Acceptable Use Policy
Last updated: 27 September 2026
This policy applies to everyone who uses Vaultless Guard software or the hosted console provided by Techmek LLC. It is part of our Terms of Service. Customers are responsible for their users' compliance.
1. Do not use the service to
- break any law, or infringe anyone's rights, including privacy and intellectual property rights;
- help anyone evade lawful monitoring or obligations: for example, using tokenization to hide evidence from a regulator, auditor or court, or to conceal data exfiltration or fraud;
- breach your AI provider's terms or usage policies;
- process data you have no right to process;
- develop or support weapons of mass destruction, malware, or attacks on critical infrastructure;
- harass, surveil or profile individuals unlawfully.
2. Do not misuse the hosted console
- Do not submit the values the gateway protects, protected health information, payment card data, special-category personal data or secrets to the hosted console, including in device labels, organisation names, rule descriptions or other free-text fields.
- Do not probe, scan or test the security of the hosted service except under our vulnerability disclosure policy (
/.well-known/security.txt). Testing your own gateways and self-hosted consoles is welcome. - Do not try to access another customer's data, bypass authentication, rate limits or tenant isolation, or interfere with the service or other customers.
- Do not overload the service (for example with automated requests beyond documented limits).
- Do not share credentials, or let anyone who is not an authorised user access your organisation.
3. Do not misuse licences
Do not circumvent seat counting, licence verification or activation, or copy an activated installation to avoid seat limits. (This does not restrict rights you have under an open-source licence.)
4. Reporting and enforcement
Report suspected misuse or vulnerabilities to devopsplus11@gmail.com. If we reasonably believe this policy has been breached, we may investigate, require it to stop, and suspend or terminate access to the hosted console under the Terms. Suspension never switches off the protection a gateway provides on your machines.