Términos de los espacios de trabajo

El acuerdo que una empresa acepta para sus espacios de trabajo: de quién es el contenido, qué puede hacer Hub Nexus con él, la eliminación, los avisos de seguridad y la responsabilidad.

Acerca de

Este acuerdo solo está en inglés.

Last updated: October 15, 2026

These Workspace Terms are the agreement between HubNX, Inc. ("Hub Nexus", the Provider) and the Customer: the organization named in an Order Form or when a workspace plan is bought; for a workspace with neither, the organization the person who created it was acting for, or that person if they were acting for themselves. Joining a workspace, in any role, does not make anyone's organization the Customer.

These Workspace Terms and the DPA govern the Customer's workspaces, everything in them — pages and every version, changes, comments and review reasons, files, signatures, the audit log, and each workspace's members, roles and groups ("Workspace Content") — and the use of them by the Customer and its Users. The public Terms and Conditions and Privacy Policy govern the public site and each person's own account; where they conflict with these Workspace Terms or the DPA about a workspace, its Users or Workspace Content, these Workspace Terms and the DPA control. Hub Nexus will not block or delete a User's account in a way that ends their access to a workspace, except under Section 2.2 of the Standard Terms or for that User's own breach of the public Terms and Conditions on the public site, and then tells the Customer promptly.

The agreement has two parts: (1) this Cover Page, and (2) the Common Paper Cloud Service Agreement Standard Terms, Version 2.1, which are incorporated by reference. If the two disagree, this Cover Page controls. Capitalized words have the meanings given in this Cover Page or the Standard Terms. Personal data is also governed by the Hub Nexus Data Processing Agreement, which controls for personal data if it disagrees with either part.

The Customer accepts these Workspace Terms and the DPA when its representative creates a workspace for it, starts or changes a workspace plan, or signs an Order Form that refers to them. They then cover every workspace the Customer has, with or without a plan. The person who accepts confirms that they may bind the Customer. Hub Nexus records who accepted which version, and when. A signed Order Form controls over this Cover Page for what it covers.

Order Form


Cloud Service	Hub Nexus Workspaces, at hubnx.com: private workspaces with reviewed and versioned pages, groups and approvers, read links and per-page access for people outside the workspace, and an audit log; and, on the plans that include them, single sign-on, SCIM provisioning and signed approvals
Order Date	the date the Customer accepts these Workspace Terms or signs an Order Form
Pilot Period	none, unless an Order Form sets one. During a Pilot Period: Sections 6.3, 6.4 and 9 of the Standard Terms do not apply and there are no Unlimited Claims; the General Cap Amount is the greater of $1,000 or the Fees for the Pilot Period; the Increased Claims, the Increased Cap Amount, the DPA and every item of Changes to the Standard Terms apply in full; and the Customer may end the Agreement at once by notice, and Hub Nexus on 30 days' notice, either way with a prorated refund of prepaid Fees. When a Pilot Period ends, the Subscription Period in the Order Form starts if it sets one; otherwise the Customer's workspaces continue without a plan
Subscription Period	for a paid plan, its billing period — one month or one year — or the period in an Order Form; without a paid plan, one month
Fees	the price of the plan published at hubnx.com/workspaces on the Order Date, or the Fees in an Order Form; without a paid plan, none. Team is billed for each member and administrator across the workspaces the Customer's owner account owns (guests are free), counted daily; a change is charged or credited, for the days it applied, with the next payment. A first Team plan starts with a 14-day trial without Fees, one per account; its Subscription Period starts when the trial ends unless the Customer cancels first. Hub Nexus will give at least 30 days' notice of a price change, which applies from the next renewal
Payment Process	Automatic payment: the Customer authorizes Hub Nexus, through Stripe, to charge its payment method at the start of each Subscription Period. Where an Order Form says so, invoicing instead: Hub Nexus invoices once per Subscription Period and the Customer pays within 30 days of the invoice date
Non-Renewal Notice Date	for the Customer, the last day of the current Subscription Period; for Hub Nexus, 30 days before the end of a monthly Subscription Period and 90 days before the end of a yearly one. Cancelling a paid plan under Manage plan on the Workspaces page ends the plan, not the Agreement: the plan runs to the end of the period already paid for, and the Customer's workspaces then continue without one (Changes to the Standard Terms, item 5). The Customer gives notice of non-renewal of the Agreement itself by writing to support@hubnx.com
Use Limitations	the limits of the Customer's plan as published at hubnx.com/workspaces on the Order Date or set in an Order Form — once plans are offered, an account without a paid plan may own two workspaces, and Quality covers up to 50 members. Hub Nexus will not lower them during a Subscription Period
Technical Support	by email to support@hubnx.com, Monday to Friday except US federal holidays, 9:00–17:00 US Pacific time. A person, not an automatic reply, answers each request within two business days, and within one business day a report that the Cloud Service is unavailable, that Workspace Content is lost or exposed, or that the Customer's people cannot sign in — and works on such a report until it is resolved or worked around
Service Level Agreement	Hub Nexus will use commercially reasonable efforts to provide and maintain the Cloud Service without excessive errors and interruptions. If it fails to do so in two consecutive months, or in three months of any twelve, the Customer may end the Agreement by notice and receive a prorated refund of prepaid Fees for the rest of the Subscription Period. That is the Customer's only remedy for errors and interruptions; it does not limit the Customer's rights for lost or corrupted Workspace Content, a Security Incident, or a breach of Section 3, Section 10, the DPA or the Security Policy

