Acceptable Use Policy

Purpose

This Acceptable Use Policy establishes the rules for lawful, safe, and responsible use of Mitoma Systems. It applies to the website, Service, APIs, support channels, and any preview, trial, or paid access we provide.

For use governed by the Terms of Service, this policy forms part of those Terms. If a Customer Agreement incorporates this policy, the Customer Agreement controls to the extent of any conflict. Capitalised terms have the meanings given in the applicable Terms or Customer Agreement.

• Terms of Service

Illegal or harmful use

• Do not use Mitoma Systems to violate laws, regulations, procurement rules, export controls, sanctions, intellectual property rights, privacy rights, security obligations, or contractual duties.
• Do not upload unlawful, harmful, deceptive, abusive, defamatory, infringing, or malicious content.
• Do not use the service to harass, impersonate, mislead, spam, phish, or social-engineer anyone.

Safety-critical and autonomous systems

• Do not treat Mitoma Systems output as final engineering approval, safety certification, operational clearance, or autonomous runtime authority.
• Do not deploy, procure, certify, or operate a system based only on Mitoma Systems output without qualified engineering review, testing, validation, and customer approval.
• Do not use Mitoma Systems to bypass human approval, safety gates, certification processes, or legally required assurance steps.

Prohibited missions and weapon elements

Mitoma Systems may support lawful commercial, industrial, security, and defence platforms, but it does not support the prohibited purposes or weapon elements below. Clearly prohibited requests may be refused; genuinely ambiguous dual-use requests may be paused for human review.

• Do not use Mitoma Systems to design, develop, optimise, or operate weapons of mass harm, including nuclear, radiological, chemical, or biological weapons or their delivery systems.
• Do not use Mitoma Systems to create a system whose purpose is to select and engage human targets without meaningful human authorisation, or to design anti-personnel autonomous weapons.
• Do not use Mitoma Systems for mass civilian surveillance, rights-violating biometric profiling, political repression, or targeting people based on protected characteristics, journalism, protest, or lawful expression.
• Do not use Mitoma Systems to design warheads, fuzes, detonators, arming or firing logic, weapon-release mechanisms, munitions guidance, lethal-payload delivery, kill-chain optimisation, or other anti-personnel weapon elements. A permitted autonomous platform may still be separated from and processed without prohibited weapon elements.
• Do not use Mitoma Systems to defeat safety interlocks, falsify certification or compliance evidence, or evade sanctions, export controls, or controlled-data restrictions.

Controlled and classified material

• Do not submit classified, export-controlled, ITAR, EAR, Defence-controlled, controlled technical, or similarly controlled data unless a Customer Agreement and approved environment expressly permit that data class.
• Do not use Mitoma Systems to evade export-control, defence-trade, procurement, sovereignty, residency, or security-classification obligations.

Security abuse

• Do not attempt unauthorised access, vulnerability exploitation, credential theft, scraping, automated account creation, denial of service, resource exhaustion, abusive API use, malware distribution, or interference with Service integrity.
• Do not probe, scan, or test the Service except under a written security testing agreement or to the extent expressly permitted by our published responsible disclosure guidance.
• Do not bypass access controls, rate limits, entitlement checks, audit trails, paywalls, or workspace boundaries.

• Responsible disclosure guidance

Data and IP rights

• Do not upload data unless you have the rights and permissions needed for Mitoma Systems to process it.
• Do not submit third-party confidential information, personal information, or regulated data unless your organisation is authorised to do so and the relevant agreement permits it.
• Do not infringe or misappropriate another person's intellectual property or Confidential Information, including by unlawfully copying, extracting, reverse engineering, or recreating proprietary designs or datasets.

Platform integrity

• Do not resell, sublicense, frame, or provide service-bureau access unless your agreement permits it.
• Do not reverse engineer, decompile, or attempt to derive source code or non-public models except to the extent such restrictions are prohibited by applicable law.
• Do not intentionally manipulate or misuse AI-assisted features to bypass safety or policy controls, deceive reviewers, or generate unlawful or deliberately unsafe engineering Output.
• Do not intentionally falsify, fabricate, manipulate, or misrepresent engineering evidence, decision records, verification results, audit trails, provenance, uncertainty, or Output in a way that could mislead reviewers or decision-makers.

Enforcement

We may remove content, throttle usage, suspend access, terminate access, preserve evidence, or notify affected parties where reasonably necessary and proportionate to protect the Service, customers, public safety, legal compliance, or security.

Where reasonably practicable, we will give prior notice and the reason for enforcement. We may act immediately where delay would create an urgent legal, security, safety, or service-integrity risk.

We will limit enforcement to the scope and duration reasonably necessary. Where access has been suspended, we will restore it promptly after the issue is resolved, subject to applicable law and any termination right.

If you believe a policy classification or refusal is incorrect, contact info@mitoma.systems with enough context for us to review it. We may request further information or route an ambiguous dual-use request to qualified human review; a human review does not require us to permit a clearly prohibited use.

Questions about this policy can be sent to info@mitoma.systems.