Acceptable Use Policy
This Acceptable Use Policy ("AUP") governs your use of the FortisEU platform and services. By accessing or using FortisEU, you agree to comply with this policy. This AUP supplements and is incorporated into the Terms of Service.
1. Permitted Use
FortisEU is designed for legitimate business purposes related to compliance management, risk assessment, vendor management, and related governance activities. You may use the service to:
- Manage your organization's compliance programs and frameworks
- Collect, store, and manage compliance evidence
- Assess and monitor vendor and third-party risk
- Generate compliance reports and documentation
- Collaborate with team members on compliance tasks
- Use AI-assisted features for compliance analysis and recommendations
2. Prohibited Activities
You must not use FortisEU to:
2.1 Illegal or Harmful Activities
- Violate any applicable law, regulation, or third-party right
- Process personal data in violation of GDPR or applicable data protection laws
- Store or transmit content that is defamatory, obscene, or threatening
- Facilitate fraud, money laundering, or other financial crimes
2.2 Security Violations
- Attempt to access another tenant's data or circumvent tenant isolation
- Probe, scan, or test the vulnerability of the platform without written authorization
- Interfere with or disrupt the service, servers, or networks
- Attempt to bypass rate limiting, authentication, or access controls
- Introduce malware, viruses, or other malicious code
- Harvest or collect user information without consent
2.3 Service Abuse
- Use the service in a manner that degrades performance for other users
- Automate access in a way that exceeds reasonable usage patterns without API authorization
- Resell, sublicense, or redistribute the service without written agreement
- Use the AI features to generate content unrelated to compliance and governance
- Misrepresent AI-generated outputs as certified professional advice
2.4 Content Restrictions
- Upload files containing malware or executable code
- Store content that infringes intellectual property rights
- Upload data that you do not have the right to process
3. Resource Limits
Fair use applies to all plans. Specific resource limits (storage, API calls, users, integrations) are defined by your subscription tier. If your usage significantly exceeds plan limits, we will contact you to discuss an appropriate plan or usage adjustment.
4. AI-Specific Guidelines
FortisEU includes AI-powered features for compliance analysis and recommendations. When using AI features:
- AI outputs are advisory only — verify all recommendations before acting
- Do not rely on AI outputs as legal, regulatory, or professional advice
- Do not attempt to extract, reverse-engineer, or manipulate AI models
- Do not use AI features to process data that violates this AUP
- Report inaccurate or potentially harmful AI outputs to ai-ethics@fortis.eu
5. Monitoring and Enforcement
We may monitor usage for compliance with this AUP. We do not routinely monitor the content of your data, but we may investigate when we have reason to believe a violation has occurred. Enforcement actions may include:
- Warning notification with a reasonable period to remedy the violation
- Temporary suspension of the offending account or feature
- Permanent termination of access for severe or repeated violations
- Reporting to law enforcement where required by applicable law
Where possible, we will provide notice before taking enforcement action, except where immediate action is necessary to protect the service or other users.
6. Reporting Violations
If you become aware of any violation of this AUP, please report it to abuse@fortis.eu. Reports are handled confidentially.
7. Changes
We may update this AUP to reflect changes in our service or legal requirements. Material changes will be communicated with at least 30 days notice. Continued use of the service after changes take effect constitutes acceptance.
8. Contact
For questions about acceptable use, contact legal@fortis.eu. See also our Terms of Service and Privacy Policy.