Acceptable use policy

Authorized use

Use must be lawful, authorized by the relevant organization, consistent with user roles, provider terms, workplace rules, and applicable consent. Accounts and devices must not be shared outside approved workflows.

Prohibited conduct

• Cross-tenant access, credential abuse, security bypass, scanning, exploitation, or service disruption
• Illegal, infringing, deceptive, harassing, or unsafe content or activity
• Unconsented recording, surveillance, biometric processing, or messaging
• Uploading secrets, card verification values, or PHI to an unapproved workflow/provider
• Using AI or device capabilities outside their declared permissions and data boundaries

Enforcement

The final policy will define investigation, notice, preservation, suspension, appeal, and law-enforcement request handling. Service code does not make the underlying legal determination.