Acceptable use policy

This Acceptable Use Policy protects customers, providers, and the integrity of tenant-isolated EmDash services. It applies to website visitors, customers, users, partners, and anyone acting through their access.

Prohibited activity

You must not:

• Break the law, infringe rights, or facilitate fraud, harassment, spam, phishing, malware, or other abuse.
• Access another person’s account, tenant, mailbox, investigation, report, credential, or secret without authorisation.
• Probe, scan, reverse engineer, disrupt, overload, or bypass service controls without written permission.
• Attempt to defeat authentication, Turnstile, module entitlements, roles, rate limits, audit controls, or provider consent.
• Upload or transmit malicious code, unlawful content, stolen data, or content that creates unreasonable security or privacy risk.
• Use EmDash to make unsupported claims about a message, person, provider, or security outcome.
• Use automated access in a way that interferes with the service or evades reasonable safeguards.

Security testing and reports

Only perform security testing under written authorisation that defines scope, timing, and contacts. Report suspected vulnerabilities, unauthorised access, privacy issues, or exposed credentials to privacy@authnimbus.cloud. Do not publicly disclose an issue or customer data while it is being investigated.

Enforcement

EMDASH Cyber may investigate suspected violations, preserve relevant records, restrict activity, suspend or terminate access, notify affected customers or providers, and cooperate with lawful requests. We will consider the nature of the risk, evidence available, customer impact, and applicable law.

Relationship to other terms

This policy supplements the Terms of Service and applicable signed customer or partner agreements. If requirements conflict, the signed agreement controls to the extent of the conflict.