Acceptable use policy

• Illegal content or activity, or content that infringes intellectual-property, privacy, confidentiality, or other rights.
• Malware, credential theft, phishing, botnets, command-and-control, cryptojacking, unauthorized scanning, exploitation, or access to systems without permission.
• DDoS attacks, deliberate resource exhaustion, abuse of free trials, or attempts to bypass plan, rate, placement, or security controls.
• Unsolicited bulk communications, deceptive traffic, fraudulent services, or collection or sale of personal data without a lawful basis.
• Sexual exploitation of children, non-consensual intimate material, terrorist content, or content whose hosting is prohibited by applicable law.
• Use that materially degrades other customers or exposes secrets, personal data, or infrastructure to unreasonable risk.

Good-faith testing must be limited to systems you own or have explicit permission to test. Do not access another tenant, degrade availability, exfiltrate data, or publish exploitable details before Codara can investigate. Report suspected platform vulnerabilities through the reporting page and include safe reproduction steps.

Codara may investigate reports, use automated security and resource-limit signals, and carry out human review. These measures may lead to rate limits, quarantine, suspension or removal of affected resources. We do not undertake general monitoring of every customer workload. We use the least disruptive effective action when practicable. Unless prohibited by law or urgent risk, we will notify the account owner, state the reason, and identify any material use of automated means in the decision where required, and provide a way to request human review or contest the decision through cloud@codaracloud.com.