Legal
Terms of use
By creating a facilitator account or joining a workshop you agree to these terms.
Last updated 10 August 2026
1. The service
CRA Online provides software for running facilitated cyber risk assessment workshops. It is an educational and discussion tool. It is not a security audit, a certification, or professional advice, and its scores and reports must not be presented as an assurance opinion.
2. Facilitator accounts
Facilitator accounts are approved by a Tabletop admin. Each approved facilitator may run up to the number of workshops shown on their dashboard (5 by default) and may request more. Facilitators may register up to 5 additional people to access their dashboard and are responsible for what those people do.
You must keep your credentials secure, keep seat keys and workshop codes within the intended audience, and not share access with anyone outside your organisation.
3. Participants
Seat keys are personal and bound to one device. Do not attempt to use another person’s seat key or to join a room you have not been invited to.
4. Acceptable use
Do not attempt to break, probe or overload the service; do not scrape, copy or reproduce the cards, decks, artwork, clause sets or scoring model; do not upload unlawful content or personal data you have no right to share; do not resell or run paid workshops using this software without a written commercial licence.
5. Your content
You keep ownership of the material you bring — your standards, notes and workshop findings. You grant us the limited licence needed to host it, run the session and generate your report and exports.
6. Our intellectual property
The software, game design, card set, artwork, clause libraries and scoring model are our intellectual property and are licensed, not sold. Commercial use is restricted — see Legal & licence.
7. Availability and changes
The service is provided on an “as is” and “as available” basis while in active development. Features, allowances and pricing may change, and we may suspend accounts that breach these terms.
8. Liability
To the extent permitted by law we exclude implied warranties and are not liable for indirect or consequential loss, lost profits, or decisions taken on the basis of workshop output. Nothing in these terms excludes rights that cannot lawfully be excluded, including under the Australian Consumer Law.
9. Governing law
These terms are governed by the laws of Queensland, Australia.