Welcome to Arcus, which is provided as a service from USSF SSC/SZQN. These Terms of Use / Terms of Service govern your use of the websites, content, software, and services offered through Arcus. By accessing and/or using Arcus you agree to the following Terms of Use and Terms of Service, consent to abide by the information practices disclosed on Arcus and consent to receive required notices and to transact with Arcus electronically.

Arcus is provided to support the U.S. Government's transition to cloud and DevSecOps best practices. Arcus currently consists of CONS3RT and the U.S. Government approved cloud spaces it brokers. CONS3RT enables automated, user-driven DevSecOps workflows by providing resources to perform rapid and repeatable, on-demand building, testing, and fielding of software systems along with collaboration tools such as wikis, discussion forums, and document repositories to enable collaborative development amongst distributed developers.

IN THESE TERMS, "WE," "US," "ITS" AND "OUR" REFER TO ARCUS and its contractor; AND "YOU" AND "YOUR" REFER TO YOU. Before using Arcus, read these Terms relating to your use of this web site carefully.

USE OF SERVICES

USSF SSC/SZQN offers Arcus to you for U.S. Government (USG) authorized purposes. See paragraph 5 for the complete definition of government purpose per DFARS Clause reference 252.227-7014(a) (10).

Services are available only to registered users of Arcus and require you to sign in with a PKI certificate issued by the U.S. Government, an accepted Federal Government Agency, or Industry Partner or a recognized U.S. Government External Certificate Authority (ECA). This applies to U.S. Government employees and contractors supporting U.S. Government efforts. All Arcus services are hosted within U.S. Government approved cloud spaces.

Your access and use of Arcus, constitutes your agreement with the Terms and the Arcus policies ("Policies") posted from time to time and the Privacy Notice, which are incorporated by this reference into the Terms as well as the security controls governing usage and data within any given Team or Project. Your use of a particular Arcus service ("Service") may be subject to specific guidelines ("Service-Specific Rules") posted from time to time and incorporated by this reference into the Terms. Use of the Services constitutes full acceptance of and agreement to the Service-Specific Rules. See https://arcus-cloud.io/privacy to read the Privacy Notice.

If you do not agree to these Terms, then you are not granted rights to use Arcus or any of its Services, and must refrain from accessing Arcus and its Services. If you violate any of these Terms, your permission to use Arcus automatically terminates.

The Arcus team reserves the right to update and change the Terms, including without limitation the Privacy Statement, Policies and/or Service-Specific Rules, from time to time. Arcus will alert users of any changes via acknowledgement on next login. Updates and changes to these Terms will be reflected in and accessible through the URL where such Terms first appeared. Users should periodically review the most recent version of the Terms, including without limitation the Privacy Statement, Policies and Service-Specific Rules. Use of Arcus after changes to the Terms constitutes acceptance of any changes. It is therefore important that you regularly review these Terms and keep your contact information current to ensure you receive any changes via email.

ALL USERS WHO ACCESS AND USE ARCUS BEYOND ANY TRIAL PERIOD SHALL HAVE EXECUTED A LETTER ESTIMATE (LE) DEFINING THE SPECIFIC ARCUS PRODUCTS, SERVICES, AND SUPPORT THAT WILL BE PROVIDED TO THE USER AND ADDITIONAL TERMS AND CONDITIONS OF USAGE.

USERS WHO FAIL TO EXECUTE A LE ARE NOT AUTHORIZED TO CONTINUE USING ARCUS. CONTACT THE ARCUS COMMUNITY TEAM AT support@arcus-cloud.io OR VISIT https://arcus-cloud.io/kb FOR ADDITIONAL INFORMATION ON THE PROCESS FOR EXECUTING A LE.

ARCUS IS A U.S. GOVERNMENT INFORMATION SYSTEM (IS) THAT IS PROVIDED FOR U.S. Government-AUTHORIZED USE ONLY. USE OF THIS SYSTEM CONSTITUTES CONSENT TO MONITORING FOR ALL LAWFUL PURPOSES.

By using this IS (which includes any device attached to this IS), you consent to the following conditions:

As used throughout these Terms, "Content" means any text, data, software, music, sound, photograph, graphic, video, message, or material created, transmitted, or stored using Arcus. You agree that you are responsible for your own conduct and any Content that you or anyone using your account creates, transmits or displays when on Arcus ("Your Content") and for any consequences thereof.

