Affiliate Disclosure & Commercial Transparency
In compliance with Federal Trade Commission (FTC) guidelines (16 CFR Part 255), this statement discloses our material commercial connections, partner rebates, and referral structure.
1. FTC Compliance Statement
You should assume that Promune (accessible at promune.com) maintains an affiliate relationship or commercial partnership with software vendors mentioned across our reviews, comparison matrices, and calculators.
When you click on our first-party vanity links (e.g. /go/*) pointing to partner platforms and purchase a subscription, request a demo, or schedule an audit, we may receive a referral commission or partner fee. This compensation comes at zero additional cost to your organization. In fact, through our negotiated partner arrangements, using our links often unlocks exclusive benefits—such as our exclusive $1,000 partner rebate on Vanta or discounted auditor bundling on Sprinto.
2. Our Core B2B Partner Relationships
Promune participates in select enterprise partner programs in the compliance, cybersecurity, and zero-trust verticals. These include:
Partner referral commissions and an exclusive $1,000 software rebate applied toward annual trust management subscriptions.
Referral fees earned when technology startups deploy Sprinto GRC for SOC 2, ISO 27001, and HIPAA compliance automation.
Commissions earned on automated penetration testing packages and continuous vulnerability scanner software licenses.
Recurring referral commissions earned when companies deploy Zero-Trust SASE networks, dedicated IPs, and team password vaults.
Recurring software commissions earned on Google-certified Consent Mode v2 cookie banners and CMP subscription tiers.
Referral commissions on automated GDPR/CCPA privacy policy generation, legal generators, and automated DSAR portal tools.
Referral earnings on AI-assisted ISO 27001 / SOC 2 policy authoring tools and automated vendor security questionnaire responders.
3. Editorial Independence & Testing Integrity
We do not accept monetary compensation or sponsored fees in exchange for favorable reviews or inflated scorecard ratings. If a compliance platform has poor CPA auditor support, lacks automated API evidence sync, or imposes punitive price escalators at renewal, we publish these drawbacks clearly in our scorecards.
Our recommendations are strictly governed by our evaluation rubric:
- AICPA & ISO Audit Acceptance: Whether reports generated are accepted without qualification by independent CPA auditing firms.
- API Integration Depth: How reliably the tool pulls automated evidence from AWS, GCP, GitHub, Okta, and Jira without requiring manual screenshots.
- Total Cost of Ownership (TCO): Transparent pricing accounting for software, auditor partner fees, and pentesting add-ons.
- Turnaround SLA: How rapidly the platform moves a team from initial onboarding to final audit sign-off.
4. Audit & Legal Disclaimer
Promune is an independent educational publisher and research hub. Content on this site does not constitute formal legal counsel, security architecture guarantees, or CPA audit opinions. Compliance certifications require independent review by licensed external accounting and auditing bodies.