Acceptable Use Policy

1. Authorized Users

• Access is limited to individuals invited to your Custodia organization. Do not share login credentials or allow unauthorized parties to view protected data.
• Accounts must be secured with multi-factor authentication through Clerk. You are responsible for promptly revoking access for departed personnel.

2. Permitted Use

You may use the Service to document, track, and evidence compliance efforts within your own organization, invite auditors for read-only review, and generate reports intended for internal readiness.

The platform should not be used to host illicit materials, commit fraud, or violate contractual obligations with the U.S. Department of Defense or other customers.

3. Prohibited Activities

• Reverse engineering, attempting to bypass security controls, or probing the Service for vulnerabilities.
• Uploading malicious files, malware, or content that infringes the rights of others.
• Using automated scripts or scraping tools that degrade performance for other tenants.
• Sharing AI-generated policies or reports as if they are official determinations from Custodia, LLC.
• Misrepresenting your relationship with Custodia, LLC or implying endorsement of compliance readiness.

4. Data Ownership & Responsibility

You retain ownership of the data and evidence uploaded to the platform. You are responsible for ensuring you have lawful rights to store that information and that it does not contain unencrypted Controlled Unclassified Information (CUI) or International Traffic in Arms Regulations (ITAR) data unless contractual controls are in place.

5. Enforcement

Violations of this policy may result in suspension or termination of access, removal of offending content, and legal action where appropriate. Custodia, LLC reserves the right to update this policy at any time.