Acceptable use policy

Scope

This draft does not currently govern a public hosted service. The covered services, users, and contracting entity remain [AUP SCOPE AND LEGAL ENTITY — REQUIRED BEFORE PRODUCTION].

Intended rules

The final policy is expected to prohibit using a covered service to:

• break applicable law, violate rights, or process data without authority;
• introduce malware, evade access controls, or disrupt systems;
• probe systems without explicit authorization;
• misrepresent identity, provenance, or product output; or
• submit secrets or confidential client data outside an approved environment.

Any content-specific or sector-specific restrictions require separate product and legal approval; none are silently implied here.

Enforcement and appeal

Investigation, notice, suspension, preservation, appeal, and emergency-action rules are unresolved:[ENFORCEMENT AND APPEAL PROCESS — REQUIRED BEFORE PRODUCTION]. This page does not create a monitoring duty or response-time promise.

Report concerns

The approved abuse-reporting channel is[ABUSE CONTACT — REQUIRED BEFORE PRODUCTION]. Security vulnerabilities require the separately approved vulnerability-disclosure process.