Acceptable Use Policy

Draft v1 · Aug 2026. This Acceptable Use Policy (“AUP”) is part of the Terms of Service. It applies to every Customer and User of Evidentum. Customer is responsible for its Users and for how cameras, integrations, automation, and exports are configured.

1. Lawful surveillance only

• No unlawful surveillance, stalking, harassment, voyeurism, or intimidation
• No recording/monitoring in violation of notice, consent, workplace, or privacy laws
• No connecting cameras or systems you are not authorized to operate
• No monitoring spaces where recording is unlawful (e.g., bathrooms/changing areas where prohibited)
• No processing audio where prohibited or without required consent
• No personal/secret monitoring unrelated to Customer’s legitimate business security or operations

Customer alone is responsible for the legality of its camera deployment. Evidentum does not give legal advice on surveillance compliance.

2. No discriminatory profiling

• No discriminatory profiling or targeting of protected classes under applicable law
• No using AI Features or filters to justify prohibited discriminatory decisions

Lawful investigation of specific incidents, locations, or policy violations remains permitted.

3. Identity, biometrics, and AI outputs

• Do not treat Evidentum as facial recognition or biometric identification
• Do not represent outputs as definitive identification of a person
• Do not claim AI determined intent, guilt, or that someone “committed a crime” from AI alone
• Do not strip Known / Likely / Action / Unable context to mislead others about certainty
• Do not fabricate evidence or knowingly misrepresent facts via narratives or packages

Cross-camera links are observational/probabilistic and may not be the same person.

4. Evidence, exports, and third parties

• No tampering with Evidence, custody records, or audit logs
• No using insurance/police/executive packages to mislead insurers, police, or courts
• Do not claim Evidentum guarantees admissibility or files claims / contacts police for you (unless separately agreed in writing)
• No unlawful export or sharing of Customer Content

5. Automation and integrations

• No unauthorized physical-world actions (e.g., door locks / access control) without authority and approvals
• No disabling required approvals to evade safety or compliance obligations
• No using connectors/webhooks to exfiltrate data to unauthorized destinations
• No probing or abusing third-party systems through Evidentum

6. Illegal activity and harmful content

• No illegal activity, exploitation of minors, fraud, or threats of violence
• No malware, stolen credentials, or unlawful obstruction of investigations

7. Platform and security abuse

• No unauthorized access; no bypassing auth, entitlements, rate limits, or plan limits
• No attacking, disrupting, or degrading the Services or other Customers
• Vulnerability testing only via coordinated disclosure to security@evidentum.ai
• No reverse engineering except as permitted by law; no trademark misuse

8. Accounts, API, and marketplace

• No insecure credential sharing or unauthorized Users; revoke leavers promptly
• No false Accounts to evade enforcement or billing
• No API/SDK abuse, secret leakage, undocumented scraping, or webhook abuse
• No installing connectors without authority; no unlawful exfiltration via marketplace
• No reselling or service-bureau use unless an Order Form/partner agreement allows it

9. Enforcement

Evidentum may investigate suspected violations, disable violating content/configurations, suspend or terminate Accounts, report unlawful activity, and pursue other remedies under the Terms. Where feasible and lawful, we will notify Customer of material enforcement actions.

10. Reporting & contact

Abuse / AUP: legal@evidentum.ai or support@evidentum.ai · Security: security@evidentum.ai · Evidentum, Inc. · Address: [to be provided]

Full working draft: docs/legal/03-acceptable-use.md