When you create or make available Your Content, you thereby represent and warrant that:

YOU AGREE TO USE ARCUS ONLY FOR U.S. GOVERNMENT AUTHORIZED PURPOSES THAT ARE LEGAL, AND IN ACCORDANCE WITH THESE TERMS AND ANY APPLICABLE ARCUS POLICIES.

PERMISSION TO USE ARCUS

In consideration for your agreement to the terms and conditions contained here, USSF SSC/SZQN grants you access to and use of Arcus. You may use Arcus and the Content offered on Arcus only for purposes authorized by the United States Government. You may use Content offered for downloading, such as software, source code, and documents subject to the rules that accompany that Content.

You may not use the Content in a manner that exceeds the rights granted for your use of the Content. You may not circumvent any mechanisms included in the Content for preventing the unauthorized reproduction or distribution of the Content. You may not use any data mining, robots, or similar data gathering and extraction tools on the Content to frame any portion of Arcus or Content, or to reproduce, reprint, copy, store, publicly display, broadcast, transmit, modify, translate, port, publish, sublicense, assign, transfer, sell, loan, or otherwise distribute the Content without our prior written consent.

You agree not to access Arcus by any means other than through the interface that is provided. You also agree not to circumvent, disable or otherwise interfere with security related features of the web site or features that prevent or restrict use or copying of any Materials or enforce limitations on use of the web site or the Materials therein.

USE OF SPECIFIC ARCUS SERVICES

Arcus is provided to support the U.S. Government's transition to cloud and DevSecOps best practices. Arcus currently consists of CONS3RT and the U.S. Government approved cloud spaces it brokers. The terms and conditions of this Arcus User Agreement apply to each of these provided services.

Data stored on all Arcus sites is encrypted at rest. Arcus services are accessible only to registered users of Arcus and require you to sign in with a PKI certificate issued by the U.S. Government, an accepted Federal Government Agency or Industry Partner or a recognized U.S. Government External Certificate Authority. These users constitute the 'authorized user' base.

Terms and conditions specific to each of these services are defined below.

USE OF CONS3RT

Jackpine Technologies Corp offers resources for open source and U.S. Government community source software development and content creation through CONS3RT, including communications tools, source code version control, project management tools, online forums, and personalized content. Other software subject to the terms and conditions of the license holder.

LICENSING AND OTHER TERMS APPLYING TO CODE AND OTHER CONTENT POSTED ON CONS3RT

CONS3RT facilitates the creation and automation of Virtual Machines under Open-Source Initiative ("OSI")-approved licenses or U.S. Government Community Software usage agreements. For more information about OSI, and OSI-approved licenses, visit www.opensource.org. U.S. Government Community Source software is software where rights to view, use, modify and distribute the software and source code are restricted based on specific authorizations or limitations made by the U.S. Government. U.S. Government Community Software typically restricts the grants rights to view, use, modify and distribute the software and source code only to the Department of Defense and U.S. Government Contractors only in support of U.S. Government efforts. Software shared in the CONS3RT Asset Library developed by vendors for the Government can only be posted if the Government has an Unlimited Rights or Government Purpose Rights license and are subject to Distribution Statement C defined below. Additionally, software shared and distributed through CONS3RT may be subject to export control laws.

Government rights as defined by the DFARS:

Usage rights and intellectual property rights to data stored in the CONS3RT Asset Library or as a file released and posted by any user on CONS3RT shall be governed by and subject to the OSI-approved license or to the specific U.S. Government Community Source usage rights.

You are responsible for determining whether your Content is shared within the U.S. Government Community (made public in Arcus) or if that Content is to remain private and shared only among project members. You are responsible for ensuring the correct permissions are applied to your Content to ensure Content that is private within an Arcus project is not exposed to the U.S. Government Community unless authorized by you.

You retain all intellectual property rights to any Content and you are responsible for protecting those rights, as appropriate. You may not post, modify, distribute or reproduce in any way any copyrighted materials, trademarks or other intellectual property or proprietary information belonging to others without obtaining the prior written consent of the owner.

The Arcus team complies with the notice and takedown provisions of the Digital Millennium Copyright Act (DMCA). Upon receipt of a complaint notification, the Arcus Support Team will remove the content and notify the user who posted the content as to why it was removed. Users in violation of copyright infringement may have their permission to use Arcus Services terminated.

