Draft generated for CTRL + Ledger. Review by qualified Canadian/Ontario legal counsel is recommended before production use. This document does not constitute legal advice and does not guarantee legal compliance or eliminate liability.
Effective date: [EFFECTIVE DATE] Business: [LEGAL BUSINESS NAME] ([ONTARIO CORPORATION NUMBER]) Address: [BUSINESS ADDRESS]
These Client Portal Terms apply to access and use of the CTRL + Ledger client portal (the "Portal"). They supplement the Terms of Use.
1. Authorized users
Portal access is granted to authorized users associated with a client business. The client is responsible for all activity under its authorized accounts.
2. Company account ownership
A Portal account belongs to the client organization. Access may be granted to employees or representatives, but the organization remains responsible for their use.
3. Login and password security
You must keep credentials secure and confidential. Do not share login credentials. Use a strong, unique password.
4. Multi-factor authentication
Where multi-factor authentication (MFA) is implemented, authorized users must use it as required.
5. Role-based authorization
Portal access is role-based. Users may only access features and data their role permits.
6. Tenant isolation
Each client may only access information belonging to the business to which their account has been granted access. One client must never be able to access another client's business records. This is enforced through database and authorization controls — not merely through hidden interface elements. Every query retrieving client financial information verifies: authenticated user → authorized client/business → permitted resource.
7. Unauthorized access reporting
You must promptly report any suspected unauthorized access or security incident to [PRIVACY EMAIL].
8. Employee access management
The client is responsible for managing authorized employees, requesting access changes, and terminating access when employees leave.
9. Financial data confidentiality
Financial information in the Portal is confidential. You must protect it consistent with this policy and applicable law.
10. Portal availability, synchronization, and delays
The Portal and synced data depend on third-party systems and may experience delays, outages, or synchronization errors. We do not guarantee uninterrupted availability or real-time data.
11. Misuse, suspension, and termination
We may suspend or terminate access for misuse, security risks, non-payment, or violation of these terms.
Contact
Privacy Officer: [PRIVACY EMAIL] Legal inquiries: [LEGAL EMAIL]