Acceptable Use Policy — Screening API

This Acceptable Use Policy ("AUP") governs your use of the Screening API Service. It is incorporated by reference into the Terms of Service. Capitalised terms not defined here have the meanings given in the Terms of Service.

1. Prohibited Uses

You must not use the Service to:

Evade or circumvent sanctions obligations. Using the Service to identify which addresses are not yet listed for the purpose of using those addresses in transactions with sanctioned parties, or using Service outputs to inform structuring designed to evade sanctions detection.
Process transactions with sanctioned persons. Knowingly proceeding with a transaction after the Service has returned a positive sanctions match, or using the Service to retroactively justify a transaction already suspected of involving a sanctioned party.
Facilitate money laundering or terrorist financing. Using the Service as part of any scheme involving proceeds of crime, terrorist financing, or proliferation financing.
Violate applicable law. Using the Service in any manner that violates any law, regulation, court order, or governmental directive applicable to you.
Reverse engineer the Screening Data. Attempting to reconstruct, download in bulk, or compile a substitute sanctions database from Service responses. You may not use the Service to build a competing product that serves functionally identical outputs.
Resell access. Providing third parties with access to your API Key, or commercially reselling or relicensing Service access, without our prior written consent.
Abuse the API. Intentionally sending malformed requests, probing for security vulnerabilities, conducting load tests without prior authorisation, or otherwise interfering with Service operation.
Submit false or misleading information. Registering with false identity information or submitting deliberately corrupted address data for the purpose of generating false-negative results.

2. Sanctioned-Persons Clause

You represent and warrant that:

(a) You are not yourself a Specially Designated National, a person on the EU Consolidated Financial Sanctions List, the UK Financial Sanctions List, the UN Security Council Consolidated List, or any other applicable government sanctions list.

(b) You are not owned or controlled, directly or indirectly, by any such person or entity.

(c) You are not incorporated in, or operating from, a comprehensively sanctioned jurisdiction, including but not limited to Iran, North Korea, Syria, Cuba, and the Crimea, Donetsk, and Luhansk regions.

(d) Your use of the Service does not and will not violate any applicable sanctions law.

We reserve the right to terminate your account without notice if we have reasonable grounds to believe any of the above representations is false.

3. Accuracy Obligations

You acknowledge that:

The Service does not replace a comprehensive sanctions compliance programme.
You are responsible for verifying that your screening workflow, alert thresholds, and escalation procedures are appropriate for your regulatory environment.
You must not represent to any regulator, auditor, or third party that the Service has certified an address as lawful to transact with. Service outputs are informational inputs to your compliance process, not compliance certifications.

If you discover that you have processed a transaction involving a sanctioned address — whether or not it was flagged by the Service — you must take appropriate action under your compliance programme, including any required regulatory reporting.

4. No API Abuse

Permitted use includes:

Sending Screening Requests up to your plan's Usage Quota.
Calling the /v1/usage and /v1/sources endpoints for monitoring purposes.
Testing with the public free checker (/api/checker) within the published rate limits.

Prohibited API conduct includes:

Sending requests at rates materially exceeding your plan limits with the intent to circumvent rate limiting.
Using multiple accounts to aggregate quota beyond what you have contracted.
Automated credential stuffing or probing of authentication endpoints.
Deliberately triggering error states to probe internal system behaviour.

5. Reporting Violations

If you become aware of a violation of this AUP — by your organisation, your employees, or any third party who has obtained access through your account — notify us promptly at [ABUSE CONTACT EMAIL PLACEHOLDER].

6. Enforcement and Termination

We may investigate any suspected AUP violation. Upon determining a violation has occurred, we may, at our sole discretion and without prior notice:

Issue a warning.
Temporarily suspend your API access.
Permanently terminate your account.
Report the conduct to relevant authorities.

Termination for AUP violation is immediate and does not entitle you to a refund. We are not required to provide a cure period for AUP violations.

We reserve the right to cooperate fully with law enforcement in any investigation arising from your use of the Service.