Acceptable Use Policy

2. Unlawful or harmful use

You may not use the Services to:

• Violate any law or regulation, or encourage others to do so.
• Infringe or misappropriate intellectual property, privacy or other rights of others.
• Engage in fraud, deception, harassment, discrimination prohibited by law, or the exploitation of minors.
• Distribute malware, conduct phishing, or send unsolicited bulk communications.

3. Security and integrity of the platform

You may not:

• Access or attempt to access the Services, other tenants’ data or our systems without authorization.
• Probe, scan or test the vulnerability of the Services except under our responsible disclosure terms or with Clevera’s prior written authorization.
• Circumvent, disable or interfere with authorization, capability, approval, budget, kill-switch or evidence mechanisms, except through controls the Services provide.
• Forge, replay, alter or misuse capability tokens, approvals, receipts, Proof of Authorized Intent or evidence records.
• Impose unreasonable load, disrupt the Services, or use them to attack any system or network.
• Reverse engineer the Services, except to the extent applicable law expressly permits.

4. Identity, authority and misrepresentation

• Do not misrepresent the identity of a principal, agent or organization, or the authority delegated to an agent.
• Do not issue or relay false trust assertions, or use receipts or authorization evidence to mislead counterparties.
• Do not impersonate Clevera or imply an endorsement we have not given.

5. Responsible use with AI agents

Customers remain responsible for the agents they connect and for the actions those agents take. You may not use the Services to operate or assist agents that:

• Gain unauthorized access to systems, accounts or data, or harvest credentials.
• Conduct surveillance or tracking of individuals without a lawful basis.
• Commit fraud, manipulate markets, or make unauthorized transactions.
• Develop or deploy weapons, or cause physical harm or harm to critical infrastructure.
• Make decisions with legal or similarly significant effects on individuals in violation of applicable law.

6. Data restrictions

• Do not submit protected health information, payment card data, government-classified information or other specially regulated data unless we have agreed in writing to appropriate safeguards.
• Do not place raw secrets or credentials in prompts, action arguments or other fields not designed for them. Authority is designed to broker credentials just in time rather than ingest them.
• Only submit personal information you have the right to process.

7. Commerce and financial use

Commerce features may not be used for money laundering, terrorist financing, sanctions evasion, the purchase of prohibited or illegal goods and services, unlicensed gambling, or any transaction that violates the terms of the payment provider involved.

8. Export controls and sanctions

You may not use the Services in violation of export control or sanctions laws, including in or for the benefit of embargoed countries or restricted parties.

9. Reporting violations

Report suspected violations of this AUP to 1corporate@clevera.com. Report security vulnerabilities to 1corporate@clevera.com as described on our Security page.

10. Enforcement

We may investigate suspected violations and, where reasonably necessary, suspend or terminate access, remove content, or cooperate with law enforcement. Where practical and lawful, we will notify the affected customer and give it an opportunity to remedy the issue.

11. Changes

We may update this AUP from time to time. We will revise the “Last updated” date above when we do.