Acceptable Use Policy

Effective date: November 8, 2026. This AUP is incorporated into the MSA, online B2B terms and User Terms when the relevant agreement expressly says so. "Customer" and "Authorized User" have the meanings assigned in those agreements.

1. Authorized project/company scope

Do not access, enumerate or export any tenant, project, module, record, attachment, organization, role, location, subcontractor, contractor or linked object outside current explicit authority. An identifier guessed through a route, form or API does not give permission. Do not impersonate a client representative, superintendent or inspector; share login credentials; disable required MFA; or exploit invitation, project-switch, module-gating or administrative-account restrictions.

2. Data accuracy, authority and professional use

Only upload data that the user has lawful rights and business authority to handle. Do not falsify timestamps, inspections, corrective actions, permits, approvals, worksite injury records, training data or professional certifications. Do not use SiteAxis to make deceptive contractual or regulatory submissions. The Services assist with recordkeeping but do not replace qualified oversight of site safety, design, schedule, engineering or financial decisions.

3. Sensitive data, human subjects and privacy

Obtain required notices, permissions and approvals before uploading information about workers, witnesses, injuries, medical treatment, images, GPS/location or employees. Minimize exposure and use applicable role restrictions. Do not submit unrelated clinical records, government ID scans, payment-card secrets, raw private passwords, authentication tokens, unredacted private data in public support forms or other restricted datasets without separate written authorization and verified protections. Do not conduct surveillance, profiling, discriminatory evaluation or unauthorized scraping of employee information.

4. Files, attachments and malware

Do not upload malicious code, exploit payloads, malware, disallowed file types, unlawful content or files that violate intellectual property and confidentiality restrictions. Do not bypass file-type, size, malware or other security checks where applied or use oversized files to disrupt service. Respect project retention and document-control procedures. A supported file extension does not imply SiteAxis validates the legal meaning or correctness of its contents.

5. Platform and network security

No credential stuffing, brute-force login attempts, unauthorized automated traffic, API token harvesting, denial-of-service, unauthorized penetration testing, vulnerability scanning, bypass of rate limits, unauthorized reverse engineering, misuse of signed URLs or scraping. Report good-faith vulnerabilities under a report to security@siteaxis.app and obtain written authorization for tests. Reasonable safe disclosure will be handled according to published security-reporting instructions, not automatically treated as an AUP breach.

6. Integrations, exports and developer APIs

Connect only authorized external accounts, comply with provider terms and use scoped API entitlements. Do not expose keys, share data across customers without authorization, circumvent export limitations or use bulk retrieval to infer restricted project/tenant information. Revoke exposed credentials and notify SiteAxis immediately when compromise is suspected.

7. AI features and outputs

If enabled and permitted, do not send prohibited or unnecessary personal data to model providers; attempt to extract private training data, override instructions to reveal secrets, fabricate safety certificates or permit approvals, generate unlawful content or present AI outputs as guaranteed professional determinations. Follow the AI Addendum and qualified human validation requirements.

8. Messaging, notifications and abuse

No spam, phishing, fraudulent invitations, harassment, hate-related threats, unlawful communications, bulk unsolicited outreach or misuse of distribution lists, project notifications or contact data. Authorized emergency/safety reporting should not be blocked by ordinary marketing restrictions, subject to security and law.

9. Enforcement and appeals

Where required to protect people, rights, security or legal compliance, SiteAxis may investigate scoped evidence and proportionately limit an account, integration or workflow; urgent restrictions may precede notice. SiteAxis will seek to preserve lawful access to retained evidence and avoid blanket destruction. Where practicable, we provide notice to the enterprise contact and opportunity to address the issue, subject to legal/security constraints. Reports/appeals go to security@siteaxis.app. Any indemnities/liability obligations are governed by the applicable governing contract, not silently created through unilateral AUP edits.

10. Changes

Material changes are handled under the applicable customer/user contract and notice/acceptance rules. Current version: 2026-11-08. Superseded versions available through https://app.siteaxis.app/legal when that archive is operational.