Acceptable Use Policy (AUP)

1. Purpose of This Policy

This Acceptable Use Policy ("AUP") defines acceptable and prohibited uses of the websites, platforms, dashboards, systems, networks, software, tools, and services provided by SECUSYSTS TECHNOLOGIES Inc. ("SECUSYSTS," "we," "us," or "our").

This AUP is designed to:

• Protect clients, systems, and data
• Ensure lawful, ethical, and secure use
• Prevent misuse, abuse, or unauthorized activity

This Policy applies to all users, including clients, authorized users, contractors, partners, and any party accessing SECUSYSTS services.

2. Scope & Applicability

This AUP applies to:

• SECUSYSTS websites and portals
• Client dashboards and platforms
• APIs, integrations, and tools
• Managed security services (MSSP / SOC / SECOPS)
• Any systems or infrastructure operated or managed by SECUSYSTS

This Policy supplements, and does not replace, obligations set forth in:

• Terms of Service
• Service Agreements / MSAs
• Statements of Work (SOWs)

In case of conflict, contractual documents shall prevail.

3. General Acceptable Use Principles

You agree to use SECUSYSTS services only:

• For lawful and authorized purposes
• In accordance with applicable laws and regulations
• In compliance with contractual and security requirements
• In a manner that does not harm SECUSYSTS, its clients, or third parties

4. Prohibited Activities

The following activities are strictly prohibited, unless explicitly authorized in writing by SECUSYSTS.

4.1 Illegal, Harmful, or Fraudulent Use

You may not use SECUSYSTS services to:

• Engage in illegal activities
• Commit fraud, deception, or misrepresentation
• Violate sanctions, export controls, or trade restrictions
• Facilitate criminal or malicious acts

4.2 Unauthorized Access & Exploitation

You may not:

• Attempt to gain unauthorized access to systems, networks, or data
• Bypass authentication or security controls
• Interfere with system integrity or availability
• Probe, scan, or test systems without authorization

4.3 Offensive Security & Testing (Critical Clause)

Penetration testing, vulnerability scanning, red teaming, or exploitation activities are prohibited unless:

• Explicitly authorized by SECUSYSTS in writing
• Defined within a contract or SOW
• Conducted within approved scope and timeframe

4.4 Malware, Abuse & Disruption

You may not:

• Introduce malware, ransomware, spyware, or malicious code
• Launch denial-of-service (DoS/DDoS) attacks
• Abuse system resources or degrade performance
• Use services for botnets, spam, or automated abuse

4.5 Data Misuse & Privacy Violations

You may not:

• Access, collect, or process data without authorization
• Use data for unauthorized secondary purposes
• Violate privacy, confidentiality, or data protection laws
• Combine data across clients or systems without permission

4.6 Intellectual Property & Misrepresentation

You may not:

• Copy, reverse engineer, or misuse SECUSYSTS intellectual property
• Remove proprietary notices
• Impersonate SECUSYSTS or its representatives
• Misrepresent your affiliation or authorization

5. Client Responsibilities

Clients and authorized users are responsible for:

• Ensuring only authorized personnel access services
• Maintaining secure credentials and access controls
• Complying with security recommendations
• Reporting suspected misuse, incidents, or vulnerabilities promptly

Failure to do so may result in suspension or termination.

6. Monitoring & Enforcement

SECUSYSTS reserves the right to:

• Monitor usage for security, compliance, and operational integrity
• Investigate suspected violations
• Suspend or terminate access immediately where risk is identified

Monitoring is conducted in accordance with applicable privacy laws and contractual obligations.

7. Consequences of Violation

Violations of this AUP may result in:

• Immediate suspension or termination of services
• Incident response and containment actions
• Reporting to authorities where legally required
• Legal action or claims for damages

8. U.S. Federal & Regulated Client Notice

For U.S. federal agencies, contractors, and regulated entities:

• Use must align with contractual, regulatory, and security obligations
• Unauthorized activity may trigger mandatory reporting
• Systems may be subject to audit and evidentiary preservation

9. Reporting Violations or Concerns

Suspected misuse, violations, or security concerns should be reported immediately to:

Email: [email protected]

or through designated contractual channels.

10. Changes to This Policy

SECUSYSTS may update this Acceptable Use Policy periodically. Updates will be posted with a revised effective date. Continued use of services constitutes acceptance of the updated Policy.

11. Contact Information

For questions regarding this Policy:

Email: [email protected]

Website: https://www.secusysts.com