Acceptable Use Policy

• Protected health information (PHI) under HIPAA — we don't sign Business Associate Agreements yet.
• Other sensitive personal data — health information, biometric data, full payment card numbers, government ID numbers — and passwords or private keys. Redact them from evidence; if a record genuinely must stay, reference where it lives instead.
• Anything illegal, infringing, defamatory, or that you don't have the right to share.
• Malware, or files designed to harm the people who open them.

• Send questionnaires and invitations only to people you have a genuine business relationship with.
• Don't use questionnaires, invitations or reminders to send spam, phishing, or messages unrelated to compliance work.
• Don't impersonate another person or organization, including in organization or vendor names.

• Verify only email domains your organization controls. Publishing a verification record for a domain you don't control — or gaining access to someone else's DNS to do it — is prohibited.
• Don't use shared or role mailboxes to get access you wouldn't otherwise have.
• Don't share accounts, sign-in links or vendor portal links with people who aren't meant to use them.

• Don't probe, scan or test the service for vulnerabilities except under our disclosure process.
• Don't try to access another organization's data, bypass permissions, rate limits or other controls.
• Don't overload the service, scrape it, or use automated means to create accounts or organizations.
• Don't reverse engineer the service or use it to build a competing product.

We may remove content, suspend access or close accounts that violate this policy, and we may report illegal activity to the authorities. Where we can, we'll tell you what happened and give you a chance to fix it first. Report abuse to support@freshcutboards.com.