Acceptable Use Policy

Sovetta Technologies LLC Version 1.1 — Effective July 3, 2026

This Acceptable Use Policy ("AUP") sets the rules of the road for the Sovetta Platform. It is incorporated into the Terms of Service and binds every Customer and every Authorized User individually. Violations may result in immediate suspension or termination of your seat and, where the law requires, referral to authorities.

The Platform analyzes financial documents that decide whether real businesses get funded. That makes integrity — of the documents, the data, and the people using it — the product. These rules exist to protect merchants, funders, data sources, and the Platform itself.

1. Use It Only for Its Purpose

The Platform is licensed for internal commercial financing analysis by your organization for its certified purposes. You must not:

• Use the Platform for any purpose other than evaluating commercial financing transactions your organization is actually a party to or brokering.
• Use the Platform or its Output as a factor in establishing a consumer's eligibility for personal, family, or household credit or insurance, or for employment, tenancy, or any other purpose addressed by the Fair Credit Reporting Act other than as certified in the FCRA & Permissible Use Notice.
• Run analyses on individuals or businesses out of curiosity, for personal reasons, or on behalf of anyone outside your organization ("service bureau" use).
• Use the Platform to facilitate lending practices that are unlawful where the merchant is located, including unlicensed lending or unlawful debt-collection practices.

2. Keep Your Seat Yours

• Never share credentials. Each seat belongs to one named individual. Do not share, lend, pool, rotate, or sell logins, sessions, or API keys — even with a colleague, even temporarily.
• Do not access the Platform through another person's seat, or allow anyone (including assistants and contractors) to act through yours.
• Use a strong, unique password; sign out on shared devices; and report any suspected compromise of your credentials immediately to [email protected].

3. Submit Only Honest Documents

• Do not submit documents you know or suspect to be forged, altered, fabricated, or tampered with in an attempt to obtain a favorable analysis. The Platform is built to detect tampering; attempting to defeat it is a violation of this AUP and may be a crime.
• Do not submit documents or data you do not have the legal right to submit — every bank statement, application, and credit report must be backed by the merchant's or consumer's authorization.
• Do not test, probe, or reverse engineer the Platform's fraud, tampering, or authenticity detection — including submitting synthetic or manipulated statements to learn what the detectors catch. Report suspected detection gaps to us instead.

4. Respect the Data

• Access merchant and consumer data only for the deal file you are working. Browsing other merchants' data without a business need is prohibited, even where technically visible to your role.
• Do not download, export, scrape, or bulk-collect Platform data beyond what your role and workflow require.
• Do not disclose to any merchant, applicant, or third party the specific rule, threshold, or detection signal behind an Output (see Terms of Service § 6.2).
• Do not re-identify, or attempt to re-identify, any de-identified or aggregated data.
• Follow your organization's data-handling obligations — consumer report information in particular must be stored, shared, and disposed of in compliance with law (16 C.F.R. Part 682).

5. Respect Human Judgment

The Platform's analyses are decision support, not decisions (Terms of Service § 1.3):

• A qualified person at your organization must review any decision to extend, deny, price, or condition financing before it is finalized. Do not automate final financing decisions on Platform Output alone.
• Do not represent an Output as a guarantee of a merchant's quality, authenticity, or repayment.
• Do not transmit an Output to a merchant as, or in place of, any legally required disclosure or notice.

6. Do Not Attack the Platform

You must not:

• Probe, scan, or test the vulnerability of the Platform, or breach or circumvent any security or authentication measure (see the Responsible Disclosure Policy for the authorized path).
• Interfere with the Platform's operation — no denial-of-service, spamming the intake pipeline, resource abuse, or introduction of malware.
• Scrape, crawl, or harvest the Platform, or access it by any automated means not provided by us.
• Reverse engineer, decompile, disassemble, or attempt to extract the source code, models, parsers, rules, thresholds, or fingerprints of the Platform, except to the extent a law expressly permits it notwithstanding this restriction.
• Copy, frame, mirror, or create derivative works of the Platform.
• Circumvent seat limits, usage limits, or role-based access restrictions, or attempt to access another organization's data.

7. Follow the Law

Use of the Platform must comply with all applicable laws, including: the FCRA and ECOA/Regulation B; the Gramm-Leach-Bliley Act; state commercial financing disclosure and broker laws; wire-fraud, bank-fraud, and identity-theft statutes; anti-money-laundering laws; sanctions and export controls; and privacy laws applicable to the data you submit.

8. Enforcement

We may investigate suspected violations, may monitor use as described in the Terms of Service, and may suspend or terminate seats or Customer accounts — immediately and without prior notice where the violation involves fraud, credential sharing, consumer-report misuse, or a security threat. We may notify Customer's management of individual Authorized User violations, and we will cooperate with law enforcement where legally required. If you believe your access was restricted in error, contact [email protected].

9. Report What You See

If you become aware of any violation of this AUP — a shared login, a doctored statement, misuse of credit data — report it to [email protected]. Good-faith reports are protected; we do not permit retaliation through the Platform against reporters.

Sovetta Technologies LLC