APMnow User Registration & Acceptable Use Terms

By registering for, accessing, or using APMNOW, the user acknowledges that they have read, understood, and agree to comply with these terms, all applicable organizational policies, and any instructions issued by authorized application administrators.

Users who do not agree to these terms must not register for or use APMNOW.

APMNOW is provided solely for authorized business activities related to application portfolio management, application inventory, technology management, governance, reporting, assessment, planning, and approved administrative functions.

The application must not be used for personal activities, unauthorized commercial purposes, unlawful activities, or any purpose unrelated to the user's assigned responsibilities.

Each user is responsible for all activity performed through their assigned account.

Users must: provide accurate registration and profile information; use only their individually assigned account; protect passwords and authentication credentials; comply with multifactor authentication requirements; immediately report suspected account compromise or unauthorized access; never share credentials or permit another person to use their account.

Users may not impersonate another individual, create unauthorized accounts, or attempt to bypass authentication or access controls.

Access to APMNOW information and functions will be assigned according to the user's approved role, business responsibilities, and legitimate need to know.

Access may be limited, modified, suspended, or removed by an authorized administrator at any time due to role changes, separation from the organization, security concerns, policy violations, or changes in business requirements.

Possession of an APMNOW account does not provide unrestricted access to all application records.

Data uploaded to or stored within APMNOW will be collected, maintained, and used solely for the operation, administration, governance, reporting, and intended business purposes of the application.

Access to application data will be limited to authorized data administrators, designated data owners, and approved personnel with a legitimate business need.

Data will not be sold, used for unrelated advertising, or disclosed to unauthorized parties. Information may be disclosed where required by applicable law, regulation, legal process, audit requirement, public-records obligation, or approved organizational policy.

APMNOW may collect and retain limited user and technical information, including: user name and organizational contact information; department or business unit; assigned application role; login dates and access activity; records viewed, added, modified, exported, or deleted; device, browser, session, and diagnostic information; user feedback and application-performance information.

This information may be used to administer the application, improve usability, troubleshoot technical issues, protect application security, conduct audits, investigate suspected misuse, and meet compliance requirements.

Users should have no expectation that activity performed within APMNOW is private from authorized application, security, audit, records-management, or compliance personnel.

Information entered into APMNOW on behalf of the organization remains the property or official record of the organization or the applicable designated data owner.

Registering, entering, updating, or managing information within APMNOW does not transfer ownership of organizational data to the individual user.

Where third-party information is entered, the user is responsible for confirming that the organization has the authority to collect, store, and use that information.

Users are responsible for ensuring that information they submit is accurate, complete, current, and appropriate for the intended business purpose.

Application owners, business owners, technical owners, data stewards, and other designated personnel may be required to periodically validate assigned records.

Users must promptly correct known inaccuracies or notify the appropriate data owner or administrator when corrections cannot be made directly.

APMNOW reports and decisions may rely on user-submitted information. Users must not knowingly submit false, misleading, incomplete, or outdated information.

Users may upload only information that is authorized, relevant, and necessary for application portfolio management.

Unless specifically approved and protected by appropriate controls, users must not upload: Social Security numbers or equivalent government identifiers; payment-card or banking information; medical, health, or patient information; criminal justice information; authentication credentials, passwords, private keys, or access tokens; confidential legal information; export-controlled information; personal information unrelated to application management; malicious code, executable files, or harmful content; copyrighted or proprietary information the organization is not authorized to possess.

Users should enter the minimum amount of information necessary to complete the applicable business process.

Users must protect nonpublic information accessed through APMNOW and may disclose it only to individuals who are authorized to receive it and have a legitimate business need.

Information must not be copied, downloaded, photographed, exported, emailed, published, or otherwise distributed without appropriate authorization.

Confidentiality obligations continue after the user's access to APMNOW has ended.

APMNOW information may not be exported, transmitted, integrated, or shared with another system, third-party service, artificial intelligence tool, contractor, vendor, or external recipient without prior authorization.

Authorized exports must be protected according to the sensitivity and classification of the information.

Users are responsible for ensuring that exported information is stored securely, shared only with authorized recipients, and disposed of according to applicable retention and records-management requirements.

Users must comply with all applicable cybersecurity and information-protection requirements when accessing APMNOW.

