1. Purpose
This Acceptable Use Policy sets out the rules governing the appropriate use of systems, networks, hosting services, cloud services, websites and other technology services supplied or managed by Bern Technologies.
2. Acceptable Use
Customers and authorised users must use our services responsibly and lawfully. Services must not be used for:
- Illegal activities, fraud or identity theft
- Unauthorised access, hacking or malware distribution
- Phishing, spam or unauthorised surveillance
- Copyright infringement or distribution of illegal content
- Harassment, threats or attacks against third-party systems
- Any activity that could reasonably damage our infrastructure or reputation
3. Unauthorised Access
Users may not attempt to bypass security controls; access accounts belonging to other users without authorisation; circumvent authentication; exploit vulnerabilities without permission; attempt to obtain passwords or credentials; install malicious software; or interfere with another customer's systems.
Security testing may only be performed with explicit written authorisation from the relevant system owner.
4. Malware and Cybersecurity
Customers must take reasonable steps to protect their systems. Where Bern Technologies identifies a significant security threat, we may take reasonable steps to contain or mitigate the threat. This may include disconnecting compromised devices, blocking malicious traffic, disabling compromised accounts, temporarily restricting services or applying security controls.
Where practical, we will notify the customer before taking significant action. Emergency action may be taken without prior approval where reasonably necessary to protect systems or data.
5. Email and Communication
Customers must not use Bern Technologies-managed email systems to distribute spam, phishing messages, malware, fraudulent communications, unsolicited bulk communications or illegal content.
6. Suspension
Bern Technologies may suspend or restrict services where reasonably necessary to protect our infrastructure or other customers, address a serious security threat, comply with the law or prevent unlawful activity. Where appropriate, the customer will be notified.
7. Customer Responsibility
Customers are responsible for the activities of users who have access to their systems and accounts. Customers must maintain appropriate passwords, authentication methods and access controls.