Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs use of Adanse, an AI-powered business platform operated by Stnikens Ltd, a company registered in England and Wales under company number 12073283, with its registered office at Blackwood Grove, Halifax.

This AUP forms part of the agreement governing your use of Adanse and should be read together with the:

Adanse Terms of Service;

Adanse Privacy Policy;

Adanse Cookie Policy;

Adanse Compliance & Trust Statement;

applicable Data Processing Agreement;

applicable order form; and

any other agreement between Stnikens Ltd and your organisation.

By accessing or using Adanse, you agree to comply with this AUP.

Adanse enables organisations to connect business systems, data, knowledge and processes and to use AI Employees, AI agents, Business Memory, workflows, integrations and automation to perform business activities.

Because Adanse may interact with business-critical systems and information, users must use the platform responsibly, lawfully and securely.

This AUP is designed to protect:

Adanse customers;

authorised users;

individuals whose information may be processed;

connected systems;

third-party services;

Stnikens Ltd;

Adanse infrastructure; and

the wider digital ecosystem.

This AUP applies to:

customers;

authorised users;

customer administrators;

developers;

API users;

integration users;

contractors;

partners; and

anyone accessing or using Adanse through an authorised account.

Organisations using Adanse are responsible for ensuring that their authorised users comply with this AUP.

You may use Adanse only:

for lawful purposes;

in accordance with applicable agreements;

within your authorised permissions;

in accordance with applicable laws and regulations; and

in a manner that does not cause unreasonable harm to other users, systems or individuals.

You must not use Adanse to engage in, facilitate, promote or materially assist unlawful activity.

This includes using Adanse to:

commit fraud;

facilitate financial crime;

unlawfully obtain property or services;

breach sanctions or export-control requirements;

unlawfully discriminate;

harass or threaten individuals;

infringe privacy rights;

violate intellectual-property rights;

unlawfully intercept communications;

evade regulatory requirements; or

otherwise violate applicable law.

You must not use Adanse to:

gain unauthorised access to accounts, systems, networks or information;

access information beyond your authorised permissions;

bypass authentication;

circumvent access controls;

escalate privileges without authorisation;

exploit security vulnerabilities;

acquire credentials unlawfully;

access another customer's environment;

manipulate tenant-isolation mechanisms; or

instruct an AI Employee or agent to perform any such activity.

You must not use Adanse to intentionally:

create malware for harmful purposes;

deploy ransomware;

distribute malicious software;

establish botnets;

compromise systems;

deploy destructive payloads;

exfiltrate information unlawfully;

install unauthorised persistence mechanisms; or

interfere with the availability or integrity of systems.

Legitimate defensive security analysis may be permitted where you are authorised to perform it and your activity does not violate these Terms or applicable law.

You must not use Adanse to:

conduct phishing campaigns;

steal credentials;

impersonate individuals deceptively or unlawfully;

create fraudulent business communications;

manipulate individuals into disclosing confidential information;

generate fraudulent invoices or payment instructions;

conduct business-email compromise;

facilitate identity theft; or

intentionally deceive another person for unlawful financial or commercial gain.

You must not use Adanse to process personal data where you lack an appropriate lawful basis or other legal authority.

You are responsible for determining:

whether personal data may lawfully be processed;

what information should be provided to affected individuals;

whether consent is required;

appropriate retention periods;

whether a Data Protection Impact Assessment is required;

whether special-category information is involved;

whether international-transfer restrictions apply; and

whether the proposed AI processing is appropriate.

Adanse may technically be capable of processing information that is particularly sensitive.

Customers should use additional care when processing information concerning matters such as:

health;

biometrics;

racial or ethnic origin;

political opinions;

religious or philosophical beliefs;

trade-union membership;

sexual orientation;

criminal allegations or convictions;

financial information;

authentication credentials; or

other highly sensitive information.

You must have appropriate legal authority, security controls and organisational safeguards before processing such information.

Users should not unnecessarily submit:

passwords;

private cryptographic keys;

authentication secrets;

API secrets;

payment-card security codes;

recovery codes; or

equivalent authentication credentials

into prompts, Business Memory, documents or other areas not intended for secure secret storage.

