1. Purpose
This Acceptable Use Policy (“Policy”) defines the permitted and prohibited uses of services provided by Erudika Ltd. (“Erudika”), including the Scoold Cloud and Para Cloud hosting services.
The purpose of this Policy is to protect the security, availability, integrity and appropriate use of Erudika services, as well as the security and rights of our customers, users and third parties.
This Policy supplements the applicable Terms of Service and other agreements governing use of Erudika services.
2. Acceptable Use
Customers and authorized users may use Scoold Cloud, Para Cloud and/or other Erudika services for legitimate business and organizational purposes consistent with the applicable service agreement.
Customers are responsible for ensuring that their use of the service, including content submitted by their users, complies with applicable laws, regulations and contractual obligations.
Customers are also responsible for managing access to their accounts and for ensuring that credentials and other authentication information are appropriately protected.
3. Prohibited Activities
Users must not use Erudika services to:
-
Violate applicable laws or regulations.
-
Gain unauthorized access to the service, another customer’s environment, or any computer system, network or account.
-
Attempt to bypass, disable or circumvent authentication, authorization, security controls or other protective mechanisms.
-
Interfere with or disrupt the availability, integrity or normal operation of the service or its underlying infrastructure.
-
Introduce or distribute malicious software, including malware, ransomware, viruses, worms or other harmful code.
-
Conduct denial-of-service or distributed denial-of-service attacks.
-
Perform unauthorized vulnerability scanning, penetration testing or other security testing against Erudika infrastructure or services.
-
Attempt to access, modify, destroy or exfiltrate data belonging to another customer or third party.
-
Use the service to facilitate fraud, credential theft, phishing, or other malicious activity.
-
Use the service to distribute content that infringes the intellectual property or other rights of third parties.
-
Use the service to store or distribute content that is unlawful.
-
Attempt to circumvent service limitations or security mechanisms through technical means.
-
Use the service in a manner that could reasonably be expected to cause material harm to the service, its infrastructure, Erudika, other customers, or third parties.
4. Security Testing
Customers must not conduct penetration testing, vulnerability scanning, automated security testing or other activities intended to identify or exploit vulnerabilities in Erudika’s infrastructure or shared service components without prior authorization from Erudika.
Customers may perform security testing against their own application content and configuration where such testing does not affect Erudika infrastructure or other customers and does not violate the applicable service agreement.
Security vulnerabilities discovered in Scoold Cloud, Para Cloud or the Erudika service should be reported responsibly to Erudika rather than exploited or publicly disclosed before Erudika has had a reasonable opportunity to investigate and remediate the issue.
5. Customer Content
Customers retain responsibility for the content and data they submit to Scoold Cloud and Para Cloud.
Customers must ensure that they have the necessary rights, permissions and legal basis to store and process such content through the service.
Erudika does not require customers to submit information beyond what is necessary for use and administration of the service.
Erudika may process customer content as necessary to provide, secure, maintain and support the service, subject to the applicable service agreement, privacy documentation and data-processing terms.
6. Account and Access Security
Customers are responsible for maintaining the confidentiality of their account credentials and for appropriately managing access to their cloud environment.
Customers should promptly notify Erudika if they become aware of unauthorized access to their account or a security incident affecting the service.
Users must not share authentication credentials in a manner that would circumvent the access controls or accountability mechanisms of the service.
7. Abuse and Resource Usage
Customers must not intentionally consume service resources in a manner that materially interferes with the service or affects other customers.
Automated activity, integrations and API usage are permitted when used for legitimate purposes and in accordance with applicable service limits and documentation.
Erudika may take reasonable measures to protect the availability, security and integrity of its services when abusive or harmful activity is detected.
8. Enforcement
If Erudika determines that a customer’s use of the service violates this Policy or presents a material security, legal or operational risk, Erudika may take appropriate action, which may include:
-
requesting that the customer stop or correct the activity;
-
restricting particular functionality;
-
temporarily suspending access where necessary to protect the service or other users; or
-
terminating the service where permitted under the applicable agreement.
Where reasonably practicable, Erudika will work with the affected customer to address the issue before taking restrictive action, except where immediate action is necessary to protect the security or availability of the service or to comply with legal requirements.
9. Security and Privacy
Erudika maintains security and privacy practices designed to protect its services and customer information.
For Scoold Pro Hosting, the underlying cloud infrastructure is provided by Amazon Web Services (AWS). Security responsibilities are divided between AWS and Erudika in accordance with the AWS Shared Responsibility Model. AWS is responsible for security of the underlying cloud infrastructure, while Erudika is responsible for security of the applications, configurations and data under its control.
Additional information regarding Erudika’s security and privacy practices is provided in the applicable Information Security & Privacy Policy, Privacy Policy, Data Processing Agreement and other contractual documentation.
10. Reporting Violations and Security Issues
Suspected violations of this Policy and suspected security vulnerabilities affecting Erudika services should be reported to:
Email: [email protected]
Reports should contain sufficient information to allow Erudika to investigate the issue, including relevant timestamps, affected service or functionality, and a description of the observed behavior where available.
11. Changes to This Policy
Erudika may update this Policy from time to time to reflect changes to its services, security practices, legal requirements or operational requirements.
The current version of this Policy will be made available through the applicable Erudika website or service documentation.
12. Contact
Questions regarding this Policy may be directed to:
Erudika - [email protected]