Acceptable Use Policy | TripleCyber

Overview

This Acceptable Use Policy ("AUP") governs the use of all TripleCyber Corp products, services, platforms, and infrastructure, including TripleSOC, TripleEnable, Helloii, TripleValidate, TripleDNS, and any related APIs, portals, or managed services (collectively, the "Services").

This policy applies to all users, customers, enterprise accounts, channel partners, and any party accessing the Services directly or through an authorized reseller. Violations of this AUP may result in immediate suspension or termination of access without prior notice.

1. Authorized Use

You may use the Services only for lawful purposes consistent with:

Your organization's contracted scope of use
Applicable federal, state, and international laws and regulations
TripleCyber's Terms of Service
This Acceptable Use Policy

Enterprise customers using TripleSOC for security operations must ensure that the platform is configured, operated, and monitored only for networks, endpoints, and data within their authorized organizational scope as defined in their service agreement.

2. Prohibited Activities

The following activities are strictly prohibited when using the Services:

2.1 Security and System Integrity

Attempting to gain unauthorized access to any system, network, account, or data
Conducting penetration testing, vulnerability scanning, or exploit development against TripleCyber infrastructure or third-party systems without explicit written authorization
Deploying malware, ransomware, spyware, rootkits, or any malicious code via the Services
Interfering with, disrupting, or degrading the integrity or performance of the Services or connected networks
Circumventing, disabling, or tampering with any security, authentication, or access control feature of the Services
Using TripleSOC alerts, telemetry, or monitoring data to facilitate attacks on monitored systems

2.2 Data and Privacy

Collecting, processing, or storing personal data through the Services in violation of GDPR, CCPA, HIPAA, or other applicable privacy laws
Using the Services to monitor individuals without their knowledge or required legal authorization
Exfiltrating, selling, or sharing security telemetry, logs, or identity data with unauthorized parties
Configuring TripleSOC to ingest or process data from systems you are not authorized to monitor

2.3 Identity and Authentication Abuse

Impersonating any individual, organization, or entity through TripleEnable, Helloii, or any TripleCyber identity service
Creating fraudulent identity certificates, credentials, or trust tokens
Using TripleCyber's PKI infrastructure to issue certificates for domains or identities you do not own or control
Attempting to compromise or forge Zero Trust Risk Scores

2.4 Content and Communications

Transmitting spam, phishing messages, or unsolicited bulk communications via Helloii or any TripleCyber communication feature
Distributing illegal content, child sexual abuse material (CSAM), or content that promotes violence or terrorism
Harassment, threats, or targeted abuse of individuals through any TripleCyber platform
Using the Services for disinformation campaigns or coordinated inauthentic behavior

2.5 Commercial and Licensing Restrictions

Reselling, sublicensing, or providing access to the Services to third parties without an authorized channel partner agreement
Reverse engineering, decompiling, disassembling, or extracting source code from any TripleCyber software
Using the Services in a manner that exceeds your contracted license tier, seat count, or data retention limits
Removing or altering any copyright, trademark, or proprietary notices from the Services

2.6 Resource and Infrastructure Abuse

Mining cryptocurrency using TripleCyber infrastructure or compute resources
Generating excessive API calls, log volumes, or ingest rates beyond your contracted limits in a way that degrades service for other users
Using automated tools to scrape, harvest, or extract data from TripleCyber platforms without prior written consent

3. Government and Regulated Industry Use

Organizations using TripleSOC for FedRAMP, CMMC, FISMA, or other regulated environments are responsible for ensuring their deployment meets applicable compliance requirements. TripleCyber provides a security platform — configuration, access controls, and data governance within your environment remain your organization's responsibility.

Customers in regulated industries (healthcare, finance, government) must ensure that their use of the Services complies with sector-specific requirements including HIPAA, PCI-DSS, SOX, and applicable government security frameworks.

4. Reporting Violations

If you become aware of any use of the Services that violates this AUP, or if you believe your organization's data has been accessed in violation of this policy, please report it immediately through our contact page.

Security researchers who discover vulnerabilities in TripleCyber systems should follow responsible disclosure principles. Contact us before publishing any findings.

5. Enforcement

TripleCyber reserves the right to investigate suspected violations of this AUP. We may take any of the following actions without prior notice:

Temporarily or permanently suspend access to the Services
Throttle, limit, or terminate API access
Preserve and share relevant data with law enforcement as required by law
Pursue civil or criminal legal action
Terminate the service agreement with immediate effect

TripleCyber's determination of whether a violation has occurred is final. Customers may appeal suspension decisions by contacting us within 30 days.

6. Amendments

TripleCyber may update this AUP at any time. Material changes will be communicated via email to account administrators and posted on this page with an updated date. Continued use of the Services after changes take effect constitutes acceptance.

7. Contact

Questions about this Acceptable Use Policy should be directed to:

TripleCyber Corp.
1951 Kidwell Dr Suite 400
Vienna, VA 22182
USA
Contact form