Key Terms


Effective Date	the Order Date
Governing Law	the laws of the State of Washington, USA
Chosen Courts	the state and federal courts located in King County, Washington
Provider Covered Claims	any action, proceeding or claim that the Cloud Service, used by the Customer according to the Agreement, violates, misappropriates or otherwise infringes anyone else's intellectual property or other proprietary rights
Customer Covered Claims	any action, proceeding or claim that (1) the Customer Content, used according to the Agreement, violates, misappropriates or otherwise infringes anyone else's intellectual property or other proprietary rights; or (2) results from the Customer's breach or alleged breach of Section 2.1 (Restrictions on Customer)
General Cap Amount	the greater of $1,000 or the Fees paid or payable by the Customer to Hub Nexus in the 12 months immediately before the claim
Increased Claims	breach of Section 3 (Privacy & Security) or of the DPA; breach of the Security Policy, or of items 1 (No AI on your content), 6 (Security incidents) or 10 (Hub Nexus's own access) of Changes to the Standard Terms; breach of Section 10 (Confidentiality), including a data or security breach
Increased Cap Amount	the greater of $10,000 or two times the Fees paid or payable by the Customer to Hub Nexus in the 12 months immediately before the claim
Unlimited Claims	an Indemnifying Party's indemnification obligation
Additional Warranties	By Provider: the Cloud Service will perform materially as its documentation describes, including how it records signed approvals and the audit log, with Section 6.4 of the Standard Terms as the remedy; and Hub Nexus will give at least 10 business days' notice, in a published changelog and by email to administrators, before changing how signed approvals, reviews, the audit log, access control or export work, except to fix a security problem
DPA	the Hub Nexus Data Processing Agreement
Security Policy	Hub Nexus will use commercially reasonable efforts to secure the Cloud Service and Customer Content from unauthorized access, alteration, use, loss and other unlawful tampering. It applies to all Customer Content at least the measures in Annex II of the DPA, may replace a measure only with one that protects at least as well, and will not reduce the overall level of protection during a Subscription Period. hubnx.com/about/security describes these practices for readers. Hub Nexus does not yet hold an independent audit report or certification; it will say so plainly whenever asked, and will tell the Customer when one becomes available
Insurance Minimums	none
Notice Address	for Hub Nexus: legal@hubnx.com. For the Customer: the notice email it gave when it bought a plan or in an Order Form, with a copy to the email address of the account that owns its workspaces; if it gave none, that address. Either party may change its Notice Address by notice

Changes to the Standard Terms

These changes apply to every Customer under these Workspace Terms:

