Acceptable Use Policy

1. Permitted use

Services may be used for lawful business purposes consistent with your subscription plan: automating internal workflows, processing documents you are authorised to process, supporting your customers, analysing your own business data and building integrations through our documented APIs.

2. Prohibited activities

• Any unlawful activity, or activity that infringes third-party rights.
• Uploading data you do not have the legal right or consent to process.
• Attempting to breach, probe or disrupt our systems or other tenants' data.
• Reverse engineering, scraping outputs to train competing models, or reselling access without authorisation.
• Circumventing usage limits, rate limits, authentication or billing controls.
• Distributing malware, or using the services to send spam or unsolicited bulk messages.

3. AI-specific restrictions

• Generating deliberately deceptive content, impersonation or synthetic identity material.
• Automated decision-making with legal or similarly significant effects on individuals without meaningful human review.
• Using outputs as a substitute for licensed medical, legal or financial advice.
• Processing special-category personal data without appropriate safeguards and agreements.
• Generating content that harasses, exploits or endangers any person or group.

4. Security responsibilities

You are responsible for safeguarding credentials, configuring role-based access appropriately, promptly removing departed users and reporting suspected incidents to our security team without undue delay.

5. Enforcement

We may investigate suspected violations and, depending on severity, issue a warning, throttle or suspend affected features, suspend the account or terminate the agreement. We may also be required to notify or cooperate with law enforcement.

6. Reporting abuse

Report suspected misuse to our team using the contact details below.

7. Changes

We may update this policy as our services and the regulatory environment evolve. Material changes will be communicated to account administrators.