Acceptable use policy

How you may — and may not — use NevTan Sign

This Acceptable Use Policy governs use of Nevtan Sign, including our websites, applications, APIs, document workflow services, and electronic signature platform. It applies to all customers, users, administrators, document senders, recipients, and developers.

Effective Date: June 6, 2026 — Last Updated: June 6, 2026. This AUP forms part of and is incorporated into the Terms of Service. By using the Services, you agree to comply with this AUP. Capitalized terms not defined here have the meaning given in the Terms of Service. The purpose of this AUP is to protect customers, end users, signers, business partners, and the integrity and security of the platform. Users must use the Services responsibly, lawfully, and in a manner that does not interfere with the rights of others or the stable operation of the Services.

Jump to a part

Permitted use

Prohibited conduct

Specific requirements

Enforcement & reporting

General provisions

Part 1 — Permitted Use

1. Compliance With Laws

Users must comply with all applicable laws, regulations, and legal requirements in connection with their use of the Services, including without limitation:

Privacy and data protection laws

Export control laws and sanctions regulations

Consumer protection laws

Anti-spam and electronic communications laws

Intellectual property laws

Electronic signature and electronic commerce legislation

Financial services and anti-money laundering regulations, where applicable

Users are solely responsible for determining and ensuring their use of the Services complies with all applicable legal requirements in their jurisdiction and industry.

2. Permitted Uses

You may use Nevtan Sign for legitimate business, organizational, governmental, educational, and personal purposes. Permitted uses include:

Contract Execution — sending, receiving, and executing legally binding agreements, contracts, and NDAs

Document Workflows — managing multi-party approval workflows, routing, and document lifecycle processes

HR & Onboarding — processing employment agreements, onboarding documents, and policy acknowledgements

Real Estate Transactions — facilitating purchase agreements, lease documents, and related real estate paperwork

Vendor Management — executing supplier agreements, procurement documents, and vendor onboarding workflows

Internal Approvals — routing internal documents for organizational sign-off, authorization, and compliance

Customer Onboarding — collecting required signatures and acknowledgements from customers during onboarding

API & Integration Use — integrating electronic signature functionality into applications and business processes via API, subject to the API usage requirements in Section 7

All use of the Services must comply with this AUP and the Terms of Service, regardless of whether the specific use is listed above.

Part 2 — Prohibited Conduct

3. General Prohibition

Users may not use the Services to engage in, promote, facilitate, or support any activity that is illegal, harmful, deceptive, fraudulent, abusive, or otherwise prohibited by this AUP, the Terms of Service, or applicable law. The categories below describe specific prohibited conduct. This list is illustrative and does not limit the general prohibition above.

Fraud, Deception & Identity Abuse

You may not use the Services to commit fraud, engage in deception, or abuse identity and authentication systems. Prohibited activities include:

Misrepresenting your identity or impersonating any person, organization, or authority

Forging, altering, or falsifying documents, signatures, or records

Misleading recipients about the nature, purpose, or content of documents

Obtaining signatures or consents through false pretenses, coercion, or manipulation

Creating or circulating fraudulent, counterfeit, or deceptive agreements

Circumventing identity verification or authentication controls

Illegal Activities & Criminal Use

You may not use the Services in connection with any criminal, unlawful, or sanctioned activity, including:

Money laundering, terrorist financing, or financing of weapons proliferation

Human trafficking, exploitation, or modern slavery

Violations of export control laws, sanctions regimes, or trade restrictions

Trafficking in illegal narcotics, controlled substances, or prohibited goods

Illegal gambling, unlicensed financial schemes, or unauthorized investment activities

Organized crime activities or conspiracy to commit offenses

Any other activity prohibited by applicable criminal or regulatory law

Nevtan reserves the right to report unlawful activities to appropriate authorities where required or permitted by law.

Malicious Code & Security Violations

You may not use the Services to attack, compromise, or undermine the security of the platform, its users, or any other system. Prohibited activities include:

Uploading or transmitting malware, ransomware, spyware, trojans, viruses, or any malicious code

Attempting unauthorized access to any system, account, network, or data

Bypassing, disabling, or circumventing security controls, authentication mechanisms, or access restrictions

Probing, scanning, or testing platform vulnerabilities without prior written authorization from Nevtan

Launching denial-of-service attacks or any activity intended to disrupt platform operations

Intercepting or monitoring network traffic without authorization

Platform Abuse & Unauthorized Automation

You may not abuse the platform's technical systems or create unreasonable operational burden. Prohibited activities include:

Generating excessive automated requests that degrade platform performance for other users

Circumventing usage limits, rate limits, or access controls

Scraping, mining, or harvesting platform data without prior written authorization

Reverse engineering, decompiling, or disassembling any component of the Services

Using automated tools to interfere with, test, or probe platform functionality without authorization

Nevtan may implement rate limits and technical controls to maintain platform stability and protect all users.

Spam & Unsolicited Communications

You may not use the Services to send or facilitate unsolicited or deceptive communications. Prohibited activities include:

Sending unsolicited bulk messages, spam, or communications that violate applicable anti-spam laws

Sending phishing messages designed to deceive recipients into disclosing credentials or sensitive information

Sending communications that misrepresent the sender's identity or the nature of the message

Facilitating or enabling third-party spam or phishing campaigns

Users are responsible for obtaining all required consents and permissions before sending communications through the Services and for complying with applicable electronic communications laws.

