Acceptable Use Policy

Purpose and scope

This policy sets the limits on how Autom may be used. It forms part of the Terms of Service and applies to every customer and every authorised user.

It is not exhaustive. Conduct that is not listed here can still be a breach if it is unlawful, harmful, or damaging to other users or to us.

Customers are responsible for the conduct of the people they invite into their shared company workspace.

Prohibited activities

Do not use Autom to break the law, to help somebody else break the law, or to breach a contract or duty you owe to somebody else.

Do not infringe intellectual property rights, misappropriate trade secrets, or use material you do not have the right to use.

Do not process personal information in Autom without a lawful basis, and do not put in special category or other sensitive information about people unless you are entitled to and have appropriate safeguards.

Do not resell, sublicense, or provide the service to a third party as a service of your own, except as the Terms of Service allow.

Do not misrepresent your identity or your affiliation, including in order to obtain access to the service.

Prohibited content

Do not submit, generate, or store material that sexually exploits or endangers children.

Do not submit or generate material that promotes terrorism or violent extremism, that incites violence, or that harasses, threatens, or is intended to intimidate a person or group.

Do not submit or generate material designed to defraud, including counterfeit documents, forged records, or fake identification.

Do not use Autom to develop weapons, including chemical, biological, radiological, or nuclear capability, or to plan an attack on people or infrastructure.

Do not submit malicious code, or material designed to compromise a system or evade a security control.

Misuse of AI teammates

AI teammates carry out recurring tasks on your instruction. The following uses are prohibited whatever the configuration.

Do not configure a teammate to produce content that is deceptive about its origin, including content presented as written by a named real person who did not write it.

Do not impersonate a person, a company, or a public authority, and do not create synthetic media of a real person without their consent.

Do not run coordinated messaging campaigns designed to manufacture the appearance of independent opinion, including political astroturfing.

Do not use teammates for unsolicited bulk messaging, for scraping websites or services in breach of their terms, or for automating account creation or credential testing on other services.

Do not attempt to bypass a model's safety controls, or to extract a system prompt, model weights, or another customer's content.

Consequential decisions about people

Do not use Autom to make or materially inform a decision about a person's employment, education, credit, housing, insurance, healthcare, immigration status, benefits, or legal rights without meaningful human review of the outcome.

Autom lets you switch human approval off. For decisions of this kind, keep it on. Where the law requires a person to be involved, or requires an explanation of a decision, that requirement is yours to meet.

Do not use Autom for biometric identification or categorisation of people, for emotion inference about employees or students, or for social scoring.

Security violations

Do not probe, scan, or test the vulnerability of the service or its infrastructure except under a written testing agreement with us.

Do not attempt to gain unauthorised access to any account, workspace, system, or data, and do not interfere with another user's use of the service.

Do not reverse engineer, decompile, or disassemble the software, or circumvent licensing, authentication, or rate controls, except where that restriction is unenforceable by law.

Report suspected vulnerabilities to [[SECURITY_CONTACT_EMAIL]] and give us a reasonable opportunity to fix them before public disclosure.

Resource and rate abuse

Do not place an unreasonable load on the service, including through automated request volume beyond what normal business use requires.

Do not use the service for cryptocurrency mining, distributed computation unrelated to your business tasks, or as general purpose compute.

Do not share a single account across an organisation to avoid subscription terms, or otherwise defeat the usage limits described at [[USAGE_LIMITS]].

Third-party model provider rules

When you select a language model, that provider's usage policies apply to what you send it, alongside this policy. Those providers are listed at [[MODEL_PROVIDERS]] and their terms are summarised at [[MODEL_PROVIDER_TERMS]].

Where a provider's policy is stricter than this one, the stricter rule applies to work sent to that provider. A provider may independently block, refuse, or report a request.

Enforcement

If we believe this policy has been breached, we may remove or restrict access to content, limit or suspend features, suspend an authorised user or the whole account, or terminate the agreement.

We will normally give notice and a chance to fix the problem first. We may act immediately without notice where there is a risk of serious harm, of legal liability, or of damage to the service.

Serious matters may be reported to law enforcement or another authority where the law requires or permits it.

You can challenge an enforcement decision through the process at [[ENFORCEMENT_APPEAL_PROCESS]].

Reporting a violation

Report abuse, illegal content, or misuse of Autom to [[ABUSE_CONTACT_EMAIL]]. Include what you saw, where you saw it, and how to reproduce it if that applies.

Report security issues to [[SECURITY_CONTACT_EMAIL]] instead, so they reach the right people quickly.