Where Adanse provides designated secrets or credential-management functionality, credentials should be stored through those mechanisms.

Adanse may enable organisations to create AI Employees or agents with varying levels of autonomy.

Customers are responsible for defining appropriate:

roles;

objectives;

instructions;

capabilities;

data access;

tools;

permissions;

approval requirements;

autonomy levels; and

execution boundaries.

You must not deliberately configure an AI Employee to perform activities that would be prohibited if performed directly by a human user.

An AI Employee must not be granted more authority than is reasonably necessary for its role.

For example:

An accounts-receivable AI Employee may require access to customer balances but may not require authority to modify payroll.

An application-support AI Employee may require access to incidents and knowledge articles but may not require unrestricted administrator access to production infrastructure.

Customers are responsible for implementing appropriate least-privilege controls.

Where you permit an AI Employee or workflow to execute actions without individual approval, you are responsible for evaluating:

the potential impact of those actions;

the systems involved;

whether errors can be reversed;

appropriate limits;

appropriate monitoring;

escalation processes;

exception handling; and

whether human approval remains necessary.

Autonomous functionality must not be used to circumvent legal or organisational accountability.

Appropriate human oversight should be maintained where AI activity may:

materially affect individuals;

create substantial financial commitments;

modify critical business records;

terminate or restrict services;

initiate significant external communications;

affect employment;

affect legal rights;

produce regulated decisions; or

create material operational risk.

Unless expressly agreed with Stnikens Ltd and appropriately governed, Adanse must not be used as the sole autonomous decision-maker for decisions concerning:

recruitment or employment;

dismissal;

employee performance sanctions;

lending or credit;

insurance eligibility;

healthcare;

legal rights;

access to essential services;

educational admission;

housing;

public benefits;

criminal justice; or

other decisions capable of producing significant effects on individuals.

Customers remain responsible for determining whether applicable laws permit or restrict their intended use.

Adanse and its AI outputs must not be represented as a substitute for appropriately qualified professional advice where such expertise is legally or practically required.

This includes:

legal advice;

medical diagnosis;

regulated financial advice;

tax advice;

accounting opinions;

safety-critical engineering advice; and

other regulated professional services.

AI may assist professionals, but appropriate professional judgement should remain in place.

You acknowledge that AI output may be incorrect, incomplete, misleading or inappropriate.

You must not knowingly:

represent unverified AI output as confirmed fact where doing so could cause material harm;

fabricate evidence;

fabricate regulatory approvals;

fabricate audit records;

fabricate professional qualifications;

fabricate legal authorities; or

intentionally use AI-generated false information to deceive others.

You must not use Adanse to knowingly infringe intellectual-property rights.

This includes intentionally using the service to:

reproduce protected content unlawfully;

distribute pirated software;

disclose trade secrets without authorisation;

remove rights-management information unlawfully; or

misappropriate confidential proprietary information.

You must not upload, retrieve or disclose confidential information through Adanse unless you are authorised to do so.

Customer administrators should consider access controls carefully when connecting repositories containing confidential material.

Information intentionally or automatically placed into Business Memory may subsequently be retrieved in relevant organisational contexts.

Customers must therefore configure Business Memory so that:

inappropriate information is not retained;

confidential information is properly permissioned;

personal information is handled appropriately;

outdated information can be corrected or removed where required; and

memory access respects organisational security boundaries.

You may connect Adanse only to systems for which you have appropriate authority.

You must not use Adanse integrations to:

access another organisation's account without permission;

bypass third-party restrictions;

scrape restricted information unlawfully;

defeat API controls;

violate third-party contractual restrictions; or

exceed permissions granted by the connected service.

Where Adanse provides API or MCP functionality, users must:

protect credentials;

comply with rate limits;

use appropriate authentication;

restrict access to authorised applications;

monitor integrations; and

revoke compromised credentials promptly.

You must not intentionally overload or abuse Adanse APIs, MCP interfaces or related infrastructure.

