Acceptable Use Policy

Last updated: April 8, 2026

This Acceptable Use Policy (“AUP”) governs your use of the services provided by System9, Inc. (“SYSTEM9”). This AUP is incorporated by reference into the SYSTEM9 Terms of Service. Capitalized terms not defined herein have the meanings set forth in the Terms of Service.

1. Permitted Use

You may use the Services only for lawful purposes and in accordance with your subscription agreement, these Terms, and all applicable laws and regulations. The Services are intended for use by organizations for legitimate business, government, defense, and research purposes.

2. Prohibited Activities

You agree not to engage in any of the following prohibited activities:

2.1 Illegal Use

Using the Services for any purpose that violates any applicable local, state, national, or international law or regulation, including laws regarding the transmission of data or software, export control, privacy, or anti-corruption.

2.2 Unauthorized Access

Attempting to access, probe, or test the vulnerability of the Services or any related system or network without proper authorization, or breaching any security or authentication measures. This includes accessing data not intended for you or logging onto a server or account that you are not authorized to access.

2.3 Reverse Engineering

Reverse engineering, decompiling, disassembling, or otherwise attempting to derive the source code, algorithms, data structures, or underlying ideas of the Services or any component thereof, except to the extent expressly permitted by applicable law notwithstanding this restriction.

2.4 Benchmark Disclosure

Publishing or disclosing performance benchmarks, test results, or comparative analyses of the Services without the prior written consent of SYSTEM9. You may conduct internal benchmarking for your own evaluation purposes, but may not share results externally without authorization.

2.5 Service Interference

Interfering with or disrupting the integrity or performance of the Services, including overloading, flooding, or denial-of-service attacks, or any action that imposes an unreasonable or disproportionately large load on the infrastructure supporting the Services.

2.6 Malicious Code

Uploading, transmitting, or distributing any viruses, worms, trojan horses, ransomware, spyware, adware, or other malicious code or programs designed to interrupt, destroy, or limit the functionality of the Services or any connected systems.

3. Security Testing

SYSTEM9 recognizes that customers may need to conduct security assessments as part of their compliance obligations. Security testing of the Services is permitted under the following conditions:

• You must obtain prior written authorization from SYSTEM9 before conducting any security testing, penetration testing, or vulnerability scanning against the Services.
• Testing must be limited to your own tenant, data, and environments. You may not test shared infrastructure or other customers' environments.
• You must promptly report any vulnerabilities discovered during authorized testing to SYSTEM9 at security@system9.ai.
• Testing must not degrade the performance or availability of the Services for other customers.

4. Network Abuse

You may not use the Services to engage in any form of network abuse, including but not limited to:

• Sending unsolicited bulk messages (spam) or engaging in phishing.
• Operating open proxies, open relays, or anonymizing services designed to facilitate abuse.
• Engaging in IP address spoofing, packet manipulation, or forged header information.
• Harvesting or collecting information about third parties without their consent.

5. Export Compliance

You must comply with all applicable export control and trade sanctions laws when using the Services. You may not use the Services to store, process, or transmit data in violation of the U.S. Export Administration Regulations (EAR), the International Traffic in Arms Regulations (ITAR), or any other applicable export control regime. You are solely responsible for ensuring that your use of the Services complies with all applicable export control requirements.

6. Monitoring and Enforcement

SYSTEM9 reserves the right, but is not obligated, to monitor use of the Services for compliance with this AUP. We may investigate any suspected violation of this AUP and take appropriate action, including:

• Issuing a warning to the account holder.
• Suspending or restricting access to the Services, in whole or in part.
• Terminating your account and access to the Services.
• Reporting the activity to appropriate law enforcement authorities.
• Pursuing any other remedies available under the Terms of Service or applicable law.

7. Violations

If you become aware of any violation of this AUP, whether by you or by a third party, you must immediately notify SYSTEM9 at contact@system9.ai. SYSTEM9 will investigate reported violations and determine appropriate responses at its sole discretion. Failure to report a known violation may itself constitute a breach of this AUP.

8. Contact

If you have questions about this Acceptable Use Policy, please contact us:

System9, Inc.
Email: contact@system9.ai
Website: system9.ai