Acceptable Use Policy

This Acceptable Use Policy supplements the VigilChain Terms of Service and applies to all use of the VigilChain Cloud Service. Capitalized terms used but not defined here have the meanings given in the Terms of Service or the Common Paper Cloud Service Standard Terms Version 2.1 incorporated into the Terms of Service by reference.

In addition to the Restrictions on Customer in Section 2.1 of the Standard Terms, Customer and its Users agree to the following.

1. Authorized Use

Customer may use the Cloud Service solely for legitimate application security posture management within its organization. Access credentials — including login credentials and API keys — are personal to the assigned User and must not be shared with unauthorized parties.

2. Testing of Third-Party Systems

Customer must not use the Cloud Service to conduct security or vulnerability testing of third-party systems, networks, or services for which Customer does not have explicit authorization from the system owner. The Cloud Service is intended to scan code and infrastructure that Customer owns, operates, or is otherwise authorized to assess.

3. AI-Assisted Features

The Cloud Service uses artificial intelligence and machine learning models for vulnerability classification, risk scoring, and triage recommendations. Customer acknowledges:

• AI-generated outputs are advisory and must be reviewed by qualified personnel before Customer acts on them in security-critical decisions.
• The Cloud Service processes Customer Content — including source code excerpts and finding metadata — through third-party AI services in the course of providing AI-assisted analysis. Such processing is disclosed in Provider's Privacy Policy and Subprocessor List, and is subject to the data-handling terms of those third-party services.
• Provider does not use Customer Content to train, fine-tune, or enhance artificial intelligence or machine learning models owned or operated by Provider, without Customer's prior written consent. See the modification of Section 1.6 (Machine Learning) in the Terms of Service for the authoritative statement.

4. Compliance with Applicable Law

Customer is responsible for ensuring its use of the Cloud Service complies with all applicable laws, regulations, and the internal security and data-handling policies of its organization.

5. Updates to this Policy

Provider may update this Acceptable Use Policy from time to time. Updates are subject to the same notice terms that apply to updates of the Terms of Service. The current version is always available at vigilchain.com/acceptable-use-policy.

Changelog

• v1.0 — April 21, 2026. Initial publication. Replaces the standalone in-product AUP that was previously presented on the /accept-aup page.