Acceptable Use Policy

This policy is part of the Terms of Service. It applies to every Member and every Agency using the ROK platform.

ROK exists so that people doing dangerous work can trust what is on their screen. Most of this policy follows from that.

You must not

Misuse content or access

• Publish, through your Agency's tenant, content you do not have the right to publish, or content intended to mislead the people who will act on it.
• Share your sign-in, an access code, or exported content with anyone your Agency has not authorised to receive it.
• Access, or attempt to access, another Agency's tenant or another Member's account.
• Scrape, bulk-download or redistribute content outside the Service except through the export and print features your Agency has enabled.

Attack or interfere with the Service

• Probe, scan or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, without our written permission.
• Send malware, run automated traffic that degrades the Service, or attempt to overwhelm it.
• Interfere with the review and approval workflow, including attempting to forge an approval, a review date or an acknowledgment, or replaying device records to misstate when something happened.

Use it for things it is not for

• Store or process payment card numbers, health records, or government identifiers in content or profile fields.
• Use the Service to harass, threaten or discriminate against anyone, including through comments, badge names or recognition features.
• Resell, sublicense or offer the Service to third parties, or use it to build a competing product.
• Use the Service in breach of any law, including sanctions and export control.

Agencies must

• Keep their membership current: remove people who have left, and review group permissions when roles change.
• Make sure anything marked critical or requires acknowledgment is actually reviewed by someone qualified before it is published.
• Have the right to collect and view the activity records the Service gives them about their Members.

Reporting

If you see content or behaviour that breaches this policy, tell your Agency's administrator first; they can act fastest. For anything involving the security of the Service itself, email [SECURITY CONTACT EMAIL]. We do not pursue good-faith security researchers who report responsibly and avoid accessing other customers' data.

Enforcement

We may remove content, suspend a Member or suspend a tenant where we reasonably believe this policy has been breached. We will usually tell the Agency's administrators first and work with them; we will act without notice where there is a risk to people's safety, to other customers, or where the law requires it. Repeated or serious breaches may end the Agency's agreement with us.

Contact

[ENTITY] · [LEGAL CONTACT EMAIL]