You must not:

probe Adanse infrastructure without authorisation;

conduct denial-of-service attacks;

interfere with availability;

circumvent rate limits;

reverse engineer security controls except where law expressly permits;

exploit vulnerabilities;

access source code unlawfully;

attempt tenant escape;

manipulate usage measurements;

evade subscription restrictions; or

interfere with logging and auditing.

Good-faith security research should be conducted only:

with appropriate permission;

within any published vulnerability-disclosure policy;

without accessing unrelated customer data;

without materially disrupting services; and

without exploiting vulnerabilities for commercial or malicious purposes.

Potential vulnerabilities should be reported privately to Stnikens Ltd.

You must not use Adanse in a way that materially degrades service for others.

We may apply:

rate limits;

concurrency limits;

storage limits;

model limits;

API limits;

automation limits; or

reasonable technical safeguards

to maintain security, stability and fair usage.

You must not attempt to circumvent:

subscription limits;

licensing restrictions;

permissions;

security policies;

AI Employee controls;

safety controls;

usage limits;

audit mechanisms; or

billing mechanisms.

You may not use Adanse to generate or distribute unlawful spam or mass unsolicited communications.

Where Adanse is used to support marketing or communications, customers remain responsible for complying with applicable direct-marketing and privacy laws.

You must not intentionally use Adanse to generate or distribute synthetic content for unlawful deception.

Where AI-generated or manipulated content could reasonably cause people to mistake it for authentic human-created or real-world content in circumstances where disclosure is legally required, users are responsible for providing appropriate transparency.

You must not intentionally use Adanse to unlawfully discriminate against individuals on the basis of protected characteristics.

Where AI is used to assist decisions involving people, customers should consider:

bias;

data quality;

representativeness;

appropriate testing;

human oversight; and

routes for review or challenge.

Adanse must not be used to exploit or endanger children.

Users must not use the service to create, distribute, solicit or facilitate unlawful child sexual abuse or exploitation material or related activity.

We may report suspected unlawful activity to appropriate authorities where required or permitted by law.

You must not use Adanse with the purpose of causing serious physical harm to people.

Adanse should not be relied upon as the sole control mechanism for safety-critical physical systems without appropriate engineering controls, human oversight and explicit contractual agreement.

Adanse must not be used to facilitate unlawful development, acquisition or use of weapons or other dangerous materials.

Legitimate regulated business activity remains subject to applicable law and any additional contractual restrictions imposed by Stnikens Ltd.

Users must comply with applicable sanctions, trade restrictions and export-control laws.

Adanse must not knowingly be used to provide prohibited services to sanctioned persons, entities or territories where doing so would violate applicable law.

Customers operating in regulated sectors remain responsible for evaluating whether Adanse is appropriate for their activities.

Availability of a technical capability does not constitute confirmation that its use is legally permitted in every jurisdiction or sector.

Stnikens Ltd may take reasonable measures to detect misuse of Adanse.

Where we reasonably believe this AUP has been breached, we may:

investigate;

request further information;

restrict functionality;

disable an integration;

suspend an AI Employee;

limit an account;

suspend service;

remove prohibited material where legally appropriate; or

terminate access in accordance with applicable agreements.

Where practicable and appropriate, we will seek to provide notice.

We may act without advance notice where reasonably necessary to:

address an active security threat;

prevent material harm;

comply with law;

protect another customer;

prevent unlawful access;

maintain service integrity; or

respond to an emergency.

Suspected abuse, security issues or violations of this AUP should be reported to Stnikens Ltd.

Before publication, Adanse should establish dedicated addresses such as:

security@adanse.ai

and/or

abuse@adanse.ai

We may modify this AUP as:

Adanse functionality evolves;

risks change;

legal requirements change;

AI capabilities develop; or

security requirements change.

Material changes will be communicated where appropriate.

Stnikens LtdOperating AdanseCompany number: 12073283Registered office: Blackwood Grove, HalifaxUnited Kingdom

Website: adanse.ai

A dedicated legal, security or abuse contact address should be inserted before publication.