1. Purpose and scope

This Acceptable Use Policy (AUP) governs the conduct and use of the services (Services) provided by Elastx AB (we, us, our) to our customers, their customers (End Users) and any other entity using our Services or requesting information from us (you, your). It forms part of your agreement with us and applies whether you purchase the Services directly or use them as an End User.

This AUP applies to the use of our Services by customers and End Users. The internal policy governing employees' use of Elastx information assets is a separate document and is not affected by this AUP.

Where this AUP and our Terms of Service (ToS) address the same matter, the ToS prevails.

2. Changes to this policy

We may modify this AUP. We will publish the current version at elastx.se and record the version date. If a change materially affects your use of the Services, you may terminate your agreement with us. The meaning of materiality is set out in the ToS.

3. Your responsibility for End Users

If you purchase Services from us, you must apply an acceptable use policy to your End Users that is no less restrictive than this AUP. You remain responsible for the conduct of your End Users, and you agree to indemnify us and our suppliers against claims arising from that conduct.

4. Lawful use

You may not use the Services in breach of Swedish law, EU law, or the law of any other jurisdiction from which you use or access the Services. You are responsible for assessing the lawfulness of your intended use before accepting the ToS. Unlawful use does not give you a right to terminate the ToS.

5. Prohibited content and conduct

5.1 Unlawful content

You may not use the Services to store, distribute, advertise, disseminate or link to content that is unlawful under Swedish or EU law. This includes, without limitation, material depicting the sexual abuse of children, material depicting sexual acts with animals, incitement to hatred or violence, and content that infringes the rights of others.

5.2 Unsolicited communication

You may not use the Services to send unsolicited commercial communication. Your use of the Services for marketing must comply with the Swedish Marketing Act (2008:486) and Regulation (EU) 2016/679 (GDPR).

5.3 Copyright and trademark

You may not use the Services to infringe the copyright or trademark rights of others. Trademark infringement includes displaying another party's trademark on your website, using trademarked terms in metadata or other text, and offering goods you have no right to sell, including grey market goods.

5.4 Sanctions and export control

You may not use the Services in breach of applicable sanctions or export control rules, including EU restrictive measures and Swedish export control legislation, and you may not make the Services available to any person or entity subject to such measures.

5.5 Artificial intelligence

You are responsible for ensuring that your use of the Services for the development, training, deployment or operation of AI systems complies with applicable law, including Regulation (EU) 2024/1689. Your obligations are set out in section 3 of the ToS.

The following uses of the Services are prohibited:

• Social scoring: evaluating or classifying people based on social behaviour or personal characteristics in a way that leads to detrimental or unfavourable treatment.
• Manipulative or deceptive techniques that materially distort a person's behaviour and cause, or are likely to cause, significant harm.
• Exploiting vulnerabilities related to age, disability, or social or economic situation in order to distort behaviour.
• Biometric categorisation intended to infer race, political opinions, trade union membership, religious or philosophical beliefs, sex life or sexual orientation.
• Emotion recognition in the workplace or in educational settings, other than for medical or safety purposes.
• Predictive policing based solely on profiling or on assessment of personality traits.
• Untargeted scraping of facial images from the internet or from CCTV footage to build or expand facial recognition databases.
• Generating sexual material depicting an identifiable person without that person's consent, and generating material depicting the sexual abuse of children.

This list reflects the practices prohibited under Article 5 of Regulation (EU) 2024/1689. Where that regulation is amended, the prohibitions apply as amended, whether or not this list has been updated.

6. Network and service integrity

You may not probe, scan or test the vulnerability of systems, or spoof systems, other than within your own environment and using your own credentials. Testing that may affect shared infrastructure must be agreed with us in advance. We may carry out such activities ourselves where permitted by law.

Our Services are shared between customers. If we determine that your use endangers our servers, network or other infrastructure, we may suspend your account, even where your use is otherwise lawful. Suspension under this paragraph does not give you a right to terminate the ToS.

We may disallow activity that adversely affects network operations, including applications or processes consuming resources beyond what your subscription allows, and the operation of open proxies.

7. Reporting a violation

If you believe that a customer or End User is using the Services in breach of this AUP or of applicable law, report it to abuse@elastx.se.

A report should state the content or conduct concerned, its location, the reason you consider it unlawful or in breach of this AUP, and your name and contact details. Reports may be submitted anonymously, but anonymity may limit our ability to act.

We confirm receipt of reports without undue delay and assess them in a timely, diligent and objective manner. Where we act on a report, we inform the affected customer of our decision and of the grounds for it, and of the means available to contest it. We inform the person submitting the report of the outcome.

We may decline to process reports that do not contain sufficient information for us to assess the matter.

8. Suspension and termination

We may suspend or terminate the Services in accordance with the ToS where this AUP is breached. Where a breach may constitute a criminal offence, we may report it to the relevant authority.

9. Cooperation with authorities

We comply with lawful requests from law enforcement and other public authorities for information about you. Where we are permitted to do so, we will notify you of such requests. In many cases we are prohibited from giving notice, whether expressly or as a matter of our reasonable interpretation of the law.

10. Accurate information and confidentiality

You must provide us with accurate and current contact information. Customer information is treated as confidential. Correspondence from third parties is kept confidential only where required by law, by this agreement, or by a separate non-disclosure agreement.

11. Contact

Elastx AB, Kungsgatan 9, 111 43 Stockholm. Abuse reports: abuse@elastx.se. General enquiries: info@elastx.se.

Date of version: 2026-09-28