Acceptable Use Policy

Last updated Oct 22, 2026

This Acceptable Use Policy (“AUP”) applies to use of the Elios Services under the Terms of Service or another agreement incorporating it. Capitalized terms have the meanings in that agreement. Customer must ensure its authorized users, applications, agents and end users comply when using the Services through Customer’s account.

1. Use the Services with authority

Use the Services only for activities you are legally entitled to perform. Obtain permission to access accounts, systems, data and communications. Do not use an agent to do something you have no right to do yourself. Use of the documented APIs, automated workflows and agents is permitted subject to this policy and the product’s operating limits.

You must not use the Services to:

  • Break applicable law, infringe intellectual property rights, or obtain, disclose or use another person’s confidential information without authority.
  • Access an account or system without authorization, steal credentials, evade an access restriction, or conceal the origin of an attack.
  • Commit fraud, phishing, identity theft, deceptive impersonation, financial scams or unauthorized transactions.
  • Stalk, threaten, unlawfully discriminate against, dox or otherwise unlawfully harass a person, or distribute nonconsensual intimate material.
  • Create, obtain, store or distribute child sexual abuse material or facilitate the sexual exploitation of children.
  • Facilitate terrorism, trafficking or the unlawful acquisition, construction or use of weapons, including biological or chemical weapons.
  • Operate in violation of applicable sanctions or export controls, or conceal required ownership, identity or location information to evade them.

2. Protect the platform and other people

Do not compromise the security or availability of Elios, another customer or another person’s infrastructure. Prohibited conduct includes unauthorized scanning or intrusion, denial-of-service attacks, credential stuffing, malicious bot activity, distributing malware, operating a botnet, or using workloads to exfiltrate data without authority.

Authorized testing of systems you own or have permission to test is not automatically prohibited. Testing Elios itself requires the scope and conditions of our published vulnerability disclosure policy or separate written authorization. Stop and report an unexpected access to another customer’s information; do not explore or retain it beyond what is necessary to report the issue safely.

Do not bypass account restrictions, resource limits, metering, payment controls or abuse protections. Do not create multiple accounts or identities to obtain repeated signup credits, conceal a suspension, or avoid charges. Do not run resource-consuming workloads whose purpose is to obtain payment or transferable rewards from pooled computation, such as cryptocurrency mining, without prior written approval. This restriction does not prohibit ordinary blockchain development or testing that otherwise complies with the agreement.

Do not expose an unrestricted public relay, proxy, credential-sharing service or unauthenticated compute endpoint that predictably enables abuse. If your product gives end users access to agent or execution capabilities, use authentication, limits and abuse controls appropriate to its risks.

Do not use any Elios product to send, arrange, automate or assist spam, unlawful unsolicited communications, deceptive outreach or harassment. This applies to calls, texts, email, messaging platforms, social networks and other channels, including communications sent through a third-party provider or an account controlled by your agent. It applies whether Elios transports the communication itself or provides the computer or other infrastructure used to initiate it.

Obtain the consent or other permission required for the communication, honor applicable do-not-call and suppression lists, identify the sender accurately, provide required opt-out methods, and stop communications when the recipient withdraws permission or opts out as required by law. Do not use purchased, scraped or fabricated consent records as if they established valid permission where they do not. Do not evade a block, opt-out, identity verification, sender registration or abuse restriction by changing numbers, accounts, domains or providers.

Calls, messages and recordings made through Phone must additionally comply with the Phone Terms, applicable law and applicable carrier requirements disclosed for that product. Do not use deceptive caller identification or make unwanted automated communications in violation of law or this policy.

Do not impersonate a person, company or public authority deceptively, including through synthetic voices. Obtain required permissions and provide required disclosures when using a person’s voice, likeness, recording or identity. Make any disclosure about an artificial agent that applicable law or the circumstances require.

4. Build applications with appropriate safeguards

You remain responsible for applications and agents you operate. Do not use the Services as the sole mechanism for an emergency response, safety-critical control or other function where failure is likely to cause death or serious physical injury unless Elios has expressly agreed in writing to support that use. Phone cannot reach emergency services. Do not claim that Elios is certified or approved for a regulated use without an accurate, applicable written basis.

For uses affecting legal rights, employment, housing, credit, medical care or similarly significant interests, implement the notices, authorization, human review and other safeguards required by applicable law. This policy does not authorize a regulated activity merely because it is technically possible through the Services.

Do not submit data subject to specialized requirements that the Services do not support, or that require a separate agreement not yet completed. The Terms explain how to arrange a supported regulated use.

5. Third-party requirements

If you connect a third-party model, service or account, comply with that provider’s applicable terms and obtain the permissions needed to send information to it. Elios does not grant permission to violate another provider’s terms or restrictions. Elios may disclose specific upstream requirements for a product; we will identify those requirements rather than treating undisclosed policies as a general power to impose new restrictions.

6. Reports and enforcement

Report suspected abuse, including spam and potentially illegal content, to abuse@elios.ai. Include the relevant account, resource, communication identifier or URL, the time and timezone, a description of the concern, and enough information for us to locate it. Avoid sending passwords, full payment credentials or unnecessary sensitive personal information. Reports of vulnerabilities and intellectual property infringement should use the relevant routes in the Legal hub.

We may investigate credible reports and take proportionate action under the agreement, including asking for information, limiting a resource, requiring remediation, or suspending or terminating access. We may act immediately where necessary to prevent harm or comply with law. Where lawful and practical, we will explain the reason and provide a way to request review through abuse@elios.ai. The agreement governs notice, billing, termination and available data access.

Nothing in this AUP limits a procedural right or duty imposed by applicable law.

We do not undertake to review all Customer Content or all agent activity before it occurs. We may preserve or disclose information when legally required or as permitted under the agreement and applicable law. This does not create a broader data-use permission than the DPA or Privacy Policy provides.

Changes to this AUP follow the notice and change process in the Terms. A revised policy does not retrospectively turn previously authorized conduct into a breach.