Acceptable Use Policy

You must not use the Platform to:

1. break any applicable law or regulation, or facilitate anyone else doing so;
2. submit content that infringes intellectual property, privacy or confidentiality rights, or that is defamatory, harassing, hateful or sexually explicit;
3. submit malware, ransomware, or any code designed to disrupt or gain unauthorised access to any system;
4. attempt to access another customer’s workspace, data or documents, or to probe, scan or test the vulnerability of the Platform without our prior written authorisation;
5. circumvent authentication, rate limits, plan limits or usage metering, including by creating multiple free workspaces to avoid paying for the usage you need;
6. carry out automated bulk extraction of the Platform’s content, catalogue or questionnaire library, other than through the documented API within your rate limit;
7. resell, sublicense, white-label or provide the Platform as a service to third parties, unless you hold a partner agreement that expressly permits it;
8. reverse engineer, decompile or disassemble the Platform, or attempt to derive its source code or rule pack, except to the extent this restriction is prohibited by law;
9. use the Platform to build or train a competing product or a machine-learning model; or
10. misrepresent your identity, your organisation, or your authority to act for an organisation.

API access is included with paid plans at the rate limits published on the pricing page and in the API documentation. Rate limits are per workspace and are enforced by returning HTTP 429 with a retry hint.

• Implement exponential backoff and honour the Retry-After header.
• Use webhooks rather than tight polling loops for asynchronous document generation.
• Cache classification results that do not change; the rule pack version is returned with every response so you can detect staleness.
• Keep sandbox traffic on sandbox keys. Automated traffic against production accounts that exists only to generate load is not permitted.

We may throttle, suspend or require a commercial agreement for usage that materially exceeds your plan, that degrades the service for others, or that resembles an attempt to resell capacity.

We welcome good-faith security research. Do not test without written authorisation: email [email protected] with the scope you propose and we will respond with rules of engagement, usually within three (3) business days.

Authorised testing must avoid privacy violations, data destruction, service interruption and social engineering of our staff or customers. Report findings promptly and give us a reasonable period to remediate before any public disclosure. We will not pursue legal action against researchers who follow these rules in good faith.

1. Where a breach is not urgent, we will notify you, describe the issue and give you a reasonable period — normally ten (10) business days — to remedy it.
2. Where a breach is serious, repeated, or poses a risk to the Platform, other customers or third parties, we may suspend the relevant feature or the whole Account immediately and notify you at the same time.
3. Where required by law, or where the conduct appears criminal, we may report it to the competent authorities and preserve the relevant records.

Suspension for breach does not entitle you to a refund of Fees, and does not excuse Fees already due.

See also: Terms and Conditions