Acceptable Use Policy

Prohibited content and activity

• Unlawful content, malware, ransomware, phishing, fraud or instructions for harm.
• Content that infringes intellectual property, privacy, confidentiality or other rights.
• Data you are not authorized to access, process or store.
• Abuse, harassment, threats, discrimination or exposure of personal data.
• Unauthorized access, scanning, penetration testing without written permission, or evasion of security controls.
• Service disruption, denial of service, excessive automated requests or bypassing rate limits, quotas or billing.
• Reverse engineering, extraction or redistribution except as expressly permitted by a written licence.
• Cryptocurrency mining, spam, pyramid schemes or other resource abuse.
• High-risk use in medical, legal, financial, safety or regulated decisions without appropriate human review and legal compliance.

Customer responsibilities

You are responsible for the files, data, API keys, organization members and integrations you control. You must have a lawful basis for processing personal data, provide any required notices and obtain any required consents.

Do not submit confidential data to public benchmark or comparison tools. Use an agreed evaluation or production path for sensitive data.

Enforcement

HEOSSI may investigate suspected violations, remove content, suspend or terminate access, preserve evidence and report to authorities where required. We aim to act proportionately and will consider the impact on legitimate customers.

Report abuse to saar-security@heossi.com. Include the account, organization, time, affected URLs or job identifiers and a description. Do not include passwords, API keys or unnecessary personal data.