Acceptable Use Policy

1. You must not

• •Share a login, or let anyone use the Service who is not authorised by you.
• •Resell, republish, sublicence or distribute the policy library outside your organisation.
• •Use the content to build, train or supply a competing product.
• •Bulk-download, scrape or systematically extract content beyond ordinary operational use.
• •Attempt to access another organisation's data, or probe, scan or test the security of the Service without our written permission.
• •Introduce malware, or interfere with the Service's operation or another customer's use of it.
• •Upload unlawful content, or content you have no right to place in a third-party system.
• •Remove copyright lines or licence references from exported documents.
• •Use the Service to send unsolicited marketing.

2. Data minimisation

Put in only what you need. Risk assessments, incidents and audits can be recorded against initials or a reference rather than a full name, and we recommend that. Do not upload payroll files, passport scans, DBS certificates or anything else the Service does not need.

3. Security testing

We welcome responsible disclosure. Email hello@careshieldcompliance.co.uk before testing anything. Do not test with another customer's data, do not run denial-of-service tests, and give us reasonable time to fix what you find before disclosing it.

4. Enforcement

We monitor export volumes, session counts and access patterns. Where we see extraction or sharing we will contact you first if the risk allows, and suspend immediately if it does not. Serious or repeated breach ends the contract without refund and we reserve all other remedies, including in respect of our intellectual property.