Terms of service

Accounts are issued to named individuals and must not be shared. You are responsible for keeping your password and multi-factor authenticator secure, and for all activity carried out under your account. Tell your administrator immediately if you suspect misuse.

You agree not to:

• attempt to access data or roles you have not been granted;
• upload malware, unlawful material, or content you have no right to share;
• probe, scan or disrupt the service or its infrastructure without written permission;
• use the workspace to store personal data that is not needed for your ISMS.

Your organisation retains ownership of the controls, risks, policies, audits and evidence it puts into the workspace. You grant us only the permissions needed to host, back up, display and export that content for you.

The workspace helps you record and evidence your information security management system. It does not certify your organisation, and it is not legal, audit or certification advice. Decisions about scope, applicability, risk treatment and certification remain yours.

We aim to keep the workspace available, but access may be interrupted for maintenance, updates or events outside our control. We may change or discontinue features, and will give administrators reasonable notice of significant changes.

Accounts may be suspended or removed by your administrator, or by us where these terms are breached. On termination you may request an export of your content before it is removed in line with the privacy policy.

To the extent permitted by law, the service is provided without warranties of any kind and we are not liable for indirect or consequential loss, including loss of profits, business or anticipated certification outcomes.

Questions about these terms should go to the workspace administrator who manages your account.