Users must not: attempt to access information outside their assigned permissions; disable or circumvent security controls; probe, scan, test, or exploit application vulnerabilities without authorization; introduce malware or harmful code; alter system logs or audit records; use automated extraction, scraping, or bulk-download tools without approval; connect unauthorized integrations, plug-ins, APIs, or applications; use shared or unsecured devices to access protected information.

Security practices should limit collection to necessary information, protect retained information, securely dispose of information no longer required, and maintain an incident-response process.

User actions within APMNOW may be logged and reviewed.

Audit records may include login activity, permission changes, data modifications, exports, administrative actions, and unsuccessful access attempts.

Authorized administrators may review these records to maintain application security, investigate suspected misuse, validate compliance, resolve technical issues, support legal, audit, or records-management requirements, and improve application performance and user experience.

Audit logs will be protected from unauthorized access or modification and retained according to applicable organizational policies. Logging and monitoring are recognized controls for detecting misuse and supporting security investigations.

Information stored in APMNOW may constitute an organizational record and may be subject to applicable records-retention schedules, litigation holds, audit requirements, public-records requirements, or other legal obligations.

Users must not delete, alter, conceal, or destroy records in violation of an applicable retention requirement or legal hold.

Information that is no longer required will be archived, deleted, or otherwise disposed of according to approved records-management, privacy, and security procedures.

Account deletion does not necessarily require deletion of records created or maintained by the user.

Authorized administrators and designated data owners may review, correct, standardize, merge, archive, restrict, or remove records when necessary to: correct inaccurate or duplicate information; maintain data quality; enforce governance standards; protect security or privacy; comply with records-management requirements; support application rationalization or reporting; address inappropriate or unauthorized content.

Where practical, material changes should be documented through application history, audit records, or administrative notes.

APMNOW may be modified, upgraded, suspended, or temporarily unavailable due to maintenance, security requirements, technical issues, or business decisions.

The organization does not guarantee uninterrupted access or that every application feature will remain available.

Users are responsible for complying with any announced maintenance schedules, application changes, or updated operating procedures.

APMNOW may connect to approved organizational or third-party services.

Use of an integration may be subject to additional privacy, licensing, security, and acceptable-use requirements.

Users must not independently connect APMNOW to external services or authorize third-party access without documented approval from the appropriate application owner, security authority, data owner, and other required governance bodies.

APMNOW, including its application design, workflows, reports, documentation, configurations, branding, and related materials, may be protected by intellectual-property, contractual, or licensing restrictions.

Users may not reproduce, reverse engineer, modify, distribute, sell, license, or create derivative works from APMNOW or its protected content unless expressly authorized.

This provision does not alter the ownership of organizational records entered into the application.

Users must immediately report: suspected unauthorized access; accidental disclosure of information; lost or compromised credentials; improperly assigned permissions; incorrect or sensitive information entered into the application; suspicious system behavior; suspected data loss or corruption; any other potential security, privacy, or compliance incident.

Users must cooperate with authorized investigations and must not independently conceal, delete, or alter evidence related to an incident.

Access to APMNOW may be suspended or terminated without prior notice when necessary to protect the application, its data, or the organization.

Reasons may include: violation of these terms; unauthorized access or disclosure; misuse of application information; failure to maintain accurate account information; change in employment or assigned responsibilities; extended inactivity; security or compliance concerns; direction from an authorized organizational official.

Violations may also result in administrative, disciplinary, contractual, civil, or criminal action, as permitted by applicable policy and law.

APMNOW is intended to support portfolio management, planning, governance, reporting, and decision-making.

Users should validate material information before relying on it for financial, contractual, legal, cybersecurity, procurement, licensing, architecture, or operational decisions.

Reports and recommendations produced by APMNOW may be affected by incomplete, inaccurate, or outdated source data.

These terms may be updated to reflect changes in application functionality, business processes, legal requirements, organizational policy, or security practices.

Users may be required to review and accept revised terms before continuing to access APMNOW.

The effective date and version of the accepted terms should be recorded.

By selecting "I Accept," the user confirms that: they have read and understood these terms; they are authorized to access APMNOW; they will use APMNOW only for approved business purposes; they will protect application information and account credentials; they understand that application activity may be logged and monitored; they will comply with applicable privacy, security, records-management, data-governance, and acceptable-use requirements; they understand that violations may result in suspension or termination of access and other appropriate action.

Acceptance record fields: user name; user identifier or email address; department; date and time accepted; terms version; acceptance status; authentication or session identifier.