This Acceptable Use Policy ("AUP") sets out the rules that apply to everyone who uses the Supplio platform — whether you are a paying customer, an authorised user invited by a customer, or a supplier using the supplier portal. It is part of, and incorporated by reference into, the Terms of Service and the Supplier Portal Terms. Breach of this AUP may result in suspension or termination of access without notice.

1. Prohibited content

You must not upload, store, transmit or share anything that:

is unlawful, fraudulent, defamatory, obscene, harassing, threatening, or discriminatory in any way prohibited by UK or applicable foreign law;
infringes any intellectual-property right, right of confidence, right of publicity, privacy right or any other right of a third party;
contains personal data you do not have a lawful basis to process, or special-category data you have not been told to upload;
contains personal data of children under 18;
amounts to terrorist content, child sexual abuse material, or any other content that is illegal in the United Kingdom under the Online Safety Act 2023 or the Terrorism Act 2006;
contains malware, ransomware, viruses, worms, trojans, exploits, ransom notes or other malicious code; or
contains real or simulated credentials, secrets, encryption keys, payment-card data or other sensitive material that should not be stored in the Service (other than the kinds of credentials and tokens the Service is designed to handle, such as supplier insurance policy numbers).

2. Prohibited activities

You must not, and must not assist anyone else to:

use the Service in any way that breaches applicable law, regulation, sanction or third-party right;
send unsolicited commercial communications (spam) using the Service, in breach of PECR or any equivalent law;
impersonate any person or entity, or misrepresent your affiliation with any person or entity;
access an account, a tenant workspace or data that you are not authorised to access, or attempt to do so;
scrape, crawl, mass-download or systematically extract data from the Service except through documented features or APIs and within any published rate limits;
reverse-engineer, decompile, disassemble or otherwise attempt to derive the source code, ideas or algorithms of the Service, except to the extent expressly permitted by law;
conduct, or permit a third party to conduct, security testing, penetration testing, automated vulnerability scanning, fuzzing, denial-of-service testing or red-team exercises against the Service, without Supplio's prior written authorisation;
interfere with or disrupt the integrity, security, availability or performance of the Service, including by overloading it, circumventing rate limits, or attempting to bypass quotas, billing or audit-logging mechanisms;
use the Service to develop, train, evaluate or benchmark a competing product, or to publish comparative benchmarks of the Service;
remove, alter or obscure any copyright, trademark or other proprietary notice; or
resell, sublicense, lease, rent or otherwise transfer access to the Service to a third party that is not a duly authorised user under your subscription.

3. Account integrity

Each user must use their own uniquely-identified account. Credential sharing is prohibited.
You must keep your password and authentication factors confidential and follow good security hygiene (no reuse of breached passwords; enable any multi-factor authentication option offered).
You must notify us promptly at security@supplio.co.uk if you suspect your credentials or your organisation's account have been compromised.

4. Use of the supplier portal

If you are a supplier-portal user, the information you submit is shared with the customer that invited you. By submitting information you confirm that the information is true, accurate, complete and not misleading to the best of your knowledge, and that you have the right to submit it (including, where it contains personal data about others, the legal basis to do so). Knowingly submitting false information may amount to misrepresentation and could expose you and your organisation to civil or criminal liability.

5. AI and automated tooling

You must not use the Service's outputs to train, fine-tune or evaluate any machine-learning model that is sold to or shared with a third party.
You must not connect AI agents or autonomous bots to the Service except through documented APIs and within any published rate limits, and you remain responsible for everything done through your account by those agents.

6. Reporting abuse

If you become aware of any content or activity that breaches this AUP, contact abuse@supplio.co.uk with a description of the issue and any URLs or identifiers needed to investigate. We aim to acknowledge abuse reports within one UK business day.

Intellectual-property infringement notices should also be sent to abuse@supplio.co.uk and should contain the information typically required for a UK takedown notice (identification of the work, identification of the allegedly infringing material, your contact details and a good-faith statement that use of the material is not authorised). We will pass valid notices to the relevant customer where the content was uploaded by them.

7. Investigation and enforcement

Supplio may, but is not obliged to, investigate suspected breaches of this AUP. Where we conclude that a breach has occurred we may, at our discretion and in proportion to the breach:

remove, restrict or quarantine the offending content;
warn, suspend or terminate the relevant user account or tenant workspace;
cooperate with law-enforcement and regulatory authorities, including by responding to valid legal requests for information;
retain a record of the breach for security, compliance and forensic purposes.

For serious breaches (for example, suspected illegal content or active attacks on the Service), we may act immediately without prior notice.

8. Changes

We may update this AUP from time to time. Material changes will be notified in line with section 22 of the Terms of Service.

9. Contact

Questions about this AUP? Email abuse@supplio.co.uk.