Pre-launch draft · Prepared for review. Operator details and operational arrangements must be confirmed before adoption.
Purpose and scope
This draft sets out expected conduct for the marketing website and proposes principles for future platform agreements. Customer deployments require an agreed acceptable use policy alongside the licence and service contract.
Authorised access
Use only accounts and resources you are authorised to access. Do not share credentials, bypass permissions, impersonate another institution or attempt to access another organisation’s information.
Lawful and responsible content
Publish only material you are authorised to use and disclose. Do not distribute malware, fraudulent notices, unlawful content or material that infringes another person’s rights. The institution remains responsible for checking the accuracy and appropriateness of its public information.
Protect personal and confidential information
Do not use public pages or the enquiry form to expose credentials, classified material or personal information without an appropriate basis and authorisation. Apply the institution’s information-handling and publication policies.
Protect service operation
Do not deliberately overload services, send spam, interfere with other users or conduct intrusive security testing without prior written authorisation. Integration workloads must respect the agreed API contract and operating limits.
Reporting concerns
Report suspected misuse or vulnerabilities through the support or security channel agreed for your deployment. Share only the information necessary to describe the issue. A verified public reporting contact must be established before service launch.
Response to misuse
Any investigation, restriction or suspension of a customer deployment must follow its service agreement, with escalation and continuity requirements appropriate to a public institution. This draft does not itself establish suspension powers or contractual remedies.