Version 1.2 — 24-06-2026. This policy is incorporated into the OEM Infrastructure Platform Master Subscription Agreement and any other agreement that references it.

1. Purpose and application

This Acceptable Use Policy (Policy) sets out the rules that apply to access to and use of the Platform Services provided by stack8s Ltd, a company incorporated in England and Wales (stack8s), including services marketed under the Soveri, Aik Cord, Aik Cloud and Aik Edge product names and any successor or additional product names notified by stack8s.

This Policy applies to Customer and to every Authorised User and End Customer that Customer permits to access or use the Platform Services. Customer is responsible for ensuring compliance with this Policy by its Authorised Users and End Customers, and a breach of this Policy by an Authorised User or End Customer is treated as a breach by Customer. Capitalised terms not defined in this Policy have the meanings given in the agreement under which the Platform Services are provided (Agreement).

This Policy does not apply to Third-Party Compute Services, which are governed by the acceptable-use and other requirements of the relevant Third-Party Provider. Where the Platform Services are used to manage or orchestrate Third-Party Compute Services, Customer must comply with both this Policy and the relevant Third-Party Provider’s requirements.

2. Unlawful and harmful use

Customer must not use, and must not permit any Authorised User or End Customer to use, the Platform Services to:

–    violate any applicable law or regulation, including laws relating to data protection and privacy, export controls, sanctions, anti-bribery, anti-money-laundering, computer misuse and intellectual property;

–    store, process, transmit, distribute or make available material that is unlawful, defamatory, fraudulent, deceptive or that infringes the intellectual-property, privacy or other rights of any person;

–    store, process, transmit or make available any material relating to the sexual exploitation or abuse of children, or any terrorist or violent extremist content;

–    harass, threaten, stalk, abuse or incite violence or hatred against any person or group; or

–    misrepresent the origin of any communication, impersonate any person or entity, or falsely state or imply an affiliation with stack8s or any third party.

3. Security violations

Customer must not, and must not permit any Authorised User or End Customer to:

–    access or attempt to access any account, system, network, data or environment without authorisation, or exceed the scope of any authorised access;

–    probe, scan or test the vulnerability of the Platform Services or any system or network connected to them, or breach or circumvent any security, authentication, tenancy-isolation or access-control measure, except pursuant to a penetration-testing engagement expressly authorised by stack8s in writing in advance;

–    introduce, distribute or execute any virus, worm, ransomware, logic bomb, rootkit or other malicious or destructive code, or use the Platform Services to develop, host, distribute or control malware, botnets or phishing infrastructure;

–    intercept, monitor or capture data or traffic not intended for Customer, including credentials, API tokens or session data of any other person; or

–    share, publish or fail to protect credentials, access keys, API tokens or administrator accounts, or use another person’s credentials without authorisation.

4. Network and service abuse

Customer must not, and must not permit any Authorised User or End Customer to:

–    interfere with, disrupt, degrade or impose an unreasonable or disproportionate load on the Platform Services or the infrastructure, systems or networks of stack8s, a Third-Party Provider or any other customer or tenant;

–    carry out, facilitate or direct any denial-of-service attack, traffic flooding, mail-bombing or similar disruptive activity;

–    send unsolicited bulk communications, spam or communications that do not comply with applicable electronic-marketing laws, or operate open relays, open proxies or open resolvers;

–    engage in cryptocurrency mining or similar sustained high-intensity compute activity using the Platform Services or any trial, evaluation or free-tier access, except where expressly permitted in an Order;

–    take any action designed to circumvent usage limits, quotas, metering, billing or licence restrictions, including by creating multiple accounts or manipulating telemetry; or

–    use any automated means to scrape, harvest or extract data from the Platform Services other than through interfaces and APIs made available for that purpose.

5. Protection of the Platform Services

Except to the extent expressly permitted in the Agreement or by applicable law that cannot be excluded, Customer must not, and must not permit any Authorised User or End Customer to:

–    copy, modify, adapt or create derivative works of the Platform Services or Documentation;

–    reverse engineer, decompile, disassemble or otherwise attempt to derive the source code, underlying ideas, algorithms, models or structure of the Platform Services;

–    sell, resell, rent, lease, sublicense, distribute or otherwise make the Platform Services available to any third party other than as expressly permitted for OEM Services under the Agreement;

–    remove, conceal or alter any proprietary notices or marks, except as expressly permitted in an Order for OEM Services;

–    use the Platform Services to develop, train, operate or support a product or service that materially replicates the core functionality of the Platform Services, or use them for competitive analysis or benchmarking for publication without stack8s’ prior written consent; or

–    access the Platform Services by any means other than the interfaces, APIs and access methods documented or expressly authorised by stack8s.

6. Responsible deployment

The Platform Services manage and orchestrate infrastructure on which Customer and its End Customers may run production workloads. Customer is responsible for deploying and configuring the Platform Services prudently, including:

–    not using trial, evaluation, beta or proof-of-concept access for production, regulated or business-critical workloads, or for irreplaceable data, unless expressly agreed in an Order;

–    maintaining appropriate backups, redundancy and recovery arrangements for Customer Data and workloads, as required by the Agreement;

–    ensuring that any use in connection with safety-critical, medical, nuclear, aviation or other high-risk environments is subject to appropriate independent safeguards, and acknowledging that the Platform Services are not designed or certified for fail-safe operation in such environments; and

–    promptly installing or permitting updates that stack8s reasonably designates as security-critical.

7. OEM and white-label use

Where Customer makes the Platform Services available to End Customers under OEM Services, Customer must: (a) impose written terms on each End Customer that are no less protective of stack8s than this Policy; (b) monitor End Customer use and take prompt action, including suspension, where an End Customer breaches those terms; and (c) notify stack8s without undue delay of any breach of this Policy by an End Customer that could reasonably be expected to affect the security, integrity or lawful operation of the Platform Services.

8. Reporting

Customer must report suspected or actual violations of this Policy, security incidents affecting the Platform Services, or vulnerabilities discovered in the Platform Services to support@stack8s.com without undue delay. Customer must not publicly disclose any vulnerability in the Platform Services without giving stack8s a reasonable opportunity to investigate and remediate it.

9. Enforcement

stack8s may investigate suspected violations of this Policy and may, in accordance with the Agreement: (a) remove, disable access to or quarantine material that violates this Policy; (b) suspend or restrict access to all or part of the Platform Services; (c) suspend or restrict the access of a specific Authorised User or End Customer; and (d) report unlawful activity to law-enforcement or regulatory authorities and cooperate with their investigations. Where reasonably practicable and lawful, stack8s will give Customer notice and an opportunity to remedy a violation before taking enforcement action, except where immediate action is reasonably necessary to protect the Platform Services, other customers, a Third-Party Provider or any other person, or to comply with law. Nothing in this Policy limits any right or remedy available to stack8s under the Agreement or at law.

10. Changes to this Policy

stack8s may update this Policy from time to time in accordance with the Agreement, including where reasonably necessary to reflect legal or regulatory requirements, Third-Party Provider requirements, security needs or changes to the Platform Services. The current version will be notified or made available to Customer in writing, and material changes will be notified to Customer. Continued use of the Platform Services after a change takes effect constitutes acceptance of the updated Policy.