Introduction

This document describes the terms that the User must agree to in order to use the CANARIE Collaboration Hub.

For the purposes of this document, the services run on the CANARIE Collaboration Hub will be collectively called "CANARIE Services". The CANARIE Services are intended solely to support information sharing, collaboration, and reference activities in the context of cybersecurity, research, and related fields. The CANARIE Services and all content are provided for general information purposes only and do not constitute professional, technical, operation, legal, or security advice.

The Legal Stuff

This agreement is a legal contract between the User and CANARIE Inc. (the "User Agreement"). The User acknowledges they have read, understand, and agree to be bound by the terms of this User Agreement. If the User does not agree to all of the terms of the User Agreement, the User is not permitted to use the CANARIE Services. Please also carefully review CANARIE’s Privacy Policy, as it provides important information on how we collect and use a user’s information.

The User’s Access to CANARIE Services

Without advance notice and at any time, CANARIE may, for violations of this User Agreement or for any other reason as determined by CANARIE, choose to: (1) suspend the User’s access, (2) suspend or terminate the User’s account, and/or (3) remove any of User’s content from any CANARIE Service. CANARIE has no obligation to retain any User content and may permanently delete such content upon suspension or termination.

CANARIE reserves the right to monitor all CANARIE Services, and by using any of the CANARIE Services the User agrees to such monitoring. Notwithstanding the foregoing, CANARIE does not guarantee or warrant that it will monitor any user’s use of the CANARIE Services.

Service Availability and Support

CANARIE makes the CANARIE Services available on a best-efforts basis. While CANARIE strives to maintain reliable access to the CANARIE Services, availability may be affected by maintenance, technical issues, or factors beyond CANARIE’s control.

CANARIE may perform scheduled or unscheduled maintenance from time to time, which may result in temporary interruptions to the CANARIE Services. Where reasonably practicable, CANARIE will provide notice of scheduled maintenance through the CANARIE Portal or by other appropriate means.

If the CANARIE Services become unavailable or experience a disruption, CANARIE will use commercially reasonable efforts to restore access as soon as practicable. CANARIE does not guarantee any level of availability, uptime, response time, or resolution time.

Support for the CANARIE Services may be provided at CANARIE’s discretion. CANARIE does not commit to any specific support levels, response times, or resolution times.

For greater certainty, the CANARIE Services are provided on an "as is" and "as available" basis, and nothing in this section creates any obligation, warranty, or service level commitment on the part of CANARIE.

Lawful Use of CANARIE Services

The User shall use CANARIE Services only for lawful purposes and in accordance with this User Agreement, and in a manner that supports a respectful and civil environment. Without limiting the foregoing, the User shall not:

• Violate any applicable law, regulation, or governmental order.
• Harass, threaten, or abuse others, or post personal information about any other person.
• Post, transmit, or otherwise make available any pornography, sexually explicit material, or other content that is defamatory, obscene, or otherwise objectionable.
• Infringe upon or misappropriate the intellectual property, privacy, or other proprietary rights of any person or entity.
• Interfere with or disrupt the integrity, performance, or security of the CANARIE Services or any related systems.

The User is solely responsible for all content they use, rely on, create, upload, or otherwise make available through the Services.

Accessing CANARIE Services

To participate in any of the CANARIE Services, the User must use their Canadian Access Federation (CAF) account provided by the User’s home institution. Users whose home institutions are not compatible CAF members may register for a CANARIE managed account. The User can view any public content on the CANARIE Services without logging in.

The User is solely responsible for all information associated with their account and for all activities that occur under or in connection with it. The User may not license, transfer, sell, or assign their account to any other person or entity. The User must safeguard credentials and promptly notify CANARIE of an actual or suspected compromise.

Traffic Light Protocol (TLP) and Permissible Action Protocol (PAP)

To protect sensitive information shared through the CANARIE Portal, certain documents and communications are classified and subject to handling and sharing restrictions.

As a condition of access, all Users must review, understand, and comply with the Traffic Light Protocol (TLP) published by Forum of Incident Response and Security Teams (FIRST) and the Permissible Action Protocol (PAP) published by Agence nationale de la sécurité des systèmes d'information (ANSSI).

Users must:

• Follow all TLP and PAP classifications and restrictions.
• Share information only with authorized recipients and only as permitted.
• Maintain appropriate safeguards to prevent unauthorized disclosure.

Access to sensitive content may be restricted to Users who have acknowledged and agreed to these requirements. Failure to comply may result in suspension or termination of access.

The current versions of TLP and PAP are incorporated into these Terms by reference and may be updated from time to time.

