Acceptable Use Policy

This Acceptable Use Policy governs use of Z7 Services and is incorporated into the Z7 Solutions™ Statement of Work Terms of Business (the "Terms"). It applies to all Services, to the Products, platforms, and AI features that Z7 provides or manages, and to everyone who uses them under Client's account. The acceptable-use terms of Third-Party Products, including those of Microsoft, Google, and AI providers, also apply, as Sections 4.6 and 4.8 of the Terms provide. Violation of this AUP is a material breach of the Terms.

Client and Client's users will not use Z7 Services to:

• Violate any applicable federal, state, local, or international law
• Infringe any third party's intellectual property, privacy, publicity, or contractual rights
• Send unsolicited commercial email, SMS, or voice communications in violation of the CAN-SPAM Act, the Telephone Consumer Protection Act, or other applicable law (spam)
• Distribute malware, ransomware, viruses, or other harmful code
• Engage in fraud, deception, or impersonation

Client and Client's users will not:

• Attempt to gain unauthorized access to any system, account, network, or data
• Probe, scan, or test the vulnerability of any system or network without authorization
• Interfere with or disrupt service to any user, host, or network
• Use any tool or method to circumvent Z7's security or access controls
• Share account credentials except as expressly authorized

Nothing in this Section restricts security testing, vulnerability assessment, or remediation that Z7 performs or authorizes under an SOW, or that Client performs on Client's own systems with proper authorization.

Client and Client's users will not:

• Use Services in a manner that imposes an unreasonable or disproportionate load on infrastructure
• Use Services for cryptocurrency mining without express written consent
• Use storage or bandwidth in a manner inconsistent with the contracted scope

Client and Client's users will not store, transmit, or process content that is:

• Illegal, defamatory, obscene, or harassing
• Child sexual abuse material (CSAM)
• Designed to incite violence or unlawful activity
• Processed or used in violation of FERPA, HIPAA, PCI DSS, GLBA, GDPR, or other applicable data-privacy or data-protection laws, except in accordance with the SOW, the applicable Schedule, the Data Processing Addendum, or a Business Associate Agreement

4.1 Child Sexual Abuse Material

The storage, transmission, processing, or facilitation of CSAM is strictly prohibited and is grounds for immediate suspension and termination without notice. If Z7 obtains actual knowledge of an apparent violation involving CSAM, Z7 will report it to the CyberTipline of the National Center for Missing and Exploited Children (NCMEC) as required by 18 U.S.C. 2258A, will preserve the report and associated material as required by law, and will cooperate with NCMEC and law enforcement as directed by law or legal process. Z7 will not access, copy, or transmit suspected CSAM except to the minimum extent necessary to make a required report or as directed by law enforcement or NCMEC. Nothing in this Policy requires Z7 to monitor Client content, and Z7's obligations arise only on actual knowledge.

For Services involving Z7 Private AI or other AI components, Client and Client's users will not:

• Submit inputs designed or intended to extract Z7 or third-party system prompts, training data, model weights, or proprietary model behavior
• Use prompt injection, indirect prompt injection, jailbreaking, or any other technique to bypass or manipulate the safety, content, security, or access controls implemented by Z7 or its AI providers
• Systematically query, probe, or scrape the Services to extract, distill, replicate, or reverse engineer a model, its weights, or its behavior, or to build a competing or substantially similar model or dataset
• Use any automated means to access the Services in excess of contracted limits, or circumvent rate limits, quotas, or usage controls
• Train, fine-tune, or improve any model that competes with Z7's offerings using outputs, content, or behavior obtained from Z7 AI Services
• Use AI outputs to make an automated decision affecting an individual's legal rights, employment, housing, credit, education access, healthcare, insurance, or other essential services without appropriate human oversight, consistent with Section 4.8 of the Terms
• Submit to the Services any data Client is not authorized to disclose, or any regulated data outside the scope and safeguards agreed in the SOW
• Present AI-generated content, or an AI agent or chatbot, as human where applicable law requires disclosure that AI is in use
• Generate content that violates applicable law, infringes third-party rights, or otherwise violates this AUP

A violation of this AUP is a material breach of the Terms. Z7 may, at its sole discretion and consistent with the suspension and termination rights in the Terms:

• Investigate suspected violations and require Client's reasonable cooperation
• Remove, disable access to, or quarantine offending content or traffic
• Suspend access immediately, in whole or in part, for a violation that poses an imminent risk of harm or where required by law, as provided in Section 4.9 of the Terms
• For a violation not posing imminent harm, provide notice and the cure period stated in Section 7.3 of the Terms before further action
• Terminate the affected Services for an uncured material violation, as provided in Section 7.3 of the Terms
• Report violations to NCMEC or law enforcement as required by law

Z7 has no obligation to monitor Client content or use, but may do so to operate and protect the Services and to comply with law. Client is responsible for all use of the Services under its account, including by its users, and will cooperate with Z7's investigation of a suspected violation. Z7 may preserve and disclose information as the law or valid legal process requires. Z7 is not liable to Client for action it takes in good faith under this AUP. For a Government Client, Z7 exercises these rights only as Schedule A of the Terms permits. Client's breach of this AUP is subject to the indemnity in Section 13.2 of the Terms.

Report suspected violations to support@z7solutions.com with the subject line "AUP report". Describe the activity and where it is located; do not attach suspected illegal content, including suspected child sexual abuse material, which should be reported directly to the NCMEC CyberTipline.

Z7 may update this AUP under Section 17.12 of the Terms. The version number and date at the top of this page identify the current version, and Z7 provides prior versions on request.