MARKING REQUIREMENTS

You are responsible for appropriately labeling and documenting any content that you submit, post or display that is to be withheld from the public domain; exempt from Freedom of Information Act; subject to controls such as Controlled Unclassified Information (CUI), For Official Use Only (FOUO), and other special handling caveats; or limited by Government Purpose Rights (GPR) as defined by the Defense Federal Acquisition Regulations (DFAR). With respect to Public Content, the submitting user retains ownership of such Public Content, except that statistical content which is generated by the Arcus team to monitor and display Arcus Community group activity.

Links to third party websites on Arcus are provided solely as a convenience to the user consistent with the stated purpose of this U.S. Government web site. The appearance of hyperlinks within Arcus does not constitute endorsement (by the Federal Government or the Department of Defense) of linked websites or the information, products or services contained therein. Arcus does not endorse or make any representations about the third-party sites, or any information, services, or products found on the sites. If a user decides to access any of the linked sites, the user does so at their own risk.

REPORTING OF SPILLAGES

All non-compliance activities (e.g. spillages) must be reported to the Arcus Program Manager at support@arcus-cloud.io within four (4) hours of the non-compliance activity occurring.

DISCLAIMER OF WARRANTIES

Arcus cannot control the nature of the content available on the web site. By operating the web site, Arcus does not represent or imply that Arcus, USSF, the Department of Defense, or the Federal Government endorses any content or any other materials or items available on or linked to by the web site, including without limitation content hosted on third-party websites, or that Arcus believes content or any other materials or items to be accurate, useful or non-harmful.

Arcus claims no ownership or control over any user provided content. You agree that we are not liable for Content that is provided by others. Arcus may include unmediated forums containing the personal opinions and other expressions of the persons who post entries on a wide range of topics. Neither the content of these Sites, nor the references to other websites made in these forums are screened, approved, reviewed, or endorsed by Arcus.

We have no duty to pre-screen Content, but we have the right to refuse to post or to edit submitted Content. We reserve the right to remove Content for any reason, but we are not responsible for any failure or delay in removing such material. The text and other material of Content provided by others may represent the opinion of the specific author and are not statements of advice, opinion, or information of the Arcus, the Department of Defense, or the United States Government.

Arcus cannot guarantee and does not promise any specific results from use of the web site. No advice or information, whether oral or written, obtained by you from Arcus or the web site shall create any warranty not expressly stated herein.

All products, services, information, content or any other materials or items provided through Arcus are provided "as is" and "as available", without warranty or conditions of any kind, including but not limited to, express or implied warranties, fitness for a particular purpose, or non-infringement. Arcus does not warrant, endorse, guarantee, or assume responsibility for any products, services or information offered by a third party through the website or any hyperlinked website, and Arcus will not be a party to or in any way be responsible for monitoring any transaction between you and third-party providers of content, products, services or information.

LIMITED LIABILITY

To the extent permitted by applicable law, the Arcus team will not be liable for any special, incidental, indirect, consequential, exemplary or punitive damages of any kind, or any other damages whatsoever (including without limitation, damages resulting from: (a) reliance on the web site materials, (b) loss of use, data, profits, goodwill and/or other intangible losses (including, without limitation, the inability to use Arcus services, unauthorized access to or alteration of your transmissions or data, statements or conduct of any third party on Arcus), or (c) delays or business interruptions arising out of or in connection with the use or performance of the website).

You agree that your use of the web site and services will be at your sole risk. You agree to indemnify, hold harmless, and defend the Arcus team, and each of their employees, suppliers, service providers and other contractors (collectively, "Arcus indemnified parties") from any and all third party claims, causes of actions, proceedings, liabilities, damages, or other demands ("claims"), arising from or related to (a) your access to or use of Arcus and services, including, without limitation, your or others' access of content or other materials available by means of the web site or third-party websites, (b) your violation of these terms or breach of these terms, including, without limitation, any representation or warranty contained in this agreement; or (c) your content or provision to Arcus of information or any other products, postings, data or materials.

TERM AND SURVIVAL

These Terms shall remain in full force and effect while you use the Arcus Services or are a user of Arcus. You may terminate your use or participation at any time, for any reason with no notice. The Arcus team and/or USSF may terminate your use or participation at any time for violation of these Terms or any laws or to protect the integrity of the web site, the networks or services connected to the web site or other users with no notice. The Arcus team reserves the right at any time and from time to time to modify or discontinue, temporarily or permanently, Arcus or any Service. The Arcus team shall not be liable to any user or other third party for any such modification, suspension or discontinuance. Even after your use or participation is terminated, the material terms of these Terms will remain in effect.

