Acceptable Use Policy

Last updated: 1 May 2026 · Terms · Security

This policy is incorporated into the Terms. Material breach is grounds for immediate suspension; we'll contact you first unless the breach is actively causing harm.

You may not

• Use the Service to audit AWS accounts you don't own or have written authorization to audit.

• Reverse-engineer the agent loop, the corpus, or any underlying model with intent to clone or compete.

• Run penetration tests against CME infrastructure without explicit, written CME authorization (out-of-scope of CVD program).

• Upload customer documents containing personal data of EU/UK data subjects without a corresponding lawful basis under your privacy program.

• Use the Service to scan or attack third-party infrastructure that is not the AWS account you registered.

• Bypass plan-level rate limits, audit-allowance caps, or quota enforcement.

• Resell or sublicense access to the Service without a written reseller agreement.

• Process classified, export-controlled, or regulated-without-disclosure data without the appropriate Enterprise plan + counter-signed addendum.

You commit to

• Provisioning the read-only IAM role we publish (and only that role) for STS:AssumeRole.

• Rotating any IAM credentials granted to CME on a schedule no slower than every 365 days.

• Disabling tenants of users who leave your organization within 7 days of their last day.

• Reporting suspected security issues to security@cmeexample.com.

Consequence

Material breach: suspension of the affected feature within 24 hours of CME's good-faith determination, or immediate suspension if the breach is causing active harm. Customer has 14 days to cure non-emergency breaches in writing. Pattern of breach is grounds for termination + revocation of any unconsumed plan credit.