No AI on your content. Section 1.6 (Machine Learning) of the Standard Terms does not apply. Hub Nexus will not use Workspace Content, or Usage Data that contains it, to develop, train or improve any artificial intelligence or machine learning model, and will not let a subprocessor do so. The Cloud Service runs no artificial intelligence feature on Workspace Content, and Hub Nexus will not give Workspace Content to any generative AI or large language model service — including the AI tools its personnel use to build, run and support the Cloud Service, which are not used on Workspace Content, and which the Service's own database client refuses a workspace's pages and settings in production. This item does not cover the spam, fraud and security screening that Approved Subprocessors apply, under their own terms, to email and payments. If Hub Nexus offers an AI feature, it stays off until a workspace administrator turns it on, after Hub Nexus has said in writing which provider would process the content and on what terms; that provider then becomes a Subprocessor under the DPA.
Your content stays yours. Workspace Content, including the audit log and signature records, is Customer Content under the Standard Terms, and none of it is Usage Data. As between the parties, the Customer owns its Workspace Content. Section 1.5 of the Standard Terms is replaced with: "Provider may copy, display, modify and use Customer Content only as needed to provide, secure and maintain the Cloud Service for Customer, to give support Customer asks for, and to comply with Applicable Laws. It modifies Customer Content only to store, convert, resize and display it, and as item 10 of the Cover Page's Changes to the Standard Terms allows." None of the licences in the public Terms and Conditions applies to Workspace Content, and Workspace Content is not "Hub Nexus Content" under them.
What leaves a workspace is the Customer's choice. Workspace Content leaves a workspace only when a member the workspace has given that right (a) publishes a version to the public site; (b) moves a page out of the workspace to the public site, which takes its whole history — versions, changes and comments — with it; (c) offers a change to the public page a workspace page was copied from; (d) makes a read link, which lets anyone holding it read the published text for 1, 7 or 30 days; or (e) shares a page with a named person. A read link or a named share does not make content public: it stays Workspace Content and the Customer's Confidential Information. What is published, moved out or offered under (a)–(c) becomes public content under the public Terms and Conditions, and the Customer grants the licence they describe for it; the drafts, reviews, comments and earlier versions behind a published version stay Workspace Content.
Export. At any time while the Agreement lasts, and for 30 days after it ends, Hub Nexus will deliver to the Customer, at no extra charge and within 10 business days of a written request from the workspace's owner or an administrator, a complete copy of its Workspace Content in common, machine-readable formats: every page with each of its versions, and every change, comment and review reason, as Markdown with JSON recording who did what and when; the original files; each signature, with the signer's name as signed, its meaning, its time and the change it was given for; the members, with their roles and groups; and the audit log as CSV. Administrators can also download the audit log themselves at any time. During the 30 days after the Agreement ends, the Customer keeps access to read its workspaces.
Deletion. This item replaces Section 5.5(b) of the Standard Terms; the DPA (Changes to the Standard Terms, item 3) says what deletion removes and what it keeps. A workspace is not deleted because a paid plan ends: the Agreement continues without a plan, and workspaces beyond the owner's two oldest become read-only until a plan starts again. A workspace is deleted (a) by its owner in the workspace's settings, at once — refused, with the reason, while a plan on the owner's account runs or the workspace's recognition budget holds money; the owner should download the audit log and ask for any export first, since nothing can be exported afterwards; (b) by Hub Nexus within 30 days of the Customer's written request sent from the owner's address, after delivering any export it asked for under item 4; or (c) by Hub Nexus within 60 days after the Agreement ends, once the 30 days in item 4 have passed and any export asked for in them has been delivered.
Security incidents. A Security Incident is any unauthorized access to, or acquisition, use, disclosure, alteration, loss or destruction of, Workspace Content or Customer Personal Data, and any compromise of the systems or credentials that protect them. Section 4 of the DPA, with item 6 of its Changes to the Standard Terms, applies to every Security Incident, whatever law governs the data: Hub Nexus notifies the Customer without undue delay, and no later than 72 hours after becoming aware of it, and keeps the Customer informed while it contains and investigates it. If Hub Nexus cannot tell which workspaces an incident reached, it notifies every Customer it may have reached.
