Acceptable Use Policy

Effective 9 October 2026 (version acceptable-use-2026-10-09). This policy applies to everyone who uses SourceSecure through a firm's subscription. It forms part of the SourceSecure Terms of Service; a serious or repeated breach can lead to a seat or account being suspended.

1. You may not use SourceSecure to

1. Break any law or regulation, or help anyone else do so.
2. Get around the terms of service or security of the AI chat sites SourceSecure works with, or of any other system.
3. Share one seat between several people, or let anyone outside your firm use your seat.
4. Copy, extract, decompile or reverse-engineer the extension, its code or its detection models, except as the law expressly allows.
5. Interfere with the service or other firms' use of it: overloading it, sending automated traffic, or trying to reach another firm's information.
6. Probe the service for security weaknesses except in good faith under our disclosure policy at sourcesecure.ca/security#report.
7. Put client information into the firm playbook. The playbook is shared with everyone on your firm's Guard Enterprise seats and stored on our servers; it is for rules, templates and approved wording only.
8. Use the Living Vault, right-click capture or Ask SourceSecure to collect information about people you have no legitimate business reason to keep, or in breach of your firm's own policies.
9. Resell, rent or provide SourceSecure to anyone outside your firm.
10. Upload malware, or content you have no right to use, into any part of the service.

2. Your firm's responsibilities

Your firm decides how SourceSecure is used and remains responsible for what its people send to AI tools. Where your firm's admins can see catch and pause records, your firm should tell staff, for example with the electronic monitoring policy template SourceSecure provides.

3. Reporting

Report misuse or a security flaw to support@sourcesecure.ca. Good-faith security research under our disclosure policy is welcome, and we will not pursue researchers who follow it.

4. Enforcement

We may investigate suspected breaches and suspend the seat or account involved where there is harm or risk to the service, other firms or the law. We will tell your firm's admin why, except where the law prevents it.