Acceptable Use Policy (AUP)

⚠️ DRAFT TEMPLATE — pending legal review. Not legal advice.

This AUP is part of the Customer Agreement. You may not use, or allow others to use, the Service to:

1. Break the law — including violating data-protection, health-information, export-control, or sanctions laws, or infringing intellectual-property or privacy rights.
2. Mishandle regulated data — submit protected health information or special-category personal data without the correct X-PHI flag and an eligible region, or otherwise route regulated data to a Provider not cleared for it. (See the DPA and BAA.)
3. Harm people — generate or facilitate content that sexually exploits minors; that incites violence, self-harm, or terrorism; or that enables serious physical or economic harm.
4. Provide unsafe high-stakes advice as if authoritative — present model output as professional medical, legal, or financial advice without appropriate human review and disclosures.
5. Defraud or deceive — phishing, impersonation, disinformation, or non-consensual synthetic media.
6. Compromise security — attempt to breach, probe, or disrupt the Service, other customers, Providers, or any system; circumvent rate limits, the payment gate, or routing/PHI controls; or reverse-engineer the Service except as law permits.
7. Abuse Providers — violate the underlying Provider's or model's use terms, or send PHI to a model or route not designated PHI-eligible for your jurisdiction.
8. Overload — send automated traffic designed to degrade the Service beyond your fair, contracted use.

Enforcement. We may investigate suspected violations and may suspend or terminate access, or decline/limit requests, to protect the Service, Providers, other customers, or third parties. Because the Service does not log request content, enforcement is based on metadata, routing signals, reports, and account behavior — not on inspecting your payloads.

Report abuse to [[abuse@phi-cloud.com]].