This Acceptable Use Policy ("AUP") supplements the Terms of Service. It defines uses of RegulatoryBridge that we do not allow, in order to keep the Services safe, reliable, lawful, and useful for everyone. The AUP applies to all users of the Services — customers, employees of customers, partners, and guests of either.

You will not, and will not allow any user to:

Legal & regulatory

• Use the Services to violate any applicable law, regulation, or third-party right.
• Process personal data unlawfully or without an appropriate lawful basis, or in violation of an instruction from the data subject or competent authority.
• Use the Services to facilitate or further sanctions evasion, money laundering, or terrorist financing.
• Export, re-export, or transfer the Services in violation of export-control or sanctions regimes (including US OFAC, EU, UK, UN regimes).

Security & integrity

• Probe, scan, or test the vulnerability of the Services or any system or network, or breach or circumvent any authentication or security measures.
• Reverse-engineer, decompile, disassemble, or attempt to derive source code from the Services, except to the limited extent required by mandatory law.
• Introduce, distribute, or store malware, viruses, worms, Trojans, ransomware, time bombs, or other harmful code.
• Interfere with or disrupt the Services or any servers or networks connected to them — including denial-of-service or distributed denial-of-service activity.
• Generate excessive load on the Services through scripts, bots, or automation that is not authorised by us in writing.

Data & content

• Upload or transmit content that is unlawful, defamatory, obscene, harassing, or that infringes intellectual property or privacy rights.
• Use the Services to send unsolicited commercial communications (spam) or in any way that violates the CAN-SPAM Act, ePrivacy Directive, CASL, or equivalent anti-spam laws.
• Train machine-learning models on Customer Content of third parties without verified authorisation.
• Scrape, harvest, or otherwise collect data from the Services other than as expressly permitted.

Commercial

• Resell, sublicense, rent, lease, or otherwise transfer the Services to third parties, except as expressly authorised in writing.
• Use the Services to provide a competing regulatory representation, DPO-as-a-Service, or substantively equivalent offering to third parties.
• Misrepresent your identity, affiliation, or authority when accessing the Services.

Customer is responsible for the acts and omissions of all individuals who access the Services using Customer's credentials, accounts, or systems. Customer will ensure that all users are made aware of, and comply with, this AUP and the Terms of Service.

We may investigate suspected violations of this AUP and take any action we reasonably believe necessary, including:

• Removing or disabling access to content that violates this AUP;
• Suspending the offending user's account or the Customer's access in whole or in part;
• Terminating the Order Form for material or repeated breach in accordance with the Terms of Service;
• Cooperating with law enforcement or regulatory authorities and disclosing relevant information when legally required.

Where time permits, we will give notice and an opportunity to cure before suspension or termination. For activity that poses an imminent or serious risk — for example active intrusion, malware distribution, or live denial-of-service — we may act first and notify after the threat is contained.

To report content or activity that you reasonably believe violates this AUP, please email abuse@regulatorybridge.com with as much detail as possible (URL, account, timestamp, screenshot). For active security incidents on our infrastructure, see security.txt and email security@regulatorybridge.com.

We may update this AUP from time to time. Material changes will be communicated at least 30 days in advance via the changelog and, where appropriate, email. Continued use of the Services after the effective date constitutes acceptance.

Questions: legal@regulatorybridge.com
Abuse reports: abuse@regulatorybridge.com