Usage Policy

This usage policy ("Usage Policy") sets forth rules that apply to the use of any products, services or other offerings (collectively, the "Services") of Enclave AI Inc. d/b/a Enclave ("Enclave," "us," "we," or "our") by you, your users or any other person to whom you grant the right to access and use the Services (collectively, "you"). Your use of the Services must comply with this Usage Policy. This Usage Policy is not exhaustive, and Enclave reserves the right to take remedial action in connection with content or uses not specifically described below. Enclave may modify this Usage Policy at any time by posting a revised version on Enclave's website.

Capitalized terms not defined in this Usage Policy have the meanings given in the Enclave Terms of Service or such other written agreement, contract, instrument, or other writing entered into by you and Enclave governing the provision of the Services to you.

Content Restrictions

You will not upload, store, post or transmit content that:

• Is obscene, defamatory, deceptive, harassing, abusive, threatening, hateful or discriminatory;

• Violates anyone else's intellectual property, privacy, publicity or other rights;

• Consists of code, repositories or codebases that you do not own or are not authorized to submit for analysis;

• Is designed to generate exploits, ransomware, denial-of-service tools, persistent access mechanisms, communication interception tools or other code intended to gain unauthorized access to, disrupt or compromise any system or network, including critical infrastructure;

• Violates applicable laws or regulations; or

• Contains viruses, malware, malicious code or similar harmful materials.

Prohibited Conduct

You will not and will not attempt to:

• Engage in deceptive, fraudulent or illegal activities (including, "spoofing", "phishing" or pyramid or similar schemes);

• Transmit spam or other unsolicited communications to other users;

• Publish benchmark or performance information about the Services without Enclave's consent;

• Use the Services in violation of data protection, privacy, export control, trade sanctions or other applicable laws or regulations;

• Use the Services to identify vulnerabilities for the purpose of exploiting, attacking or compromising any system or network (whether through technical means or social engineering), to conduct offensive security testing against any system you are not expressly authorized to test, or to develop tools or techniques designed to bypass security controls or compromise systems at scale;

• Sell, trade or publicly disclose vulnerability information or other security findings obtained through the Services in a manner that violates responsible disclosure practices or could enable exploitation by third parties;

• Use the Services to engage in, promote, support or facilitate violent activities, whether online or offline;

• Misrepresent AI-generated outputs from the Services as a professional security audit, penetration test, or compliance certification;

• Circumvent or manipulate usage limits, credit allocations, rate limiting or other billing controls, create multiple accounts to obtain additional free or trial credits or to evade enforcement actions, or coordinate activity across multiple accounts to avoid detection or circumvent product safeguards;

• Use automated tools, bots, or scripts to submit bulk or programmatic requests to the Services that exceed documented rate limits or intended use patterns; or

• Engage in any activity that we determine in our sole discretion will cause liability to us or is otherwise objectionable.

No Disruption

You will not and will not attempt to:

• Access the Services through unauthorized means (for instance, scraping or crawling);

• Disable or interfere with the Services, circumvent any security or access controls, or intentionally bypass capabilities, restrictions or safeguards established within the Services (including through prompt injection or similar techniques);

• Reverse engineer, decompile or otherwise attempt to derive the source code, models, algorithms or security detection methods underlying the Services, use any output of the Services to develop, train or improve a competing product or AI model, or systematically collect or extract inputs or outputs of the Services for model training or distillation purposes;

• Monitor traffic on the Services without Enclave's permission;

• Probe, scan, penetrate or test the vulnerability of Enclave's system or network; or

• Access or attempt to access other users' code, repositories, security findings, data or accounts without their express permission.

Others

You will not permit or encourage others to commit any of the actions above.

AI Features

The Services use generative artificial intelligence and other machine learning functionality, including third-party AI models ("AI Features"). The Services are model-neutral and may route inputs to one or more third-party AI providers. When using the Services, you acknowledge and agree that:

1. You must comply with all terms and policies applicable to the underlying AI Features, including the Anthropic usage policies available at https://www.anthropic.com/legal/aup and any other applicable AI provider terms identified at https://trust.enclave.ai;

2. AI-generated security assessments, vulnerability findings, triage decisions and other outputs are provided for informational purposes only and are not a substitute for professional security review;

3. You are solely responsible for evaluating, validating and acting upon any output generated by the AI Features; and

4. Enclave does not guarantee that the AI Features will identify all vulnerabilities, that dismissed findings are not exploitable, or that outputs are accurate, complete or error-free. The Services may transmit inputs to third-party AI providers, and users are solely responsible for ensuring that code submitted for analysis does not contain live credentials, secrets, API keys, or other sensitive data that they do not want processed by such providers.

We may monitor compliance with this Usage Policy and investigate any violations. If we determine that you or your content violates this Usage Policy, we may remove or suspend access to your content or suspend your access to the Services.

We may report any activity that we suspect violates any law or regulation to law enforcement officials, regulators, or other appropriate third parties, and cooperate with them to investigate and prosecute illegal conduct. Our reporting may include disclosing information related to the violation of this Usage Policy.

If you become aware of any suspected violation of this Usage Policy, please notify us at support@enclave.ai and provide a full explanation of the bases for the violation.