Customer Acceptable Use Policy (AUP)

Revision History

This Customer AUP applies to every customer using Silux Connect ("the Service") and to every end user the customer makes accountable for compliance under their MSA. It is incorporated by reference into the MSA. Capitalized terms not defined here have the meaning given in the MSA.

1. You May

• Use the Service for legitimate IT operations, remote support, helpdesk, MDM, patching, and scripting on systems you own or are authorized to support.
• Configure the Service for your organization's compliance requirements (HIPAA, PCI DSS, GDPR, etc.) and request the contractual addenda needed to operate accordingly.
• Build integrations through the documented APIs.
• Run penetration tests against your own tenant after registering the test with security@silux.io.

2. You May Not

• Use the Service to access systems you do not own or are not authorized to support.
• Use the Service to deliver malware, conduct credential phishing, or perform any other unauthorized intrusion.
• Use the Service for surveillance of individuals beyond what is necessary and lawful for your IT operations and properly disclosed to your end users (e.g., in their employee privacy notice).
• Use the Service to process child sexual abuse material, content that incites violence, or any other content that is unlawful in the jurisdictions where you or your end users operate.
• Use the Service to bypass technical protection measures on third-party systems.
• Reverse engineer the Service or its protective measures except to the extent permitted by law.
• Resell, sublicense, or "white label" the Service without a written reseller agreement.
• Exceed reasonable rate limits or consume materially more resources than your subscription provides.
• Use the Service to mine cryptocurrency or operate a botnet command-and-control.
• Submit to the AI assistant content you do not have the right to share or that violates this AUP.

3. Compliance With Law

You will comply with all applicable laws when using the Service, including data protection, sanctions, export control, employment, and computer-misuse laws. You are responsible for any required data subject notices, employee notifications, or works-council consultations in your jurisdiction.

4. Security Hygiene

• Maintain MFA on all admin accounts.
• Maintain agent and client software at currently supported versions.
• Use the role-based access control we provide rather than sharing accounts.
• Configure recordings, retention, and data residency in line with your compliance posture.
• Promptly report security concerns to security@silux.io.

5. Customer Data and Sensitive Categories

• You are the controller of the personal data you process through the Service. We are the processor.
• If you process special-category data (Art. 9 GDPR) or PHI (HIPAA), you must execute the appropriate addenda (dpa-template.md, baa-template.md).
• Do not submit payment card data or full PANs into freeform fields. Use the validated payment integrations.

6. Investigations and Suspension

If we have reason to believe your use violates this AUP, we may, in our discretion and as proportionate to the circumstances:

• Contact you to investigate.
• Temporarily suspend the offending activity or session.
• Suspend your access to the Service while we investigate.
• Terminate your access if violations are material and unremediated.

We strive to give notice and an opportunity to cure unless doing so would expose us, other customers, or affected individuals to imminent harm.

7. Reporting Abuse

To report abuse of the Service, email abuse@silux.io. We respond to actionable reports within one business day.

8. Updates

We may update this AUP from time to time; we will give at least 30 days' notice of material changes.