Acceptable Use Policy

1. Purpose

This Acceptable Use Policy (AUP) is established to protect the security and continuity of the RYSTAT infrastructure and to maintain the quality of service for all customers. All customers and users are required to comply with this policy.

2. Prohibited Uses

2.1 Security violations and unauthorised access

• Attempts at unauthorised access, brute-force attacks, credential stuffing, or exploitation attempts
• Port scanning, vulnerability scanning, or penetration testing activities without prior written authorisation
• Actions intended to circumvent authentication, network, or security controls

2.2 Malicious traffic and service abuse

• DDoS, amplification, traffic reflection, or any activities causing service disruption
• Operations that disproportionately consume shared resources to the detriment of other customers
• Cryptocurrency mining, resource exploitation, or concealed background processes, unless expressly permitted

2.3 Spam and communications abuse

• Sending unsolicited bulk email
• Phishing, forgery, spoofing, or deceptive communications
• Malicious redirects, harmful attachments, or phishing pages

2.4 Unlawful content and illegal activity

• Publishing unlawful content, engaging in fraud, or infringing copyright or other intellectual property rights
• Malware, command-and-control infrastructure, or materials constituting criminal offences
• Hosting content depicting violence, abuse, or content otherwise prohibited by applicable law

3. Security Testing and Research

Security testing directed at RYSTAT infrastructure or systems belonging to other customers may only be conducted with prior written consent and within a clearly defined scope.

4. Email and Messaging Rules

• Sender reputation, bounce rates, and abuse signals may be monitored.
• Services may be suspended in the event of excessive complaints, blacklisting, spam trap hits, or open relay detection.
• Customers must hold the necessary consents for any marketing communications.

5. Enforcement

In the event of a violation of this policy, RYSTAT may take any of the following actions:

• Filter or temporarily restrict traffic
• Suspend the relevant service, account, or access
• Remove or disable specific content or operations
• Permanently terminate service in cases of repeated violations
• Notify the relevant authorities where required by law

6. Notification and Appeals

Users who believe an action constitutes a false positive or who wish to appeal may contact abuse@rystat.com with the incident number, timestamp, and a description of the issue.

7. Order of Precedence and Conflicts

In the event of any conflict between this document and any other contractual document, the following order of precedence shall apply:

1. Signed enterprise agreement, order form, or proposal addendum
2. Product-specific service terms
3. This Acceptable Use Policy (AUP)
4. Service Level Agreement (SLA)
5. Data Processing Agreement (DPA) (with respect to data processing matters only)
6. Terms of Service
7. Privacy Policy
8. Refund Policy
9. Public disclosure documents (e.g., Sub-processor Framework)