Acceptable Use Policy

1.0 Purpose and scope

This policy applies to everyone who uses www.sovrint.com or the SOVRINT platform, including authorized users of customer workspaces. It forms part of the Terms of Service and any customer agreement. Customers are responsible for making sure their users follow it.

2.0 Permitted use

The platform is intended for lawful, institutional analysis of publicly available information: understanding where a narrative emerged, how it spread, who amplified it and what evidence supports or contradicts it. Typical permitted uses include crisis and incident communication, geopolitical and market risk assessment, brand and reputation analysis, due diligence and research, each conducted with a documented purpose and a lawful basis.

3.0 Prohibited uses

You may not use the Services, or any output from them, to:

• Harm individuals. Stalk, harass, threaten, intimidate, dox or defame any person, or compile information about a private individual with the intent or effect of doing so.
• Target lawful expression or protected characteristics. Identify, track or suppress journalists, activists, dissidents, whistleblowers or other people for exercising lawful rights, or single people out on the basis of race, ethnicity, religion, political opinion, sexual orientation, health, trade union membership or similar characteristics.
• Conduct unlawful surveillance. Monitor individuals where the law requires an authorization, warrant or consent you do not have, or in breach of the privacy, data protection or human rights laws that apply to you.
• Run influence operations. Create, coordinate or distribute disinformation, inauthentic accounts or manipulative content, or use insight from the platform to make such activity more effective.
• Make eligibility decisions. Use outputs as the basis for decisions about a person’s employment, credit, insurance, housing, education or similar eligibility. SOVRINT is not a consumer reporting agency and the platform is not designed for use regulated by the Fair Credit Reporting Act or equivalent laws.
• Access non-public content. Direct the platform at content that is not publicly available, or use credentials, sessions or access you are not authorized to use, to obtain it.
• Misrepresent outputs. Present unverified material as verified fact, alter preserved source records so that they misstate what was observed, or strip provenance from a brief to conceal its basis.
• Breach sanctions or export laws. Use the Services from, or for the benefit of, a sanctioned territory or restricted party, or export outputs in breach of applicable law.
• Handle prohibited material. Upload, preserve or distribute content that is unlawful to possess, including child sexual abuse material, or material that infringes another party’s rights where you have no lawful basis to hold it.

4.0 Protecting the service

You may not:

• probe, scan or test the security of the Services except as allowed by the Security Disclosure policy;
• attempt to access another customer’s workspace, another user’s account, or any system or data you are not authorized to access;
• share credentials, use another person’s account, or create accounts by automated means;
• introduce malware, or send content designed to exploit the Services or their users;
• scrape, crawl or bulk-extract the Services, or place load on them beyond normal interactive use or the interfaces we document;
• interfere with rate limits, abuse controls or the operation of the Services for other users.

5.0 Handling sensitive material

Treat workspace content according to your organization’s classification, need-to-know and export-control rules. Do not paste credentials, secrets or material that your organization prohibits from being held in a third-party service into the platform. Keep preserved source records intact so that the evidence chain remains reviewable. Where an investigation reveals content that is unlawful to possess, stop, preserve nothing further, and follow your organization’s reporting procedure and the law.

6.0 Reporting misuse

If you believe the Services are being used in breach of this policy, or that material about you is being handled in breach of it, contact security@sovrint.com. Include what you observed, when, and any identifiers that will help us locate the activity. We treat reports in confidence and do not disclose the reporter’s identity to the subject of the report unless the law requires it.

7.0 Enforcement

We may investigate suspected breaches, which can include reviewing audit logs and the relevant Customer Content. Depending on the severity we may warn the user or customer, remove content, suspend a user or workspace, or terminate the agreement. We will inform the customer administrator of action taken against their users unless doing so would compromise an investigation or is prohibited by law. Where the law requires it we will cooperate with public authorities. Customers may dispute an enforcement decision by contacting us; we will review it and respond.

8.0 Changes

We may update this policy as the Services, the law or the threat environment change. Material changes are notified in the same way as changes to the Terms of Service.