i-broS™ Acceptable Use Policy (AUP)

Last Updated: [01/08/2026]
Version: 1.0

1. Purpose

This Acceptable Use Policy ("AUP") governs the use of the i-broS™ Enterprise AI Identity and Governance Middleware (the "Service").

This AUP forms an integral part of the i-broS™ Enterprise Software License Agreement ("EULA") and applies to all users, administrators, customers, contractors, affiliates and authorized users accessing the Service.

Violation of this AUP may result in suspension or termination of access to the Service, in addition to any other contractual or legal remedies available to i-broS™.

2. General Principle

The Service may only be used for lawful, authorized and legitimate business purposes.

Customers are responsible for ensuring that all users within their organization comply with this Policy.

3. Illegal Activities

The Service may not be used to:

violate applicable laws or regulations;
commit fraud or deception;
impersonate another individual or organization;
infringe intellectual property rights;
violate privacy or data protection laws;
distribute unlawful material;
facilitate criminal activity;
evade legal obligations.

4. Harmful AI Uses

The Service must not be used to create, facilitate or automate:

misinformation campaigns;
disinformation;
phishing;
scams;
identity theft;
financial fraud;
social engineering attacks;
malicious deepfakes;
deceptive synthetic media;
malware;
ransomware;
spyware;
prompt injection attacks;
credential theft;
unauthorized surveillance;
cyberattacks;
harassment or abuse.

5. High-Risk Decisions

Unless expressly agreed in writing, the Service must not be used as the sole basis for decisions involving:

medical diagnosis or treatment;
emergency response;
criminal justice;
employment selection or termination;
credit approval;
insurance eligibility;
legal advice;
immigration decisions;
public safety;
life-support systems;
critical infrastructure control.

Human review must always be maintained where legally or operationally required.

6. Customer Data

Customers may upload only data that they are legally authorized to process.

Customers shall not upload:

stolen information;
confidential third-party information without authorization;
unlawful personal data;
malicious files;
copyrighted material without permission;
content that violates applicable law.

Customers remain solely responsible for all uploaded content.

7. Protection of the Platform

Customers shall not:

attempt to bypass security controls;
interfere with platform operation;
overload the infrastructure;
perform denial-of-service attacks;
probe for vulnerabilities without written authorization;
attempt unauthorized access;
circumvent authentication mechanisms.

8. Reverse Engineering

Except where expressly permitted by applicable law, Customers shall not:

reverse engineer the Service;
decompile;
disassemble;
reconstruct source code;
analyze proprietary algorithms;
extract internal methodologies;
reproduce the architecture of the platform;
copy technical implementations.

9. Protection of Proprietary Technology

Customers shall not attempt to reproduce, copy, extract or recreate any proprietary element of i-broS™, including but not limited to:

Identity Kernel™;
Syll™;
Sentinel™;
iD-SIG™;
governance methodologies;
orchestration logic;
identity governance mechanisms;
prompt engineering methodologies;
maieutic methodologies;
policy engines;
scoring systems;
monitoring mechanisms;
certification workflows.

No right is granted to use these technologies outside the licensed Service.

10. AI Model Training

The Service, its outputs, configurations, methodologies and proprietary components may not be used to:

train competing AI models;
train foundation models;
improve competing services;
create competing middleware;
build derivative governance platforms;
reproduce i-broS™ functionality.

11. Benchmarking

Customers shall not publish:

benchmark results;
comparative analyses;
performance testing;
security testing;
latency measurements;
architecture evaluations

without prior written authorization from i-broS™.

Internal testing for Customer operational purposes remains permitted.

12. Automated Abuse

Customers shall not use bots, scripts or automated systems to:

overload the Service;
create excessive requests;
abuse APIs;
scrape proprietary information;
interfere with platform availability.

13. Security Responsibilities

Customers are responsible for:

protecting credentials;
enforcing strong authentication;
managing user permissions;
promptly removing inactive users;
maintaining endpoint security;
reporting suspected security incidents.

14. Monitoring

To protect the Service, i-broS™ may monitor operational metrics, security events, API usage, authentication logs and platform health.

Such monitoring is performed solely for operational, security, compliance and service-improvement purposes, subject to applicable law and the Privacy Policy.

15. Suspension

i-broS™ may immediately suspend access where it reasonably believes that continued use:

threatens platform security;
violates this Policy;
violates applicable law;
exposes i-broS™ or third parties to material risk;
jeopardizes other customers;
infringes intellectual property rights.

Where reasonably practicable, i-broS™ will notify the Customer before or promptly after suspension.

16. Reporting Abuse

Customers are encouraged to promptly report suspected:

security vulnerabilities;
misuse;
unauthorized access;
malicious activity;
policy violations.

Reports may be submitted through the official support channels.

17. Changes

i-broS™ may update this Acceptable Use Policy from time to time to reflect changes in technology, security practices, legal requirements or Service functionality.

Material updates may be communicated through the Service or other appropriate channels.

Continued use of the Service constitutes acceptance of the updated version, subject to applicable law.