Acceptable Use Policy

Do not use Sandpi to harm others, violate law, evade security controls, interfere with services, or operate workloads that create unreasonable risk for Sandpi, our users, third parties, or the public. This policy applies to actions taken by you and by agents, scripts, tools, or integrations using your account.

You may not create, host, execute, distribute, or facilitate malware, ransomware, credential theft, botnets, destructive payloads, phishing, spam, fraud, or tools intended to compromise or exfiltrate data from systems without authorization.

Good-faith defensive security research, testing, and education are allowed only when you own the target or have explicit authorization and use safeguards appropriate to the risk.

You may not probe, scan, attack, scrape, overload, bypass access controls for, or attempt unauthorized access to any account, credential, device, repository, model provider, registry, API, website, network, or service. Do not use credentials, data, or computing resources that you do not have permission to use.

You may not use Sandpi for denial-of-service activity, traffic amplification, unsolicited messaging, abusive crawling, prohibited proxying or resale, cryptocurrency mining, coordinated inauthentic activity, or attempts to evade rate limits, sanctions, blocks, quotas, or abuse controls.

Do not consume resources in a way that materially degrades the Service or other users’ access, including through unattended loops, runaway agents, or intentionally excessive storage, compute, network, or third-party requests.

You may not use Sandpi to create, store, obtain, or distribute content or conduct activity that is illegal, exploitative, fraudulent, defamatory, facilitates physical or financial harm, violates intellectual property or privacy rights, or exploits or endangers children.

Do not use the hosted Service to process protected health information, full payment-card data, government classified data, export-controlled technical data, biometric identifiers, or other highly regulated data unless we have agreed in writing that Sandpi is appropriate for that use and any required safeguards are in place.

You are responsible for actions taken by coding agents, scripts, tools, MCP servers, Browser sessions, API keys, credentials, and workloads operating under your account. Configure appropriate permissions, network policy, credential scope, approvals, monitoring, spending limits, and human review. Do not use automation to conceal identity or responsibility for prohibited conduct.

We may investigate suspected violations, restrict network access, rate limit traffic, quarantine or pause resources, disable credentials, remove content, preserve evidence, suspend accounts, or terminate access. We may report activity to affected providers or authorities when appropriate or legally required.

Report suspected abuse or ask whether a planned security use is permitted by contacting contact@sandpi.ai.