Skip to content

Legal AccuSights Acceptable Use Policy

AccuSights, Inc. and AccuSights LLC

AccuSights Acceptable Use Policy

Version 2026.10 · Effective November 1, 2026

Contents (9 sections)

AccuSights, Inc. and AccuSights LLC

This Acceptable Use Policy ("AUP") sets the rules for using the websites, portal, platform, AI tools, APIs, agents and services of AccuSights, Inc. and AccuSights LLC (together, "AccuSights," "we"). It is incorporated by reference into the AccuSights Terms of Service, the AccuSights Protect Services Agreement, the Empower Partner Agreement and any Order Form or SOW (each an "Agreement"). If this AUP conflicts with an Agreement, the Agreement controls for that customer or partner. Capitalized terms not defined here have the meaning in the applicable Agreement.

"You" means any person or organization that accesses the AccuSights sites, portal, Platform or Services, including Customers, their Users, Empower Partners, trial users and visitors. Customers and Partners are responsible for their Users' and personnel's compliance.

1. Basic rules

You may use the AccuSights Sites, Platform and Services only:

  1. for lawful purposes and in compliance with all applicable laws, including data protection, export control, sanctions, anti-corruption, computer-misuse and telemarketing laws;
  2. for your own internal business purposes (or, for Empower Platform Partners, to deliver engagements to your own clients as the Empower Partner Agreement allows);
  3. within the scope, user counts, tenants, endpoints and modules stated in your Order Form or Agreement; and
  4. in accordance with our documentation, security guidance and reasonable instructions.

2. Accounts and access

  • Keep credentials confidential. Do not share accounts. Each User must have their own login, and multi-factor authentication must remain enabled on every administrative account.
  • Provide accurate registration information and keep it current, including the name, title and authority of the person who accepts an Agreement.
  • Only individuals aged 18 or over may hold accounts.
  • Tell us promptly at [email protected] (subject "ATTN: Security") if you suspect unauthorized access to your account or the Platform.
  • Do not access another organization's tenant, data or reports, even if a misconfiguration makes that possible; report it to us instead.

3. Prohibited conduct

You must not, and must not allow anyone else to:

Security and integrity

  1. Probe, scan, test the vulnerability of, or attempt to penetrate AccuSights' infrastructure, Sites, Platform, APIs, networks or systems (see Section 4 for the only exceptions).
  2. Interfere with, overload, or disrupt the Platform, or bypass rate limits, authentication, licensing, usage metering or security controls.
  3. Upload, transmit or run malware, malicious code, exploits, or files intended to compromise any system, except as expressly permitted in a sandbox feature designed for that purpose.
  4. Use automated tools (scrapers, bots, crawlers) to extract data from the Sites or Platform other than through documented APIs within documented limits.
  5. Remove, alter or obscure proprietary notices, watermarks or report attributions.

Third-party systems

  1. Use the Platform or Services to scan, monitor, test or assess any network, system, endpoint, domain or cloud account that you do not own or are not expressly authorized in writing to have assessed. By connecting or listing an asset for Assess, Comply or Protect you represent that you own it or have that authorization, and you will indemnify AccuSights for claims arising from unauthorized assets.
  2. Deploy Protect agents or collectors on devices belonging to individuals or organizations that have not been informed as applicable law requires (including employee-monitoring notice laws).

Data and content

  1. Upload Controlled Unclassified Information (CUI), classified information, or ITAR-controlled technical data unless you have ordered a CUI-capable enclave and it is noted on your Order Form (the "CUI Gate").
  2. Upload protected health information (PHI) unless a Business Associate Agreement with the relevant AccuSights entity is in effect.
  3. Upload full payment card numbers, government ID numbers, biometric identifiers, or other data that is not needed for the Services.
  4. Upload or process data for which you lack the rights, notices or consents that the law requires.
  5. Use the Platform to store or share content that is unlawful, infringing, defamatory, harassing, obscene or that violates another person's privacy.

AI features

  1. Attempt to extract model weights, system prompts or training data; use prompts intended to make the AI produce malicious code, working exploits against systems you are not authorized to test, or content that violates law.
  2. Present AI-generated outputs (policies, control mappings, readiness findings, incident summaries) to a regulator, assessor, auditor, insurer or customer as having been reviewed when they have not been; treat all outputs as drafts requiring human review.
  3. Use AI features to make decisions with legal or similarly significant effects on individuals without meaningful human review.

Commercial misuse

  1. Resell, sublicense, rent, lease, time-share or provide the Platform or Services to third parties, except as an Empower MSP Partner or Empower Platform Partner under a current Empower Partner Agreement.
  2. Build a competing product using the Platform, its templates, control libraries, mappings, reports or outputs; or copy, reverse-engineer or decompile any part of the Platform except where law forbids that restriction.
  3. Publish benchmark, performance or comparative test results about the Platform without our prior written consent.
  4. Misrepresent your relationship with AccuSights, or state or imply that AccuSights certifies, accredits, guarantees or warrants any compliance outcome. AccuSights is not a C3PAO, the Cyber AB, DoD, HHS/OCR, PCI SSC, AICPA, an ISO certification body, or an auditor of record, and does not certify or guarantee compliance.
  5. Use AccuSights marks, report templates, badges or "Powered by AccuSights" designations outside our Brand Guidelines or your Agreement.

