Acceptable Use Policy

You may use Asyrx only for lawful, authorized, and legitimate business purposes. You may not use Asyrx to harm people or systems, evade security controls, facilitate unlawful conduct, or materially interfere with Asyrx or third-party services.

• Accessing, probing, scanning, or testing systems without authorization, except good-faith research expressly permitted by the Asyrx Responsible Disclosure policy.
• Attempting to bypass authentication, authorization, rate limits, tenant isolation, API-key restrictions, sandbox limits, or other security controls.
• Introducing malware, ransomware, destructive code, malicious payloads, credential-stealing tools, or intentionally harmful automation.
• Using Asyrx to facilitate unauthorized access, privilege escalation, credential abuse, data theft, or compromise of third-party systems.
• Using Asyrx outputs as part of an unlawful cyberattack or to conceal malicious activity.

• Submitting personal data without a lawful basis or required rights, notices, or permissions.
• Using the Services for unlawful surveillance, stalking, harassment, discrimination, or invasive profiling.
• Submitting passwords, authentication secrets, private cryptographic keys, or payment-card data except where a specifically supported feature requires it and appropriate safeguards are in place.
• Attempting to access another customer’s data, assessments, policies, agents, API logs, or configuration.
• Using Asyrx to infer or act on highly sensitive personal attributes in violation of law.

You may not use the Services to facilitate illegal transactions, sanctions evasion, fraud, extortion, trafficking, unlawful weapons activity, or other prohibited conduct. You may not represent Asyrx output as a governmental, regulatory, legal, financial, medical, or other professional authorization.

• Do not represent an Asyrx score or recommendation as proof that an action is safe, lawful, compliant, non-fraudulent, or authorized.
• Do not claim that Asyrx approved, denied, blocked, or executed an action unless a separately contracted Asyrx product actually performed that function and the statement is accurate.
• Do not remove or alter material warnings or limitations in a way that misleads users about the nature of the assessment.

• Do not generate abusive traffic, denial-of-service activity, excessive automated requests, or workloads intended to degrade service for others.
• Do not evade quotas, create duplicate accounts to defeat limits, or resell sandbox access without authorization.
• Do not use evaluation environments for production-scale workloads without written approval.

Except to the extent a restriction is prohibited by applicable law or expressly permitted in writing, you may not copy, reverse engineer, decompile, extract, or attempt to reconstruct proprietary Asyrx source code, scoring logic, model weights, risk-engine internals, or non-public APIs. You may use documented APIs and SDKs as permitted by your agreement.

Your use of Asyrx with Salesforce, Shopify, GitHub, cloud providers, or other third-party platforms must comply with the third party’s terms and your authorization to access that system. A demonstration of a use case does not grant rights to access or modify a third-party platform.

Asyrx may investigate suspected violations using proportionate technical and account information. We may limit, suspend, or terminate access; revoke API keys; preserve evidence; or report unlawful conduct where reasonably necessary. Where practical and appropriate, we may provide notice and an opportunity to cure non-urgent violations.

Report suspected abuse of Asyrx to info@asyrx.com. Security vulnerabilities should be reported through the Responsible Disclosure process, also at info@asyrx.com.

Asyrx may update this AUP as threats, Services, or legal requirements change. Material changes will be posted with an updated date.