Use Civerent lawfully, securely, and responsibly.

1. Scope

This Acceptable Use Policy applies to access to and use of the Civerent website, accounts, workspaces, platform features, exports, interfaces, and related services.

Users must comply with this policy, applicable agreements, organizational instructions, and applicable law.

2. Authorized use

• Use Civerent only for lawful AI governance, risk, policy, compliance, evidence, reporting, administrative, evaluation, and procurement activities.
• Access only accounts, organizations, workspaces, systems, and information you are authorized to access.
• Provide accurate account and organization information.
• Protect credentials and promptly report suspected compromise.
• Maintain appropriate authority before uploading or linking information.

3. Illegal or harmful activity

• Do not use Civerent to violate laws, regulations, court orders, contracts, intellectual-property rights, privacy rights, or other legal rights.
• Do not facilitate violence, abuse, exploitation, trafficking, harassment, stalking, discrimination, or credible threats.
• Do not create, store, or distribute unlawful content.
• Do not misrepresent identity, authority, affiliation, evidence, assessment results, or compliance status.
• Do not use Civerent to conceal material AI risks or falsify governance records.

4. Security and platform abuse

• Do not attempt unauthorized access, privilege escalation, tenant-boundary bypass, credential theft, or security-control circumvention.
• Do not introduce malware, malicious code, destructive payloads, or mechanisms intended to disrupt the service.
• Do not conduct denial-of-service testing, destructive testing, automated scanning, or vulnerability exploitation without prior written authorization.
• Do not interfere with service integrity, availability, logging, rate limits, or other users.
• Do not reverse engineer or probe the service except where applicable law expressly permits and cannot be contractually restricted.

5. Data restrictions

• Do not upload information you lack authority to process.
• Do not submit passwords, private cryptographic keys, authentication tokens, or complete payment-card data into ordinary governance fields.
• Do not submit classified information or export-controlled technical data unless Civerent has expressly agreed in writing that the applicable environment supports it.
• Do not submit regulated health, biometric, criminal-justice, or similarly sensitive personal information unless authorized safeguards and agreements are in place.
• Minimize personal information and redact unnecessary sensitive details from evidence and notes.

6. High-impact use

Civerent may support governance documentation for high-impact systems, but it must not be used as the sole decision maker for legal, employment, credit, housing, insurance, healthcare, education, public benefits, law enforcement, or similarly significant decisions about people.

Users remain responsible for meaningful human oversight, testing, due process, accessibility, transparency, and all safeguards required for their use case.

7. Automated access

• Do not use bots, scrapers, or automated clients except through an expressly authorized interface.
• Do not evade technical limits or create accounts to bypass restrictions.
• Do not use generated traffic or deceptive submissions to manipulate lead, usage, risk, or governance indicators.
• Respect documented interface limits and security requirements.

8. Enforcement

Civerent may investigate suspected violations and may restrict, suspend, or terminate access when reasonably necessary to protect users, customers, the service, or third parties.

When appropriate, Civerent may preserve relevant records, notify the affected organization, cooperate with lawful authorities, or require corrective action. Contractual remedies may also apply.

9. Reporting concerns

Report suspected misuse with enough information for Civerent to understand the affected account, workspace, activity, and potential impact.

Do not include unnecessary sensitive information in an ordinary email report.