Acceptable Use Policy

Effective date: September 15, 2026

This policy is referenced by section 2 of our Terms of Service and applies to every company and every user of the ThothOS platform. It is not marketing copy: the list below is generated from the lawful-use guard the product runs, so what you read here is what the software actually refuses.

What ThothOS may not be used for

You may not use ThothOS — or ask its AI builder to set up, configure, plan, or price a workspace — for any of the following:

• selling illegal drugs — Selling, distributing, or arranging the sale of controlled substances outside a licensed pharmacy or dispensary context.
• stolen goods — Buying, fencing, moving, or reselling goods you know or suspect to be stolen.
• counterfeits — Manufacturing or selling counterfeit, knock-off, or replica goods, or goods that infringe another party’s trademark.
• fraud or scams — Running any scheme whose business model is deceiving the person paying — advance-fee, romance, investment, chargeback, or invoice fraud, phishing, and identity theft.
• trafficking of any kind — Human trafficking, sex trafficking, forced or coerced labor, and trafficking in weapons or protected wildlife.
• violence for hire — Arranging, brokering, or coordinating violence, intimidation, or harm against any person.
• fake documents — Producing or selling forged identification, credentials, diplomas, licenses, or official records.
• laundering money — Structuring, layering, or otherwise disguising the origin of criminal proceeds, including through invented invoices or shell transactions.
• hacking or malware distribution — Unauthorized access to systems or accounts, and building, selling, or distributing malware, ransomware, botnets, or credential dumps.
• bribery — Paying, soliciting, or administering bribes or kickbacks to officials or counterparties.
• extortion — Demanding money or advantage through threats, blackmail, or coercion.
• tax evasion — Concealing income, falsifying books, or maintaining records designed to defeat a tax authority.

This list is a floor, not a ceiling. Anything comparable to the above is equally prohibited, and the platform refuses on the intent of a request rather than on the presence of a particular word — so a category we have not enumerated is not thereby permitted.

What is welcome, and is sometimes mistaken for the above

A business that fights crime is lawful and welcome here. Describing a crime is not committing one, and we read who is doing what before judging a request. The following are explicitly supported:

• anti-money-laundering and compliance consultancies
• fraud investigators and forensic accountants
• anti-trafficking and child-safety nonprofits
• identity-theft protection services
• security researchers running authorized penetration tests or simulated phishing training
• criminal-defense and consumer-protection law firms
• addiction-treatment providers

If a request is genuinely ambiguous about legality, the platform asks what your business actually does before it builds anything, rather than guessing in either direction.

Platform integrity

Separately from the lawful-use rules above, you may not attempt to breach tenant isolation or access another company’s data; forge identity or authentication; reverse-engineer, overload, or disrupt the Service; use the AI builder to generate infringing content; or resell or provide access to the Service outside the scope of your plan.

Enforcement

Requests that clearly describe prohibited use are refused at the point of the request. Where we become aware of prohibited use of an existing account, we may suspend or terminate access under section 13 of the Terms of Service. We would rather ask than assume: if a refusal has misread your business, tell us what it does and we will take another look.

Questions

Reach us at the contact address on our Privacy Policy.