Third Party Registration


This is where you can register as a third party for the El Paso Electric Company Green Button platform, so you can request data from El Paso Electric Company customers.

To register, please fill out the fields below so we know who you are and how to get in contact with you. When you register we'll create an account on UtilityAPI's platform where you can login and see your customer-authorized data. All fields are required.

Data is restricted to AMI (Advanced Metering Infrastructure) meters only. AMR meters will be visible, but billing and interval data will not be available.
Already registered as a third party? You can view your current dashboard here.
Already have a UtilityAPI account? Register from your settings
At least 12 characters
At least 12 characters

Scope of Use Disclosure


When you ask a customer to authorize access to their utility data, we require that you disclose how you're going to use it. Your scope of use description below will be shown to your customers on the authorization form.

This is a short statement that will be presented to customers when authorizing data sharing with you, so that they know how you will use their data.

Helpful Tip: You don't have to come up with a perfect scope of use description now, since you can edit your scopes of use descriptions in your settings at any time.

If you have multiple scopes of use (e.g. you are requesting data from some customers for X purpose, and some customers for Y purpose), you can add those multiple scopes of use in your settings after you register, then pre-select which one you want to present to the user during authorization. This is just the default scope of use for your registration.

As part of your scope of use description, you can optionally link the user to your complete terms of service that describes how you will use their data. This link is added to the end of the scope of use description, so you still need to provide a succinct description and not just a link.

If you're a small company that doesn't have a detailed terms of service on your website for customers, no worries! Just try to be as clear as possible in your scope of use description about how you will use the customer's data.
NOTE: Customers will see what you write here as part of the authorization process, so try to make it easy for them to understand. You can also add more scopes of use after you register if you need more than one for different use cases.

Directory Listing


El Paso Electric Company has a public directory where you can be listed as a registered third party. You can choose to automatically be listed in this directory when your registration is approved and switched to live status. You can always change this later in your settings.

Terms and Conditions


You must agree to use the data sharing program within our terms of service, and you must agree to use UtilityAPI's platform within its terms of service.

Self-Attestation of Cybersecurity Protections


El Paso Electric Company (“Utility”), for itself only, represents that for all information received from ESE (“Energy Service Entity”), in response or pursuant to this Self-Attestation, that is marked CONFIDENTIAL by ESE (Confidential Self-Attestation Information) Utility shall: (A) hold such Confidential Self-Attestation Information in strict confidence; (B) not disclose such Confidential Self-Attestation Information to any other person or entity; (C) not Process such Confidential Self-Attestation Information outside of the United States or Canada; (D) not Process such Confidential Self-Attestation Information for any purpose other than to assess the adequate security of ESE pursuant to this Self-Attestation and to work with ESE to permit it to achieve adequate security if it has not already done so; (E) limit reproduction of such Confidential Self-Attestation Information; (F) store such Confidential Self-Attestation Information in a secure fashion at a secure location in the United States or Canada that is not accessible to any person or entity not authorized to receive such Confidential Self-Attestation Information under the provisions hereof; (G) otherwise use at least the same degree of care to avoid publication or dissemination of such Confidential Self-Attestation Information as Utility employs (or would employ) with respect to its own confidential information that it does not (or would not) desire to have published or disseminated, but in no event less than reasonable care.

The Cybersecurity protections listed below are required before ESEs will be allowed access to Utility IT systems or electronically exchange Utility Data with Utility.

This SELF-ATTESTATION OF INFORMATION SECURITY CONTROLS ("Attestation"), is made as of this day of , by , an ESE to El Paso Electric Company.

WHEREAS, ESE desires to obtain or retain access to Utility IT systems and electronically exchange Utility Data[3] (as defined in this Data Security Agreement) with Utility, ESE must THEREFORE self-attest to ESE's compliance with the Cybersecurity Protections ("Requirements") as listed herein. ESE acknowledges that non-compliance with any of the Requirements may result in the termination of Utility data access as per the discretion of Utility for its system.

Your Initials Cybersecurity Protections
An Information Security Policy is implemented across the ESE's corporation which includes officer level approval.
An Incident Response Procedure is implemented that includes notification within 48 hours of knowledge of a potential incident alerting utility when Utility Data is potentially exposed, or of any other potential security breach.
Role-based access controls are used to restrict system access to authorized users and limited on a need-to-know basis.
Multi-factor authentication is used for all remote administrative access, including, but not limited to, access to production environments.
All production systems are properly maintained and updated to include security patches on a periodic basis. Where a critical alert is raised, time is of the essence, and patches will be applied as soon as practicable.
Antivirus software is installed on all servers and workstations and is maintained with up-to-date signatures.
All Utility Data is encrypted in transit utilizing industry best practice encryption methods, except that Confidential Information does not need to be encrypted during email communications.
All Utility Data is secured or encrypted at rest utilizing industry best practice encryption methods, or is otherwise physically secured.
It is prohibited to store Utility Data on any mobile forms of storage media, including, but not limited to, laptop PCs, mobile phones, portable backup storage media, and external hard drives, unless the storage media or data is encrypted.
All Utility Data is stored in the United States or Canada only, including, but not limited to, cloud storage environments and data management services.
ESE monitors and alerts their network for anomalous cyber activity on a 24/7 basis.
Security awareness training is provided to all personnel with access to Utility Data.
Employee background screening occurs prior to the granting of access to Utility Data.
Replication of Utility Data to non- company assets, systems, or locations is prohibited.
Access to Utility Data is revoked when no longer required, or if employees separate from the Third Party.

ESE represents that it has delivered accurate information for this Attestation as of the registration date.

Type your name surrounded by slashes (e.g. "/John A. Smith/")
Cancel

When you submit, your registration will be set in "sandbox" mode, which means you'll only be able to request data from demo accounts for testing. We'll review your registration and then email you when we switch you to "live" mode (i.e. when you can start requesting data from real El Paso Electric Company customers).


Already have a UtilityAPI account? Register from your settings

If you have any questions, please don't hesitate to contact support.