Acceptable Use Policy

1. Purpose

This Acceptable Use Policy (“AUP”) forms part of the Terms of Service and applies to all use of the CorpSec AI platform (the “Service”). Breach of this AUP is a material breach of the Terms and may result in suspension or termination.

2. No reliance without professional review

The Service is a tool for qualified professionals. You must independently review, verify and approve every output before signing, lodging or relying on it. You must not present AI-generated output as professional advice without your own review, nor use the Service in a way that substitutes for the professional judgement you are required to exercise.

3. Prohibited uses

You must not, and must not permit anyone to:

• Use the Service to facilitate money laundering, terrorism financing, fraud, sanctions evasion, or any unlawful, deceptive or harmful activity.
• Upload or process data without the necessary rights, consents or lawful basis, or in breach of the PDPA or other applicable law.
• Upload malware, or content that is illegal, infringing, defamatory or that you are not authorised to share.
• Attempt to probe, scan, breach or circumvent the security, access controls, tenancy isolation or rate limits of the Service.
• Reverse engineer, decompile, scrape, or attempt to extract source code, models or other customers’ data.
• Resell, sublicense or provide the Service to third parties except your own authorised personnel, or use it to build a competing product.
• Use the Service to send spam, or to overload, disrupt or impair the Service or its infrastructure.
• Misrepresent your identity or authority, or share account credentials with unauthorised persons.

4. Fair use and limits

The Service may apply reasonable usage limits (for example on volume, rate or automated access) to protect availability and other customers. Automated or programmatic access must respect published limits and must not degrade the Service.

5. Security research

We welcome responsible disclosure of genuine security vulnerabilities to security@corpsec.ai. You must not test, exploit or access data that is not yours, and any testing must be limited to your own account and must not disrupt the Service or others.

6. Enforcement

We may investigate suspected breaches and may suspend or terminate access, remove content, or take other action we consider appropriate to protect the Service, other customers, or to comply with law. We may report unlawful activity to the authorities. This does not limit any other remedy available to us under the Terms or at law.