Acceptable use policy

1. Purpose and relationship to the EULA

This Acceptable Use Policy (AUP) sets out what is and is not acceptable use of Purde Software's products. It supplements §7 of the EULA; in the event of a conflict, the EULA prevails.

2. Scope

This AUP applies to every Customer and every User of any Purde Software product, including Cloud apps and Data Center apps installed in a customer's environment.

3. Acceptable use

You may use our products for lawful business purposes consistent with the EULA, the documentation we publish, and the platform rules of Atlassian.

4. Prohibited use

You must not, and must not permit any third party to:

• Break the law. Use the products to engage in or facilitate unlawful activity, including infringement of intellectual-property rights, defamation, or harassment.

• Process sensitive or high-risk data. Submit data that requires controls we have not designed for, including special categories of personal data under Art. 9 GDPR (health, biometric, genetic, racial/ethnic, religion, political opinions, sexual orientation), data subject to PCI DSS, classified government data, or data whose loss could cause physical harm.

• Operate critical or life-safety systems. Use the products for High-Risk Activities — operation of nuclear facilities, life-support systems, air-traffic control, or any context where failure could result in personal injury, death, or severe environmental damage.

• Attack, probe, or disrupt. Conduct unauthorized security testing, penetration tests, vulnerability scans, denial-of-service attempts, or other intrusive activities against the products or their underlying infrastructure. Good-faith vulnerability research is covered by the Vulnerability Disclosure Policy instead.

• Reverse engineer beyond what the EULA permits. Decompile, disassemble, or otherwise attempt to derive source code, except where mandatorily allowed by applicable law (e.g., §69e UrhG).

• Circumvent controls. Bypass authentication, rate limiting, licence enforcement, or access controls; misrepresent identity; share credentials.

• Compete using our products. Build, train, or improve a product or service that competes with ours using data, behaviour, or output from the products.

• Send unwanted or malicious content. Send spam, phishing, malware, or content designed to harm users or systems.

• Misuse AI features. Use opt-in AI features to submit content you are not permitted to disclose to a third-party AI provider, or to generate output you are not entitled to use.

• Resell or sublicense outside the EULA. Sell, rent, sublicense, or otherwise commercialize the products beyond what the EULA permits.

5. Reporting concerns

If you become aware of misuse of our products — by you, a User in your organization, or a third party — report it via:

• Service Desk: https://purde-software.atlassian.net/servicedesk/customer/portal/2

• Email: support@purde.de

• Suspected security vulnerability: see the Vulnerability Disclosure Policy.

6. Enforcement and consequences

Violations of this AUP may, depending on severity, result

• a warning and required remediation;

• suspension of access to the affected products under EULA §11;

• termination of the agreement for material breach under EULA §12.3;

• referral to authorities where unlawful conduct is suspected.

7. Related documents

• End User License Agreement (EULA)

• Privacy Policy

• Cybersecurity Policy

• Vulnerability Disclosure Policy

• AI Use Statement

8. Version history