Web Express Terms of Service

These terms are the binding rules and guidelines for using the University of Colorado Boulder Web Express service. Agreement to these terms is required for access to creating and maintaining websites on the platform.

• Secure, University-Managed Platform: CU Boulder hosts and maintains Web Express, handling security updates, system monitoring, and emergency backups. Only users with a campus IdentiKey can access site editing tools.
• Prohibited Data: Private or sensitive information (like student records or health data) is strictly prohibited from being collected or posted.
• No Technical Skills Required: The platform allows the community to create professional sites without coding. Users cannot install custom software or themes to ensure security and brand consistency.
• Support and Training: Strategic Relations and Communications (SRC) provides hosting, setup, documentation, training, and regular feature updates.
• Analytics: Sites can use Google Analytics 4 and Google Tag Manager. Site owners must manage their own accounts and ensure no personal information is collected.
• Policy Compliance: Sites must follow accessibility, branding, copyright, and acceptable-use policies. Abandoned or non-compliant sites may be archived or removed.

Web Express is the University of Colorado Boulder’s web Content Management System (CMS), a Foundational Service powered by Drupal. It is designed for units to achieve content and marketing goals without extensive programming knowledge.

• No Code Access: Access to administrative settings, configurations, modules, or core code is prohibited.
• No Customizations: Users cannot add custom modules, themes, or code updates.
• Intended Use: Web Express is for public-facing sites (Colleges, Schools, Departments, Faculty, Student Groups, etc.).
• Prohibited Use: It should not be used for Intranets, private workspaces, internal collaboration, course websites, or personal websites.

Web Express uses a continuous improvement and continuous development (CI/CD) process. The university reserves the right to access logs and site content to resolve system problems.

Backups are performed regularly solely for emergency response or disaster recovery.

• Bugs: Issues should be reported to websupport@colorado.edu.
• Browser Support: The team supports modern browsers in coordination with OIT standards.
• Feature Requests: Submit ideas via the WebCentral Feature Request page.

In accordance with APS2006, site owners must regularly review content for accuracy.

• Manual Cleanup: Owners should delete out-of-date information and download records needed for long-term reference.
• Not an Archive: The platform is not approved for long-term record-keeping or retaining private information.

Web Express integrates with Google Analytics 4 (GA4) and Google Tag Manager (GTM).

• Service Outages: SRC coordinates with campus partners to resolve downtime as quickly as possible.
• File Limits: The environment is not a media server. Individual files are limited to 100MB.
• Site Access: Access is granted only via IdentiKey. Service or shared accounts are strictly prohibited.

By using Web Express, you agree to comply with:

• Web Development Guidelines
• Acceptable Use of CU Boulder’s IT Resources
• eCommunications Policy
• APS 6010: Data Governance

Important: No Web Express website may receive, store, transmit, or process credit card information.

All websites must be accessible to people with disabilities in compliance with Section 504, the ADA, and Colorado’s Digital Accessibility Law.

• Subject Matter Expertise: Do not publish content outside your area of expertise.
• Moderation: Owners must monitor and remove pornographic, illegal, or spam content.
• Copyright: Unauthorized use of copyrighted materials is prohibited. Content must be original, licensed, or public domain.

Sites must not contain or collect:

• FERPA protected data (Student records)
• HIPAA protected data (Health info)
• CUI, FCI, or NCAA regulated data

• Invitations: Users are invited via identikey@colorado.edu.
• Offboarding: Access must be removed promptly when a business need no longer exists.
• Outside Designers: Must be provisioned as a CU Boulder POI and are bound by these same Terms of Service.

• Domain: Sites must use a colorado.edu URL. Redirecting to external domains is prohibited.
• Sandbox: New sites begin at a sandbox URL before launching.

SRC may remove content or entire sites for policy violations (Security, Copyright, Brand, etc.). A site is considered abandoned if:

1. It has not been edited in more than 12 months.
2. The owner is no longer employed by CU Boulder.

Archival Process:

• Owners are contacted 30 days before archival.
• Archived sites are permanently deleted after 90 days and cannot be recovered.

The Terms of Service may be modified at any time. Immediate action (deactivation or removal) may be taken without notice if system security or operations are at risk.