ACCEPTABLE USE AND AI TRANSPARENCY POLICY

Users must not impair availability or security, bypass authentication or roles, run unauthorised scans or penetration tests, introduce malware, perform disproportionate automated extraction, reverse engineer protected service components or impersonate others. Security research requires prior written scope and rules.

Unlawful, deceptive, discriminatory, harassing or rights-infringing content is prohibited, as are unlawfully obtained data, covert surveillance, unsolicited communications and use for decisions violating employment, consumer, competition, sanctions, export or other law.

Without express approval users must not upload special-category, biometric, criminal, medical or child data, payment cards, passwords, private keys, state secrets or specially localised data. Before upload they must remove unnecessary data and have the right to provide the document.

A person directly interacting with AI is clearly informed of that fact. Synthetic content intended for onward use is identified as AI-generated or AI-assisted where technically and legally required. HouseID maintains an AI use-case register recording model/provider, purpose, limitations, inputs, human oversight and risk owner.

AI must not be used for manipulation, social scoring, exploitation of vulnerability, unlawful emotion recognition, prohibited biometric databases or solely automated significant decisions. Every new high-risk or unclear use case requires legal, security and DPIA/AI-risk review before deployment.

HouseID may block dangerous content, restrict an affected feature, require remediation, preserve necessary evidence and suspend an account for serious or repeated breach. Action is proportionate and reviewable; where security and law permit, the user receives reasons and a contact route. Immediate threats may be handled without prior notice.