Acceptable use policy

1. General principle

NextAnalyzer exists to protect devices, networks and people. Its use must respect the law, the rights of third parties, in particular privacy and the rights of employees, and the security of the service.

2. It is prohibited to

• Use the Service to covertly monitor people, or for discriminatory, harassing or unlawful purposes.
• Process the content of communications, keystrokes or screenshots, which the Service does not collect and is not designed to collect.
• Install the agent on devices over which one has no rights, or without properly informing the people who use them.
• Attempt to access other customers' accounts, data or organisations, or the Provider's systems, without authorisation.
• Carry out penetration, load or vulnerability tests against the Service without written authorisation.
• Introduce malicious code, or use the Service to attack third-party systems.
• Circumvent technical or plan limits, automate device enrolment for resale or overload the Service or its API.
• Resell or transfer access to the Service to unauthorised third parties, except as an authorised partner.

3. Remote access

• Use it only on the organisation's devices and for support, maintenance or security purposes.
• Inform the people who use the devices in advance that they may receive remote sessions and, if unattended access is configured, when and for what it will be used.
• Not access files, emails, messages or personal accounts of the person using the device beyond what the task requires, nor copy their data through the clipboard or file transfer without need.
• Not record the screen by other means without a legal basis and prior information, nor impersonate NextAnalyzer support.

4. Scripts and remediations

• Not run scripts that damage devices, disable security measures without a legitimate reason, extract personal data or credentials, or install unlicensed software.
• Not use scripts to obtain the content of communications, keystrokes, screenshots, audio, video or location of people.
• Review remediations, especially those written by AI, and test them before applying them to many devices.

5. Network discovery and web blocking

• Scan only networks belonging to the organisation or for which authorisation has been obtained. Active mode generates scanning traffic and should only be turned on with the permission of whoever is responsible for the network.
• Not use web blocking to prevent the exercise of fundamental rights, such as staff access to information from their trade union representatives, or for discriminatory purposes.

6. Artificial intelligence

• Not attempt to manipulate the models (for example, by inserting instructions in device or package names) or obtain unlawful content through the Service.
• Not present AI-generated content as reviewed by a person if it has not been, nor use it as the sole basis for decisions affecting people.
• Not use the AI features to monitor or evaluate the performance or behaviour of employees or to take decisions about their employment relationship.

7. Consequences and reports

Breach may lead to immediate suspension of the affected feature or the Service if there is a risk to security or legality, and to termination of the contract, without prejudice to other actions. If you detect misuse or a vulnerability in the Service, write to [PENDING: email] (also listed at https://nextaura.es/.well-known/security.txt); we appreciate responsible disclosure.