CANARIE Content

The CANARIE Services contain graphics, text, photographs, images, video, audio, and software, supplied by CANARIE or its staff (collectively, "CANARIE Content"). CANARIE Content is protected by intellectual property laws, including copyright and other proprietary rights of Canada and foreign jurisdictions. The User may not make unauthorized commercial use of, reproduce, prepare derivative works, distribute copies of, perform, or publicly display CANARIE Content, except as permitted by the doctrine of Fair Dealing in Canada or as authorized in writing by CANARIE.

User Content

The User retains all rights to any copyrighted content or information submitted by the User to the CANARIE Services.

User represents and warrants that all content submitted to the CANARIE Services does not violate the copyright, trademark, trade secret, or any other personal or proprietary right of any other third party.

Where a User submits content to CANARIE for use in the CANARIE Services, the User grants CANARIE a non-exclusive and royalty-free licence to host and display the content on the CANARIE Portal.

CANARIE Does Not Endorse User Content; No Warranties

CANARIE does not endorse, support, or guarantee the accuracy, completeness, legality, reliability, or quality of any content available through the CANARIE Services, whether provided by a User, CANARIE, or any third party. All User content is the sole responsibility of the user who provided it, and each User assumes all risk associated with the use of any content provided through the CANARIE Services.

While CANARIE takes reasonable measures to ensure that CANARIE Content complies with applicable laws, CANARIE makes no representations or warranties of any kind, express or implied, with respect to any content on the CANARIE Services, including without limitation warranties of accuracy, merchantability, fitness for a particular purpose, or non-infringement, and CANARIE expressly disclaims all such warranties.

Under no circumstances will CANARIE be liable for any loss, damage, claim, or expense arising from or related to any content available through the CANARIE Services, whether based on contract, tort, statutory liability, or otherwise, even if CANARIE has been advised of the possibility of such loss or damage.

Links and CANARIE Services

Third-party website hyperlinks may be posted on some CANARIE Services. CANARIE is not responsible for the content or actions of any third-party websites or services associated with those links. User agrees to take sole legal responsibility for any links you post or access on the CANARIE Services. Neither this User Agreement nor CANARIE’s Privacy Policy applies to any content on third-party websites related to any posted third-party link. Users should consult the terms and privacy policies of those other websites to understand their rights.

Prohibited Interference with CANARIE Services

User shall not disrupt, interfere with, or impair the operation of the CANARIE Services; introduce malicious code; hinder another person’s use of the CANARIE Services; or assist anyone in misusing any of the CANARIE Services in any way.

Security Reporting

We support the responsible reporting of security vulnerabilities. To report a security issue with any of the CANARIE Services, please send an email to support@CANARIE.ca.

Survival

The following provisions shall survive for a period of three (3) years following the User’s last access to or use of the CANARIE Services, notwithstanding any suspension, termination, or expiry of this User Agreement:

• Traffic Light Protocol (TLP) and Permissible Action Protocol (PAP) obligations, including all duties relating to the handling, use, safeguarding, and disclosure of information classified under TLP or PAP.
• Lawful Use of CANARIE Services, to the extent such provisions relate to the misuse, unauthorized disclosure, or unlawful handling of information obtained through the CANARIE Services.
• CANARIE Content and User Content provisions, including intellectual property rights, licence grants, and restrictions on use.
• CANARIE Does Not Endorse User Content; No Warranties and all disclaimers of warranties.
• Limitation of Liability and any exclusions of liability.
• Links and Third-Party Services, to the extent such provisions allocate responsibility or risk.
• Any other provision which, by its nature or intent, is intended to survive termination.

For greater certainty, the expiry of this survival period does not relieve the User of any obligation imposed by applicable law, regulation, or binding third-party information-sharing framework.

Amendment to These Terms

CANARIE may amend this User Agreement from time to time. Any amendments will be posted on the CANARIE Portal and will take effect on the date of posting, unless otherwise stated.

The User is responsible for reviewing the User Agreement as posted on the CANARIE Portal. Continued access to or use of the CANARIE Services after an amended version of this User Agreement is posted constitutes acceptance of the amended terms.

Notwithstanding the foregoing, CANARIE may, in its discretion, require the User to expressly accept an updated User Agreement before permitting continued access to or use of the CANARIE Services. Where such express acceptance is required, the amended User Agreement will take effect upon the User’s acceptance.

If the User does not agree to an amended User Agreement, the User must stop accessing and using the CANARIE Services.

Governing Law and Jurisdiction

This User Agreement is governed by and construed in accordance with the laws of the Province of Ontario and the laws of Canada applicable therein, without regard to conflict of laws principles. The User irrevocably submits to the exclusive jurisdiction of the courts of the Province of Ontario in respect of any matter arising under or in connection with this User Agreement or the CANARIE Services.