Acceptable Use Policy
raia Platform – Acceptable Use Policy
Effective Date: January 1, 2025 Last Updated: April 16, 2025
1. Purpose
This Acceptable Use Policy (“AUP”) defines the rules and restrictions governing access to and use of the raia Platform, including all applications (raia CX, Command, CoPilot, Chat, Connect, Control), APIs, integrations, and AI Agent services. The goal of this policy is to protect the integrity, security, and compliance of the platform while ensuring responsible use of AI technologies.
2. Scope
This policy applies to all users, administrators, partners, and organizations that access or interact with any raia service or hosted system.
By using raia, users agree to comply with this AUP, the raia Terms of Service, and all applicable laws and regulations.
3. Prohibited Uses
Users may not use raia services for any purpose that violates law, regulation, or third-party rights, including but not limited to:
3.1 Illegal or Unlawful Activity
Engaging in or promoting any criminal, fraudulent, or deceptive activity.
Violating export controls, privacy, or data-protection laws (e.g., GDPR, HIPAA, CCPA).
Attempting unauthorized access to any system, network, or account.
3.2 Security Violations
Circumventing authentication or access controls.
Introducing malware, exploits, or malicious code into the platform.
Interfering with or degrading service performance or availability.
Conducting penetration testing or vulnerability scanning without written authorization.
3.3 Data Misuse
Uploading, processing, or storing confidential data without proper authorization.
Using the platform to exfiltrate, leak, or share personal or proprietary data.
Training AI Agents on data you do not own or have permission to use. raia’s SOC 2-compliant architecture requires that each Agent’s vector store and data remain isolated and encrypted.
3.4 Harassment and Harm
Generating or transmitting content that is harassing, abusive, hateful, or discriminatory.
Using Agents to impersonate others or misrepresent identity or affiliation.
Engaging in social-engineering or phishing behavior.
3.5 Inappropriate Content
Creating, sharing, or distributing content that is obscene, sexually explicit, violent, or otherwise inappropriate for professional use.
Using raia to generate misinformation, spam, or content designed to manipulate public opinion.
3.6 Platform Misuse
Reverse-engineering, copying, or attempting to derive source code from raia systems.
Overloading or abusing APIs beyond documented rate limits.
Reselling, sublicensing, or redistributing platform services without prior written agreement.
4. Data Protection and Privacy
raia implements SOC 2 Type II and HIPAA-aligned controls, including encryption, audit logging, and access governance.
Users must:
Handle all data in compliance with applicable privacy laws.
Obtain consent before processing personal information through AI Agents.
Avoid uploading data that includes health, financial, or government identifiers unless explicitly authorized for such use.
Follow least-privilege principles when granting Agent API or integration access.
5. Responsible AI Use
raia enables users to create autonomous AI Agents through Command and manage them via CoPilot, Chat, Connect, and Control.
Users agree to:
Use AI responsibly and transparently.
Provide accurate context and training data.
Supervise automated communications where human oversight is required.
Refrain from deploying Agents that make legal, financial, or medical decisions without human review.
Use human-in-the-loop feedback tools (CoPilot) to ensure quality and prevent harmful behavior.
6. Intellectual Property and Content Ownership
Users retain ownership of content they upload or create, but grant raia limited rights to process that content for AI training within the organization’s private environment.
Users may not infringe on third-party intellectual-property rights or upload unlicensed materials.
raia does not use customer data to train public AI models.
7. API and Integration Use
When using raia APIs, webhooks, or Skills:
Authenticate each call with a valid Agent-Secret-Key.
Do not share or expose keys publicly.
Use API endpoints only for intended business workflows.
Respect rate limits and data-handling policies described in the API documentation.
8. Monitoring and Enforcement
raia reserves the right to:
Audit use for compliance with this AUP.
Suspend or terminate access that violates this policy or poses security risk.
Report unlawful activity to authorities.
Retain logs for incident analysis consistent with SOC 2 retention controls.
9. Incident Reporting
If you suspect misuse, data breach, or unauthorized access:
Immediately notify [email protected]
Provide details (time, scope, systems affected).
Do not attempt self-remediation that may compromise evidence.
10. Policy Changes
raia may update this AUP periodically to reflect evolving regulations and platform features. Revised versions will be posted on docs.raiaai.com and become effective upon publication.
Last updated