growGRC ACCEPTABLE USE POLICY (AUP)

Version: v1.0.0

Effective Date: May 4, 2026

LANGUAGE NOTICE: This English version is legally binding. Translations are for reference only.

1. PURPOSE

This Acceptable Use Policy ("AUP") defines prohibited behaviors and User obligations when using the GrowGRC platform. Violations may result in immediate account suspension without refund and legal action.

2. PROHIBITED ACTIVITIES

2.1 Illegal and Harmful Activities

You may not use GrowGRC to:

Engage in or facilitate any activity that violates applicable local, national, or international law
Interact with or support parties subject to sanctions by OFAC (Office of Foreign Assets Control), the UN, EU, UK, or equivalent authorities
Commit fraud, money laundering, or any financial crime
Distribute malware, ransomware, spyware, or any malicious code

2.2 System Integrity

You may not:

Attempt to gain unauthorized access to GrowGRC systems, other tenants' data, or related infrastructure
Conduct or facilitate penetration tests, vulnerability scans, or security assessments of GrowGRC without prior written authorization
Reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service
Interfere with the availability or performance of the Service (e.g., DDoS attacks, excessive API calls)
Circumvent, disable, or tamper with security features, access controls, or audit mechanisms

2.3 Data Integrity and Multi-Tenant Isolation

You may not:

Attempt to access, view, copy, or exfiltrate data belonging to other GrowGRC tenants
Upload data that you do not have the right to process or that infringes third-party rights
Input false, misleading, or fabricated data with intent to deceive auditors, regulators, or counterparties
Use the Service to generate fraudulent compliance reports or manipulate audit outcomes

2.4 Automated Abuse

You may not:

Scrape, crawl, or systematically harvest data from GrowGRC without prior written authorization
Use bots, spiders, or automated scripts to access or use the Service in a manner that exceeds normal human usage
Use the API in ways that violate rate limits or circumvent usage quotas

2.5 Intellectual Property

You may not:

Use the Service to infringe copyrights, trademarks, patents, trade secrets, or other intellectual property rights
Copy or reproduce GrowGRC content, design, or algorithms for competing products

3. CONTENT STANDARDS

Content uploaded to GrowGRC must not:

Violate any applicable law
Contain personally identifiable information beyond what is necessary for legitimate GRC purposes
Include material that is defamatory, harassing, or threatening to any person

4. ENFORCEMENT

4.1 Investigation

GrowGRC reserves the right to investigate suspected violations of this AUP. We may access, review, and preserve data as necessary for investigation purposes.

4.2 Consequences

Violations may result in, at our sole discretion:

Immediate suspension of access without notice and without refund
Permanent account termination
Reporting to law enforcement or regulatory authorities
Civil legal action for damages

4.3 No Obligation

We are not obligated to monitor all use of the Service for AUP violations, but we reserve the right to do so.

5. REPORTING VIOLATIONS

To report suspected AUP violations: legal@growgrc.app