Communications

  1. Send unsolicited commercial email, texts or calls using contact data obtained through the Platform, or in violation of CAN-SPAM, the TCPA, state telemarketing laws or the Empower Partner Agreement.

4. Security testing rules

  • No testing of AccuSights systems without written permission. The only exceptions are (a) good-faith security research conducted in full compliance with our Vulnerability Disclosure Policy (accusights.com/legal/vdp), and (b) a written penetration-test authorization signed by AccuSights that names the tester, scope, dates and rules of engagement.
  • Your own environment. Assess, Comply and Protect features that scan or monitor your systems are performed on assets you list. You are responsible for informing your own hosting providers, MSPs and personnel as their terms require, and for any impact on production systems from scans you schedule.
  • Phishing and vishing simulations run through the Platform may target only your own personnel (or your client's personnel where you are an Empower Platform Partner with the client's written authorization), must comply with employment and telecommunications law, and must not impersonate real third-party brands in a way that infringes their rights or real individuals without their consent.

5. Empower Partner marketing conduct (cross-reference)

Empower Partners are bound by the conduct rules in the Empower Partner Agreement and Program Guide, which include, at a minimum:

  1. FTC disclosure. Every post, page, video, email or message that links to AccuSights or promotes it must carry a clear and conspicuous disclosure that the Partner earns a commission (for example, "I earn a commission if you sign up with AccuSights" or "#ad"), placed where it cannot be missed and in the same medium as the endorsement (16 C.F.R. Part 255).
  2. No spam. No unsolicited bulk email, text or messaging; all Partner email must carry the Partner's physical address and a working opt-out (CAN-SPAM), and Partners must not text or robocall without prior express written consent (TCPA).
  3. No brand bidding. Partners must not bid on "AccuSights," "Empower Partner Program," our product names, or misspellings as paid-search keywords, use them in ad copy or display URLs, register look-alike domains or social handles, or run ads that appear to be from AccuSights.
  4. Approved claims only. No guarantees of certification, audit outcomes, breach prevention, "100% compliance," pricing not on our public price list, or discounts not authorized in writing. Partners may only use claims from the AccuSights marketing kit or our public site.
  5. No fake reviews or testimonials. Partners may not post reviews of AccuSights as if they were ordinary customers, may not pay for or condition reviews on sentiment, and must disclose their partner status in any review (16 C.F.R. Part 465).
  6. Professional rules. CPA and attorney Partners must comply with their own referral-fee disclosure obligations or elect the Client Credit option.

Violation of these rules is a violation of this AUP.

6. Monitoring and reporting

We may monitor use of the Sites and Platform for security, capacity, billing and compliance with this AUP, consistent with our Privacy Policy and the DPA. We do not read Customer Data except as needed to provide the Services, respond to support requests, investigate suspected AUP violations, or as required by law. Report suspected violations to [email protected] with the subject "ATTN: Security" (or "ATTN: Legal Notice" for legal matters).

7. Enforcement

If we reasonably believe you have violated this AUP, we may, depending on the severity and after considering the impact on other customers and on the security of the Platform:

  1. warn you and require corrective action within a stated period;
  2. remove or disable access to offending content, assets, integrations or accounts;
  3. suspend your access, or the access of a specific User, tenant or Partner link, immediately and without prior notice where the violation presents a security threat, legal exposure or harm to others, with notice given as soon as practicable, and otherwise after notice and a cure period stated in your Agreement;
  4. terminate your Agreement for cause under its termination provisions;
  5. withhold or claw back Empower commissions earned through prohibited conduct, as the Empower Partner Agreement provides;
  6. report the conduct to law enforcement, hosting providers, platforms or affected third parties; and
  7. seek injunctive relief and other remedies.

Suspension does not relieve you of payment obligations, and fees are not refunded for periods of suspension caused by your violation. We will restore access when the violation is cured to our reasonable satisfaction. Nothing here limits any other right or remedy in your Agreement or at law.

8. Changes

We may update this AUP with 30 days' notice by email and in-app for material changes, or immediately where needed to address a new legal requirement or security threat. Continued use after the effective date is acceptance of the updated AUP. Prior versions are at accusights.com/legal/archive.

9. Contact

[email protected] (subject "ATTN: Legal Notice") · AccuSights, Inc. / AccuSights LLC, 2058 N. Western Ave, Chicago, IL 60647 · +1 (773) 747-7490

AccuSights Acceptable Use Policy v2026.10. © 2026 AccuSights, Inc. and AccuSights LLC.