# Acceptable use policy

> **Draft — pending review by a solicitor. Not yet in force.**

Last updated: 10 October 2026

What you, the people in your organisation and the AI agents you run may not do with Fyle. It protects other customers, the service and the public. Breaking it can lead to content being removed or an account being suspended.

## 1. Who this applies to

This policy is part of our [terms of service](/legal/terms). It applies to everyone who uses Fyle and to every agent, script or program acting through a Fyle account, device or agent credential. Account holders and organisation admins are responsible for the agents and members they allow in.

## 2. Content you must not store or share

- Child sexual abuse material. We report it to the relevant authorities.
- Content that is illegal in the UK, or that you have no right to store or share, including material that infringes someone's copyright or other rights.
- Malware, or files intended to harm devices, networks or people, except in a private workspace for legitimate security research that you don't distribute.
- Personal data you have no lawful basis to hold.
- Content intended to harass, threaten or exploit people.

## 3. Using the service fairly

- Don't try to access accounts, workspaces or data you haven't been given access to.
- Don't probe, scan or test Fyle's security except under our responsible disclosure policy (write to [security@fyle.sh](mailto:security@fyle.sh)).
- Don't overload or disrupt Fyle, or get around rate limits, quotas or plan limits.
- Don't use Fyle as a public file host or content delivery network, for example by publishing signed download links widely.
- Don't resell or white-label Fyle without a written agreement with us.
- Don't use Fyle to send spam or run phishing.

## 4. AI agents

- Run agents with credentials scoped to the task. Don't give an agent your own session or share agent credentials.
- Don't run agents that generate unusually heavy load (for example tight loops of uploads or downloads) without talking to us first. Fair-use limits for agent workloads will be published before launch.
- Don't plant content in shared files designed to make other people's agents act against their owners' interests (prompt injection).
- Don't use agents to do anything this policy forbids a person from doing.

## 5. What happens if this policy is broken

Depending on how serious it is, we may warn you, remove or restrict access to content, revoke a device or agent credential, or suspend or close the account. Where we can, we will tell you first and give you a chance to fix it. We may report illegal activity to the authorities.

## 6. Reporting abuse

To report content or behaviour that breaks this policy, email [legal@fyle.sh](mailto:legal@fyle.sh). For security vulnerabilities, email [security@fyle.sh](mailto:security@fyle.sh).