Terms of service
Draft for legal review. This page hasn't been reviewed by CGM's lawyer yet. Items in [square brackets] are still to be filled in.
Last updated November 9, 2026 (draft)
1. Who we are
CGM Workspace and its apps (CGM Standards Watch, CGM Compliance Tracker, CGM Relay Impact Screen, CGM Smart Procedures and CGM Powerworks) are provided by CGM Consulting Group [legal entity name and address]. "You" means the company that subscribes or signs an agreement with CGM, and the people it invites.
2. These terms and your agreement
These terms apply to every app. If your company has a signed agreement with CGM (for example for the Compliance Tracker), the agreement wins where the two differ.
3. Accounts and seats
- Each person signs in with their own account. Don't share sign-ins.
- Your company admin invites colleagues, up to the number of seats your company has, and removes people who leave.
- Keep your email account and any authenticator app secure; access to them gives access to CGM Workspace.
4. Subscriptions and payment
- Each app is subscribed to separately. Prices are shown at checkout or set in your agreement.
- Self-serve subscriptions renew automatically each month or year until cancelled. Your company admin cancels in the billing portal; access continues to the end of the paid period. [Refund policy.]
- Payments are handled by Stripe. CGM never sees full card numbers.
5. Your data
- Your company owns the data it puts in: tasks, evidence, messages, procedures, run records and photos.
- CGM uses it only to provide the service to you, keeps it confidential, and walls it off from every other company.
- When you leave, CGM can export your data for you. [How long after leaving CGM keeps it, and when it is deleted.]
- Don't upload BES Cyber System Information to app storage unless your agreement allows it; use your own SharePoint folder for that.
6. What the apps are, and aren't
The apps help you track and manage compliance work. They don't make compliance determinations, and using them doesn't make your company compliant with NERC Reliability Standards or any other requirement. Your company remains responsible for its own compliance. See the disclaimer for each app.
CGM Standards Watch is reviewed by CGM before publication. [Turnaround promise, for example: changes are reviewed within 2 business days.]
7. Acceptable use
Don't try to reach another company's data, get around sign-in or rate limits, upload malware, or use the apps for anything unlawful. CGM may suspend access that puts the service or other customers at risk, and will tell your company admin.
8. Availability and changes
CGM aims to keep the apps available but doesn't promise uninterrupted service unless your agreement says so. CGM may improve or change the apps; a change that removes something you pay for will be announced in advance. [Notice period.]
9. Warranties and liability
[To be written by CGM's lawyer: warranty disclaimer, limitation of liability, indemnities.]
10. Ending
You can stop using the apps at any time. CGM may end these terms with [notice period] notice, or immediately for a serious breach.
11. Law and contact
These terms are governed by the laws of [state]. Questions: [contact email].