Acceptable use policy

• Process only claim data the customer organization is authorized to process, for the purpose for which it was collected.
• Keep humans accountable for high-impact claim decisions: coverage, denial, settlement, payment, fraud referral, cancellation, and external customer communications.
• Preserve audit trails. Do not work around evidence provenance, role-based access, or workspace logging.
• Treat claimants and third parties fairly. Do not use the platform to intimidate, demean, or pressure them.

• Do not use ClaimCircuit to plan, commit, or facilitate any activity that violates applicable law in the jurisdictions where you, the workspace, or the affected claimant operate.
• Do not use the platform to violate insurance regulation, unfair claims practices law, anti-discrimination law, consumer protection law, data protection law, sanctions, or anti-money-laundering rules.

• Do not access workspaces, accounts, claim records, evidence, or systems you are not authorized to access.
• Do not share credentials, bypass single sign-on, evade session controls, or escalate privileges beyond what an administrator has granted.
• Do not use another user's session, token, or API key.

• Do not interfere with the integrity, security, performance, or availability of ClaimCircuit.
• Do not overload APIs, exceed published rate limits, or generate volume designed to degrade service for other workspaces.
• Do not reverse engineer, decompile, or attempt to extract the platform's source code, models, prompts, training data, or internal heuristics.
• Do not benchmark, replicate, or build a competing product using ClaimCircuit without prior written consent.

• Do not use ClaimCircuit to send unsolicited messages, marketing, or bulk outreach to claimants, third parties, or other workspaces.
• Outbound communication features must be used for the legitimate purpose of handling a specific claim, with a lawful basis to contact the recipient.
• Honor opt-outs, unsubscribe requests, and applicable consent requirements for any communication channel.

• Do not scrape, crawl, or programmatically extract data, UI, or model outputs from ClaimCircuit except through documented APIs, within published quotas, and consistent with the customer's agreement.
• Do not run unauthorized headless browsers, scripted clients, or automation designed to mimic an authorized user.
• Automated workflows must respect role-based access and must not be used to bypass review steps, logging, or rate limits.

• Do not upload, transmit, or store malware, ransomware, exploit code, or content designed to compromise users, devices, or systems.
• Do not probe, scan, or test the platform's vulnerability without prior written authorization, except through the responsible disclosure channel.
• Do not attempt to bypass authentication, encryption, intrusion detection, or other security controls.

• Do not use claim data, claimant identifiers, evidence, or AI outputs for purposes outside handling the specific claim and the customer organization's lawful basis.
• Do not export, share, or repurpose claim data for marketing, secondary analytics, or third-party enrichment outside what the customer organization has authorized.
• Do not combine workspace data with external datasets in a way that re-identifies, profiles, or targets claimants beyond what is required to handle the claim.

• Only upload claim records, documents, media, and policy files for which you have the rights and lawful basis to process inside the workspace.
• Do not upload content that infringes intellectual property, trade secrets, or confidentiality obligations owed to a third party.
• Do not upload content that includes special-category personal data, protected health information, or regulated identifiers unless the customer organization has authorized that processing in the workspace.

• AI in ClaimCircuit is decision support. It prepares evidence and drafts; it does not decide.
• Do not configure the workspace so that AI outputs reach claimants, third parties, regulators, or external systems without a named human reviewer approving them.
• Do not use AI outputs as the sole basis for claim denial, approval, settlement, payment, cancellation, fraud accusation, or SIU referral.
• Do not present AI-generated drafts as final determinations made by ClaimCircuit.
• Do not use AI features to generate content intended to deceive, intimidate, demean, or unlawfully discriminate against claimants or third parties.

• Do not disable, hide, or work around human-review steps, approval gates, audit logs, or role-based permissions configured for high-impact actions.
• Do not use service accounts, bots, or integrations to auto-approve AI drafts on behalf of a human reviewer.
• Do not impersonate a reviewer or sign off on a decision you are not authorized to make.

• Do not use the platform to harass, threaten, demean, or retaliate against a claimant, witness, partner, or ClaimCircuit user.
• Do not configure rules, prompts, or workflows that produce unlawful or discriminatory outcomes against protected classes.
• Fraud signals are indicators for human investigation, not accusations. Do not present a signal as a finding without human review.

• Do not use ClaimCircuit to commit insurance fraud, billing fraud, identity fraud, or any other deceptive activity.
• Do not impersonate another individual, organization, claimant, adjuster, regulator, or ClaimCircuit Technologies LLC representative.
• Do not falsify claim records, evidence, audit metadata, or AI review actions.

• Do not interfere with another customer's workspace, sessions, integrations, or data.
• Do not introduce delays, loops, or recursive automations designed to consume platform resources.
• Do not tamper with billing, metering, telemetry, or audit infrastructure.

ClaimCircuit Technologies LLC may take any of the following actions, in its reasonable discretion and in proportion to the conduct, when this policy is or appears to be violated:

• Issue a written warning to the workspace administrator.
• Throttle, rate-limit, or temporarily restrict specific features or integrations.
• Suspend a user account or a workspace pending investigation.
• Terminate a workspace consistent with the master subscription agreement.
• Report conduct to law enforcement, regulators, or other authorities where required by law or where ClaimCircuit Technologies LLC reasonably believes there is a risk of harm.
• Preserve relevant audit data to support investigation and legal process.

Suspension or termination does not relieve the customer organization of obligations under the master subscription agreement and does not waive other remedies available to ClaimCircuit Technologies LLC.

Report suspected platform misuse, account compromise, workspace abuse, or harmful AI usage to security@claimcircuit.com. Suspected vulnerabilities should also be sent to security@claimcircuit.com with enough detail to reproduce. Privacy concerns should go to {{PRIVACY_CONTACT_EMAIL}}.

Questions about this policy: legal@claimcircuit.com. Product support: support@claimcircuit.com.