AI & acceptable use

Authority and scope

Connect only systems and data you are authorized to administer. Workflow permissions must be limited to the agreed purpose, users, assets and environment. Access to an integration does not grant unlimited authority over it.

Automatic actions and approvals

The intended baseline allows scoped inventory reads, health checks, reports and ticket creation within customer-approved limits. Account disablement, access changes, device isolation or wipe, patch deployment and production configuration changes require approval under that baseline.

Any customer-specific automation must have defined permissions and limits. Emergency containment without per-action approval requires a customer-approved emergency policy specifying triggers, permitted actions, notification and review.

Human oversight

AI output can be incorrect or incomplete. Review recommendations and consequential changes in context, including their effects on people and business systems. Do not treat generated output as a guarantee of security, compliance or legal correctness. Product controls and responsibilities must be confirmed for the deployment.

Unacceptable use

The intended use policy prohibits unauthorized access, unlawful surveillance, malicious activity, evading security boundaries and processing data without the necessary authority. Product use does not provide permission to breach another party’s rights or applicable law.

External processing and optional training

External AI processing is permitted only when authorized for the customer and deployment. It is distinct from permission to train models.

The intended training policy requires a separate customer opt-in for sanitized, reviewed examples that exclude personal data, secrets and customer-confidential information. That permission is limited to SIMORIN-controlled shared models, not an external provider’s own model training. Eligibility, preparation, retention and withdrawal must be agreed before training begins. Purchasing a subscription is not training consent.

Reporting concerns

Contact info@simorin.com about suspected misuse or policy concerns without including credentials or unnecessary sensitive data. Contracted incident-escalation routes and response commitments must be agreed separately; this mailbox is not represented as a guaranteed urgent-response service.