Acceptable Use Policy

1. Purpose

This Acceptable Use Policy ("AUP") sets out the rules for using the HumanWox platform and website (collectively, the "Service") provided by HumanWox Limited (Company No. 16296630). This AUP supplements our Terms of Service.

2. Permitted use

The HumanWox platform is provided for the purpose of implementing, evidencing, and maintaining AI governance aligned to ISO/IEC 42001 and other applicable standards and frameworks. You may use the Service to:

• Register, classify, and manage AI systems within your organisation.
• Document risks, controls, evidence, and governance decisions.
• Map governance data against activated compliance frameworks.
• Generate reports and audit packages.
• Manage team access and approval workflows.
• Run attestation campaigns for shadow AI discovery.

3. Prohibited conduct

You must not:

• Use the Service for any purpose that is unlawful or prohibited by these terms.
• Upload, store, or transmit any content that is defamatory, obscene, fraudulent, or infringes the intellectual property rights of others.
• Attempt to gain unauthorised access to any part of the Service, other users' accounts, or any systems or networks connected to the Service.
• Reverse engineer, decompile, disassemble, or otherwise attempt to discover the source code of the Service.
• Use the Service to develop a competing product or service.
• Resell, sublicence, or redistribute access to the Service without written authorisation from HumanWox.
• Introduce viruses, malware, or other harmful code to the Service.
• Use automated scripts, bots, or scrapers to access the Service except through our published APIs.
• Circumvent usage limits, access controls, or security measures.
• Misrepresent your identity or organisational affiliation when using the Service.

4. Data responsibilities

You are responsible for the data you upload to the Service. You must ensure that you have the right to upload all content and that it does not contain personal data of individuals who have not consented to its processing in this context. You must not upload data classified as special category data under UK GDPR unless appropriate safeguards are in place within your organisation.

5. Security responsibilities

You are responsible for maintaining the security of your account credentials and for ensuring that access to your organisation's account is appropriately managed. This includes removing access for team members who leave your organisation and using strong, unique passwords for all accounts.

6. Reporting violations

If you become aware of any violation of this AUP, please report it to security@humanwox.com.

7. Enforcement

We reserve the right to investigate suspected violations of this AUP and to take appropriate action, which may include suspending or terminating access to the Service, removing content, or reporting activity to law enforcement. We will endeavour to provide reasonable notice before taking action except in cases where immediate action is necessary to protect the Service or other users.

8. Changes to this policy

We may update this AUP from time to time. We will notify you of material changes by email or by posting a notice on our website. The "Last updated" date at the top of this page indicates when the policy was last revised.

9. Contact

For questions about this policy, contact legal@humanwox.com.