Prohibited Data. Section 3.2 of the Standard Terms applies. In particular, unless an Order Form allows it, the Customer will not put into a workspace payment card or bank account numbers, government identification numbers, special categories of personal data under Article 9 of the GDPR — such as patients' health data in complaint or clinical files — or data about criminal convictions and offences under Article 10 of the GDPR. The Customer will not put protected health information under HIPAA into a workspace at all: Hub Nexus does not sign business associate agreements. If a User puts Prohibited Data into a workspace by mistake, the Customer is not in breach if it removes the data promptly after learning of it; Hub Nexus's security obligations apply to that data meanwhile.
Changes to these Workspace Terms and the DPA. Despite Section 12.2 of the Standard Terms, Hub Nexus may change these Workspace Terms or the DPA by giving at least 30 days' notice to the Customer's Notice Address. A change applies to the Customer from the start of its next Subscription Period after the notice ends — sooner only if it adds to the Customer's rights and nothing else, or if the law requires it. A Customer that objects may end the Agreement before the change applies and receive a prorated refund of prepaid Fees. A change never applies during a Subscription Period set by a signed Order Form, and never changes the EEA SCCs or the UK Addendum. Each version carries its date, and every earlier version stays available at its own address.
No publicity without permission. Section 12.8 (Logo Rights) of the Standard Terms does not apply. Hub Nexus will not name the Customer as a customer, or use its name or logo, without the Customer's prior written permission, which the Customer may withdraw for the future.
Hub Nexus's own access. Hub Nexus's personnel open Workspace Content only to give support the Customer asked for, to investigate a suspected security incident or abuse that threatens the Cloud Service or others, or when the law requires it; the DPA (Changes to the Standard Terms, item 5) says how that access is limited and recorded. Hub Nexus will not hide, alter or delete Workspace Content except at the Customer's direction, when the law requires it, or to stop an imminent security threat or clearly illegal content. When it does, it tells the workspace's administrators promptly and records it in the workspace's audit log.
Quality-system use. Using the Cloud Service to create, review, approve, store and share quality-system documents and records, including for medical devices, is not a High Risk Activity under Section 2.1(a)(viii) of the Standard Terms. The Customer decides whether the Cloud Service suits its regulated processes and validates it for its intended use. Hub Nexus does not warrant that the Cloud Service meets 21 CFR Part 11 or any other regulation. A signed approval records the signer's name as signed, its meaning and its time, and needs a code emailed at that moment or a fresh single sign-on; it is not yet bound to the exact text signed.
If Hub Nexus stops offering the Cloud Service. It gives at least 90 days' notice, keeps every workspace readable and exportable until then, delivers any export asked for under item 4, and refunds prepaid Fees for any period after the Cloud Service stops.
Suspension. Hub Nexus suspends under Section 2.2 of the Standard Terms only as far and for as long as the cause requires: for unpaid Fees, only after 10 days' notice and never over an amount disputed in good faith; otherwise only after notice to the Customer, unless there is an imminent security threat. During a suspension Hub Nexus still delivers an export asked for under item 4.
Sharing is permitted use. The Customer may let its Affiliates, and people outside its organization, use the Cloud Service through its sharing features — as guests, as people a page is shared with, and as holders of a read link. They are Users; their use is the Customer's internal business purpose under Section 1.1 of the Standard Terms and not a breach of Section 2.1(a)(ii).
Recognition budget. Money the Customer adds to a workspace's recognition budget is credited and paid out as the Fees and payouts page describes. The Customer is responsible for the tax and employment treatment of payments to its own personnel. When the Agreement ends, or on the Customer's written request, Hub Nexus refunds the unspent balance within 30 days.
What outlasts the Agreement. Items 1, 2, 5, 6 and 10 survive the end of the Agreement for as long as Hub Nexus holds any Workspace Content.

Other than these changes and the details on this Cover Page, the Standard Terms apply unchanged.

Common Paper Cloud Service Agreement (Version 2.1) free to use under CC BY 4.0. The Standard Terms are © Common Paper, Inc. This Cover Page was written by HubNX, Inc. from the Common Paper Cloud Service Agreement Cover Page and changes the Standard Terms as stated above; Common Paper does not endorse it.