Intellectual Property Infringement

You may not upload, distribute, or process content through the Services that infringes any intellectual property rights, including:

Copyrighted works used without authorization or beyond permitted license scope

Trademarks, trade names, or branding that you do not own or have the right to use

Trade secrets or confidential information obtained without authorization

Patented inventions or designs used without a valid license

Users represent and warrant that they have all necessary rights and permissions for all content submitted to the Services.

Harassment, Threats & Harmful Conduct

You may not use the Services to harass, threaten, intimidate, or harm any individual or group. Prohibited activities include:

Harassing, threatening, or intimidating any person through documents, signature requests, or communications

Promoting, facilitating, or inciting violence against any person or group

Facilitating discrimination, hate, or abuse based on protected characteristics

Targeting individuals or groups in a manner designed to cause harm, embarrassment, or distress

Zero tolerance

Restricted & Zero-Tolerance Content

Nevtan maintains a zero-tolerance approach toward the following categories of content. Violations will result in immediate account termination and, where required, reporting to law enforcement. The Services may not be used to store, process, distribute, or facilitate content involving:

Child sexual abuse material (CSAM) or any sexual content involving minors

Non-consensual intimate imagery or content designed to degrade or exploit individuals

Terrorist or extremist propaganda, incitement to violence, or materials promoting genocide

Illegal weapons trafficking or facilitation of mass casualty harm

Counterfeit identity documents, fraudulent credentials, or fabricated legal instruments

Any content that is explicitly prohibited by applicable law

Part 3 — Specific Use Requirements

4. Sensitive Data

Customers are responsible for determining whether the Services are appropriate for processing sensitive or regulated information. Unless specifically agreed in a separate written agreement with Nevtan, customers should not use the Services as the primary storage or processing system for:

Protected health information (PHI) subject to HIPAA or equivalent healthcare privacy regulations

Government classified, national security, or intelligence information

Payment card data subject to PCI DSS at a scope that exceeds the platform's stated compliance posture

Other categories of data subject to specialized regulatory requirements not addressed in our standard agreements

Customers remain solely responsible for their own compliance obligations. If you have specific regulatory requirements, please contact us to discuss appropriate configuration and contractual arrangements.

5. User Content Responsibilities

Users are solely responsible for all documents uploaded, agreements created, signature requests sent, and communications initiated through the Services. By submitting content to the Services, you represent and warrant that:

You own the content or have all necessary rights and permissions to use it

The content does not violate any applicable law, regulation, or third-party rights

You have obtained all required consents from individuals whose information is included

The content does not contain material prohibited by this AUP

Nevtan does not routinely review user content and does not assume responsibility for content submitted by users. Nevtan reserves the right to remove content that violates this AUP.

6. AI and Automated Features

Users may not use AI-powered features within the Services to:

Generate fraudulent, misleading, or deceptive documents or agreements

Impersonate individuals, organizations, or automated systems

Produce content that violates intellectual property rights or applicable law

Circumvent document integrity controls or signature verification mechanisms

Engage in any activity prohibited by this AUP or the AI & Data Usage Policy

Additional requirements governing AI features are described in our AI & Data Usage Policy.

7. API Usage Requirements

Developers and users accessing the Services through the API must:

Protect API credentials and prevent unauthorized access or disclosure

Use the API only for authorized purposes in accordance with published documentation

Respect rate limits and avoid generating excessive automated traffic

Maintain the security of integrations and promptly report any credential compromise

API users may not reverse engineer platform functionality, circumvent platform restrictions, or use the API in a manner that disrupts the Services or degrades performance for other users. Nevtan may suspend API access at any time to protect platform security or stability.

Part 4 — Enforcement & Reporting

8. Monitoring and Enforcement

Nevtan reserves the right to investigate suspected violations of this AUP. To protect the integrity of the Services and the interests of users, Nevtan may take the following actions with or without prior notice where reasonably necessary:

Remove, restrict, or disable access to content that violates this AUP

Suspend or terminate accounts associated with policy violations

Limit or throttle usage where platform abuse is detected

Disable specific features or functionality on a temporary or permanent basis

Preserve and disclose information to law enforcement where required or permitted by law

Notify affected customers or users of actions taken

Enforcement actions will be proportionate to the nature and severity of the violation. Nevtan will make reasonable efforts to provide notice before taking enforcement action except where immediate action is required to protect the platform or users from harm.

9. Reporting Violations

If you believe a user or activity is violating this AUP, please report it to our team. Include sufficient detail to allow Nevtan to investigate the reported activity, including the nature of the concern, relevant account information, and any supporting evidence.

Abuse Reporting

abuse@nevtan.com

Security Team

security@nevtan.com

Legal Team

legal@nevtan.com

Part 5 — General Provisions

10. Updates to This Policy

Nevtan may update this AUP from time to time to reflect changes in the Services, security requirements, legal obligations, or industry best practices. When material changes are made, we will update the effective date and provide notice consistent with the Terms of Service.

Continued use of the Services following publication of an updated AUP constitutes acceptance of the revised Policy. If you do not agree to the revised AUP, you must discontinue use of the Services.

11. Relationship to Other Policies

This AUP should be read together with the following documents:

AI & Data Usage Policy→

Cookie Policy→

Data Processing Addendum→

Security Overview→

Trust Center→

In the event of a conflict between this AUP and the Terms of Service, the Terms of Service shall prevail unless otherwise specified.

12. Contact Information