1. Purpose

This Acceptable Use Policy ("AUP") sets out what is and is not permitted when using Relay. It forms part of the Terms of Service and applies to you, your personnel, and every agent identity and key created under your tenant.

2. Prohibited content and conduct

You must not use Relay to store, process, or transmit content that:

• is unlawful, or infringes intellectual-property, privacy, or other rights;
• is child sexual abuse material, or promotes terrorism or violence;
• is defamatory, harassing, or hateful, or facilitates fraud or deception;
• contains malware, or is designed to disrupt or gain unauthorised access to systems.

3. Security and integrity

You must not:

• attempt to breach or circumvent authentication, tenant isolation, or access controls;
• probe, scan, or test the vulnerability of the service without our prior written consent;
• overload, flood, or otherwise interfere with the availability of the service;
• attempt to access another tenant's data or enumerate accounts, keys, or resources.

4. Secrets and credentials

The secrets vault is server-mediated, not zero-knowledge. Do not use it as a store for material you are contractually or legally forbidden to disclose to a service provider, and do not store credentials that you are not authorised to hold. Keep your own keys and reveal-once tokens secure.

5. Automated use, agents, and limits

Automated and agent-driven use is expressly welcome - it is what Relay is for. You must nonetheless respect published rate limits and fair-use and page caps, and must not use automation to evade those limits, to scrape at abusive volumes, or to degrade the service for others.

6. Third-party and personal data

If you put personal data about other people into Relay, you must have a lawful basis to do so and must honour your own obligations to those individuals. You must not use Relay to process special-category data at scale without your own assessment and appropriate safeguards.

7. Enforcement

We may investigate suspected breaches and may remove content, throttle, suspend, or terminate access, with or without notice depending on severity, to protect the service, other customers, or third parties, or where required by law. Where practicable we give notice and an opportunity to cure. Serious breaches - such as illegal content or attacks on the service - may lead to immediate termination.

8. Reporting abuse

To report abuse or a security issue, contact abuse.relay@sairaph.com or security.relay@sairaph.com. We aim to review reports promptly.