Acceptable Use Policy
Effective 2026-10-31
This Acceptable Use Policy (the "AUP") sets out how the Aitonomy platform, the Service and the Services provided by Aitonomy B.V. ("Aitonomy"), may and may not be used. It forms part of the Agreement. Capitalised terms have the meaning given in the SaaS Terms and Conditions or the Services Terms and Conditions, as applicable.
The AUP supplements the use restrictions already in those Terms (in particular clause 5 of the SaaS Terms). Where the AUP and those clauses overlap, both apply.
1. General restrictions
The Customer, and its Users, will not use the platform, the Service or the Services to:
1.1 act unlawfully or fraudulently, or for any purpose that infringes the rights of a third party, including intellectual property, privacy or confidentiality rights;
1.2 introduce malicious code, or interfere with or circumvent the security, integrity, governance controls or guardrails of the platform or the Service;
1.3 attempt to gain unauthorised access to any system, data or account, or to reverse engineer the Service except where mandatory law permits;
1.4 conduct load or penetration testing without Aitonomy's prior written consent;
1.5 resell, sublicense or make the Service available to a third party except as agreed in writing;
1.6 use the Service in a way that may damage or impair its availability for others; or
1.7 use the Service, its outputs or its Documentation to develop or train an AI model or service that competes with the Service, or to extract the instructions, skills or checks of the Service, except where mandatory law permits. This does not limit the Customer's ownership of its data or its rights to export it and to switch provider.
2. Fair use and service protection
2.1 The Customer uses the Service in line with fair use and the subscribed configuration set out in the Order Form. Aitonomy may apply reasonable rate, concurrency and volume limits, quotas and other technical safeguards to protect the Service and its availability for other customers.
2.2 The Customer does not use the Service to extract, download, scrape, mirror or replicate data in bulk, or to build a copy of a connected source, other than through the export mechanism provided for in the Terms.
2.3 Where the subscribed configuration provides interactive access to connected sources for Users, that configuration is used for interactive use by those Users. Automated, unattended or high-volume retrieval requires the configuration intended for it.
3. Data restrictions
3.1 The Customer provides only data it is entitled to provide and process for the agreed purpose, and warrants it has the necessary legal basis.
3.2 Special categories of personal data (Article 9 GDPR) and criminal-offence data (Article 10 GDPR) are provided only where the Order Form expressly provides for them, as clause 3.5 of the Data Processing Agreement requires, with the safeguards recorded there. They are never processed in a Scan.
3.3 The Customer does not provide data whose processing would breach a duty of confidentiality it owes to a third party, unless it is entitled to do so.
4. AI-specific restrictions
The following also apply:
4.1 Human oversight. The Customer maintains human oversight as set out in clause 5.2 of the SaaS Terms, and does not use an Agent to make a decision producing legal or similarly significant effects on an individual on a solely automated basis without appropriate human oversight.
4.2 Prohibited practices. The Service and the Services are not used for any practice prohibited under Article 5 of Regulation (EU) 2024/1689 (the AI Act), including social scoring, manipulative or exploitative techniques that cause harm, untargeted scraping of facial images to build recognition databases, emotion recognition in the workplace or education except where permitted, and biometric categorisation to infer sensitive characteristics.
4.3 High-risk uses. Under clause 5.9 of the SaaS Terms each party complies with the obligations under the AI Act that apply to it in its own role, and a use that would qualify as high-risk is put into production through the Service only where the Order Form provides for it. Before putting such a use into production, the Customer applies the safeguards, documentation and human oversight that apply to it for that use.
4.4 Unlawful or harmful content. The Service is not used to generate or distribute unlawful content, content that sexually exploits minors, targeted harassment, or deceptive content presented as authentic where that is unlawful.
5. Customer responsibility and enforcement
5.1 The Customer is responsible for ensuring that its Users comply with this AUP.
5.2 Where Aitonomy reasonably determines that use breaches this AUP or poses a security or legal risk, it may take proportionate measures, including suspending access, in accordance with clause 5.6 of the SaaS Terms and Conditions or clause 5.6 of the Services Terms and Conditions. Where practicable, Aitonomy gives prior notice and an opportunity to remedy.
6. Changes
Aitonomy may update this AUP. The version in force on the date of the Order Form applies for the duration of that Order Form's then-current term; material changes are notified in advance in the same way as for the SaaS Terms.
Aitonomy B.V. · KvK 42198573
Version 2026-04-02