The Arcus team may change these Terms of Use at any time. You can review the most current version of these terms by clicking on the "Arcus User Agreement" hypertext link located on the Arcus Site. You are responsible for checking these terms periodically for changes. If you continue to use Arcus after posted changes to these Terms of Use, you are signifying your acceptance of the new Terms. These Terms are in addition to all applicable U.S. Government regulations. If a conflict between these terms of use and a U.S. Government regulation arises, the U.S. Government regulation supersedes. The invalidation of a specific clause of these terms does not affect the rule and force of all remaining terms.

Contact support@arcus-cloud.io with any questions or comments on this user agreement.

PRIVACY POLICY

AUTHORITY: 5 U.S.C. 301, Departmental Regulations and Executive Order 9397 (SSN). PURPOSE: The system will use this information to register your account. ROUTINE USES: The information will only be used to create your account and provide you system and account notifications. Notifications include - account registration/inactivation, password expiration/changes, training opportunities, project addition/removal, and system notices (e.g., downtime). The information will not be shared with any other organizations or used for any other purposes that those directly related to this Arcus site. DISCLOSURE: Voluntary. However, failure to provide the requested information may result in account approval being delayed. The information you provide can be changed at any time. You may also request complete removal of any supplied information by submitting a support ticket or emailing support@arcus-cloud.io.

This privacy policy discloses the privacy practices for this site. This privacy policy applies solely to information collected by this web site. It will notify you of the following:

  1. What personally identifiable information is collected from you through the website, how it is used, and with whom it may be shared.
  2. What choices are available to you regarding the use of your data.
  3. The security procedures in place to protect the misuse of your information.
  4. The process for managing risk of information disclosure.
  5. The plan for responding to privacy incidents.
  6. The site registration process.
  7. The cookies used by this site.
  8. How you can correct any inaccuracies in the information.
Information Collection, Use, and Sharing

We are the sole owners of the information collected on this site. We only collect/have access to the information that you voluntarily give us at registration. We will not sell or rent this information to anyone. We will use your information to create a system account. The system will use this information to notify you via email of account changes, system changes, and site actions you take. We will not share your information with any third party outside of our organization. Unless you ask us not to, we may contact you in the future about support requests, changes in system status, training opportunities, or changes to this privacy policy.

Your Access to and Control Over Information

You may opt out of any future contacts at any time. You can do the following at any time by contacting us via the email address on the website to…

Security

We take precautions to protect your information. When you submit your information via the website, your information is protected both online and offline. Additionally, that information is encrypted when transmitted. You can verify this encryption by looking for "https" at the beginning of the address of the web page. While we use encryption to protect information transmitted online, we also protect your information offline. Only employees who need the information are granted access. The computers/servers in which we store your information are kept in a secure environment.

Risk Management Process

We have established privacy roles, responsibilities, and access requirements within our organization that enable us to assess privacy risk to individuals resulting from the collection, sharing, storing, transmitting, use, and disposal of your information. We monitor and audit privacy controls and internal privacy policy twice a year to ensure effective implementation. We provide our personnel annual training to ensure they understand privacy responsibilities and procedures and repercussions of the unauthorized use or sharing of your information. We also ensure our personnel annually certify (manually or electronically) acceptance of responsibilities for privacy requirements. We keep an accurate accounting of any information disclosures, including:

  1. Date, nature, and purpose of each disclosure of a record; and
  2. Name and address of the person or agency to which the disclosure was made;

We retain the accounting of disclosures for the life of the record or five years after the disclosure is made, whichever is longer. We make the accounting of disclosures available to the person named in the record upon request.

Privacy Incident Response Plan

We will provide written notification of any privacy incidents that may affect you within 2 days. The response will include what information is impacted and steps we are taking to resolve the issue.

Registration

In order to use this website, a user must first complete the registration form. During registration a user is required to give certain information (such as name and email address). This information is used to create your account. At your option, you may also provide your phone number, but it is not required.

Cookies

We use "cookies" on this site to store data relevant to your use of the site. A cookie is a piece of data stored on a site visitor's hard drive to help us improve your access to our site and identify repeat visitors to our site.

Updates

Our Privacy Policy will be reviewed twice a year, and any changes will be posted on this page with a notification provided via acknowledgment on next login after the change. Our Privacy Policy is also always viewable at https://arcus-cloud.io/privacy.

