Acceptable Use Policy

This Acceptable Use Policy (AUP) protects Certivo, its customers, and the individuals whose data is processed through the platform. It applies to every customer, account, API key and end user that accesses the Services. Capitalised terms have the meaning given in the Terms of Service.

You must not use the Services to:

• violate any applicable law, regulation, sanctions regime or third-party right;
• upload, distribute or process unlawful, infringing, defamatory or fraudulent material;
• introduce malware, ransomware or any code intended to disrupt or gain unauthorised access;
• harass, threaten or facilitate abuse of any person;
• probe, scan, penetration-test or otherwise attempt to breach the security of the platform without prior written authorisation;
• scrape, harvest, or systematically extract data other than through documented APIs within your entitlements;
• resell, sublicense or misrepresent the Services or their outputs as your own product without authorisation;
• impersonate any person or entity, or misstate your affiliation.

Before submitting any personal or verification data, you must have a valid lawful basis and, where required, the necessary notices and consents in place. You are responsible for the accuracy, legality and provenance of the data you submit and for honouring the rights of the individuals to whom it relates.

Sandbox and simulated verdicts are deterministic test data. They are clearly labelled in the UI and API and must never be relied upon for a real onboarding, screening, or compliance decision, nor represented to any regulator, auditor or counterparty as a genuine result.

You must respect published rate limits and fair-use thresholds, and must not circumvent, disable or interfere with authentication, quota, billing or security controls. Automated traffic must stay within your plan entitlements. Certivo may throttle or temporarily suspend usage to protect platform stability for all customers.

Violations may lead to warning, throttling, suspension or termination in line with the Terms, and Certivo may report unlawful activity to the competent authorities. To report suspected abuse or a violation of this policy, contact abuse@certivo.uk. Security vulnerabilities should instead be sent to our security team.