Acceptable Use Policy

Last updated July 2026 · v.01

Required Policy Attachment to the Master Services Agreement.

1. Purpose

This Acceptable Use Policy protects Clasp’s platform, infrastructure, and users. All Customers and Users must comply with this Policy as a condition of accessing the Service.

2. Prohibited Conduct

Users may not use the Service to:

  • violate any law or court order;

  • upload, store, or transmit infringing, stolen, or unauthorized content;

  • upload malware, viruses, worms, trojans, or any harmful code;

  • attempt to probe, scan, or test system vulnerabilities;

  • bypass, disable, or interfere with security controls;

  • scrape, crawl, or harvest data from the Service;

  • use bots, automation, or scripts without Clasp’s written permission;

  • reverse engineer, decompile, or attempt to access source code;

  • impersonate any person or misrepresent identity;

  • send spam, phishing messages, or unsolicited communications;

  • overload or disrupt the Service, including denial-of-service activity.

3. Prohibited Content

Users may not upload, store, or transmit:

  • defamatory, harassing, threatening, or abusive content;

  • hate speech or discriminatory content;

  • sexually explicit, violent, or graphic content unrelated to legitimate case materials;

  • regulated or high-risk data Clasp is not certified to handle, including:

    • i. protected health information (PHI) under HIPAA;

    • ii. payment card data (PCI);

    • iii. full unredacted social security numbers except where included in legitimate legal filings;

    • iv. minors’ data subject to heightened protections, except where included in legitimate legal filings or expressly permitted under the Agreement.

    • v. export-controlled or government-classified data;

    • vi. biometric identifiers;

  • any content intended to train, improve, or benchmark external AI systems.

4. System Integrity

Users may not:

  • interfere with system performance or degrade service for others;

  • attempt to consume excessive bandwidth, storage, or computer resources to the detriment of others;

  • attempt to manipulate or poison metadata, embeddings, or search relevance;

  • misuse public sharing links or attempt unauthorized access to shared content.

5. Account Security

Users must:

  • maintain secure credentials and protect email accounts used for OTP;

  • avoid credential sharing under all circumstances;

  • promptly report any suspected unauthorized access;

  • use supported browsers and maintain secure devices and networks.

Clasp may suspend accounts involved in credential misuse or compromise.

6. AI-Assisted Functionality

Users may not:

  • attempt to use the Service for generative AI, automated decision-making, or predictive analysis;

  • attempt to extract, reconstruct, or infer document text from metadata or embeddings;

  • submit prompts or content designed to circumvent Clasp’s metadata-only AI boundaries.

Clasp does not transmit document text or Customer Data to external large language models (LLMs). For the optional Time Capture module, and only when Customer elects to enable AI processing, Clasp may transmit system-generated internal metadata to OpenAI solely to generate draft time-capture descriptions.

7. E-Signature Use

Users may not:

  • use Clasp’s e-signature features for high-risk or regulated transactions;

  • attempt to alter or tamper with signed documents;

  • rely on Clasp’s e-signature features as a substitute for a legally required signature processes.

8. Enforcement

Clasp may, at its sole discretion:

  • investigate suspected violations;

  • suspend or terminate accounts;

  • throttle or block access;

  • remove or disable non-compliant content;

  • report illegal activity to law enforcement;

  • cooperate with investigations.

Clasp is not required to provide notice before taking protective action.

9. Monitoring

Clasp may monitor system logs, metadata, and usage patterns to maintain security and integrity. Clasp does not monitor document content except as required for OCR and search indexing.

10. Document and Media Storage Use

The Service includes unlimited document and media storage subject to reasonable use. Clasp reserves the right to internally review storage utilization that exceeds 100 GB per seat per workspace and to work with Customer to understand and, if necessary, limit excessive or abnormal storage patterns. Clasp may take protective or corrective action if storage use materially impacts system performance or the experience of other users.

11. Updates

Clasp may update this Policy at any time. Continued use of the Service constitutes acceptance of the updated Policy.