Legal
Acceptable Use Policy
Effective 5 September 2026 · Chainsilience AI
01What this covers
This policy applies to everyone who uses Chainsilience AI, and it forms part of the Terms of Service. It exists because a multi-tenant risk platform holds commercially sensitive information about a lot of companies at once, and that only works if everybody stays in their own workspace.
02Lawful use
Do not use the platform to:
- break any applicable law, or help anyone else to;
- evade sanctions, export controls or customs obligations — the platform reports on trade restrictions, and using it to route around one is a misuse of it;
- infringe anyone’s intellectual property, privacy or confidentiality;
- harass, defame or endanger anyone, including through communications you draft in the product and then send.
03Other customers’ data
Do not attempt, by any means, to reach data belonging to another workspace. Specifically:
- do not manipulate identifiers, tokens or requests to see records outside your own
company_id; - do not attempt to make the AI features reveal another customer’s data through prompt injection or any similar technique;
- do not use credentials that are not yours, share your own, or keep using an account after your access should have ended.
If you come across another customer’s data through a fault of ours, stop, do not copy or keep it, and tell us at once at chainsilienceai@gmail.com. We will treat that as a responsible report, not a breach by you.
04Platform integrity
Do not:
- place load on the platform that degrades it for others, whether deliberately or through a runaway script;
- probe, scan or stress-test our infrastructure outside the terms of section 8, or circumvent authentication, rate limits or quotas;
- upload malware, or use the platform to distribute it;
- interfere with our providers — that includes using our AI features to send prohibited content to the inference providers we depend on.
05What you upload
- Upload only content you have the right to provide, including anything that identifies your staff, your suppliers’ staff or your customers.
- Keep personal data to a minimum. The platform models suppliers, sites and routes; it needs an action owner’s name, not their home address.
- Do not upload special-category data — health, biometric, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sexual orientation — or government identifiers, payment card numbers or credentials. The platform is not built to hold them, and we do not want them.
- Do not put real or confidential data into the shared public demonstration account.
06Extraction and resale
Do not:
- reverse engineer, decompile or attempt to derive the source of the platform, except so far as the law expressly permits despite a contractual restriction;
- systematically extract scores, reasoning, prompts or event data in order to train a model, reconstruct our scoring methodology, or build a competing product;
- resell, sublicense or redistribute the platform’s outputs as a standalone risk feed or data product.
Using outputs inside your own business — in your reports, your board packs, your conversations with suppliers — is exactly what the platform is for, and is not caught by this section.
07Automated access
You may access your own workspace programmatically through our API at a reasonable rate. Do not scrape the web interface, run concurrent sessions designed to multiply your quota, or share one account across a fleet of automated clients. If you need higher volume, ask us rather than working around a limit.
08Security research
We would rather hear about a vulnerability than read about it. You may test against your own workspace, provided you:
- do not access, modify or retain data belonging to anyone else, and stop as soon as you reach another tenant’s data;
- do not run denial-of-service tests, spam our users, or use social engineering against our staff or providers;
- give us a reasonable chance to fix the issue before disclosing it publicly;
- report what you find to chainsilienceai@gmail.com with enough detail to reproduce it.
Research conducted within these limits is authorised, and we will not pursue you for it. We do not currently run a paid bounty programme.
09Enforcement
If you breach this policy we may limit, suspend or terminate access — and where the breach is serious or ongoing, we may do so without prior warning. Where the circumstances allow, we will tell you what the problem is and give you a chance to fix it first.
Report suspected misuse to chainsilienceai@gmail.com.