Effective date: 7 September 2026.

Scope and relationship to other agreements

Aethis is an unincorporated project based in Singapore. This Acceptable Use Policy (AUP) covers use of the Aethis website and AI-agent governance services, including free Dev and paid product access where applicable. It forms part of the applicable Aethis Terms of Service.

Aethis applies policies, permissions, approval gates, usage controls, and evidence or Action Records around supported agent, model, and tool activity. This policy applies to activity you carry out or configure through those services and their connected systems. It does not guarantee that every action or integration is governed.

Where a separately signed customer agreement, order form, or enterprise agreement expressly overrides part of this AUP, that signed agreement controls to the extent of the conflict. Mandatory legal rights and obligations remain unaffected.

Customer responsibility

You are responsible for your authorised users and for the agents, workflows, prompts, policies, and instructions you configure; credentials and API keys you connect; permissions you grant; and systems and third-party services you connect to Aethis. Obtain the necessary authorisations and comply with applicable law and relevant provider terms.

Use appropriate credential protection, access permissions, and oversight for the workflows you enable. Notify us promptly if you suspect compromised credentials or abusive activity. You are not strictly liable for unauthorised use caused by an Aethis security failure. Each party remains responsible for its own acts, omissions, and applicable security obligations.

Unlawful and abusive activity

You must not use Aethis to carry out or facilitate:

Unlawful activity, fraud, phishing, scams, or deceptive impersonation, including falsely claiming an affiliation with Aethis.
Harassment, threats, unlawful discrimination, exploitation, or infringement of privacy, intellectual property, or other legal rights.
Unlawful trafficking, child sexual exploitation, terrorism, or other prohibited criminal activity.
Violations of applicable sanctions, export controls, or restrictions on access to systems, data, or technology.

These restrictions address conduct through the Services. They do not prohibit a whole industry or a lawful customer merely because its work is regulated or involves sensitive subject matter.

Security abuse

You must not use Aethis or connected services for:

Unauthorised access to accounts, systems, networks, or data, or theft or unauthorised use of credentials, API keys, or tokens.
Malware, ransomware, malicious code, or malicious exploitation of vulnerabilities.
Denial-of-service attacks, intentionally disruptive traffic, or interference that degrades Aethis or connected services.
Vulnerability scanning or penetration activity against systems without explicit authorisation from the party entitled to grant it.
Bypassing authentication, access controls, rate limits, usage limits, billing controls, or security restrictions without authorisation.

Legitimate security testing with explicit permission is allowed within its authorised scope. Permission to test your own system does not authorise testing Aethis or another provider’s systems. Follow our responsible disclosure guidance when reporting an Aethis vulnerability.

Governance-control integrity

Do not undermine controls that an authorised customer or administrator intends to apply. In particular, you must not:

Bypass or disable policy enforcement without authorisation, or circumvent approval gates or permissions.
Tamper with, delete, falsify, or conceal Action Records, audit evidence, or governance history to evade oversight or misrepresent activity.
Manipulate evidence or logs to misrepresent what an agent requested, was permitted to do, or actually did.
Deliberately configure agents or integrations to evade intended controls or obtain access to models, tools, systems, or data you are not authorised to access.

These restrictions do not prevent legitimate administrators from changing policies, adjusting permissions, configuring supported modes, or deleting data through authorised product functionality in accordance with applicable law and retention obligations.

AI-agent misuse

Do not use Aethis to facilitate unlawful autonomous actions, agent-driven fraud, phishing, spam, deceptive impersonation, or malicious exploitation of third-party systems. Prohibited uses also include harmful manipulation or exploitation of vulnerable people, unlawful social scoring, prohibited biometric surveillance or biometric or emotion categorisation, and other AI uses prohibited by applicable law.

Higher-risk or regulated workflows are not categorically prohibited. Their use must be lawful, authorised, and consistent with applicable safeguards, provider restrictions, and your agreement. You remain responsible for the oversight and permissions appropriate to your deployment.

Connected provider restrictions

Comply with applicable terms and usage restrictions of the model providers, tool providers, MCP servers, APIs, cloud providers, and other services you connect. Do not deliberately use Aethis to circumvent their safety, security, billing, or access restrictions.

You are responsible for reviewing and complying with those obligations. Aethis does not undertake to monitor or police every third-party contractual requirement, and the presence of a connection does not certify that a workflow is permitted by its provider.

Messaging and spam

Do not use Aethis or agents operating through it to send unsolicited bulk messages, phishing messages, fraudulent or deceptive outreach, or messages that violate applicable anti-spam or privacy law. Obtain any required permissions and respect applicable opt-outs.

These rules govern messaging activity facilitated through connected workflows; they do not describe Aethis as an email-hosting or mailing-list service.

Resource use and plan limits

Stay within applicable published plan limits, documented quotas, rate limits, and reasonable technical safeguards. Do not evade limits through coordinated accounts, misleading usage information, or other circumvention.

For sustained use beyond applicable limits, Aethis may throttle or restrict affected functionality or require an upgrade to continue that level of use. Any additional paid plan or charge must follow the applicable subscription or order terms; this policy does not create undisclosed fees or numerical quotas.

Free Dev access receives community support only, with no guaranteed ticket response or resolution time or SLA. Paid support commitments, if any, belong in an applicable separate agreement or service schedule.

Investigation and enforcement

We may investigate suspected violations and take proportionate action, including restricting or suspending affected functionality, or suspending or terminating accounts for material or repeated violations. Investigation and information handling remain subject to applicable law and contractual privacy and confidentiality obligations.

Where reasonable, we will give notice and an opportunity to remedy the issue. We may act immediately where reasonably necessary for security, fraud prevention, unlawful activity, imminent harm, abuse affecting other users or providers, or legal or regulatory requirements. We will explain the action when lawful and safe, and you may contact us to request review.

Good-faith criticism or disparagement of Aethis is not, by itself, a violation or ground for termination. Enforcement is based on conduct and applicable obligations, not compatibility with our brand.

Aethis may preserve or disclose information and cooperate with competent authorities where required by law or where reasonably necessary to address serious unlawful activity or imminent harm, subject to applicable law.

Any credits, refunds, or service-level remedies following an AUP-related restriction or suspension remain governed by the applicable plan, SLA, order form, or customer agreement. This policy does not impose an absolute exclusion of those remedies or create an SLA of its own.

Policy changes

We will provide reasonable advance notice of material changes where practicable. Changes required for legal, security, or emergency reasons may take effect sooner where necessary. We will update the date above and obtain renewed acceptance where required by law or an applicable agreement; minor changes do not automatically require reacceptance.

Contact

For questions, abuse reports, or review of an enforcement action, contact Aethis at hello@aethis.io. Avoid sending passwords, API keys, or unnecessary sensitive information in a report.