Acceptable use

This policy applies to everything recorded and done through the platform. It forms part of the terms.

Data about a person you have no lawful basis to hold, or data about people who are not connected to your organization.

Special category data beyond what the product provides for and what your obligations require, and never in a general-purpose field to avoid the controls on the fields intended for it.

Covert records about an individual that you would not be prepared to disclose to them if asked.

Monitor individuals in ways you have not told them about, or to build a surveillance record out of availability, activity or access data.

Make automated decisions about pay, promotion, discipline or dismissal, or to manufacture a justification for a decision already taken.

Attempt to reach another organization's records, or to probe the platform outside the responsible disclosure process.

Resell raw platform capacity as your own infrastructure. Agencies and advisers managing several client organizations are expected and provided for; that is a different thing.

You may not attempt to use the assistant to reach data outside your own permissions, or to place instructions in documents, form submissions or imported records intended to change how it behaves. That content is treated as data by design, and attempting it is a breach of this policy regardless of whether it works.

We would rather tell you about a problem than suspend an account. Where we can, we will contact you first. Where there is active harm to the people whose data you hold, we may act first and tell you immediately afterwards.