ForgeOps Acceptable Use Policy

This Acceptable Use Policy ("AUP") applies to every organization and every user of the ForgeOps platform. It is incorporated into the ForgeOps Terms of Service. Customer is responsible for its Authorized Users' compliance with it.

1. Unlawful activity

Do not use the Service to conduct, facilitate or conceal activity that violates applicable law, including fraud, money laundering, sanctions or export-control violations, or the unlawful handling of controlled technical data. Customers handling export-controlled drawings, models or specifications are responsible for their own compliance and for configuring access controls accordingly.

2. Unauthorized access and tenant boundaries

Do not attempt to access any organization's workspace, records, files or credentials other than those your organization has authorized you to access. Do not attempt to defeat, probe or bypass tenant isolation, row-level security, permission checks, approval thresholds, entitlement gates or any other access control.

Do not use another person's credentials, share your own, or retain access after your authorization ends.

3. Security attacks and testing

Do not attack the Service or the infrastructure it runs on. This includes denial-of-service and resource-exhaustion attacks, network or port scanning, brute-force or credential-stuffing attempts, injection attacks, and attempts to intercept or alter traffic.

Security testing against the Service requires ForgeOps's prior written authorization and must stay within the agreed scope. Report suspected vulnerabilities to [SECURITY CONTACT EMAIL]; do not exploit them, do not access data that is not yours to prove a finding, and do not disclose them publicly before ForgeOps has had a reasonable opportunity to respond.

4. Malware and harmful code

Do not upload, transmit or store viruses, worms, ransomware, logic bombs, or any code intended to damage, disrupt or gain unauthorized access to any system. Uploaded attachments are scanned; do not attempt to evade scanning, and do not use archive nesting, encryption or file-type obfuscation to smuggle content past it.

5. Credential and authentication abuse

Do not create accounts by automated means, create accounts under false identity, or misrepresent your authority to act for an organization. Do not accept an agreement on behalf of an organization you are not authorized to bind.

6. Data scraping and extraction abuse

Do not use crawlers, scrapers, headless browsers or other automated means to extract data from the Service beyond the interfaces provided for that purpose, and do not use the Service's own export and reporting features to systematically extract another organization's data. Customer portal and vendor interfaces are provided for the counterparty's own transactions, not for bulk collection.

7. Interference with the Service

Do not take actions that impose an unreasonable or disproportionate load on the Service or degrade it for others — including uncontrolled automated request loops, deliberately oversized or malformed uploads intended to exhaust processing capacity, or abuse of background processing such as CAD extraction, document rendering, email intake or synchronization jobs.

8. Abusive automation and messaging

Do not use the Service's sending features to transmit unsolicited bulk email, to send mail on behalf of a domain you do not control, or to conduct phishing. Inbound intake addresses are provided for legitimate business correspondence; do not use them to relay mail or to overwhelm a recipient organization.

9. Infringement and third-party rights

Do not upload or use content you do not have the right to use, including third-party drawings, specifications, software, fonts or documentation. Do not use the Service to misappropriate trade secrets. Intellectual property complaints may be sent to [LEGAL CONTACT EMAIL].

10. Misrepresenting the platform's output

The Service records and organizes engineering, quality and financial information; it does not perform engineering analysis, certify conformance to any code or standard, or replace a qualified engineer, inspector, welding authority or accountant. Do not represent ForgeOps output — including cut lists, bend developments, nesting results, weld maps, inspection records or cost reports — as a certification, a stamped engineering determination, or an audited financial statement.

11. Dangerous use of platform systems

Do not use the Service's shop-floor, field, kiosk or mobile interfaces in a way that creates a safety hazard, and do not configure or use the Service to suppress, falsify or bypass a required inspection, hold, qualification or approval record. Falsifying a quality, weld, material-traceability or inspection record in the Service is a violation of this policy in addition to whatever else it may be.

12. Enforcement

ForgeOps may investigate suspected violations and may suspend or limit access as described in the Terms of Service. Where a violation presents an immediate risk to the Service, to another customer, or to safety, ForgeOps may act without prior notice, limited in scope and duration to what the circumstances require. ForgeOps will notify the affected organization's owner as soon as reasonably practicable.

Suspension for a violation does not remove Customer's right to export its own Customer Data, except where preserving that access would itself present a security risk.

13. Reporting

Report suspected violations of this policy to [LEGAL CONTACT EMAIL], and suspected security issues to [SECURITY CONTACT EMAIL].