A CMAC and Jonas Club Software Guide
Technology Governance for Canadian Club Boards
A practical, board-level framework for data, cybersecurity, AI, and vendor partnerships, built specifically for private clubs and the people who govern them.
Free for club leaders. Read online or download the PDF.
Why CMAC put its name on this guide
Technology should never replace what makes a club feel like home. Done well, it protects it.
When I talk with our members across Canada, one theme comes up again and again: technology is moving faster than most boards feel equipped to govern. It isn't a lack of interest. Club leaders care deeply about getting this right, they just haven't always had a clear framework for the conversation. That's exactly the gap this guide is meant to close.
What's inside
Four areas every club board needs to govern, in one working reference
Not a technical manual. A board-level guide to the questions worth asking, the decisions that belong at the board table, and the ones that don't.
01
Member Data
What your club holds, who owns it, and what members expect you to do with it.
- Privacy obligations in a Canadian context
- Data ownership and portability
- Retention and access policies
02
Cybersecurity
The oversight a board owes its members, without needing to become IT experts.
- Risk questions for management
- Incident readiness and response
- Insurance and accountability
03
Artificial Intelligence
Where AI is already in your operations, and how to set guardrails before it matters.
- Acceptable use for staff
- Member-facing AI and trust
- Evaluating vendor AI claims
04
Vendor Partnerships
How to choose, contract with, and hold accountable the partners shaping daily club life.
- Due diligence checklist
- Contract terms that protect the club
- Ongoing vendor oversight
Built for Canadian clubs, with CMAC. Read it online or take the PDF to your next board meeting.
Get the guideWho it's for
If your board has ever asked one of these, this guide was written for you
Whether your club is a century-old institution or still defining its traditions, the responsibility is the same: protect member trust while making forward-looking decisions about technology.
-
?
"Who actually owns our member data, and what happens to it if we change vendors?"
The guide walks through ownership, portability, and the contract language that settles it.
-
?
"How much cybersecurity oversight is our responsibility, versus management's?"
A clear split of what belongs at the board table and what to delegate with confidence.
-
?
"Staff are already using AI tools. Should we have a policy?"
Yes. The guide includes the starting points for one, in plain language.
-
?
"How do we evaluate a technology vendor when none of us are technologists?"
A due diligence framework built for club boards, not IT departments.
Get the guide
Bring it to your next board meeting
Read the full guide online as a flipbook, or download the PDF to share with your board and committee chairs. Free for club leaders, courtesy of CMAC and Jonas Club Software.
- Board-level guidance on data, cybersecurity, AI, and vendors
- Board questions and takeaways for every section
- A 90-day starting point for AI governance
- Foreword by Suzanne Godbehere, CEO, CMAC
Access the guide
Takes about 20 seconds. You'll be taken straight to the flipbook and PDF.