Acceptable Use Policy

Summary

This policy keeps Evigate safe, lawful, and available for everyone. Use the service for its purpose: drafting cited answers to security questionnaires from your own evidence. Don't break the law, upload content you have no right to, try to reach other tenants' data, attack or overload the service, or abuse the AI compute and cost controls. Violations can lead to suspension or termination.

1. Scope

This policy applies to everyone who uses Evigate (hosted or self-hosted where it touches our infrastructure) and forms part of the Terms of Service.

2. Prohibited content

Do not upload, store, or process content that:

• You do not have the right to use or that infringes intellectual property,

  privacy, or confidentiality obligations.

• Is unlawful, defamatory, or harassing, or that you are contractually prohibited

  from disclosing.

• Contains malware, exploit code, or files engineered to harm systems (including

  decompression "bombs"; these are screened and rejected).

• Deliberately attempts to manipulate the AI into unsafe behavior (e.g. prompt

  injection intended to exfiltrate other data or bypass the human-review design).

3. Prohibited conduct

Do not:

• Use the service to violate any applicable law or regulation.
• Misrepresent AI-generated drafts as independently verified facts without your

  own review (see the AI Usage Policy).

• Resell, sublicense, or provide the hosted service to third parties except as

  expressly permitted.

• Use the service to build a competing product by scraping or systematically

  extracting it.

4. Security and platform integrity

Do not:

• Attempt to access, probe, or interfere with another organization's or project's

  data: tenant and project isolation is a hard boundary.

• Circumvent, disable, or test authentication, rate limiting, CSRF protection, or

  other security controls except under our Responsible Disclosure Policy.

• Conduct denial-of-service attacks, send automated traffic beyond documented

  rate limits, or otherwise impair availability for others.

• Reverse engineer the service except to the extent permitted by law or an

  applicable open-source license.

Authorized security testing is welcome only through our Responsible Disclosure Policy.

5. Fair use of AI compute and cost controls

The service meters usage and enforces per-plan limits and platform cost ceilings. Do not:

• Create multiple or throwaway accounts to evade Free-plan limits or platform AI

  spend controls ("farming" free compute).

• Run automated loops or pathological inputs designed to maximize AI/embedding

  spend on the platform's provider keys.

If you need higher volume, upgrade your plan or use BYOK so the compute runs on your own provider account.

6. BYOK and third-party terms

When you use your own provider keys (Anthropic, OpenAI, Gemini, a local Ollama endpoint, or a custom OpenAI-compatible endpoint), you must comply with that provider's own acceptable-use and usage terms. Data you send through a non-Anthropic BYOK key is governed by your agreement with that provider, not ours. You are responsible for content you send through your own keys. Embeddings always run on our local platform model and are never routed through a BYOK key.

7. Enforcement

We may investigate suspected violations and may throttle, suspend, or terminate access, remove offending content, or take other proportionate action, with notice where practical. Serious or illegal activity may be reported to authorities. Suspension for abuse does not entitle you to a refund where the Refund Policy does not provide one.

8. Reporting and contact

Report abuse or security concerns to security@logethos.com (vulnerabilities: follow the Responsible Disclosure Policy). General questions: support@logethos.com.

*Effective date: July 31, 2026 · Last updated: 2026-07-21 · Version 1.1*