This Acceptable Use Policy ("AUP") applies to everyone who uses Cyprus Connect, including the account owner, staff members and clients invited to the client portal. It forms part of the Terms of Service. The Customer is responsible for making sure all of its Users follow it.
1. Lawful and authorised use only
You may use the Services only for lawful purposes connected with your professional activity. In particular you must:
- have a lawful basis under the GDPR for every item of personal data you upload, screen or check;
- run AML and sanctions screening only for customer due diligence, risk assessment or another legitimate compliance purpose;
- submit to ComplyGuard only documents and websites that you own or that you are authorised by their owner to have checked;
- invite clients to the client portal only for the purpose of exchanging documents relating to your professional relationship with them.
2. Prohibited content
You must not upload, store or share content that:
- is unlawful, including child sexual abuse material, material that infringes intellectual property rights, or data obtained unlawfully;
- contains malware, viruses, macros or any code designed to harm or gain unauthorised access to systems;
- you do not have the right to process, or that breaches a duty of confidentiality you owe to someone else.
3. Prohibited activities
You must not:
- attempt to gain unauthorised access to the Platform, other accounts, or the data of other customers;
- probe, scan or test the security of the Platform except under our Vulnerability Disclosure Policy;
- interfere with or overload the Platform, including by automated requests, scraping, denial-of-service attacks or attempts to bypass rate limits;
- use ComplyGuard's website scanner against websites you are not authorised to scan, or attempt to use it to reach internal or private networks;
- share accounts, passwords or authenticator devices, or let anyone use the Services in your name;
- resell, sublicense or provide the Services to third parties without our written consent;
- use screening results to discriminate unlawfully, to harass any person, or for any purpose other than legitimate compliance;
- use the Services to send spam or to process data for direct marketing without a lawful basis;
- reverse-engineer, decompile or copy the Platform, except where the law expressly allows it;
- remove or obscure the notices that state that the output of the Services is not legal advice.
4. Hosting
If you use hosting through the hosting portal, you must also follow that provider's acceptable use rules. You must not host phishing pages, malware, illegal content or sites that impersonate another organisation.
5. Monitoring and enforcement
Vault content is end-to-end encrypted and we cannot read it. We monitor technical information such as sign-in attempts, request rates and security logs to protect the Platform. If we reasonably believe this AUP has been breached, we may, depending on the seriousness: warn you; suspend the affected User or Service; terminate your account under the Terms of Service; remove access to content where technically possible; and report the matter to the competent authorities where the law requires it. We will act proportionately and, where reasonable, give you a chance to remedy the breach first.
6. Reporting misuse
Report suspected misuse to info@cyprusconnect.net, and security weaknesses to security@cyprusconnect.net.
7. Indemnification
The Customer will defend, indemnify and hold harmless Topify Consulting Ltd, its directors, officers, employees, agents and subcontractors from and against any and all claims, actions, demands, proceedings, losses, liabilities, damages, administrative fines and penalties, costs and expenses, including reasonable lawyers' fees and court costs, arising out of or in connection with:
- any breach of this Acceptable Use Policy or the Terms of Service by the Customer or any of its Users;
- any Customer Content, including any claim that Customer Content infringes the rights of a third party or was processed without a lawful basis;
- any breach by the Customer or its Users of applicable law, including data protection, anti-money-laundering, consumer protection and intellectual property law;
- any claim brought by the Customer's clients, employees, the subject of a screening, or any other third party, arising from the Customer's or its Users' use of the Services; and
- any claim brought by the Customer against us that a court finally determines to be unfounded, to the extent permitted by law.
We will notify the Customer promptly of any claim covered by this clause and give reasonable cooperation, at the Customer's cost. The Customer may not settle a claim in a way that imposes an obligation or admission on us without our written consent. This indemnity does not apply to the extent a loss is caused by our own breach of the Terms of Service, our negligence or our wilful misconduct, and it is subject to any limits that cannot be excluded under applicable law.
8. Changes
We may update this AUP to reflect changes in law, technology or the Services, giving notice as described in the Terms of Service.
Topify Consulting Ltd, registration no. HE 409159, VAT no. 10409159B, Alkyonis 1, 3087 Limassol, Cyprus. Contact: info@cyprusconnect.net. If a translation of this document differs from the English version, the English version applies.