Evergreen
Sign up

Legal

Acceptable Use Policy

Last updated

This Evergreen Acceptable Use Policy (this “AUP”) is part of the Evergreen Terms of Service (the “Terms”) between eShares, Inc. DBA Carta, Inc. (“Carta”) and Customer. It applies to Customer, every Authorized User, and every Agent acting on their instructions. Customer is responsible for each of them complying with this AUP. This AUP adds to Section 10 of the Terms. Capitalized terms not defined here have the meanings given in the Terms.

1Agent Use

#
1.1

You are responsible for every action an Agent takes on your instructions or within permissions you or your Authorized Users granted, including actions in third-party systems.

#
1.2

You will not direct or configure an Agent to:

#
  1. (a)

    access, scan, test, or modify any system, account, network, or data you do not own or lack written authorization to use;

  2. (b)

    create accounts on third-party services by automated means, send bulk or unsolicited messages, or post content at scale;

  3. (c)

    attempt credential stuffing, password guessing, or session hijacking;

  4. (d)

    scrape or harvest data in violation of a website’s or service’s terms, technical controls, or rate limits; or

  5. (e)

    make purchases, payments, legal commitments, or other binding transactions for anyone without that person’s authorization.

1.3

You will keep the human review, monitoring, and rollback safeguards required by Section 5.2 of the Terms for any Agent action that could affect production systems or data.

#

2Security Research

#
2.1

You may use Evergreen for security testing only on systems you own or have written permission to test, and only within the scope of that permission.

#
2.2

You will not use Evergreen to create, test against third parties, or distribute malware, ransomware, exploit kits, botnets, or other tools designed to damage or gain unauthorized access to systems or data.

#
2.3

You will not probe, scan, or test the vulnerability of Evergreen or Carta’s systems, except through Carta’s vulnerability disclosure program at carta.com/security/responsible-disclosure-policy and on its terms.

#

3Compute and Resource Abuse

#

You will not use Evergreen infrastructure to:

  1. (a)

    mine cryptocurrency or perform other proof-of-work computation;

  2. (b)

    operate proxies, VPN endpoints, anonymization services, or open relays;

  3. (c)

    host or distribute files, media, or websites for the public, or run peer-to-peer file sharing;

  4. (d)

    load test, stress test, or send excessive traffic to systems you do not own;

  5. (e)

    run workloads that abuse or misuse Evergreen compute resources, such as cryptocurrency mining, proxying or relaying network traffic, or general-purpose hosting; or

  6. (f)

    interfere with, degrade, or place an undue burden on Evergreen or other customers.

4Prohibited Content and Activities

#

You will not use Evergreen or any Output to:

  1. (a)

    create, store, or distribute child sexual abuse material;

  2. (b)

    develop or support chemical, biological, radiological, or nuclear weapons, or other weapons capable of mass casualties;

  3. (c)

    promote or facilitate terrorism, violent extremism, or violence against any person;

  4. (d)

    commit fraud, phishing, scams, impersonation, or other deceptive practices;

  5. (e)

    harass, threaten, stalk, dox, or surveil any person, or build spyware or tools for covert monitoring;

  6. (f)

    infringe or misappropriate intellectual property, privacy, or publicity rights;

  7. (g)

    interfere with elections or democratic processes, or run coordinated inauthentic campaigns;

  8. (h)

    engage in a regulated activity without the licenses, registrations, and compliance that law requires; or

  9. (i)

    violate any applicable law.

5Data

#
5.1

You will not submit data that Section 9.5 of the Terms prohibits.

#
5.2

You will not use Evergreen to collect, scrape, or process personal data without a lawful basis and all required notices and consents.

#
5.3

You will not use Evergreen to identify or track individuals from aggregated or de-identified data.

#

6Model Provider Policies

#

You must also comply with the usage policies of the Model Providers as described in Section 8.1 of the Evergreen Terms of Service.

7Accounts and Access

#
7.1

Each Authorized User must use their own login credentials. You will not share credentials with anyone who is not an Authorized User.

#
7.2

You will not sell, resell, rent, or transfer Accounts, Credits, or access to Evergreen.

#

8Enforcement

#
8.1

Carta may monitor use of Evergreen and investigate suspected violations of this AUP. Carta determines, in its reasonable discretion, whether a violation has occurred.

#
8.2

If Carta believes a violation has occurred or may occur, Carta may, without prior notice, remove or disable content, stop any Session, restrict features, suspend or terminate any Authorized User or Account, and report the activity to law enforcement or other authorities.

#
8.3

Fees for active Sessions accrue until the Sessions stop. Section 15.4 of the Terms applies to Credits forfeited because of a violation.

#
8.4

Carta is not responsible to you for another customer’s violation of this AUP.

#

9Reporting

#

Report suspected violations of this AUP to abuse@carta.com. Report security vulnerabilities in Evergreen to security@carta.com.

10Changes

#

Carta may update this AUP at any time. Updates take effect when posted at evergreen.carta.com/acceptable-use, unless law requires another form of notice.

Contents

  1. 1Agent Use
  2. 2Security Research
  3. 3Compute and Resource Abuse
  4. 4Prohibited Content and Activities
  5. 5Data
  6. 6Model Provider Policies
  7. 7Accounts and Access
  8. 8Enforcement
  9. 9Reporting
  10. 10Changes