Acceptable Use Policy

This Acceptable Use Policy (“AUP”) governs the use of Ademero's products, services and platforms, including CapturePoint, Content Central, Nucleus One and Paige (collectively, the “Services”).

By accessing or using our Services, you agree to comply with this AUP. Violation of this policy may result in suspension or termination of your access to our Services. We reserve the right to update this policy at any time. Continued use of our Services after changes constitutes acceptance of the modified policy.

This policy is designed to keep the Services safe, secure and productive for everyone. Our Services are intended for legitimate business purposes, and we take our responsibility to protect our infrastructure, users and data seriously. We may monitor usage patterns, investigate suspected violations and take appropriate action to protect the integrity of our Services.

By using Ademero services, you acknowledge that you have read, understood and agree to be bound by this policy. If you do not agree with any part of it, you should not access or use our Services. Each user of your account is responsible for understanding and complying with this policy.

Our enforcement of this policy is consistent and applies equally to all users, regardless of account size or tenure.

Our Services are designed to help organizations manage documents, automate workflows and improve business processes. You may use our Services for any lawful business purpose consistent with this policy.

We encourage responsible use that benefits your organization while respecting the rights of others. Users should maintain appropriate security practices, regularly review access permissions and ensure data is used only for authorized purposes. All use must comply with applicable laws and our Terms of Service.

Acceptable activities

• Document management and storage for legitimate business purposes
• Workflow automation and business process improvement
• Team collaboration and project management
• Invoice processing and accounts payable automation
• Compliance documentation and audit trail maintenance
• Integration with other business systems through our APIs
• Training and onboarding of authorized users
• Data backup and disaster recovery planning

Best practices

• Maintain strong passwords and turn on multi-factor sign-in
• Regularly review and update user access permissions
• Keep your account information current and accurate
• Report security concerns promptly to our support team
• Use appropriate data classification and access controls
• Follow your organization's data retention policies
• Respect intellectual property rights
• Comply with applicable laws and regulations

You may not use our Services for any unlawful purpose or in violation of this policy. We prohibit using our Services for illegal activities, distributing malware, facilitating fraud or violating intellectual property rights. This includes any activity that could harm our infrastructure, compromise user data or facilitate criminal conduct. We also prohibit attempts to bypass security measures, unauthorized access to systems and any form of abuse that interferes with legitimate use by other customers.

Violations of this section are taken very seriously and may result in immediate suspension and potential legal action. We cooperate with law enforcement and may preserve evidence of violations for investigation. Users who engage in prohibited activities assume full liability for their actions. The following activities are prohibited:

Illegal activities

• Violating any applicable laws, regulations or legal obligations
• Facilitating illegal activities or transactions
• Money laundering or financing of illegal activities
• Trafficking in illegal goods or services
• Violating export control laws or sanctions
• Unauthorized access to computer systems or networks

Harmful content

• Storing or transmitting malware, viruses or malicious code
• Phishing, social engineering or fraud attempts
• Content that infringes intellectual property rights
• Defamatory, harassing or threatening content
• Content promoting discrimination or violence
• Child exploitation material or content harmful to minors

System abuse

• Attempting to breach or bypass security measures
• Interfering with service operations or infrastructure
• Excessive API calls or resource consumption
• Automated scraping without permission
• Reverse engineering or decompiling our software
• Creating multiple accounts to circumvent restrictions
• Using the Services to spam or send unsolicited communications
• Reselling the Services without authorization

Users must comply with all applicable laws and regulations when using our Services. Depending on your industry and jurisdiction, your use of our Services may be subject to specific regulations that govern data handling, privacy, security and reporting. Our Services help you meet these requirements with role-based access controls, audit trails and encryption.

If your organization works in a regulated industry such as healthcare, finance, education or government, you must ensure that your use of our Services meets the requirements that apply to you, such as HIPAA, GLBA and FERPA. Responsibility for your organization's compliance rests with your organization. You must notify us promptly if you become aware of any compliance violation involving our Services.

Ademero is committed to supporting your compliance efforts and will work with you to address any concerns. You should assess whether our Services meet your specific compliance needs before storing sensitive regulated data.

Laws and regulations that may apply

• HIPAA for healthcare organizations
• FERPA for educational institutions
• SOX for public companies
• GDPR for EU data protection
• CCPA for California privacy rights
• Industry-specific requirements

Data protection

• Obtain necessary consents for data processing
• Implement appropriate security measures
• Report data breaches as required by law
• Honor data subject rights requests
• Maintain data processing records
• Use data only for authorized purposes

We take violations of this policy seriously and will investigate reported violations. Our enforcement process is designed to be fair while protecting our Services and users. When we identify a potential violation, we will investigate to determine the facts and scope. Investigations may involve reviewing account activity logs, content and other relevant evidence. During an investigation, we may temporarily restrict account access to prevent further violations.

The consequences depend on the nature and extent of the violation. Minor first-time violations may result in warnings or temporary access restrictions. Serious violations, repeated violations or violations involving illegal activity may result in permanent account termination and cooperation with law enforcement. We will provide written notice of our findings and the action taken.

Users may challenge enforcement actions they believe are incorrect by submitting an appeal with supporting evidence within 30 days of the action.

Enforcement actions

• Warning or notice of violation
• Temporary suspension of account or features
• Permanent termination of services
• Removal of prohibited content
• Cooperation with law enforcement
• Legal action for damages
• Reporting to relevant authorities

Appeal process

• Users may appeal enforcement actions within 30 days
• Appeals must be submitted in writing to legal@ademero.com
• Include relevant documentation and an explanation
• Final decisions will be communicated in writing

If you become aware of any violation of this policy, please report it promptly. We review reports and take appropriate action. If you observe suspicious activity, content that violates this policy, a security vulnerability or another concern, please tell us, with specific examples, dates and times whenever possible.

Reports are treated confidentially. We will not disclose your identity as the reporter without your consent, except as required by law or to defend against legal claims. You will not face retaliation for reporting violations in good faith.

If you find a security vulnerability, please report it privately to support@ademero.com rather than making it public, so we can address it before it can be exploited.

How to report

• Email: legal@ademero.com
• Phone: (863) 937-0272
• A support request through support@ademero.com
• Your Ademero account contact

What to include

• A description of the violation
• Date and time of occurrence
• Account or user information, if known
• Screenshots or other evidence
• Your contact information for follow-up

• CapturePoint: Document scanning must comply with copyright laws and data protection regulations.
• Content Central: Enterprise document management use must follow your data retention and security policies.
• Nucleus One: Collaboration must respect team member privacy and intellectual property rights.
• Paige: Document processing must not be used for unauthorized data extraction or privacy violations.