§1. Purpose
This Acceptable Use Policy ("AUP") supplements the Terms of Service. It defines uses of RegulatoryBridge that we do not allow, in order to keep the Services safe, reliable, lawful, and useful for everyone. The AUP applies to all users of the Services - customers, employees of customers, partners, and guests of either.
§2. Prohibited activities
You will not, and will not allow any user to:
Legal & regulatory
- Use the Services to violate any applicable law, regulation, or third-party right.
- Process personal data unlawfully or without an appropriate lawful basis, or in violation of an instruction from the data subject or competent authority.
- Use the Services to facilitate or further sanctions evasion, money laundering, or terrorist financing.
- Export, re-export, or transfer the Services in violation of export-control or sanctions regimes (including US OFAC, EU, UK, UN regimes).
Security & integrity
- Probe, scan, or test the vulnerability of the Services or any system or network, or breach or circumvent any authentication or security measures.
- Reverse-engineer, decompile, disassemble, or attempt to derive source code from the Services, except to the limited extent required by mandatory law.
- Introduce, distribute, or store malware, viruses, worms, Trojans, ransomware, time bombs, or other harmful code.
- Interfere with or disrupt the Services or any servers or networks connected to them - including denial-of-service or distributed denial-of-service activity.
- Generate excessive load on the Services through scripts, bots, or automation that is not authorised by us in writing.
Data & content
- Upload or transmit content that is unlawful, defamatory, obscene, harassing, or that infringes intellectual property or privacy rights.
- Use the Services to send unsolicited commercial communications (spam) or in any way that violates the CAN-SPAM Act, ePrivacy Directive, CASL, or equivalent anti-spam laws.
- Train machine-learning models on Customer Content of third parties without verified authorisation.
- Scrape, harvest, or otherwise collect data from the Services other than as expressly permitted.
Commercial
- Resell, sublicense, rent, lease, or otherwise transfer the Services to third parties, except as expressly authorised in writing.
- Use the Services to provide a competing regulatory representation, DPO-as-a-Service, or substantively equivalent offering to third parties.
- Misrepresent your identity, affiliation, or authority when accessing the Services.
§3. Customer responsibility for users
Customer is responsible for the acts and omissions of all individuals who access the Services using Customer's credentials, accounts, or systems. Customer will ensure that all users are made aware of, and comply with, this AUP and the Terms of Service.
§4. Enforcement & remedies
We may investigate suspected violations of this AUP and take any action we reasonably believe necessary, including:
- Removing or disabling access to content that violates this AUP;
- Suspending the offending user's account or the Customer's access in whole or in part;
- Terminating the Order Form for material or repeated breach in accordance with the Terms of Service;
- Cooperating with law enforcement or regulatory authorities and disclosing relevant information when legally required.
Where time permits, we will give notice and an opportunity to cure before suspension or termination. For activity that poses an imminent or serious risk - for example active intrusion, malware distribution, or live denial-of-service - we may act first and notify after the threat is contained.
§5. Reporting abuse
To report content or activity that you reasonably believe violates this AUP, please email abuse@regulatorybridge.com with as much detail as possible (URL, account, timestamp, screenshot). For active security incidents on our infrastructure, see security.txt and email security@regulatorybridge.com.
§6. Changes
We may update this AUP from time to time. Material changes will be communicated at least 30 days in advance via the changelog and, where appropriate, email. Continued use of the Services after the effective date constitutes acceptance.
§7. Contact
Questions: legal@regulatorybridge.com
Abuse reports: abuse@regulatorybridge.com
Frequently Asked Questions
How does the Acceptable Use Policy relate to the Terms of Service?+
It supplements them. The AUP sets out the conduct rules for using the Services; breaching it is a breach of the Terms, and can lead to the enforcement steps in section 4.
What activities are prohibited?+
The prohibitions fall into four groups — legal and regulatory violations, security and integrity abuse, misuse of data, and prohibited commercial activity such as reselling or sublicensing the Services. Section 2 lists each in full.
Am I responsible for what my team members do?+
Yes. Under section 3 the Customer is responsible for the acts and omissions of every user who accesses the Services under its account, including employees, contractors and any other authorised individuals.
What happens if someone violates the AUP?+
We may investigate and respond proportionately — removing or disabling offending content, suspending the individual user or the account, terminating the Order Form for material or repeated breach, and cooperating with law enforcement or regulators where required.
How do I report abuse?+
Email abuse@regulatorybridge.com with the details. For questions about the policy itself rather than a specific report, contact legal@regulatorybridge.com.
Will I be notified if the AUP changes?+
Yes. We may update this policy from time to time, and material changes are communicated as described in section 6. The effective and last-updated dates at the top show which version applies.
Ready to Achieve Global Regulatory Compliance?
Partner with RegulatoryBridge for comprehensive compliance representation across global jurisdictions.