If you feel that we are not abiding by this privacy policy, you should contact us immediately via telephone at (978) 637-2923, email support@arcus-cloud.io, or the support links on the site. We will respond within 48 hours.

COMMUNITY WORKSPACE CODE OF CONDUCT

Overview

This Arcus Cloud services and CollabTools (including but not limited to Jira, Confluence, Jira Service Management, GitLab, BitBucket, and Mattermost) workspace provides resources for the user community to collaborate with each other and the Arcus Community Team. Each site now has a dedicated Mattermost Workspace that includes a private channel for each team enrolled in the service as well as public channels for General News, Support, and Asset Development.

We want this to be a fun, pleasant, and harassment-free experience for everyone, regardless of gender, gender identity and expression, sexual orientation, disability, physical appearance, body size, race, or religion. We do not tolerate harassment of participants in any form. Participants asked to stop any harassing behavior are expected to comply immediately.

Discretion

This is a private, invitation-only service. Please don't discuss it in public, or with people who aren't members. It can cause awkwardness and hurt feelings if people start asking what it is and how to get invited. Further, foreign agents and abusers may be surveilling some members of this site. Keeping the existence of these Arcus resources private makes it more difficult for bad actors to triangulate their targets' social footprints.

Confidentiality

Please keep what's said confidential. Don't repeat or quote things said here without the affirmative consent of the speaker(s). When quoting (with consent), please be careful not to reveal the existence of these Arcus resources workspaces. Rather, you can refer to the quote as something that was said "in chat" or while you were talking to a quoted member.

Please be mindful that things you say here may at some point become public. We cannot prevent people from screencapping. We also can't guarantee that every member's login credentials and logged-in devices are secure. Files uploaded here can be downloaded by anyone with a login. Please exercise caution and refrain from sharing sensitive information that could harm you or others if it became public.

Message Retention

Arcus retains complete logs of all channels and direct messages back at least one year. Arcus is a service sponsored by the U.S. Government and therefore subject to subpoenas from U.S. courts. Our logs may be subject to subpoena and could become public as part of legal proceedings.

Expected Behavior

The following behaviors are expected and requested of all community members:

Be friendly and patient.

Be welcoming. We strive to be a community that welcomes and supports people of all backgrounds and identities. This includes, but is not limited to members of any race, ethnicity, culture, national origin, color, immigration status, social and economic class, educational level, sex, sexual orientation, gender identity and expression, age, size, family status, political belief, religion, and mental and physical ability.

Be considerate. Your work can be used by other people, and you in turn will depend on the work of others. Any decision you take will affect users and colleagues, and you should take those consequences into account when making decisions. Remember that we're a world-wide community, so you might not be communicating in someone else's primary language.

Be respectful. Not all of us will agree all the time, but disagreement is no excuse for poor behavior and poor manners. We might all experience some frustration now and then, but we cannot allow that frustration to turn into a personal attack. It's important to remember that a community where people feel uncomfortable or threatened is not a productive one. Members of this community should be respectful when dealing with other members as well as with people outside this community.

Be careful in the words that you choose. We are a community of professionals, and we conduct ourselves professionally. Be kind to others. Do not insult or put down other participants. Harassment and other exclusionary behavior aren't acceptable. This includes, but is not limited to:

Moderators reserve the right to delete excessive self-promotional or commercial posts.

Content that has been identified as objectionable, inappropriate, or off-topic will be subject to deletion by channel moderators. Posters will receive a warning and risk being blocked from the channel if unacceptable behavior persists.

Reporting

If you are being harassed, notice that someone else is being harassed, or have any other concerns, please contact the site support. They'll respond as promptly as they can.

We will respect confidentiality requests for the purpose of protecting victims of abuse. At our discretion, we may publicly name a person about whom we've received harassment complaints, or privately warn third parties about them. We will not name harassment victims without their affirmative consent.

Consequences

Participants asked to stop any harassing behavior are expected to comply immediately.

If a participant engages in harassing behavior, the admins may take any action they deem appropriate, up to and including expulsion from this site and identifying the participant publicly as someone about whom we've received complaints.

Credits and License

This code of conduct is based on Annalee Flower Horne's Sample Slack Code of Conduct, which is in turn based on Geek Feminism's Community Anti-Harassment Policy. We have adapted the Sample Slack Code of Conduct for our own use under the terms of the Creative Commons Attribution License.