Read together with the other Legal Centre documents and the signed order. For relationships governed by Italian law, the Italian version prevails over the bilingual version unless otherwise agreed.
1. General obligation
ISOPILOT must be used lawfully, professionally, securely and consistently with the Plan. The Customer controls its users, defines roles and prevents use beyond authorisation.
2. Unlawful content and activity
Creating, uploading or distributing unlawful, defamatory, fraudulent or discriminatory content, or content infringing intellectual property, privacy, secrets or contractual duties, is prohibited. Falsifying certifications, audits, signatures, approvals or evidence is prohibited.
3. Platform security and integrity
Malware, unauthorised scanning, exploits, access attempts, denial of service, abusive reverse engineering, bulk scraping, interference with logs or tenant segregation, and circumvention of quotas, watermarks or download controls are prohibited.
4. Accounts and credentials
Sharing individual accounts, selling access, unauthorised impersonation or use of false identities is not permitted. The Superadmin may impersonate users only for authorised support or administration, with logging.
5. Personal and confidential data
Unlawfully obtained, excessive, irrelevant data or data lacking notices and legal bases must not be uploaded. Health, biometric, criminal, children’s or critical secret data require prior assessment and additional safeguards.
6. High-impact uses and regulated professions
Outputs must not be the sole basis for dismissal, hiring, credit, insurance, diagnosis, treatment, sanctions, admission or other significant decisions. Legal, tax, medical, engineering or certification opinions require a qualified professional where applicable.
7. Transparency and prohibition of deception
Presenting AI drafts as approved documents, attributing review to persons who did not perform it, hiding trial watermarks or leading third parties to believe ISOPILOT issues certifications is prohibited.
8. Controls, reports and consequences
UESE may apply automatic limits, review anomalous events and request clarification. Breaches may result in removal, restriction, suspension or termination, and reports to authorities where required. Measures are proportionate to severity, urgency, recurrence and risk.
