What you may not do with Z7 services: no illegal, abusive, infringing, or harmful use, plus specific limits on AI use. Violations can lead to suspension. This summary is for convenience and is not part of the contract.
About This Policy
This Acceptable Use Policy governs use of Z7 Services and is incorporated into the Z7 Solutions Statement of Work Terms of Business. Violation of this AUP is a material breach of those Terms.
1. Lawful Use Only
Client and Client’s users will not use Z7 Services to:
Violate any applicable federal, state, local, or international law
Infringe any third party’s intellectual property, privacy, publicity, or contractual rights
Send unsolicited commercial email, SMS, or voice communications in violation of the CAN-SPAM Act, the Telephone Consumer Protection Act, or other applicable law (spam)
Distribute malware, ransomware, viruses, or other harmful code
Engage in fraud, deception, or impersonation
2. Security
Client and Client’s users will not:
Attempt to gain unauthorized access to any system, account, network, or data
Probe, scan, or test the vulnerability of any system or network without authorization
Interfere with or disrupt service to any user, host, or network
Use any tool or method to circumvent Z7’s security or access controls
Share account credentials except as expressly authorized
Nothing in this Section restricts security testing, vulnerability assessment, or remediation that Z7 performs or authorizes under an SOW, or that Client performs on Client’s own systems with proper authorization.
3. Resource Abuse
Client and Client’s users will not:
Use Services in a manner that imposes an unreasonable or disproportionate load on infrastructure
Use Services for cryptocurrency mining without express written consent
Use storage or bandwidth in a manner inconsistent with the contracted scope
4. Content Restrictions
Client and Client’s users will not store, transmit, or process content that is:
Illegal, defamatory, obscene, or harassing
Child sexual abuse material (CSAM)
Designed to incite violence or unlawful activity
Processed or used in violation of FERPA, HIPAA, PCI DSS, GLBA, GDPR, or other applicable data-privacy or data-protection laws, except in accordance with the SOW, the applicable Schedule, the Data Processing Addendum, or a Business Associate Agreement
4.1 Child Sexual Abuse Material
The storage, transmission, processing, or facilitation of CSAM is strictly prohibited and is grounds for immediate suspension and termination without notice. If Z7 obtains actual knowledge of an apparent violation involving CSAM, Z7 will report it to the CyberTipline of the National Center for Missing and Exploited Children (NCMEC) as required by 18 U.S.C. 2258A, will preserve the report and associated material as required by law, and will cooperate with NCMEC and law enforcement as directed by law or legal process. Z7 will not access, copy, or transmit suspected CSAM except to the minimum extent necessary to make a required report or as directed by law enforcement or NCMEC. Nothing in this Policy requires Z7 to monitor Client content, and Z7’s obligations arise only on actual knowledge.
5. AI-Specific Use Restrictions
For Services involving Z7 Private AI or other AI components, Client and Client’s users will not:
Submit inputs designed or intended to extract Z7 or third-party system prompts, training data, model weights, or proprietary model behavior
Use prompt injection, indirect prompt injection, jailbreaking, or any other technique to bypass or manipulate the safety, content, security, or access controls implemented by Z7 or its AI providers
Systematically query, probe, or scrape the Services to extract, distill, replicate, or reverse engineer a model, its weights, or its behavior, or to build a competing or substantially similar model or dataset
Use any automated means to access the Services in excess of contracted limits, or circumvent rate limits, quotas, or usage controls
Train, fine-tune, or improve any model that competes with Z7’s offerings using outputs, content, or behavior obtained from Z7 AI Services
Use AI outputs to make an automated decision affecting an individual’s legal rights, employment, housing, credit, education access, healthcare, insurance, or other essential services without appropriate human oversight, consistent with Section 4.8 of the Terms
Submit to the Services any data Client is not authorized to disclose, or any regulated data outside the scope and safeguards agreed in the SOW
Generate content that violates applicable law, infringes third-party rights, or otherwise violates this AUP
6. Enforcement
A violation of this AUP is a material breach of the Terms. Z7 may, at its sole discretion and consistent with the suspension and termination rights in the Terms:
Investigate suspected violations and require Client’s reasonable cooperation
Remove, disable access to, or quarantine offending content or traffic
Suspend access immediately, in whole or in part, for a violation that poses an imminent risk of harm or where required by law, as provided in Section 4.9 of the Terms
For a violation not posing imminent harm, provide notice and the cure period stated in Section 7.3 of the Terms before further action
Terminate the affected Services for an uncured material violation, as provided in Section 7.3 of the Terms
Report violations to NCMEC or law enforcement as required by law
Z7 has no obligation to monitor Client content or use, but may do so to operate and protect the Services and to comply with law. Client is responsible for all use of the Services under its account, including by its users, and will cooperate with Z7’s investigation of a suspected violation. Client’s breach of this AUP is subject to the indemnity in Section 13.2 of the Terms.
