law, Boo-Tech will not be liable for indirect, incidental, special, consequential, or punitive damages arising from your use of the Site. Boo-Tech's total liability arising from your use of the Site will not exceed the amount you paid Boo-Tech, if any, for use of the Site in the twelve months preceding the claim. This cap applies to the Site only — liability related to a purchased Governance Accelerator product is governed separately by that product's License Agreement.
Indemnification. You agree to indemnify, defend, and hold harmless Boo-Tech and its officers, employees, and agents from any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising out of or related to your use of the Site, your violation of these Terms, or your violation of the rights of a third party.
Dispute resolution. If a dispute arises out of or relates to these Terms or your use of the Site, contact us through the contact form first so we can try to resolve it informally. If it isn't resolved informally within 30 days, it will be resolved by binding arbitration administered under the rules of the American Arbitration Association, conducted in Indiana, rather than in court — except that either party may bring an individual claim in small claims court, and Boo-Tech may seek injunctive relief in court to protect its intellectual property. Disputes will be resolved on an individual basis; class actions and class arbitrations are not permitted.
Governing law. These Terms are governed by the laws of the State of Indiana, without regard to conflict-of-laws principles.
Severability. If any provision of these Terms is found unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.
Entire agreement. These Terms, together with our Privacy Policy and, where applicable, the License Agreement for any purchased product, constitute the entire agreement between you and Boo-Tech regarding use of the Site, and supersede any prior or contemporaneous understandings, whether written or oral.
Changes. Boo-Tech may update these Terms from time to time. Changes will be posted on this page with a revised effective date; continued use of the Site after changes take effect constitutes acceptance of the revised Terms.
Questions about these Terms or the Privacy Policy can be directed to Boo-Tech through the contact form.
