Acceptable Use Policy (AUP)

When utilizing our automated website intelligence crawlers and technical forensic audit tools:

• Authorized Auditing Only: You may only submit domain URLs that you own, operate, or have received explicit written permission to audit from the domain owner.
• No Denial-of-Service or Stress Testing: You must not configure crawler parameters or concurrency settings with the intent or effect of degrading target host infrastructure or overwhelming third-party webservers.
• Respect for Server Directives: AWI honors standard robots.txt crawl-delay directives and automatically backs off upon encountering HTTP 429 (Too Many Requests) or HTTP 503 error codes. Bypassing these throttles is strictly forbidden.
• No Exploitation of Vulnerabilities: If an AWI scan surfaces an unpatched security vulnerability, exposed database endpoint, or private credential in target code, you must not exploit, exfiltrate, or publicize such data.

Our AI Workforce agents (including AI Commander, Lead Hunter, Telecaller AI, and Content Multiplexers) must not be configured, instructed, or deployed to:

Outbound communications initiated via our CRM connectors, email multiplexers, or AI Telecaller voice systems must adhere to the highest global anti-spam and telecom hygiene standards:

• Prior Express Consent: You must possess verifiable opt-in records for every prospect contacted via automated voice or SMS workflows in accordance with the United States Telephone Consumer Protection Act (TCPA) and Indian TRAI Telecom Commercial Communications Regulations (TCCR).
• Unsubscribe & Opt-Out Mechanisms: All commercial email sequences must include a functional, one-click unsubscribe mechanism, valid physical company postal address, and clear sender identity.
• National DND Compliance: Automated voice dialing against verified National Do Not Call registries is prohibited without documented exemptions.

Users are strictly prohibited from engaging in any activity that compromises the security, availability, or multi-tenant isolation of Amaris infrastructure:

• API Key Sharing & Subleasing: Your assigned API credentials are for your authorized workspace team only. Subleasing, public broadcasting on GitHub repositories, or resale of raw Amaris API endpoints without an enterprise OEM license is a breach of contract.
• Unauthorized Penetration Testing: Running automated vulnerability scanners, fuzzers, or penetration test harnesses against Amaris servers without prior written authorization from our Chief Information Security Officer (security@amarisbrand.com) is prohibited.
• Circumventing Rate Limits: Core API endpoints are rate-limited to 60 requests/minute and AI inference to 10 requests/minute per workspace. Using proxy rotators or distributed nodes to bypass these safeguards will trigger an automated permanent IP ban.

Amaris reserves the right to review automated audit logs, traffic patterns, and outbound communication queues to ensure adherence to this policy.

To report suspected abuse, spam, or malicious activity originating from Amaris platform IP ranges, please contact our Trust & Safety desk immediately at abuse@amarisbrand.com.